last executing test programs:

1m2.122229898s ago: executing program 2 (id=1729):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20)
r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x8, 0xa, 0x0, 0x0, 0xd, 0x40458, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x52, 0x0, @perf_config_ext={0x8, 0xc5f7}, 0x11a090, 0xd7, 0x0, 0x8, 0x81, 0x2, 0x22, 0x0, 0x7fff, 0x0, 0x81}, 0x0, 0xd, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

1m2.054131751s ago: executing program 2 (id=1730):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
socket$kcm(0xa, 0x3, 0x3a)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x500, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m2.05352664s ago: executing program 2 (id=1731):
r0 = socket$kcm(0xf, 0x3, 0x2) (async)
perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x800, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3e0002"], 0x9a)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x7, 0x4, 0x2, 0x0, 0x0, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x100, 0x1ff, 0x7fffffff, 0x0, 0x37, 0x8, 0x45ec, 0x0, 0x7, 0x0, 0x8001}, r3, 0x3, r4, 0x8) (async)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4008081)

1m0.214902104s ago: executing program 2 (id=1735):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x408a00, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x100000aea}, 0x14105, 0x2e, 0xfffffbfd, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e105000000894f000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa63147", 0x52}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000", 0x7d}, {&(0x7f0000000280), 0x88000}, {&(0x7f0000000180)}, {&(0x7f0000000980)="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", 0xbfb}], 0x5}, 0x0)
syz_clone(0x80008300, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f00000001c0)='cpu.stat\x00', 0x7a05, 0x1700)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000200000000008000000000000069c5d50542e8c7f68c9c1ffdc38d4e5392d5ad1d8cd7cd955eda39b67539c5bdd5bb3331d363aa9ffee21bd415951460ce8a7bc5a4c8ae759c524dbb720c7f6416", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/27], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r4, @ANYBLOB="0000000000100000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0xfffffff7}, 0x8)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2ae}], 0x2}, 0x8400)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000), 0x1b}, 0x4000000)
recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0xfffffffe, 0x10000, @value=r3}, 0x28)

59.234809258s ago: executing program 2 (id=1751):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000724c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b7809dc9", 0x14}], 0x2}, 0x0)

59.155536962s ago: executing program 2 (id=1752):
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180027bd7000fbdbdf2508004b003b00"/33], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180027bd7000fbdbdf2508004b003b00"/33], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9a8aefe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cbf0ffffff000000000000000000", 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c4) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000040)='./cgroup/file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="f0dce67e"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=0x0, @ANYBLOB="f0dce67e"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
r4 = getpid()
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/time\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x8000, 0x4, 0xffffffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x8000, 0x4, 0xffffffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)

44.154445974s ago: executing program 32 (id=1752):
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180027bd7000fbdbdf2508004b003b00"/33], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180027bd7000fbdbdf2508004b003b00"/33], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9a8aefe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cbf0ffffff000000000000000000", 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c4) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000040)='./cgroup/file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="f0dce67e"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=0x0, @ANYBLOB="f0dce67e"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
r4 = getpid()
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/time\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x8000, 0x4, 0xffffffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x8000, 0x4, 0xffffffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)

43.824432373s ago: executing program 0 (id=1779):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, 0x0})
close(r3)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, 0x0, 0x0)
close(r3)
r4 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
setsockopt$sock_attach_bpf(r4, 0x110, 0x3, 0x0, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe00000000691084000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

42.812504568s ago: executing program 1 (id=1785):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0], 0x27)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1948}, 0x0, 0x8001, 0xfffffffc, 0x3, 0x3fe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc002801}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400f000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udplite(0x2, 0x2, 0x88)

42.543764063s ago: executing program 1 (id=1786):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000001000000080000000000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x2000, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x2000, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0xe, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x7, 0x1, 0xd, 0x7, 0x0, 0xc, 0xfffffffffffffff5}], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xfa, &(0x7f0000000440)=""/250, 0x41000, 0x1c, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0x7, 0x3}, 0x10, 0x228fc, r1, 0x3, 0x0, &(0x7f00000005c0)=[{0x1, 0x5, 0xb, 0xa}, {0x5, 0x4, 0x6, 0x1}, {0x5, 0x5, 0xc}], 0x10, 0xff}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1f14, '\x00', 0x0, 0xffffffffffffffff, 0x202, 0x4, 0x4}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1f14, '\x00', 0x0, 0xffffffffffffffff, 0x202, 0x4, 0x4}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x40)
recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000040)
socket$kcm(0x11, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x2, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0xb9, 0x1, 0x0, 0x5, 0x0, 0xe4b8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x2980, 0x2000000002, 0xfffffff7, 0x4, 0x1, 0x7, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r6, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x40009, r2, 0x1) (async)
perf_event_open(0x0, 0x0, 0x40009, r2, 0x1)
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b77c000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

35.576825266s ago: executing program 0 (id=1787):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x13, &(0x7f0000000040)=r3, 0x4) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x198, 0x1e, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x0, 0x16}, {@in6=@private0, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xa}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0xa6, 0x3, {{'lzs\x00'}, 0x2f0, "7b3d738c49436c25058fce56758bcf0cdd6528352d5b2efea138c3d0f2e521271dc71680c1be80bfd8063b309c57dccbff006c178167fc480f45f1e495edf9b7bba17c00a77f98833fee9e47207172617a4794063689bda97a20e0c8948c"}}]}, 0x198}}, 0x0) (async)
sendmsg(0xffffffffffffffff, 0x0, 0x4840) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xf8, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1, 0x80000001}, 0x28) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0x94) (async)
close(r6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0xd}, 0x94) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (async, rerun: 64)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 32)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) (async, rerun: 32)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r4) (async, rerun: 32)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x381a, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32)
socket$kcm(0x2, 0x200000000000001, 0x106)

35.575021091s ago: executing program 1 (id=1788):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc4288, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1946}, 0x104401, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x92, 0x6, "ac981ce02ffbcb708544f51023b94c7c2090adfa5b640c0cf20242559c84bdf72bebea48aa90981d8b83a13d72b4811a3685d6655a6c4510f4085d0e83a8d3df0ff56520358030f65144432b5288af7e2c57ee327a546db19782bb75f56733812a28899051aa8aa05da6592b7b2ce31cc962b468c97678d3849ccff83426746ea4167698a42047fa43beefa45af2"}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "851ca866c4a17ada893f5bbc3010e4bc592fb2559a016582f7d9621abd37d48ffaeef5951ce0c7cd4435f9ae7a376db1976abc7aa45713970380197c10c36a3b3968bf43e6d4fbc0386ed73b9286177c046ec9fe98df0106df4d09"}]}, @NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x96763d209bcc491, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x27, 0x6, "14fe9e8a5bd488813af6c6bfbd0d8cdbd7d3576eef5aef07bf789b9466884c750ae9b5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7d, 0x6, "58c90b3a9cf63a5194164948312a0879abdc813766e87de2d3b95ba7778cfb7a537fe401064f805f3c7f28c2bc9a18553aa9f7908cb7deb7ff491bf09cb89a608c744feb2475be25d776d45ca5bc66ef240699d3ccfedbcc9a5e896cc38841151908e3a7758ccc3f34b6eb38caeaa6d7b5a62a90cc7ea9d748"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x278}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r5 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet(0x2, 0xa, 0x400)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0xe0}], 0x1}, 0x4024855)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000001c0)="e4643d4c7a6af5a6d3a94ea8dc7e91f51f993560e8af3cee7a2dc8d243de85e4d4ac645ff2235b8d8058476ae5d9c2b79dc68f1c1dc52cb2b1cc7a1653792aa1db526199d3995fd6ec84108f0a46ae22d66cdfd647c1cf2a8cc1750982c034ea7c4c33d4370212d709176219b7d07aad9f57e7f49374bc9bc5d37d9e88e393ccad37f5c8ba330d9928e20215e9a189b2c56776159dcb810cfe71f41879bf43b0a699dd", 0xa3}], 0x2}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x3, 0xc4, 0x5, 0x0, 0x0, 0x6, 0xb181, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xec1, 0x4, @perf_bp={&(0x7f00000000c0), 0xb}, 0x8402, 0x80000000, 0x8, 0x3, 0x2, 0x7, 0x3, 0x0, 0x8840000, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000140)}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4)

35.472117619s ago: executing program 0 (id=1789):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xe7b8d9c5b5d01a1f]}}, 0x0, 0x2d, 0x0, 0x6}, 0x28)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x52, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000000000000085000000750000008500001858937864002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r2}, 0xfffffffffffffd25)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0x5}, @struct={0x1, 0x9, 0x0, 0x4, 0x0, 0x4, [{0xf, 0x2, 0x4}, {0x4, 0x3, 0x8001}, {0x6, 0x4, 0x7}, {0xf, 0x4, 0x7}, {0x10, 0x4, 0xfffffffc}, {0x3, 0x3, 0x1ff}, {0xd, 0x3, 0x7f}, {0x2, 0x0, 0x4}, {0xc, 0x0, 0x1}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @restrict={0x10}, @union={0x4, 0x1, 0x0, 0x5, 0x1, 0x4, [{0xf, 0x5, 0xa818606}]}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x30, 0x30, 0x30]}}, &(0x7f0000000200)=""/83, 0xee, 0x53, 0x0, 0x3, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, r0, 0x7f, '\x00', r2, r3, 0x3, 0x2}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190059"], 0xfe33)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xe7b8d9c5b5d01a1f]}}, 0x0, 0x2d, 0x0, 0x6}, 0x28) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x52, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000000000000085000000750000008500001858937864002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r2}, 0xfffffffffffffd25) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0x5}, @struct={0x1, 0x9, 0x0, 0x4, 0x0, 0x4, [{0xf, 0x2, 0x4}, {0x4, 0x3, 0x8001}, {0x6, 0x4, 0x7}, {0xf, 0x4, 0x7}, {0x10, 0x4, 0xfffffffc}, {0x3, 0x3, 0x1ff}, {0xd, 0x3, 0x7f}, {0x2, 0x0, 0x4}, {0xc, 0x0, 0x1}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @restrict={0x10}, @union={0x4, 0x1, 0x0, 0x5, 0x1, 0x4, [{0xf, 0x5, 0xa818606}]}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x30, 0x30, 0x30]}}, &(0x7f0000000200)=""/83, 0xee, 0x53, 0x0, 0x3, 0x10000}, 0x28) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, r0, 0x7f, '\x00', r2, r3, 0x3, 0x2}, 0x50) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190059"], 0xfe33) (async)

24.509668193s ago: executing program 0 (id=1790):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f000007ff24c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b7809dc9", 0x14}], 0x2}, 0x0)

24.50875877s ago: executing program 0 (id=1791):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000020000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

21.192474019s ago: executing program 1 (id=1792):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r0], 0xfe33) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r0], 0xfe33)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010101, 0x0, 0x6c}, @in6=@remote, {0x0, 0x2400000000000}, {}, {}, 0x0, 0x3506, 0x2, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010101, 0x0, 0x6c}, @in6=@remote, {0x0, 0x2400000000000}, {}, {}, 0x0, 0x3506, 0x2, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x3}}, 0x18, &(0x7f0000000340)={&(0x7f0000000300)="aa69dcfbf274ada6d2ba6d785f35dbbb8ff70e41df9e01a702777a98bb", 0x1d}, 0x1, 0x0, 0x0, 0x4040}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC, @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0xa, 0x922000000003, 0x11) (async)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r9, 0x29, 0x7, &(0x7f0000000000)=r8, 0x4)
sendmsg$kcm(r7, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x10, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r12 = socket$kcm(0x18, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0xb101, 0x0) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0xb101, 0x0)

17.102060502s ago: executing program 0 (id=1793):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"})
recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/92, 0x5c}], 0x7, &(0x7f00000005c0)=""/113, 0x71}, 0x2140)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0208000004088120e543aaad4800000080000200", @ANYRES32, @ANYBLOB="080100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"}) (async)
recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/92, 0x5c}], 0x7, &(0x7f00000005c0)=""/113, 0x71}, 0x2140) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0208000004088120e543aaad4800000080000200", @ANYRES32, @ANYBLOB="080100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) (async)

15.172567877s ago: executing program 1 (id=1794):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xf3, 0x6, 0x0, 0x4, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x9}, 0xc20, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x20)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000002000000000000000ac1414aa3c200007"], 0xfdef)

15.171577592s ago: executing program 1 (id=1795):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'dvmrp0\x00'})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000090a"], 0xb8}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r2})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[], 0x0, 0x71}, 0x28)

1.64768904s ago: executing program 33 (id=1793):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"})
recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/92, 0x5c}], 0x7, &(0x7f00000005c0)=""/113, 0x71}, 0x2140)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0208000004088120e543aaad4800000080000200", @ANYRES32, @ANYBLOB="080100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"}) (async)
recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/92, 0x5c}], 0x7, &(0x7f00000005c0)=""/113, 0x71}, 0x2140) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0208000004088120e543aaad4800000080000200", @ANYRES32, @ANYBLOB="080100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) (async)

0s ago: executing program 34 (id=1795):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'dvmrp0\x00'})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000090a"], 0xb8}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r2})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[], 0x0, 0x71}, 0x28)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26886' (ED25519) to the list of known hosts.
syzkaller login: [   56.994563][ T5831] cgroup: Unknown subsys name 'net'
[   57.100948][ T5831] cgroup: Unknown subsys name 'cpuset'
[   57.109360][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.985351][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.924832][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.928702][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.932188][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.936227][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.940170][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.007143][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.009986][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.012613][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.016011][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.019465][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.058553][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.062399][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.065399][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.068509][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.071181][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.192891][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.321593][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.334812][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.338092][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.340672][ T5845] bridge_slave_0: entered allmulticast mode
[   64.343712][ T5845] bridge_slave_0: entered promiscuous mode
[   64.352791][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.355122][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.358481][ T5845] bridge_slave_1: entered allmulticast mode
[   64.361363][ T5845] bridge_slave_1: entered promiscuous mode
[   64.427123][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.435311][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.518073][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.520283][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.522453][ T5850] bridge_slave_0: entered allmulticast mode
[   64.525197][ T5850] bridge_slave_0: entered promiscuous mode
[   64.529285][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.531575][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.533785][ T5850] bridge_slave_1: entered allmulticast mode
[   64.536548][ T5850] bridge_slave_1: entered promiscuous mode
[   64.543563][ T5845] team0: Port device team_slave_0 added
[   64.565574][ T5845] team0: Port device team_slave_1 added
[   64.579179][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.585111][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.600810][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.620965][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.623221][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.631851][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.642756][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.645445][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.656567][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.675088][ T5850] team0: Port device team_slave_0 added
[   64.700168][ T5850] team0: Port device team_slave_1 added
[   64.776070][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.779188][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.788316][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.792562][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.795684][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.799310][ T5853] bridge_slave_0: entered allmulticast mode
[   64.802216][ T5853] bridge_slave_0: entered promiscuous mode
[   64.814700][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.818186][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.826294][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.830844][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.833581][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.835984][ T5853] bridge_slave_1: entered allmulticast mode
[   64.839859][ T5853] bridge_slave_1: entered promiscuous mode
[   64.854801][ T5845] hsr_slave_0: entered promiscuous mode
[   64.858949][ T5845] hsr_slave_1: entered promiscuous mode
[   64.886809][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.918494][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.939028][ T5850] hsr_slave_0: entered promiscuous mode
[   64.941414][ T5850] hsr_slave_1: entered promiscuous mode
[   64.943540][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   64.945378][ T5850] Cannot create hsr debugfs directory
[   64.990258][ T5853] team0: Port device team_slave_0 added
[   64.993592][ T5853] team0: Port device team_slave_1 added
[   65.071776][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.074428][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.084350][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.096777][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.098973][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.106915][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.241021][ T5853] hsr_slave_0: entered promiscuous mode
[   65.243303][ T5853] hsr_slave_1: entered promiscuous mode
[   65.245378][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   65.247880][ T5853] Cannot create hsr debugfs directory
[   65.334510][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.342739][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.352109][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.357467][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.461974][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.472731][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.481253][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.505715][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.544857][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.551001][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.559492][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.566151][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.613960][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.645566][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.669865][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.673988][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.676589][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.696322][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.698558][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.712141][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.735660][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.748075][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.750583][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.764099][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.766673][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.788557][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.823469][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.825974][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.852922][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.855274][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.997640][ T5236] Bluetooth: hci0: command tx timeout
[   66.062658][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.067131][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.076662][ T5236] Bluetooth: hci1: command tx timeout
[   66.085130][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.124995][ T5845] veth0_vlan: entered promiscuous mode
[   66.144580][ T5845] veth1_vlan: entered promiscuous mode
[   66.158575][ T5236] Bluetooth: hci2: command tx timeout
[   66.175582][ T5850] veth0_vlan: entered promiscuous mode
[   66.179469][ T5853] veth0_vlan: entered promiscuous mode
[   66.199762][ T5853] veth1_vlan: entered promiscuous mode
[   66.210460][ T5845] veth0_macvtap: entered promiscuous mode
[   66.218844][ T5850] veth1_vlan: entered promiscuous mode
[   66.238844][ T5845] veth1_macvtap: entered promiscuous mode
[   66.263573][ T5853] veth0_macvtap: entered promiscuous mode
[   66.281127][ T5853] veth1_macvtap: entered promiscuous mode
[   66.291308][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.296809][ T5850] veth0_macvtap: entered promiscuous mode
[   66.306101][ T5850] veth1_macvtap: entered promiscuous mode
[   66.315622][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.329319][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.339480][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.347367][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.350241][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.360108][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.369470][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.383391][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.387110][ T5716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.393444][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.402256][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.408287][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.420396][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.450887][ T5907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.468930][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.470909][ T5907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.471486][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.474786][ T5907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.500689][ T5907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.528864][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.531718][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.569744][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.572944][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.585422][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.623478][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.626499][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.678153][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.681016][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.713757][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.720501][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.833941][ T5923] Zero length message leads to an empty skb
[   66.914356][ T5923] sit0: entered promiscuous mode
[   66.920341][    C1] hrtimer: interrupt took 80198 ns
[   66.967596][ T5926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.985260][ T5918] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.045955][ T5236] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   67.380485][ T5952] netlink: 'syz.2.16': attribute type 39 has an invalid length.
[   68.077164][ T5236] Bluetooth: hci0: command tx timeout
[   68.156804][ T5236] Bluetooth: hci1: command tx timeout
[   68.237654][ T5236] Bluetooth: hci2: command tx timeout
[   68.365676][ T5983] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.26'.
[   68.543969][ T5989] netlink: 'syz.2.27': attribute type 10 has an invalid length.
[   68.985001][ T6006] =======================================================
[   68.985001][ T6006] WARNING: The mand mount option has been deprecated and
[   68.985001][ T6006]          and is ignored by this kernel. Remove the mand
[   68.985001][ T6006]          option from the mount to silence this warning.
[   68.985001][ T6006] =======================================================
[   69.004952][ T6008] warning: `syz.0.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.366292][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.37'.
[   69.666924][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.748068][ T6035] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.42'.
[   69.867193][ T6035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.42'.
[   70.093956][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'.
[   70.158254][ T5236] Bluetooth: hci0: command tx timeout
[   70.236550][ T5236] Bluetooth: hci1: command tx timeout
[   70.316692][ T5236] Bluetooth: hci2: command tx timeout
[   70.848402][ T6062] netlink: 112 bytes leftover after parsing attributes in process `syz.2.51'.
[   71.054793][ T6074] netlink: 'syz.2.56': attribute type 3 has an invalid length.
[   71.065197][ T6077] netlink: 176 bytes leftover after parsing attributes in process `syz.0.57'.
[   71.136537][ T6078] netlink: 'syz.2.56': attribute type 10 has an invalid length.
[   71.143684][ T6076] netlink: 104 bytes leftover after parsing attributes in process `syz.0.57'.
[   71.149379][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.151528][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.515394][ T6098] netlink: 'syz.1.64': attribute type 16 has an invalid length.
[   71.519093][ T6098] netlink: 'syz.1.64': attribute type 17 has an invalid length.
[   71.686032][ T6102] !: renamed from bond_slave_0 (while UP)
[   71.957439][ T6113] netlink: 'syz.1.71': attribute type 3 has an invalid length.
[   71.961556][ T6113] netlink: 'syz.1.71': attribute type 10 has an invalid length.
[   72.282867][ T5236] Bluetooth: hci0: command tx timeout
[   72.456628][   T55] Bluetooth: hci2: command tx timeout
[   72.458461][ T5236] Bluetooth: hci1: command tx timeout
[   74.420903][ T6128] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[   74.424409][ T6128] __nla_validate_parse: 3 callbacks suppressed
[   74.424422][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'.
[   74.434352][ T6128] netlink: 160 bytes leftover after parsing attributes in process `syz.2.76'.
[   74.488544][ T5236] Bluetooth: hci2: command tx timeout
[   75.050101][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'.
[   75.474605][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   75.696245][ T6164] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.89'.
[   76.177394][ T6181] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   76.394252][ T6194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.933120][ T6265] netlink: 'syz.0.119': attribute type 2 has an invalid length.
[   77.940019][ T6265] netlink: 119 bytes leftover after parsing attributes in process `syz.0.119'.
[   78.345859][ T6288] netlink: 'syz.0.125': attribute type 21 has an invalid length.
[   78.354461][ T6288] netlink: 'syz.0.125': attribute type 15 has an invalid length.
[   78.358156][ T6288] netlink: 156 bytes leftover after parsing attributes in process `syz.0.125'.
[   78.361876][ T6288] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.366137][ T6288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.369368][ T6288] IPv6: NLM_F_CREATE should be set when creating new route
[   78.372341][ T6288] IPv6: NLM_F_CREATE should be set when creating new route
[   78.375428][ T6288] IPv6: NLM_F_CREATE should be set when creating new route
[   78.414268][   T33] audit: type=1107 audit(1757088855.843:2): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[   79.539899][ T6342] netlink: 'syz.2.141': attribute type 29 has an invalid length.
[   79.554341][ T6342] netlink: 'syz.2.141': attribute type 29 has an invalid length.
[   79.564740][ T6342] netlink: 'syz.2.141': attribute type 29 has an invalid length.
[   79.607016][ T6342] netlink: 'syz.2.141': attribute type 1 has an invalid length.
[   80.453296][ T6342] netlink: 'syz.2.141': attribute type 29 has an invalid length.
[   80.554157][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   81.057340][ T6378] netlink: 'syz.0.152': attribute type 9 has an invalid length.
[   81.059764][ T6378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'.
[   81.256126][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.154'.
[   81.287524][ T6383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.204006][ T6396] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET)
[   82.277510][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[   82.357827][ T6403] netlink: 'syz.0.161': attribute type 2 has an invalid length.
[   82.363568][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'.
[   82.439435][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'.
[   82.443005][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'.
[   82.577924][ T6420] netlink: 168 bytes leftover after parsing attributes in process `syz.2.166'.
[   82.589643][ T6421] netlink: 168 bytes leftover after parsing attributes in process `syz.2.166'.
[   83.082184][ T6435] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   84.322260][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'.
[   84.427952][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'.
[   85.002889][ T6479] netlink: 'syz.1.186': attribute type 3 has an invalid length.
[   85.008526][ T6479] netlink: 'syz.1.186': attribute type 10 has an invalid length.
[   86.546016][   T47] cfg80211: failed to load regulatory.db
[   88.777404][ T6550] delete_channel: no stack
[   88.842161][ T6557] netlink: 'syz.1.210': attribute type 10 has an invalid length.
[   88.845568][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.876837][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.890945][ T6557] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   89.022488][ T6575] netlink: 176 bytes leftover after parsing attributes in process `syz.1.216'.
[   89.451972][ T6594] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.505105][ T6607] netlink: 'syz.2.227': attribute type 10 has an invalid length.
[   91.511405][ T6607] netlink: 'syz.2.227': attribute type 19 has an invalid length.
[   91.514881][ T6607] netlink: 156 bytes leftover after parsing attributes in process `syz.2.227'.
[   91.665109][ T6616] xt_policy: neither incoming nor outgoing policy selected
[   94.210394][ T6627] netlink: 'syz.1.235': attribute type 21 has an invalid length.
[   95.317417][ T6645] xt_policy: neither incoming nor outgoing policy selected
[   98.350195][ T6665] netlink: 5175 bytes leftover after parsing attributes in process `syz.1.248'.
[   98.760112][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.250'.
[   99.184900][ T6688] xt_policy: neither incoming nor outgoing policy selected
[  102.399859][ T6704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.259'.
[  102.621993][ T6727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.264'.
[  102.625836][ T6727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.264'.
[  102.660379][   T33] audit: type=1107 audit(1757088880.093:3): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/+d<ݏƈ'
[  103.059179][ T6738] xt_policy: neither incoming nor outgoing policy selected
[  106.410293][ T6761] netlink: 'syz.2.272': attribute type 30 has an invalid length.
[  106.692239][ T6765] netlink: 294 bytes leftover after parsing attributes in process `syz.1.276'.
[  108.072394][ T6797] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.289'.
[  108.183670][ T6804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.270534][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'.
[  108.273464][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'.
[  108.874241][ T6812] netlink: 'syz.1.294': attribute type 21 has an invalid length.
[  109.081178][ T6825] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  109.123793][ T6827] netlink: 'syz.0.301': attribute type 4 has an invalid length.
[  109.154438][ T6821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.157894][ T6821] IPv6: NLM_F_CREATE should be set when creating new route
[  109.161118][ T6821] IPv6: NLM_F_CREATE should be set when creating new route
[  109.270063][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'.
[  109.544777][ T6838] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.303'.
[  109.549924][ T6837] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.303'.
[  109.554290][ T6838] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.303'.
[  109.914284][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'.
[  109.998738][ T6859] netlink: 'syz.1.307': attribute type 46 has an invalid length.
[  110.001703][ T6859] netlink: 'syz.1.307': attribute type 46 has an invalid length.
[  110.004916][ T6859] netlink: 'syz.1.307': attribute type 46 has an invalid length.
[  110.385997][ T6891] netlink: 'syz.2.320': attribute type 2 has an invalid length.
[  110.389301][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'.
[  110.886095][ T6909] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component
[  111.041632][ T6914] netlink: 'syz.0.328': attribute type 39 has an invalid length.
[  111.793350][ T6940] delete_channel: no stack
[  112.001514][ T6960] syzkaller0: entered promiscuous mode
[  112.003310][ T6960] syzkaller0: entered allmulticast mode
[  112.007183][ T6961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.576321][ T6997] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.358'.
[  116.258533][ T7002] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  116.338675][ T6993] delete_channel: no stack
[  116.601509][ T7002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  116.752489][ T7017] netlink: 'syz.0.364': attribute type 40 has an invalid length.
[  116.772530][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.194055][ T7037] netlink: 'syz.1.369': attribute type 2 has an invalid length.
[  118.408272][ T7099] netlink: 'syz.1.387': attribute type 3 has an invalid length.
[  118.495928][ T7106] netlink: 'syz.1.389': attribute type 10 has an invalid length.
[  118.499344][ T7106] netlink: 55 bytes leftover after parsing attributes in process `syz.1.389'.
[  118.536103][ T7109] netlink: 'syz.0.390': attribute type 3 has an invalid length.
[  118.544019][ T7109] netlink: 'syz.0.390': attribute type 10 has an invalid length.
[  119.422670][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.403'.
[  119.460365][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.403'.
[  122.214007][ T7160] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.406'.
[  122.601696][ T7182] xt_policy: too many policy elements
[  125.330266][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'.
[  127.955128][ T7229] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.430'.
[  128.252313][ T7243] netlink: 112 bytes leftover after parsing attributes in process `syz.0.433'.
[  131.952004][ T7284] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[  131.955039][ T7284] netlink: 17 bytes leftover after parsing attributes in process `syz.2.447'.
[  131.959123][ T7284] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[  131.989664][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'.
[  132.114313][ T7287] netlink: 'syz.1.448': attribute type 8 has an invalid length.
[  132.153399][ T7287] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.448'.
[  132.350647][ T7287] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  132.562996][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.565013][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.123530][ T7314] netlink: 11318 bytes leftover after parsing attributes in process `syz.0.457'.
[  133.579701][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  134.284120][ T7347] netlink: 'syz.1.466': attribute type 9 has an invalid length.
[  134.289564][ T7347] netlink: 'syz.1.466': attribute type 11 has an invalid length.
[  134.292695][ T7347] netlink: 147436 bytes leftover after parsing attributes in process `syz.1.466'.
[  135.371233][ T7373] : renamed from pim6reg1
[  135.457441][ T7380] netlink: 'syz.2.478': attribute type 10 has an invalid length.
[  135.460147][ T7379] netlink: 'syz.2.478': attribute type 10 has an invalid length.
[  136.291748][ T7412] C: renamed from team_slave_0 (while UP)
[  136.297162][ T7412] netlink: 'syz.1.489': attribute type 3 has an invalid length.
[  136.300855][ T7412] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  136.507763][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'.
[  136.510934][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[  137.293426][ T7435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.496'.
[  137.826983][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.934547][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'.
[  138.166546][ T7473] Driver unsupported XDP return value 0 on prog  (id 282) dev N/A, expect packet loss!
[  138.243870][ T7478] IPv6: NLM_F_CREATE should be specified when creating new route
[  139.121775][ T7495] netlink: 'syz.1.516': attribute type 11 has an invalid length.
[  139.125036][ T7495] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.516'.
[  139.131902][ T7495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.375834][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'.
[  139.532272][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.524'.
[  139.542309][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.524'.
[  139.548857][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.524'.
[  140.334725][ T5236] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  140.595762][ T7541] netlink: 56429 bytes leftover after parsing attributes in process `syz.0.533'.
[  140.921111][ T7554] netlink: 5872 bytes leftover after parsing attributes in process `syz.2.537'.
[  140.924727][ T7554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.537'.
[  141.050101][ T7556] netlink: 'syz.2.537': attribute type 21 has an invalid length.
[  141.054654][ T7556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.537'.
[  141.060782][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'.
[  144.398256][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  144.402714][ T5236] Bluetooth: hci2: Injecting HCI hardware error event
[  144.410917][   T55] Bluetooth: hci2: hardware error 0x00
[  144.435784][ T7634] __nla_validate_parse: 2 callbacks suppressed
[  144.435809][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'.
[  144.841501][ T5236] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  145.003471][ T7660] : entered promiscuous mode
[  145.301683][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[  145.642716][ T7690] netlink: 'syz.2.580': attribute type 3 has an invalid length.
[  145.647523][ T7690] netlink: 'syz.2.580': attribute type 10 has an invalid length.
[  145.952431][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'.
[  146.109235][ T7713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.587'.
[  146.220657][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'.
[  146.288402][ T7721] netlink: 'syz.1.590': attribute type 3 has an invalid length.
[  146.293057][ T7721] netlink: 'syz.1.590': attribute type 10 has an invalid length.
[  146.654453][ T5236] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  146.690704][ T5236] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[  146.693385][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  146.716830][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  147.272379][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'.
[  147.275168][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'.
[  147.278801][ T7758] netlink: 2 bytes leftover after parsing attributes in process `syz.2.601'.
[  147.616633][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[  149.689289][ T7832] netlink: 104 bytes leftover after parsing attributes in process `syz.0.621'.
[  152.586743][ T7886] netlink: 'syz.1.636': attribute type 11 has an invalid length.
[  152.589989][ T7886] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.636'.
[  152.661737][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.595035][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[  154.959816][ T7920] netlink: 'syz.2.646': attribute type 64 has an invalid length.
[  155.600694][ T7932] netlink: 'syz.1.649': attribute type 3 has an invalid length.
[  155.605616][ T7932] netlink: 'syz.1.649': attribute type 10 has an invalid length.
[  155.777662][ T7937] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.651'.
[  155.782078][ T7937] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.651'.
[  156.174629][ T7962] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[  156.184944][ T7962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.312117][ T7973] netlink: 'syz.1.663': attribute type 13 has an invalid length.
[  156.327649][ T7973] gretap0: refused to change device tx_queue_len
[  156.333542][ T7973] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  156.823573][ T7997] xt_limit: Overflow, try lower: 271964/0
[  157.216819][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'.
[  158.834844][ T8035] netlink: 'syz.2.682': attribute type 3 has an invalid length.
[  158.839700][ T8035] netlink: 'syz.2.682': attribute type 10 has an invalid length.
[  159.543314][ T8077] netlink: 'syz.2.697': attribute type 10 has an invalid length.
[  161.403681][ T8096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.702'.
[  161.420470][ T8101] netlink: 96 bytes leftover after parsing attributes in process `syz.1.702'.
[  161.841638][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'.
[  161.841726][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'.
[  161.884849][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'.
[  162.541025][ T8158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.721'.
[  162.550695][ T8158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.721'.
[  162.554140][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'.
[  162.564337][ T8160] netlink: 'syz.1.722': attribute type 3 has an invalid length.
[  162.568122][ T8160] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.722'.
[  162.703330][ T8165] netlink: 'syz.1.724': attribute type 11 has an invalid length.
[  162.715268][ T8165] netlink: 140 bytes leftover after parsing attributes in process `syz.1.724'.
[  162.940685][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 2103
[  163.036915][ T8180] netlink: 'syz.1.729': attribute type 1 has an invalid length.
[  163.223715][ T8190] netlink: 'syz.1.731': attribute type 21 has an invalid length.
[  163.226593][ T8190] netlink: 'syz.1.731': attribute type 4 has an invalid length.
[  163.318254][ T8182] syz.2.730 (8182) used greatest stack depth: 17384 bytes left
[  164.154797][ T8239] netlink: 'syz.1.749': attribute type 2 has an invalid length.
[  164.695559][ T8252] netlink: 'syz.2.754': attribute type 3 has an invalid length.
[  164.764892][ T8257] netlink: 'syz.0.753': attribute type 29 has an invalid length.
[  164.774407][ T8250] netlink: 'syz.0.753': attribute type 29 has an invalid length.
[  164.858930][ T8259] netlink: 'syz.0.755': attribute type 3 has an invalid length.
[  168.141344][ T8279] validate_nla: 1 callbacks suppressed
[  168.141380][ T8279] netlink: 'syz.2.762': attribute type 3 has an invalid length.
[  168.169871][ T8279] netlink: 'syz.2.762': attribute type 10 has an invalid length.
[  168.760852][ T8311] __nla_validate_parse: 13 callbacks suppressed
[  168.760864][ T8311] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.772'.
[  168.768698][ T8311] netlink: 'syz.1.772': attribute type 13 has an invalid length.
[  168.771823][ T8311] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.772'.
[  168.915099][ T8321] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.775'.
[  169.011337][ T8336] syzkaller0: entered promiscuous mode
[  169.013501][ T8336] syzkaller0: entered allmulticast mode
[  169.989342][ T8354] netlink: 'syz.2.783': attribute type 11 has an invalid length.
[  170.010956][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'.
[  170.703190][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  170.706286][ T8355] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.716178][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  170.718737][ T8355] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.721929][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  170.724360][ T8355] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.728444][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  170.731621][ T8355] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.735201][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  170.737835][ T8355] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.741699][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  170.744641][ T8355] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.756825][ T8355] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  173.174722][ T8458] validate_nla: 29 callbacks suppressed
[  173.174739][ T8458] netlink: 'syz.0.813': attribute type 29 has an invalid length.
[  173.181228][ T8458] netlink: 'syz.0.813': attribute type 29 has an invalid length.
[  173.184541][ T8458] netlink: 'syz.0.813': attribute type 29 has an invalid length.
[  175.261686][ T8532] __nla_validate_parse: 35 callbacks suppressed
[  175.261742][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'.
[  176.158379][ T8554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.615397][ T8571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.062268][ T8595] netlink: 208192 bytes leftover after parsing attributes in process `syz.1.854'.
[  177.109417][ T8595] netlink: 'syz.1.854': attribute type 1 has an invalid length.
[  177.346915][ T8603] netlink: 'syz.1.855': attribute type 2 has an invalid length.
[  177.350103][ T8603] netlink: 51 bytes leftover after parsing attributes in process `syz.1.855'.
[  177.490250][ T8610] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.858'.
[  177.621280][ T8615] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.859'.
[  177.826012][ T8621] netlink: 'syz.0.861': attribute type 3 has an invalid length.
[  179.851755][ T8671] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[  179.913885][ T8667] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.874'.
[  179.925864][ T8667] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  179.963726][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  179.967150][ T8667] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  179.969474][ T8667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.146048][ T8711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  181.352362][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'.
[  182.152407][ T8730] netlink: 'syz.1.892': attribute type 1 has an invalid length.
[  182.156250][ T8730] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  182.159665][ T8730] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  182.162939][ T8730] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  182.165546][ T8731] netlink: 'syz.2.891': attribute type 29 has an invalid length.
[  182.166264][ T8730] netlink: 'syz.1.892': attribute type 1 has an invalid length.
[  182.169980][ T8731] netlink: 'syz.2.891': attribute type 29 has an invalid length.
[  182.177600][ T8728] netlink: 'syz.2.891': attribute type 29 has an invalid length.
[  182.341875][ T8746] netlink: 56 bytes leftover after parsing attributes in process `syz.1.896'.
[  182.345427][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[  182.350003][ T8746] netlink: 23 bytes leftover after parsing attributes in process `syz.1.896'.
[  182.359255][ T8746] netlink: 'syz.1.896': attribute type 2 has an invalid length.
[  182.366482][ T8746] netlink: 23 bytes leftover after parsing attributes in process `syz.1.896'.
[  184.420914][   T33] audit: type=1107 audit(1757088961.853:4): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6/8Blu0WSO6kO;ٻ(YB54gJ'
[  184.431850][   T33] audit: type=1107 audit(1757088961.853:5): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6/8Blu0WSO6kO;ٻ(YB54gJ'
[  185.718194][ T8823] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.922'.
[  187.824985][ T8894] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.940'.
[  187.869195][ T8894] validate_nla: 2 callbacks suppressed
[  187.869207][ T8894] netlink: 'syz.1.940': attribute type 10 has an invalid length.
[  188.829964][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[  188.891161][ T8919] netlink: 212172 bytes leftover after parsing attributes in process `syz.1.949'.
[  189.314623][ T8901] delete_channel: no stack
[  189.772063][ T8981] netlink: 'syz.1.962': attribute type 3 has an invalid length.
[  189.779911][ T8981] netlink: 'syz.1.962': attribute type 10 has an invalid length.
[  190.017515][ T8986] netlink: 'syz.1.964': attribute type 39 has an invalid length.
[  190.561528][ T9011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'.
[  190.581558][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.969'.
[  190.674254][ T9014] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.972'.
[  190.708413][ T9014] siw: device registration error -23
[  190.958208][ T8931] Bluetooth: hci1: command 0x0406 tx timeout
[  190.961271][ T8931] Bluetooth: hci0: command 0x0406 tx timeout
[  191.717627][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.985'.
[  191.723593][ T9055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.985'.
[  191.739423][ T9058] netlink: 6 bytes leftover after parsing attributes in process `syz.1.985'.
[  191.743422][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'.
[  194.006886][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.009578][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  197.999696][ T9122] __nla_validate_parse: 1 callbacks suppressed
[  197.999712][ T9122] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1009'.
[  198.433189][ T9128] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  198.442039][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  200.692199][ T9140] bridge0: port 3(syz_tun) entered blocking state
[  200.694905][ T9140] bridge0: port 3(syz_tun) entered disabled state
[  200.698253][ T9140] syz_tun: entered allmulticast mode
[  200.700810][ T9140] syz_tun: entered promiscuous mode
[  200.702923][ T9140] bridge0: port 3(syz_tun) entered blocking state
[  200.705148][ T9140] bridge0: port 3(syz_tun) entered forwarding state
[  200.813046][ T9144] netlink: 16370 bytes leftover after parsing attributes in process `syz.2.1014'.
[  201.947672][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'.
[  202.307374][ T9186] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1029'.
[  202.465445][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'.
[  203.025055][ T9216] netlink: 'syz.1.1036': attribute type 2 has an invalid length.
[  203.028143][ T9216] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1036'.
[  203.124315][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'.
[  203.155037][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'.
[  203.233272][ T9215] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1037'.
[  203.330741][ T9215] siw: device registration error -23
[  204.404473][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1049'.
[  204.513399][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'.
[  204.784876][ T9286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'.
[  205.050947][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'.
[  205.445065][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'.
[  205.601589][ T9315] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1063'.
[  207.800344][ T9403] netlink: 'syz.0.1093': attribute type 23 has an invalid length.
[  208.074960][ T9409] netlink: 'syz.2.1096': attribute type 11 has an invalid length.
[  208.082594][ T9409] __nla_validate_parse: 7 callbacks suppressed
[  208.082605][ T9409] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1096'.
[  208.094784][ T9409] unsupported nla_type 256
[  210.000570][ T9414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.192671][ T9433] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.1105'.
[  212.235399][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'.
[  212.239938][ T9488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1122'.
[  212.834493][ T9502] cgroup: fork rejected by pids controller in /syz1
[  212.936324][ T5845] bridge0: port 3(syz_tun) entered disabled state
[  212.947565][ T5845] syz_tun (unregistering): left allmulticast mode
[  212.949599][ T5845] syz_tun (unregistering): left promiscuous mode
[  212.951617][ T5845] bridge0: port 3(syz_tun) entered disabled state
[  213.032326][ T9506] netlink: 731 bytes leftover after parsing attributes in process `syz.2.1129'.
[  213.042017][ T9506] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1129'.
[  213.133406][ T5907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.212207][ T5907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.310397][ T5907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.424510][ T9519] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1135'.
[  213.502095][ T9029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.506034][ T9029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.508799][ T9029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.511504][ T9029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.515190][ T9029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.985014][ T5907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.992837][ T9519] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1135'.
[  214.460739][ T9538] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1137'.
[  214.712331][ T9550] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1142'.
[  215.552939][ T9538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.558532][ T9538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.562960][ T9538] bond0 (unregistering): Released all slaves
[  215.588751][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'.
[  215.596901][ T9029] Bluetooth: hci0: command tx timeout
[  215.597761][ T5907] bridge_slave_1: left allmulticast mode
[  215.601627][ T5907] bridge_slave_1: left promiscuous mode
[  215.604256][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.611607][ T5907] bridge_slave_0: left allmulticast mode
[  215.613850][ T5907] bridge_slave_0: left promiscuous mode
[  215.616890][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.943242][ T5907] bond0 (unregistering): (slave 1!): Releasing backup interface
[  215.948274][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.953048][ T5907] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  215.958261][ T5907] bond0 (unregistering): Released all slaves
[  215.986048][ T9521] chnl_net:caif_netlink_parms(): no params data found
[  216.033841][ T5907] : left promiscuous mode
[  216.221159][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.226672][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.229298][ T9521] bridge_slave_0: entered allmulticast mode
[  216.238216][ T9521] bridge_slave_0: entered promiscuous mode
[  216.243727][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.250173][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.264926][ T9521] bridge_slave_1: entered allmulticast mode
[  216.271328][ T9521] bridge_slave_1: entered promiscuous mode
[  216.378236][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'.
[  216.479705][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.486838][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.502882][ T5907] hsr_slave_0: left promiscuous mode
[  216.505777][ T5907] hsr_slave_1: left promiscuous mode
[  216.510096][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.513884][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.531005][ T5907] veth1_vlan: left promiscuous mode
[  216.533394][ T5907] veth0_vlan: left promiscuous mode
[  216.842196][ T5907] team0 (unregistering): Port device team_slave_1 removed
[  216.869682][ T5907] team0 (unregistering): Port device C removed
[  217.114618][   T47] infiniband syz0: ib_query_port failed (-19)
[  217.120732][ T9600] syz.2.1148 (9600) used obsolete PPPIOCDETACH ioctl
[  217.137186][ T9521] team0: Port device team_slave_0 added
[  217.144230][ T9521] team0: Port device team_slave_1 added
[  217.172295][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.174665][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.183747][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.188360][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.191004][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.204275][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.249780][ T9521] hsr_slave_0: entered promiscuous mode
[  217.252454][ T9521] hsr_slave_1: entered promiscuous mode
[  217.514059][ T9611] netlink: 'syz.0.1152': attribute type 21 has an invalid length.
[  217.520905][ T9611] netlink: 'syz.0.1152': attribute type 4 has an invalid length.
[  217.543607][ T9611] netlink: 14453 bytes leftover after parsing attributes in process `syz.0.1152'.
[  217.621889][ T9615] netlink: 'syz.2.1153': attribute type 2 has an invalid length.
[  217.678816][ T9029] Bluetooth: hci0: command tx timeout
[  217.930113][ T9521] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  217.935031][ T9521] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  217.939990][ T9521] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  217.945436][ T9521] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  218.022104][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.045675][ T9521] 8021q: adding VLAN 0 to HW filter on device team0
[  218.060560][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.062876][ T8947] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.072008][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.075000][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.115264][ T9521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.125603][ T9521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.232295][ T9641] netlink: 'syz.2.1155': attribute type 1 has an invalid length.
[  218.234924][ T9641] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1155'.
[  218.241942][ T9641] netlink: 'syz.2.1155': attribute type 21 has an invalid length.
[  218.297700][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.340531][ T9521] veth0_vlan: entered promiscuous mode
[  218.349581][ T9521] veth1_vlan: entered promiscuous mode
[  218.397279][ T9521] veth0_macvtap: entered promiscuous mode
[  218.403676][ T9521] veth1_macvtap: entered promiscuous mode
[  218.423201][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.432403][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.441369][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.449729][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.452879][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.919188][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.988876][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.992062][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.054483][ T8950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.057953][ T8950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.148005][ T9667] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1131'.
[  219.453857][ T9668] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1160'.
[  219.803285][ T5848] Bluetooth: hci0: command tx timeout
[  220.778742][ T9678] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1163'.
[  220.794058][ T9683] netlink: 'syz.1.1165': attribute type 39 has an invalid length.
[  220.802570][ T9678] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  220.825082][ T9683] veth0_macvtap: left promiscuous mode
[  221.013048][ T9697] netlink: 'syz.2.1170': attribute type 10 has an invalid length.
[  221.017479][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1170'.
[  221.021722][ T9697] batadv0: entered promiscuous mode
[  221.046090][ T9697] bridge0: port 3(batadv0) entered blocking state
[  221.050442][ T9697] bridge0: port 3(batadv0) entered disabled state
[  221.054474][ T9697] batadv0: entered allmulticast mode
[  221.115682][ T9697] bridge0: port 3(batadv0) entered blocking state
[  221.119636][ T9697] bridge0: port 3(batadv0) entered forwarding state
[  221.489393][ T5907] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  221.493309][ T5907] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  221.853747][ T5848] Bluetooth: hci0: command tx timeout
[  222.072058][ T9719] netlink: 'syz.2.1176': attribute type 1 has an invalid length.
[  222.075323][ T9719] netlink: 'syz.2.1176': attribute type 4 has an invalid length.
[  222.080527][ T9719] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1176'.
[  222.822198][ T9745] netlink: 'syz.2.1184': attribute type 29 has an invalid length.
[  222.825346][ T9745] netlink: 'syz.2.1184': attribute type 29 has an invalid length.
[  223.043195][ T9751] netlink: 'syz.1.1187': attribute type 21 has an invalid length.
[  223.341957][ T9769] netlink: 'syz.2.1188': attribute type 3 has an invalid length.
[  223.344541][ T9769] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1188'.
[  223.351654][ T9769] netlink: 'syz.2.1188': attribute type 3 has an invalid length.
[  223.354139][ T9769] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1188'.
[  223.401305][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  224.383245][ T9797] delete_channel: no stack
[  224.455388][ T9805] netlink: 'syz.1.1202': attribute type 2 has an invalid length.
[  224.461370][ T9805] netlink: 'syz.1.1202': attribute type 3 has an invalid length.
[  224.465922][ T9805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1202'.
[  224.584949][ T9812] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  224.790861][ T9821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.061144][ T9823] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1209'.
[  225.199348][ T9846] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1216'.
[  225.204331][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'.
[  226.581984][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'.
[  226.932435][ T9878] C: renamed from team_slave_0 (while UP)
[  227.441470][ T9878] netlink: 'syz.0.1226': attribute type 3 has an invalid length.
[  227.444650][ T9878] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1226'.
[  227.448456][ T9878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  229.021717][ T9893] netlink: 'syz.2.1230': attribute type 10 has an invalid length.
[  229.024775][ T9893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'.
[  229.028508][ T9893] dummy0: entered promiscuous mode
[  229.059203][ T9893] netlink: 948 bytes leftover after parsing attributes in process `syz.2.1230'.
[  231.439983][ T9923] netlink: 'syz.0.1239': attribute type 4 has an invalid length.
[  231.500822][ T9925] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1240'.
[  232.430243][ T9939] netlink: 'syz.2.1243': attribute type 3 has an invalid length.
[  232.440361][ T9943] netlink: 'syz.0.1245': attribute type 3 has an invalid length.
[  232.443278][ T9943] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1245'.
[  232.459677][ T9943] pim6reg1: entered promiscuous mode
[  232.461471][ T9943] pim6reg1: entered allmulticast mode
[  232.621490][ T9965] netlink: 'syz.2.1252': attribute type 10 has an invalid length.
[  232.746144][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1250'.
[  233.052427][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'.
[  233.126227][ T9982] netlink: 'syz.2.1257': attribute type 2 has an invalid length.
[  233.130173][ T9982] netlink: 'syz.2.1257': attribute type 1 has an invalid length.
[  233.132975][ T9982] netlink: 'syz.2.1257': attribute type 8 has an invalid length.
[  233.136105][ T9982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1257'.
[  233.190516][ T9985] syzkaller1: tun_chr_ioctl cmd 1074025676
[  233.193232][ T9985] syzkaller1: owner set to 778
[  233.260235][ T9988] netlink: 'syz.2.1259': attribute type 1 has an invalid length.
[  233.384123][ T9990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1260'.
[  233.390037][ T9990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1260'.
[  233.657136][T10005] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.1265'.
[  235.289957][T10047] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1277'.
[  236.364668][T10077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1288'.
[  237.391673][T10099] __nla_validate_parse: 2 callbacks suppressed
[  237.391685][T10099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1293'.
[  237.666981][T10114] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1297'.
[  238.302993][T10129] batadv0: left allmulticast mode
[  238.308198][T10129] bridge0: port 3(batadv0) entered disabled state
[  238.322798][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'.
[  238.402846][T10129] bridge_slave_1: left allmulticast mode
[  238.404728][T10129] bridge_slave_1: left promiscuous mode
[  238.408799][T10129] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.448561][T10129] bridge_slave_0: left allmulticast mode
[  238.450785][T10129] bridge_slave_0: left promiscuous mode
[  238.453127][T10129] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.472483][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'.
[  239.256965][T10157] netlink: 'syz.0.1309': attribute type 46 has an invalid length.
[  239.258443][T10158] netlink: 'syz.0.1309': attribute type 46 has an invalid length.
[  239.260096][T10157] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.1309'.
[  239.263107][T10158] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.1309'.
[  239.865091][T10179] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1315'.
[  240.214324][T10195] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1319'.
[  241.810497][T10224] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  242.025333][T10239] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1328'.
[  242.031817][T10233] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1328'.
[  242.042174][T10233] netlink: 'syz.0.1328': attribute type 10 has an invalid length.
[  242.052865][T10233] batadv0: entered promiscuous mode
[  242.063222][T10233] bridge0: port 3(batadv0) entered blocking state
[  242.072505][T10233] bridge0: port 3(batadv0) entered disabled state
[  242.079123][T10233] batadv0: entered allmulticast mode
[  242.109972][T10239] netlink: 'syz.0.1328': attribute type 21 has an invalid length.
[  242.192889][T10233] bridge0: port 3(batadv0) entered blocking state
[  242.197280][T10233] bridge0: port 3(batadv0) entered forwarding state
[  242.468678][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  242.471596][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  242.633469][T10248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  242.636670][T10248] IPv6: NLM_F_CREATE should be set when creating new route
[  242.639929][T10248] IPv6: NLM_F_CREATE should be set when creating new route
[  242.643132][T10248] IPv6: NLM_F_CREATE should be set when creating new route
[  242.820063][T10253] __nla_validate_parse: 2 callbacks suppressed
[  242.820078][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'.
[  243.723887][T10279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1340'.
[  243.726120][T10280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1340'.
[  243.735808][T10281] netlink: 'syz.0.1341': attribute type 3 has an invalid length.
[  243.829989][T10293] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.1343'.
[  243.839595][T10293] netlink: 'syz.0.1343': attribute type 2 has an invalid length.
[  243.842868][T10293] netlink: 62135 bytes leftover after parsing attributes in process `syz.0.1343'.
[  243.938421][T10301] netlink: 'syz.1.1345': attribute type 29 has an invalid length.
[  243.941294][T10301] netlink: 'syz.1.1345': attribute type 29 has an invalid length.
[  243.944003][T10301] netlink: 'syz.1.1345': attribute type 29 has an invalid length.
[  244.514962][T10327] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1349'.
[  244.564996][T10319] siw: device registration error -23
[  244.758829][T10339] netlink: 'syz.0.1354': attribute type 64 has an invalid length.
[  245.568255][T10371] netlink: 'syz.1.1362': attribute type 10 has an invalid length.
[  245.611242][T10371] team0: Port device geneve1 added
[  246.178018][T10376] netlink: 'syz.0.1364': attribute type 23 has an invalid length.
[  246.545405][T10384] netlink: 'syz.0.1367': attribute type 6 has an invalid length.
[  246.557786][T10384] netlink: 'syz.0.1367': attribute type 1 has an invalid length.
[  246.560629][T10384] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1367'.
[  246.562493][T10385] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  246.651990][T10384] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1367'.
[  246.987142][T10393] netlink: 'syz.1.1370': attribute type 10 has an invalid length.
[  247.553444][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'.
[  247.707135][T10399] netlink: 'syz.2.1372': attribute type 3 has an invalid length.
[  247.728658][T10399] netlink: 'syz.2.1372': attribute type 10 has an invalid length.
[  248.891320][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'.
[  248.953098][T10461] netlink: 'syz.0.1393': attribute type 29 has an invalid length.
[  249.614106][T10488] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1401'.
[  249.903002][T10503] siw: device registration error -23
[  250.344424][T10537] syzkaller0: entered promiscuous mode
[  250.348088][T10537] syzkaller0: entered allmulticast mode
[  250.779916][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  250.829766][T10546] netlink: 'syz.2.1416': attribute type 10 has an invalid length.
[  250.843763][T10546] geneve0: entered promiscuous mode
[  250.921788][T10552] netlink: 'syz.1.1418': attribute type 3 has an invalid length.
[  250.978801][T10565] netlink: 'syz.1.1421': attribute type 12 has an invalid length.
[  250.982931][T10565] netlink: 203916 bytes leftover after parsing attributes in process `syz.1.1421'.
[  251.075961][T10572] syzkaller0: entered promiscuous mode
[  251.082152][T10572] syzkaller0: entered allmulticast mode
[  251.092042][T10574] netlink: ct family unspecified
[  251.094243][T10574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.484027][T10592] netlink: 'syz.2.1429': attribute type 12 has an invalid length.
[  252.486867][T10592] netlink: 203916 bytes leftover after parsing attributes in process `syz.2.1429'.
[  253.400419][T10603] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1433'.
[  253.429795][T10605] netlink: 'syz.1.1434': attribute type 3 has an invalid length.
[  253.436119][T10605] netlink: 'syz.1.1434': attribute type 10 has an invalid length.
[  253.594800][T10613] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1437'.
[  253.613770][T10613] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1437'.
[  255.450253][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.453120][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.639067][T10649] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1447'.
[  255.645224][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'.
[  255.882599][T10653] netlink: 'syz.1.1449': attribute type 3 has an invalid length.
[  255.888221][T10653] netlink: 'syz.1.1449': attribute type 10 has an invalid length.
[  256.759230][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'.
[  256.903451][T10669] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1455'.
[  259.980629][T10691] netlink: 'syz.2.1461': attribute type 12 has an invalid length.
[  259.983943][T10691] netlink: 203916 bytes leftover after parsing attributes in process `syz.2.1461'.
[  260.054204][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'.
[  260.058584][T10698] netlink: 'syz.1.1464': attribute type 30 has an invalid length.
[  260.070257][T10696] netlink: 16250 bytes leftover after parsing attributes in process `syz.2.1463'.
[  260.114431][T10699] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1464'.
[  260.180251][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'.
[  260.400971][T10707] netlink: 'syz.2.1467': attribute type 3 has an invalid length.
[  260.422941][T10707] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  260.469402][T10715] netlink: 'syz.0.1469': attribute type 12 has an invalid length.
[  260.472684][T10715] netlink: 203916 bytes leftover after parsing attributes in process `syz.0.1469'.
[  263.080616][T10744] syzkaller0: entered promiscuous mode
[  263.087277][T10744] syzkaller0: entered allmulticast mode
[  263.250895][T10751] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1479'.
[  264.981491][T10724] Set syz1 is full, maxelem 65536 reached
[  266.228586][T10797] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  266.307950][T10809] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1499'.
[  266.392395][T10816] netlink: 'syz.2.1502': attribute type 16 has an invalid length.
[  266.395150][T10816] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1502'.
[  266.891555][T10833] netlink: 'syz.2.1507': attribute type 29 has an invalid length.
[  266.895505][T10833] netlink: 'syz.2.1507': attribute type 29 has an invalid length.
[  266.908994][T10833] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1507'.
[  267.115244][T10835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1508'.
[  267.546519][T10849] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.1512'.
[  267.578160][T10855] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1513'.
[  267.707972][T10867] netlink: 'syz.0.1517': attribute type 1 has an invalid length.
[  267.714991][T10867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.773763][T10874] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1517'.
[  267.802593][T10873] netlink: 'syz.2.1519': attribute type 3 has an invalid length.
[  267.805047][T10873] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1519'.
[  268.594277][T10880] netlink: 'syz.2.1522': attribute type 2 has an invalid length.
[  268.820435][T10893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.832427][T10893] netlink: 'syz.0.1528': attribute type 11 has an invalid length.
[  268.835428][T10893] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1528'.
[  268.958445][T10899] netlink: 'syz.0.1530': attribute type 4 has an invalid length.
[  268.961503][T10899] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1530'.
[  269.110888][T10906] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1533'.
[  270.357476][T10936] netlink: 'syz.2.1542': attribute type 13 has an invalid length.
[  270.360758][T10936] netlink: 'syz.2.1542': attribute type 17 has an invalid length.
[  270.676039][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  270.825713][T10936] dummy0: left promiscuous mode
[  270.841750][T10936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.490351][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'.
[  272.885326][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'.
[  272.888760][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'.
[  272.891493][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'.
[  272.953490][T11039] validate_nla: 3 callbacks suppressed
[  272.953501][T11039] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  272.959195][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  272.962743][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  272.965794][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  272.970217][T11039] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  272.973092][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  272.976161][T11039] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1567'.
[  272.984999][T11039] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  272.988957][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  272.991802][T11042] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1567'.
[  272.995598][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  272.998647][T11039] netlink: 'syz.0.1567': attribute type 2 has an invalid length.
[  273.628702][T11064] lo speed is unknown, defaulting to 1000
[  273.660824][T11064] lo speed is unknown, defaulting to 1000
[  273.692941][T11064] lo speed is unknown, defaulting to 1000
[  274.370607][T11064] infiniband syz2: set active
[  274.373448][   T24] lo speed is unknown, defaulting to 1000
[  274.375644][T11064] infiniband syz2: added lo
[  274.379272][T11064] syz2: rxe_create_cq: returned err = -12
[  274.381383][T11064] infiniband syz2: Couldn't create ib_mad CQ
[  274.383517][T11064] infiniband syz2: Couldn't open port 1
[  274.399955][T11064] RDS/IB: syz2: added
[  274.401950][T11064] smc: adding ib device syz2 with port count 1
[  274.404317][T11064] smc:    ib device syz2 port 1 has pnetid 
[  274.407839][   T24] lo speed is unknown, defaulting to 1000
[  274.412444][T11064] lo speed is unknown, defaulting to 1000
[  274.652135][T11064] lo speed is unknown, defaulting to 1000
[  274.851158][T11064] lo speed is unknown, defaulting to 1000
[  277.134323][T11089] __nla_validate_parse: 1 callbacks suppressed
[  277.134378][T11089] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1581'.
[  277.644438][T11098] sit0: left promiscuous mode
[  277.689326][T11111] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  277.773976][T11112] delete_channel: no stack
[  277.786055][T11112] delete_channel: no stack
[  278.030435][T11098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.540847][T11147] validate_nla: 4 callbacks suppressed
[  278.540893][T11147] netlink: 'syz.1.1600': attribute type 26 has an invalid length.
[  278.575688][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'.
[  278.579556][T11146] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  278.718304][T11158] netlink: 'syz.0.1604': attribute type 39 has an invalid length.
[  278.779698][T11159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.782198][T11159] IPv6: NLM_F_CREATE should be set when creating new route
[  278.784615][T11159] IPv6: NLM_F_CREATE should be set when creating new route
[  279.285180][T11176] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1611'.
[  279.329237][T11178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'.
[  279.332930][T11178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'.
[  279.893425][T11203] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1622'.
[  280.612940][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  281.715632][T11230] netlink: 'syz.1.1632': attribute type 2 has an invalid length.
[  281.719015][T11230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1632'.
[  281.863471][T11227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.927975][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1634'.
[  282.099780][T11245] netlink: 'syz.1.1636': attribute type 7 has an invalid length.
[  282.212687][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'.
[  282.316225][T11252] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  282.319323][T11252] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  282.513983][T11260] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1642'.
[  282.622095][T11263] netlink: 'syz.1.1643': attribute type 21 has an invalid length.
[  282.637209][T11263] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1643'.
[  282.644763][T11263] netlink: 'syz.1.1643': attribute type 5 has an invalid length.
[  282.651783][T11263] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1643'.
[  282.693726][T11264] syzkaller0: entered promiscuous mode
[  282.695870][T11264] syzkaller0: entered allmulticast mode
[  283.086933][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'.
[  283.101973][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'.
[  283.419104][T11290] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  283.424848][T11290] netlink: 'syz.1.1653': attribute type 4 has an invalid length.
[  283.427669][T11290] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1653'.
[  283.431861][T11290] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  283.434490][T11290] netlink: 'syz.1.1653': attribute type 4 has an invalid length.
[  283.440490][T11290] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1653'.
[  285.084559][T11317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.655577][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'.
[  285.665244][T11319] openvswitch: netlink: nsh attr 165 is out of range max 3
[  285.667904][T11319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.278295][T11356] netlink: 'syz.1.1672': attribute type 11 has an invalid length.
[  286.281357][T11356] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1672'.
[  287.193629][T11378] netlink: 'syz.2.1681': attribute type 46 has an invalid length.
[  287.449880][T11396] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  287.490850][T11402] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  287.528565][T11396] lo speed is unknown, defaulting to 1000
[  287.532790][T11402] raw_sendmsg: syz.1.1689 forgot to set AF_INET. Fix it!
[  289.737637][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1694'.
[  289.742818][T11425] xt_limit: Overflow, try lower: 324382443/4200216956
[  289.963883][T11438] netlink: 'syz.0.1699': attribute type 10 has an invalid length.
[  289.969698][T11438] netlink: 3531 bytes leftover after parsing attributes in process `syz.0.1699'.
[  291.307796][T11471] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  291.310285][T11471] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  291.856515][T11491] delete_channel: no stack
[  292.030324][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'.
[  292.053752][T11508] : entered promiscuous mode
[  292.152313][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'.
[  292.238723][T11519] syzkaller0: entered promiscuous mode
[  292.241083][T11519] syzkaller0: entered allmulticast mode
[  293.281060][T11541] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  295.320646][T11560] lo speed is unknown, defaulting to 1000
[  295.353796][T11565] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1741'.
[  295.787128][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1746'.
[  295.790919][T11579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1746'.
[  295.794637][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1746'.
[  295.805144][T11579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1746'.
[  295.900807][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'.
[  295.905840][T11584] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1748'.
[  296.404396][T11612] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1755'.
[  296.934415][T11624] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  296.947233][T11624] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  298.082407][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1525985377 wd_nsec: 1525985193
[  311.208174][T11674] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1775'.
[  311.464108][T11682] netlink: 742 bytes leftover after parsing attributes in process `syz.0.1779'.
[  311.747957][ T9029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.752035][ T9029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.755496][ T9029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.769299][ T9029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.772836][ T9029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.893709][T11689] lo speed is unknown, defaulting to 1000
[  312.146087][T11700] netlink: 'syz.1.1784': attribute type 3 has an invalid length.
[  312.616021][T11689] chnl_net:caif_netlink_parms(): no params data found
[  313.994965][ T9029] Bluetooth: hci3: command tx timeout
[  316.076633][ T9029] Bluetooth: hci3: command tx timeout
[  317.728527][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.730661][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  318.156522][ T9029] Bluetooth: hci3: command tx timeout
[  319.526617][T11708] sched: DL replenish lagged too much
[  319.598109][T11718] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1787'.
[  320.243615][ T9029] Bluetooth: hci3: command tx timeout
[  330.467473][T11689] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.470414][T11689] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.473044][T11689] bridge_slave_0: entered allmulticast mode
[  330.482016][T11689] bridge_slave_0: entered promiscuous mode
[  330.490015][T11689] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.492912][T11689] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.495885][T11689] bridge_slave_1: entered allmulticast mode
[  330.502595][T11689] bridge_slave_1: entered promiscuous mode
[  339.760304][ T9029] Bluetooth: hci0: command 0x0406 tx timeout
[  339.981400][T11741] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.1792'.
[  340.028389][T11742] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.1792'.
[  353.952735][ T9029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  353.960624][ T9029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  353.963964][ T9029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  353.968315][ T9029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  353.971750][ T9029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  355.571421][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.575649][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.580542][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.588020][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.591403][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.997539][ T5848] Bluetooth: hci4: command tx timeout
[  357.676709][ T5848] Bluetooth: hci5: command tx timeout
[  358.076631][ T5848] Bluetooth: hci4: command tx timeout
[  359.756809][ T5848] Bluetooth: hci5: command tx timeout
[  360.157957][ T5848] Bluetooth: hci4: command tx timeout
[  361.836628][ T5848] Bluetooth: hci5: command tx timeout
[  362.236662][ T5848] Bluetooth: hci4: command tx timeout
[  363.916592][ T5848] Bluetooth: hci5: command tx timeout
[  371.663996][ T9029] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.668711][ T9029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.672133][ T9029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.684082][ T9029] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.688728][ T9029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.761391][ T9029] Bluetooth: hci6: command tx timeout
[  375.836611][ T9029] Bluetooth: hci6: command tx timeout
[  377.916652][ T9029] Bluetooth: hci6: command tx timeout
[  379.266440][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  379.272427][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  379.996792][ T9029] Bluetooth: hci6: command tx timeout
[  414.556210][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  414.561131][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  414.568432][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  414.571225][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  414.574332][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  415.632797][ T9029] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  415.638211][ T9029] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  415.642231][ T9029] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  415.649954][ T9029] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  415.654993][ T9029] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  416.636656][ T9029] Bluetooth: hci7: command tx timeout
[  417.676683][ T9029] Bluetooth: hci8: command tx timeout
[  418.781020][ T9029] Bluetooth: hci7: command tx timeout
[  419.760436][ T9029] Bluetooth: hci8: command tx timeout
[  420.945729][ T9029] Bluetooth: hci7: command tx timeout
[  421.836658][ T9029] Bluetooth: hci8: command tx timeout
[  422.956584][ T9029] Bluetooth: hci7: command tx timeout
[  423.916705][ T9029] Bluetooth: hci8: command tx timeout
[  432.860318][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  432.864382][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  432.868862][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  432.872194][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  432.875001][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  434.966643][ T5848] Bluetooth: hci2: command tx timeout
[  435.072715][ T5907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.108625][T11787] lo speed is unknown, defaulting to 1000
[  435.202027][ T5907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.233254][T11792] lo speed is unknown, defaulting to 1000
[  435.319969][ T5907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.395723][ T5907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.411050][T11782] lo speed is unknown, defaulting to 1000
[  435.642661][ T5907] batadv0: left allmulticast mode
[  435.644392][ T5907] bridge0: port 3(batadv0) entered disabled state
[  435.658127][ T5907] bridge_slave_1: left allmulticast mode
[  435.659952][ T5907] bridge_slave_1: left promiscuous mode
[  435.663097][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.671093][ T5907] bridge_slave_0: left allmulticast mode
[  435.672878][ T5907] bridge_slave_0: left promiscuous mode
[  435.674699][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.995919][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  436.001824][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.008007][ T5907] bond0 (unregistering): Released all slaves
[  436.019877][T11792] chnl_net:caif_netlink_parms(): no params data found
[  436.025794][T11787] chnl_net:caif_netlink_parms(): no params data found
[  436.219611][T11787] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.222570][T11787] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.225341][T11787] bridge_slave_0: entered allmulticast mode
[  436.232585][T11787] bridge_slave_0: entered promiscuous mode
[  436.277801][T11787] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.280221][T11787] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.282716][T11787] bridge_slave_1: entered allmulticast mode
[  436.285982][T11787] bridge_slave_1: entered promiscuous mode
[  436.390218][T11792] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.392506][T11792] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.394763][T11792] bridge_slave_0: entered allmulticast mode
[  436.399373][T11792] bridge_slave_0: entered promiscuous mode
[  436.423818][T11787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.428903][T11787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.454248][T11792] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.458792][T11792] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.461040][T11792] bridge_slave_1: entered allmulticast mode
[  436.463848][T11792] bridge_slave_1: entered promiscuous mode
[  436.466740][T11782] chnl_net:caif_netlink_parms(): no params data found
[  436.472530][T11787] team0: Port device team_slave_0 added
[  436.507615][T11787] team0: Port device team_slave_1 added
[  436.638886][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.643827][T11787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.645990][T11787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.655630][T11787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.676884][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.684349][T11787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.689576][T11787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.699497][T11787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.715406][ T5907] hsr_slave_0: left promiscuous mode
[  436.723156][ T5907] hsr_slave_1: left promiscuous mode
[  436.725599][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.729847][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.732877][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.735513][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.748735][ T5907] veth1_vlan: left promiscuous mode
[  436.750973][ T5907] veth0_vlan: left promiscuous mode
[  437.046596][ T5848] Bluetooth: hci2: command tx timeout
[  437.070185][ T5907] team0 (unregistering): Port device team_slave_1 removed
[  437.105223][ T5907] team0 (unregistering): Port device C removed
[  437.387481][T11780] infiniband syz0: ib_query_port failed (-19)
[  437.418361][T11792] team0: Port device team_slave_0 added
[  437.440931][T11792] team0: Port device team_slave_1 added
[  437.452304][T11782] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.455121][T11782] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.458134][T11782] bridge_slave_0: entered allmulticast mode
[  437.461012][T11782] bridge_slave_0: entered promiscuous mode
[  437.482680][T11787] hsr_slave_0: entered promiscuous mode
[  437.485297][T11787] hsr_slave_1: entered promiscuous mode
[  437.487695][T11787] debugfs: 'hsr0' already exists in 'hsr'
[  437.489475][T11787] Cannot create hsr debugfs directory
[  437.491415][T11782] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.493728][T11782] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.495960][T11782] bridge_slave_1: entered allmulticast mode
[  437.499344][T11782] bridge_slave_1: entered promiscuous mode
[  437.521036][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.523246][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.533807][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.539328][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.541495][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.549617][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.569507][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.574141][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.654023][T11782] team0: Port device team_slave_0 added
[  437.669897][T11782] team0: Port device team_slave_1 added
[  437.681395][ T5907] ------------[ cut here ]------------
[  437.683735][ T5907] WARNING: CPU: 0 PID: 5907 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  437.688043][ T5907] Modules linked in:
[  437.689984][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  437.694067][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.697577][ T5907] Workqueue: netns cleanup_net
[  437.699011][ T5907] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  437.701464][ T5907] Code: 35 9d df f7 4b 83 3c 2c 00 75 19 e8 79 2a 7c f7 49 81 fd f8 07 00 00 74 1d e8 6b 2a 7c f7 49 83 c5 08 eb c9 e8 60 2a 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  437.709368][ T5907] RSP: 0018:ffffc900043ef8b0 EFLAGS: 00010293
[  437.712135][ T5907] RAX: ffffffff8a4381f0 RBX: ffff88810a084000 RCX: ffff888020c0d640
[  437.715129][ T5907] RDX: 0000000000000000 RSI: ffffffff8d9b6a67 RDI: ffff88810a084000
[  437.718578][ T5907] RBP: ffffc900043ef9b0 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  437.721749][ T5907] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffff88810a084000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  437.724899][ T5907] R13: 0000000000000000 R14: ffff888110c24880 R15: dffffc0000000000
[  437.728838][ T5907] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  437.732720][ T5907] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  437.735340][ T5907] CR2: 00005641d76c4e48 CR3: 000000000df36000 CR4: 00000000000006f0
[  437.739249][ T5907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  437.741851][ T5907] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  437.744918][ T5907] Call Trace:
[  437.746837][ T5907]  <TASK>
[  437.748067][ T5907]  ops_undo_list+0x49a/0x990
[  437.749934][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  437.751975][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  437.754158][ T5907]  cleanup_net+0x4c5/0x800
[  437.756444][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  437.758931][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.761408][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  437.763718][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  437.765999][ T5907]  process_scheduled_works+0xae1/0x17b0
[  437.768651][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  437.771056][ T5907]  worker_thread+0x8a0/0xda0
[  437.772898][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  437.775411][ T5907]  ? __kthread_parkme+0x7b/0x200
[  437.777967][ T5907]  kthread+0x711/0x8a0
[  437.779648][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  437.782040][ T5907]  ? __pfx_kthread+0x10/0x10
[  437.783908][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.786010][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.788226][ T5907]  ? __pfx_kthread+0x10/0x10
[  437.790080][ T5907]  ret_from_fork+0x3fc/0x770
[  437.791957][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  437.793593][ T5907]  ? __switch_to_asm+0x39/0x70
[  437.795398][ T5907]  ? __switch_to_asm+0x33/0x70
[  437.796958][ T5907]  ? __pfx_kthread+0x10/0x10
[  437.798467][ T5907]  ret_from_fork_asm+0x1a/0x30
[  437.800396][ T5907]  </TASK>
[  437.801658][ T5907] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  437.804527][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  437.808268][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.812289][ T5907] Workqueue: netns cleanup_net
[  437.814280][ T5907] Call Trace:
[  437.815675][ T5907]  <TASK>
[  437.816849][ T5907]  dump_stack_lvl+0x99/0x250
[  437.818731][ T5907]  ? __asan_memcpy+0x40/0x70
[  437.820593][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.822680][ T5907]  ? __pfx__printk+0x10/0x10
[  437.824424][ T5907]  vpanic+0x281/0x750
[  437.826024][ T5907]  ? __pfx__printk+0x10/0x10
[  437.827888][ T5907]  ? __pfx_vpanic+0x10/0x10
[  437.829714][ T5907]  ? is_bpf_text_address+0x292/0x2b0
[  437.831831][ T5907]  panic+0xb9/0xc0
[  437.833352][ T5907]  ? __pfx_panic+0x10/0x10
[  437.835182][ T5907]  __warn+0x31b/0x4b0
[  437.836797][ T5907]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  437.838885][ T5907]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  437.840956][ T5907]  report_bug+0x2be/0x4f0
[  437.842656][ T5907]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  437.844748][ T5907]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  437.846880][ T5907]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  437.849004][ T5907]  handle_bug+0x84/0x160
[  437.850748][ T5907]  exc_invalid_op+0x1a/0x50
[  437.852240][ T5907]  asm_exc_invalid_op+0x1a/0x20
[  437.853975][ T5907] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  437.856337][ T5907] Code: 35 9d df f7 4b 83 3c 2c 00 75 19 e8 79 2a 7c f7 49 81 fd f8 07 00 00 74 1d e8 6b 2a 7c f7 49 83 c5 08 eb c9 e8 60 2a 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  437.862445][ T5907] RSP: 0018:ffffc900043ef8b0 EFLAGS: 00010293
[  437.864739][ T5907] RAX: ffffffff8a4381f0 RBX: ffff88810a084000 RCX: ffff888020c0d640
[  437.867187][ T5907] RDX: 0000000000000000 RSI: ffffffff8d9b6a67 RDI: ffff88810a084000
[  437.869988][ T5907] RBP: ffffc900043ef9b0 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  437.873046][ T5907] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffff88810a084000
[  437.876125][ T5907] R13: 0000000000000000 R14: ffff888110c24880 R15: dffffc0000000000
[  437.879190][ T5907]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  437.881266][ T5907]  ops_undo_list+0x49a/0x990
[  437.882829][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  437.884406][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  437.885976][ T5907]  cleanup_net+0x4c5/0x800
[  437.887291][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  437.888835][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.890441][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  437.892200][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  437.893996][ T5907]  process_scheduled_works+0xae1/0x17b0
[  437.895723][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  437.897558][ T5907]  worker_thread+0x8a0/0xda0
[  437.899016][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  437.900981][ T5907]  ? __kthread_parkme+0x7b/0x200
[  437.902541][ T5907]  kthread+0x711/0x8a0
[  437.903997][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  437.906070][ T5907]  ? __pfx_kthread+0x10/0x10
[  437.907512][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.909144][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.910717][ T5907]  ? __pfx_kthread+0x10/0x10
[  437.912163][ T5907]  ret_from_fork+0x3fc/0x770
[  437.913600][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  437.915214][ T5907]  ? __switch_to_asm+0x39/0x70
[  437.916714][ T5907]  ? __switch_to_asm+0x33/0x70
[  437.918199][ T5907]  ? __pfx_kthread+0x10/0x10
[  437.919666][ T5907]  ret_from_fork_asm+0x1a/0x30
[  437.921173][ T5907]  </TASK>
[  437.922707][ T5907] Kernel Offset: disabled
[  437.924055][ T5907] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:20:15  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043ef050
R8 =ffff8880208f8237 R9 =1ffff1100411f046 R10=dffffc0000000000 R11=ffffffff854ef830
R12=dffffc0000000000 R13=ffffffff99af98e2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef8ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005641d76c4e48 CR3=0000000049f46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=492eed8777db0400 RBX=ffffffff819683a8 RCX=492eed8777db0400 RDX=0000000000000001
RSI=ffffffff8d9b6a67 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005567d67c8000 CR3=0000000124574000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=76656e6567006e61 6c765f3168746576
XMM02=3132303843414d00 6e616c7670690065 XMM03=0000000000000000 0000000000000000
XMM04=0000000000ff0000 0000000000000000 XMM05=0000000000000000 00007f1f63612e53
XMM06=0000000000000000 00007f1f63612e4d XMM07=0000000000000000 00007f1f63612e61
XMM08=0000000000000000 00007f1f63612ee7 XMM09=0000000000000000 00007f1f63612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
