last executing test programs:

25.57955116s ago: executing program 1 (id=1823):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
r0 = socket$kcm(0x18, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80047453, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
r2 = socket$kcm(0x18, 0x0, 0x2)
recvmsg(r2, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/206, 0xce}], 0x6, &(0x7f0000000700)=""/239, 0xef}, 0x40000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, 0x0, 0x9a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x5, [@const={0xf, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x1}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x5}}, @enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x8, [{0xb, 0x9ca, 0x8}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x27, 0x4}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @struct={0x2, 0x6, 0x0, 0x4, 0x0, 0x1, [{0x7, 0x4, 0x80}, {0xf, 0x4, 0x5}, {0x10, 0x3, 0x5}, {0xd, 0x1, 0x9cf9}, {0x1, 0x4}, {0x5, 0x3, 0x8e4}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000980)=""/185, 0x109, 0xb9, 0x1, 0x8, 0x10000, @value=r5}, 0x28)

25.187635613s ago: executing program 0 (id=1828):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

25.187205491s ago: executing program 0 (id=1829):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000016c0)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x9}, 0x28)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='br_fdb_add\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x234001, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

25.052984083s ago: executing program 0 (id=1832):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)

24.962822065s ago: executing program 0 (id=1835):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1400000024000b05d25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0)

24.902208324s ago: executing program 0 (id=1837):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

24.901468836s ago: executing program 0 (id=1839):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02000000001000"], 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

24.692967375s ago: executing program 1 (id=1840):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0)

24.692737176s ago: executing program 1 (id=1841):
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@fallback, 0x2e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

24.642722416s ago: executing program 1 (id=1842):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc)

24.563609887s ago: executing program 1 (id=1844):
socketpair(0x18, 0x4, 0x0, &(0x7f0000000fc0))

24.299592253s ago: executing program 1 (id=1845):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, 0xfffffffffffffffe}, 0x2000c044)

24.186009116s ago: executing program 32 (id=1845):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, 0xfffffffffffffffe}, 0x2000c044)

9.812069883s ago: executing program 33 (id=1839):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02000000001000"], 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2.966403748s ago: executing program 3 (id=2004):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/112, 0x70}], 0x5}, 0x10002)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, 0x1}, 0xc)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xfde6, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x106d00, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x100}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000380))
socketpair(0xa, 0x6, 0x80, &(0x7f0000000280))
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x1)

2.51090622s ago: executing program 3 (id=2005):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x1)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

2.439438371s ago: executing program 3 (id=2006):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x101, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2e, 0x2, 0x4, 0x402, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xb}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x38)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00)

1.431733413s ago: executing program 3 (id=2013):
socket$key(0xf, 0x3, 0x2)
r0 = perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x80, 0x8, 0x3, 0x3, 0x6, 0x0, 0x5, 0x80800, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x12, 0x3ff, 0x3, 0x3, 0x7, 0x6, 0x3, 0x0, 0x2, 0x0, 0x8000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0xfffffffffffffdd7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x95, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000070100000000000000000000851400006d0000001801000020786c2500000000002420207b1af8ff0000a1000000f296fb6eec0002000000d0238b8e25e80a000000b703000000000000850000008b0000009500"/103], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70200000096b9917f0000000000000085000000c40000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x414e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1d5cb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x0, 0x98, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0xe4ee}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980))
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1012, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b545", 0x17}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001140))

1.015466206s ago: executing program 3 (id=2020):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001000)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x0], 0x0, <r2=>0x0, 0xe4, &(0x7f0000001140)=[{}, {}], 0x10, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x2000036, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x5, 0x3, &(0x7f0000001440)=ANY=[@ANYRESOCT=r1], 0x0, 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x11, 0x3, &(0x7f0000001180)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100), 0x4)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x6, 0x0, 0x3}, 0x10, r2}, 0x94)
socket$kcm(0x1e, 0x2, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

230.754366ms ago: executing program 2 (id=2022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040)

230.510753ms ago: executing program 2 (id=2023):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a"], 0x40}}, 0x90)

194.824628ms ago: executing program 2 (id=2024):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)

194.411273ms ago: executing program 2 (id=2025):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f80000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000c0018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa}, 0x94)

167.631766ms ago: executing program 2 (id=2026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

118.552517ms ago: executing program 3 (id=2027):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000004"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000140)="1ab1bc7666", 0xffe0}], 0x1}, 0x8804)

0s ago: executing program 2 (id=2028):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000040000000100000604000000010000390800000000612e5f5f"], 0x0, 0x32, 0x0, 0x8}, 0x28)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x200c68c4)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, 0x0, 0x80fe)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r3, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r4 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24040886)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x40040)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x49)
sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000009e00)={0x0, 0x0, &(0x7f0000009dc0)={&(0x7f0000009a00)=ANY=[@ANYBLOB="140000003600010300bd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40040)
r9 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f0000000180)=@can, 0x80, 0x0}, 0x8e8c5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37963' (ED25519) to the list of known hosts.
syzkaller login: [   48.813311][ T5776] cgroup: Unknown subsys name 'net'
[   48.943002][ T5776] cgroup: Unknown subsys name 'cpuset'
[   48.949841][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.536922][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.568132][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.571994][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.575248][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.579147][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.582890][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.682579][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.686490][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.689400][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.692442][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.695900][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.725177][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.729398][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.739893][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.744199][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.747508][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.859755][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   56.052899][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.055951][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.058392][ T5844] bridge_slave_0: entered allmulticast mode
[   56.062655][ T5844] bridge_slave_0: entered promiscuous mode
[   56.067019][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.070160][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.073236][ T5844] bridge_slave_1: entered allmulticast mode
[   56.076298][ T5844] bridge_slave_1: entered promiscuous mode
[   56.130613][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.147230][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.156476][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.198088][ T5844] team0: Port device team_slave_0 added
[   56.211108][ T5844] team0: Port device team_slave_1 added
[   56.227968][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   56.252311][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.255208][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.265504][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.283154][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.286101][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.296494][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.348111][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.351275][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.354284][ T5850] bridge_slave_0: entered allmulticast mode
[   56.358123][ T5850] bridge_slave_0: entered promiscuous mode
[   56.364185][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.367070][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.370888][ T5850] bridge_slave_1: entered allmulticast mode
[   56.374730][ T5850] bridge_slave_1: entered promiscuous mode
[   56.432953][ T5844] hsr_slave_0: entered promiscuous mode
[   56.435596][ T5844] hsr_slave_1: entered promiscuous mode
[   56.441041][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.460747][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.491392][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.493889][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.496240][ T5853] bridge_slave_0: entered allmulticast mode
[   56.499332][ T5853] bridge_slave_0: entered promiscuous mode
[   56.534600][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.537677][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.541658][ T5853] bridge_slave_1: entered allmulticast mode
[   56.545466][ T5853] bridge_slave_1: entered promiscuous mode
[   56.561873][ T5850] team0: Port device team_slave_0 added
[   56.587055][ T5850] team0: Port device team_slave_1 added
[   56.605352][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.611890][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.673255][ T5853] team0: Port device team_slave_0 added
[   56.675787][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.679406][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.690466][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.709589][ T5853] team0: Port device team_slave_1 added
[   56.717412][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.720840][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.731923][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.776529][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.780192][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.791095][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.823324][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.826300][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.837406][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.900160][ T5850] hsr_slave_0: entered promiscuous mode
[   56.903304][ T5850] hsr_slave_1: entered promiscuous mode
[   56.906276][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   56.909563][ T5850] Cannot create hsr debugfs directory
[   56.950104][ T5853] hsr_slave_0: entered promiscuous mode
[   56.953235][ T5853] hsr_slave_1: entered promiscuous mode
[   56.956247][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   56.958654][ T5853] Cannot create hsr debugfs directory
[   57.049580][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.072509][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.090309][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.115687][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.230768][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.238294][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.250771][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.262188][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.301879][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.306251][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.315278][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.323563][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.361860][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.398593][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   57.413284][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.415798][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.430250][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.433351][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.495804][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.523384][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.553474][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.561676][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   57.581682][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.584771][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.592810][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.595949][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.614731][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.617735][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.624902][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.628023][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.666732][ T5846] Bluetooth: hci0: command tx timeout
[   57.739392][ T5846] Bluetooth: hci1: command tx timeout
[   57.747694][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.806301][ T5844] veth0_vlan: entered promiscuous mode
[   57.823057][ T5846] Bluetooth: hci2: command tx timeout
[   57.824223][ T5844] veth1_vlan: entered promiscuous mode
[   57.928444][ T5844] veth0_macvtap: entered promiscuous mode
[   57.944644][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.952892][ T5844] veth1_macvtap: entered promiscuous mode
[   57.963692][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.984993][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.003485][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.035368][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.040300][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.055458][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.060155][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.109691][ T5853] veth0_vlan: entered promiscuous mode
[   58.122000][ T5850] veth0_vlan: entered promiscuous mode
[   58.140425][ T5853] veth1_vlan: entered promiscuous mode
[   58.149804][ T5850] veth1_vlan: entered promiscuous mode
[   58.184825][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.188272][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.222088][ T5853] veth0_macvtap: entered promiscuous mode
[   58.238031][ T5853] veth1_macvtap: entered promiscuous mode
[   58.258149][ T5850] veth0_macvtap: entered promiscuous mode
[   58.260654][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.263958][ T5850] veth1_macvtap: entered promiscuous mode
[   58.264071][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.281413][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.286901][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.296884][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.310155][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.315814][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.321984][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.335651][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.352885][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.357508][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.367568][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.392969][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.396703][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.405821][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.423190][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.425800][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.455260][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.458406][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.485822][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.497798][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.526180][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.536919][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.608382][ T5918] openvswitch: netlink: Message has 4 unknown bytes.
[   58.656643][ T5920] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   58.713284][ T5926] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.806056][ T5929] netlink: 'syz.2.6': attribute type 10 has an invalid length.
[   58.812735][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.833433][ T5929] team0: entered promiscuous mode
[   58.835268][ T5929] team_slave_0: entered promiscuous mode
[   58.838386][ T5929] team_slave_1: entered promiscuous mode
[   58.876120][ T5929] team0: entered allmulticast mode
[   58.877849][ T5935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.878237][ T5929] team_slave_0: entered allmulticast mode
[   58.900477][ T5929] team_slave_1: entered allmulticast mode
[   58.904123][ T5929] bridge0: port 3(team0) entered blocking state
[   58.911721][ T5929] bridge0: port 3(team0) entered disabled state
[   58.927044][ T5929] bridge0: port 3(team0) entered blocking state
[   58.929680][ T5929] bridge0: port 3(team0) entered forwarding state
[   59.273313][ T5952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.325338][ T5953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17'.
[   59.498698][    C1] hrtimer: interrupt took 44275 ns
[   59.521694][ T5961] Zero length message leads to an empty skb
[   59.739478][ T5846] Bluetooth: hci0: command tx timeout
[   59.829110][ T5846] Bluetooth: hci1: command tx timeout
[   59.899146][ T5846] Bluetooth: hci2: command tx timeout
[   60.210103][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36'.
[   60.216979][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36'.
[   60.720807][ T6000] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.40'.
[   60.968296][ T5846] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   61.820695][ T5846] Bluetooth: hci0: command tx timeout
[   61.898896][ T5846] Bluetooth: hci1: command tx timeout
[   61.980226][ T5846] Bluetooth: hci2: command tx timeout
[   62.134044][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.66'.
[   62.179310][ T6066] netlink: 'syz.1.67': attribute type 10 has an invalid length.
[   62.182020][ T6066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.67'.
[   62.342662][ T6074] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[   62.764937][ T6095] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.79'.
[   62.922339][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'.
[   63.414657][ T6125] netlink: 'syz.1.91': attribute type 29 has an invalid length.
[   63.909808][ T5846] Bluetooth: hci0: command tx timeout
[   63.914113][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.979351][ T5846] Bluetooth: hci1: command tx timeout
[   64.061397][ T5846] Bluetooth: hci2: command tx timeout
[   64.591207][ T6142] __nla_validate_parse: 1 callbacks suppressed
[   64.591217][ T6142] netlink: 180 bytes leftover after parsing attributes in process `syz.2.97'.
[   64.918946][ T6158] wlan1 speed is unknown, defaulting to 1000
[   64.921633][ T6158] wlan1 speed is unknown, defaulting to 1000
[   64.932268][ T6159] lo speed is unknown, defaulting to 1000
[   64.941297][ T6158] wlan1 speed is unknown, defaulting to 1000
[   64.947019][ T6159] lo speed is unknown, defaulting to 1000
[   64.951171][ T6159] lo speed is unknown, defaulting to 1000
[   64.962318][ T6158] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   64.981277][ T6158] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   65.093473][ T6158] wlan1 speed is unknown, defaulting to 1000
[   65.097338][ T6158] wlan1 speed is unknown, defaulting to 1000
[   65.102351][ T6158] wlan1 speed is unknown, defaulting to 1000
[   65.216710][ T6158] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[   65.217912][ T6159] infiniband syz2: set active
[   65.223407][    T9] lo speed is unknown, defaulting to 1000
[   65.225989][ T6159] infiniband syz2: added lo
[   65.256205][ T6159] RDS/IB: syz2: added
[   65.259617][ T6159] smc: adding ib device syz2 with port count 1
[   65.262550][ T6159] smc:    ib device syz2 port 1 has pnetid 
[   65.266242][    T9] lo speed is unknown, defaulting to 1000
[   65.271418][ T6159] lo speed is unknown, defaulting to 1000
[   65.447429][ T6159] lo speed is unknown, defaulting to 1000
[   65.641344][ T6159] lo speed is unknown, defaulting to 1000
[   66.992694][ T6194] warning: `syz.2.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.025181][ T6196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.119'.
[   67.100230][ T6199] sctp: [Deprecated]: syz.1.120 (pid 6199) Use of int in max_burst socket option deprecated.
[   67.100230][ T6199] Use struct sctp_assoc_value instead
[   67.145381][ T6199] netlink: 'syz.1.120': attribute type 3 has an invalid length.
[   67.220319][ T6208] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.119'.
[   67.397781][ T6218] netlink: 332 bytes leftover after parsing attributes in process `syz.2.129'.
[   68.066872][ T6247] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.140'.
[   68.243798][ T6262] nbd: must specify an index to disconnect
[   68.856931][ T6252] delete_channel: no stack
[   69.908542][ T5299] udevd[5299]: worker [5848] terminated by signal 33 (Unknown signal 33)
[   69.912588][ T5299] udevd[5299]: worker [5848] failed while handling '/devices/virtual/block/loop2'
[   71.133123][ T5846] Bluetooth: hci1: unexpected event 0x31 length: 82 > 6
[   71.200243][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.206078][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.708167][   T33] audit: type=1107 audit(1758632222.683:2): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   71.924855][ T6340] netlink: 'syz.1.179': attribute type 21 has an invalid length.
[   72.482583][ T6346] netlink: 'syz.0.181': attribute type 2 has an invalid length.
[   72.485233][ T6346] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.181'.
[   72.766941][ T6358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.187'.
[   73.009870][ T6374] =======================================================
[   73.009870][ T6374] WARNING: The mand mount option has been deprecated and
[   73.009870][ T6374]          and is ignored by this kernel. Remove the mand
[   73.009870][ T6374]          option from the mount to silence this warning.
[   73.009870][ T6374] =======================================================
[   73.439940][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   74.659973][ T6413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.213'.
[   75.508131][ T6419] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   75.531533][ T6419] netlink: 'syz.1.215': attribute type 4 has an invalid length.
[   75.534700][ T6419] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.215'.
[   75.618729][ T6428] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   75.956806][ T6427] delete_channel: no stack
[   75.961703][ T6427] delete_channel: no stack
[   75.977729][ T6447] netlink: 'syz.0.227': attribute type 23 has an invalid length.
[   75.981438][ T6447] netlink: 'syz.0.227': attribute type 6 has an invalid length.
[   76.138464][ T6458] netlink: 220 bytes leftover after parsing attributes in process `syz.2.233'.
[   76.762081][ T6483] netlink: 'syz.2.243': attribute type 4 has an invalid length.
[   76.765112][ T6483] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.243'.
[   76.923952][ T6489] syz.0.245 uses obsolete (PF_INET,SOCK_PACKET)
[   77.295615][ T6501] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.250'.
[   77.318536][ T6501] netlink: 68 bytes leftover after parsing attributes in process `syz.1.250'.
[   77.377278][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'.
[   77.542871][ T6517] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.256'.
[   77.784217][ T6531] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.264'.
[   77.792843][ T6529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.812468][ T5854] lo speed is unknown, defaulting to 1000
[   77.852254][ T6529] syz.0.263 (6529) used greatest stack depth: 19840 bytes left
[   77.865485][ T6533] netlink: 'syz.2.265': attribute type 4 has an invalid length.
[   77.869022][ T6533] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.265'.
[   77.932568][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[   78.076439][ T6545] siw: device registration error -23
[   78.188088][ T6551] syzkaller0: entered promiscuous mode
[   78.196043][ T6551] syzkaller0: entered allmulticast mode
[   78.476521][ T5846] Bluetooth: hci0: Malformed LE Event: 0x0d
[   78.643028][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'.
[   78.948540][ T6598] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   78.951881][ T6598] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   78.960433][ T6598] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   79.878086][ T6646] netlink: 'syz.1.306': attribute type 10 has an invalid length.
[   79.893161][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.898074][ T6646] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   79.984495][ T6647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'.
[   79.988235][ T6647] unsupported nlmsg_type 40
[   79.991087][ T6647] netlink: 'syz.1.306': attribute type 10 has an invalid length.
[   79.994059][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'.
[   79.997275][ T6647] batadv0: entered promiscuous mode
[   80.000759][ T6647] batadv0: entered allmulticast mode
[   80.574594][ T6647] bond0: (slave batadv0): Releasing backup interface
[   80.587171][ T6647] bridge0: port 3(batadv0) entered blocking state
[   80.613983][ T6647] bridge0: port 3(batadv0) entered disabled state
[   80.851583][ T6664] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.312'.
[   80.855803][ T6662] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.312'.
[   80.862478][ T6664] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.312'.
[   80.970765][ T5852] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   80.974823][ T5852] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   81.636283][   T95] cfg80211: failed to load regulatory.db
[   82.714575][ T6699] __nla_validate_parse: 1 callbacks suppressed
[   82.714590][ T6699] netlink: 168 bytes leftover after parsing attributes in process `syz.2.329'.
[   82.781185][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'.
[   82.855339][ T6697] netlink: 'syz.0.327': attribute type 4 has an invalid length.
[   82.870422][ T6697] netlink: 152 bytes leftover after parsing attributes in process `syz.0.327'.
[   83.145540][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'.
[   83.255740][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'.
[   83.261382][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'.
[   83.560143][ T6697] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   84.095190][    T9] wlan1 speed is unknown, defaulting to 1000
[   84.098172][    T9] syz0: Port: 1 Link DOWN
[   84.186992][ T5846] Bluetooth: hci2: unexpected event 0x01 length: 151 > 1
[   84.232395][ T6759] netlink: 'syz.2.356': attribute type 10 has an invalid length.
[   84.253443][ T6753] netlink: 'syz.1.353': attribute type 2 has an invalid length.
[   84.258167][ T6753] netlink: 'syz.1.353': attribute type 5 has an invalid length.
[   84.267995][ T6753] netlink: 'syz.1.353': attribute type 6 has an invalid length.
[   84.275102][ T6753] netlink: 'syz.1.353': attribute type 7 has an invalid length.
[   84.280888][ T6753] netlink: 9 bytes leftover after parsing attributes in process `syz.1.353'.
[   84.284355][ T6753] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.353'.
[   84.293540][ T6753] netlink: 'syz.1.353': attribute type 2 has an invalid length.
[   84.297451][ T6753] netlink: 'syz.1.353': attribute type 5 has an invalid length.
[   84.301497][ T6753] netlink: 'syz.1.353': attribute type 6 has an invalid length.
[   84.305070][ T6753] netlink: 'syz.1.353': attribute type 7 has an invalid length.
[   84.309257][ T6753] netlink: 9 bytes leftover after parsing attributes in process `syz.1.353'.
[   84.366292][ T6764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.488899][ T6766] openvswitch: netlink: Missing key (keys=40, expected=80)
[   84.763493][ T6782] netlink: 'syz.0.366': attribute type 1 has an invalid length.
[   85.475743][ T6807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.783301][ T6887] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   88.102374][ T6935] vxcan1: entered allmulticast mode
[   88.136397][ T6937] __nla_validate_parse: 17 callbacks suppressed
[   88.136412][ T6937] netlink: 164 bytes leftover after parsing attributes in process `syz.1.436'.
[   88.148438][ T6937] syz_tun: refused to change device tx_queue_len
[   88.443164][ T6957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.446'.
[   88.446892][ T6957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.446'.
[   88.452441][ T6957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.446'.
[   90.075088][ T7014] netlink: 112 bytes leftover after parsing attributes in process `syz.0.468'.
[   90.083308][ T7016] netlink: 802 bytes leftover after parsing attributes in process `syz.1.467'.
[   90.361720][ T7029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.473'.
[   90.366703][ T7029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.473'.
[   90.371701][ T7029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.473'.
[   90.459360][ T7033] validate_nla: 6 callbacks suppressed
[   90.459376][ T7033] netlink: 'syz.2.475': attribute type 10 has an invalid length.
[   90.465226][ T7033] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.475'.
[   91.343943][ T7060] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[   91.972705][ T7070] netlink: 'syz.1.489': attribute type 40 has an invalid length.
[   91.984172][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.507401][ T7107] wlan1 speed is unknown, defaulting to 1000
[   94.516862][ T7107] lo speed is unknown, defaulting to 1000
[   94.544360][ T7111] __nla_validate_parse: 9 callbacks suppressed
[   94.544369][ T7111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.509'.
[   94.577938][ T7115] netlink: 'syz.1.511': attribute type 1 has an invalid length.
[   94.581732][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'.
[   94.853294][ T7133] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[   94.856390][ T7133] netlink: 376 bytes leftover after parsing attributes in process `syz.2.519'.
[   96.675402][ T7140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.968931][ T7148] netlink: 'syz.1.525': attribute type 25 has an invalid length.
[   96.977786][ T7148] netlink: 'syz.1.525': attribute type 28 has an invalid length.
[   97.250025][ T7168] netlink: 'syz.2.533': attribute type 2 has an invalid length.
[   97.253076][ T7168] netlink: 'syz.2.533': attribute type 1 has an invalid length.
[   98.206340][ T7228] netlink: 'syz.1.557': attribute type 7 has an invalid length.
[   98.209656][ T7228] netlink: 140 bytes leftover after parsing attributes in process `syz.1.557'.
[   98.754474][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1135500855 wd_nsec: 1135500812
[   99.152829][ T7255] netlink: 'syz.0.566': attribute type 1 has an invalid length.
[   99.156170][ T7255] netlink: 17 bytes leftover after parsing attributes in process `syz.0.566'.
[   99.256736][ T7256] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   99.262013][ T7256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.741405][ T7267] bpf: Bad value for 'mode'
[  100.189688][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.581'.
[  100.194505][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'.
[  100.228495][ T7293] netlink: 'syz.0.583': attribute type 9 has an invalid length.
[  100.658992][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  100.680480][ T5846] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  101.426337][ T7370] netlink: 80 bytes leftover after parsing attributes in process `syz.1.617'.
[  101.431626][ T7370] netlink: 80 bytes leftover after parsing attributes in process `syz.1.617'.
[  101.732891][ T7383] sctp: [Deprecated]: syz.2.622 (pid 7383) Use of int in max_burst socket option deprecated.
[  101.732891][ T7383] Use struct sctp_assoc_value instead
[  102.036317][ T7390] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.627'.
[  102.316199][ T7405] netlink: 'syz.1.633': attribute type 33 has an invalid length.
[  102.323194][ T7405] netlink: 152 bytes leftover after parsing attributes in process `syz.1.633'.
[  102.327057][ T7405] mac80211_hwsim hwsim3 : renamed from wlan1
[  102.347632][ T7405] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  102.522044][ T7414] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.637'.
[  102.605995][ T7420] xt_l2tp: wrong L2TP version: 0
[  102.627537][ T7416] syzkaller0: entered promiscuous mode
[  102.629701][ T7416] syzkaller0: entered allmulticast mode
[  103.685368][ T7441] netlink: 'syz.1.649': attribute type 33 has an invalid length.
[  103.688813][ T7441] netlink: 164 bytes leftover after parsing attributes in process `syz.1.649'.
[  104.392892][ T7465] netlink: 428 bytes leftover after parsing attributes in process `syz.0.658'.
[  104.447656][ T7468] openvswitch: netlink: Flow actions attr not present in new flow.
[  108.725753][ T7522] __nla_validate_parse: 2 callbacks suppressed
[  108.725763][ T7522] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.680'.
[  110.475441][ T7552] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  110.562511][ T7559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.608080][ T7563] netlink: 'syz.0.699': attribute type 21 has an invalid length.
[  110.611971][ T7563] netlink: 'syz.0.699': attribute type 6 has an invalid length.
[  110.615315][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.699'.
[  110.671336][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'.
[  110.790189][ T7575] netlink: 'syz.0.704': attribute type 4 has an invalid length.
[  110.793384][ T7575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.704'.
[  110.800370][ T7575] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  110.867150][ T7588] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.710'.
[  111.020947][ T7602] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.716'.
[  111.046397][ T7604] netlink: 42496 bytes leftover after parsing attributes in process `syz.0.717'.
[  111.153588][ T7610] netlink: 2 bytes leftover after parsing attributes in process `syz.2.719'.
[  112.164941][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.167571][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.188151][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.197386][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.202732][ T7636] netlink: 'syz.2.729': attribute type 22 has an invalid length.
[  112.205395][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[  112.224229][ T7633] bridge0: port 3(batadv0) entered disabled state
[  112.426373][ T7653] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.738'.
[  112.589175][ T7668]  speed is unknown, defaulting to 1000
[  112.591864][ T7668] lo speed is unknown, defaulting to 1000
[  112.928135][ T7689] netlink: 'syz.1.753': attribute type 29 has an invalid length.
[  112.932697][ T7689] netlink: 'syz.1.753': attribute type 29 has an invalid length.
[  113.232827][ T7706] openvswitch: netlink: Missing valid actions attribute.
[  113.235737][ T7706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.440241][ T7709] netlink: 'syz.1.762': attribute type 1 has an invalid length.
[  113.691473][ T7715] netlink: 'syz.0.763': attribute type 21 has an invalid length.
[  113.810918][ T7717] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[  113.814044][ T7717] __nla_validate_parse: 4 callbacks suppressed
[  113.814056][ T7717] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.765'.
[  114.000539][ T7725] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[  114.133939][ T7738] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  114.138547][ T7738] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  114.167893][ T7738] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  114.392741][ T7748] sctp: [Deprecated]: syz.2.778 (pid 7748) Use of int in maxseg socket option.
[  114.392741][ T7748] Use struct sctp_assoc_value instead
[  115.374591][ T7764] netlink: 92 bytes leftover after parsing attributes in process `syz.2.784'.
[  115.434025][ T7768] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.786'.
[  115.827435][ T7757] syz.0.782 (7757) used greatest stack depth: 18280 bytes left
[  115.916449][ T7785] validate_nla: 1 callbacks suppressed
[  115.916458][ T7785] netlink: 'syz.1.795': attribute type 2 has an invalid length.
[  115.926297][ T7789] netlink: 'syz.0.796': attribute type 19 has an invalid length.
[  115.931015][ T7785] netlink: 'syz.1.795': attribute type 1 has an invalid length.
[  115.934324][ T7789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'.
[  115.938101][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'.
[  115.966623][ T7791] netlink: 'syz.0.797': attribute type 29 has an invalid length.
[  115.977467][ T7791] netlink: 'syz.0.797': attribute type 29 has an invalid length.
[  115.987426][ T7791] netlink: 'syz.0.797': attribute type 29 has an invalid length.
[  116.457908][ T7839] netlink: 104 bytes leftover after parsing attributes in process `syz.0.820'.
[  116.983003][ T7837] syzkaller0: entered promiscuous mode
[  116.985674][ T7837] syzkaller0: entered allmulticast mode
[  117.152262][ T7855] netlink: 'syz.1.826': attribute type 21 has an invalid length.
[  117.155654][ T7855] netlink: 164 bytes leftover after parsing attributes in process `syz.1.826'.
[  117.304549][ T7861] can: request_module (can-proto-0) failed.
[  117.484537][ T7864] netlink: 948 bytes leftover after parsing attributes in process `syz.1.830'.
[  118.094392][ T7884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.839'.
[  118.102756][ T7887] netlink: 'syz.2.840': attribute type 4 has an invalid length.
[  118.105852][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'.
[  119.331485][ T5846] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  120.444006][ T7931]  speed is unknown, defaulting to 1000
[  120.476186][ T7931] lo speed is unknown, defaulting to 1000
[  120.685228][ T7941] netlink: 'syz.1.862': attribute type 11 has an invalid length.
[  120.785151][ T7947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.864'.
[  121.559590][ T7925] Set syz1 is full, maxelem 65536 reached
[  121.660684][ T7972] netlink: 'syz.0.875': attribute type 32 has an invalid length.
[  121.782225][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'.
[  121.785042][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'.
[  121.787812][ T7984] netlink: 'syz.0.881': attribute type 4 has an invalid length.
[  121.983585][ T8002] Set syz1 is full, maxelem 65536 reached
[  122.141781][ T8014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.896'.
[  122.282362][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'.
[  122.366962][ T5846] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  122.369836][ T5846] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  122.902789][ T8040] netlink: 56 bytes leftover after parsing attributes in process `syz.2.907'.
[  123.182126][ T8062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.915'.
[  123.441591][ T8073]  speed is unknown, defaulting to 1000
[  123.447106][ T8073] lo speed is unknown, defaulting to 1000
[  124.231857][ T8101] netlink: 'syz.1.932': attribute type 25 has an invalid length.
[  124.234498][ T8101] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.932'.
[  124.414854][ T8109] IPv6: NLM_F_CREATE should be specified when creating new route
[  124.566579][ T8121] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.941'.
[  125.274397][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'.
[  125.631217][ T8154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.794131][ T5846] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10
[  125.891446][ T8171] delete_channel: no stack
[  126.006490][ T8182] netlink: 'syz.2.969': attribute type 9 has an invalid length.
[  126.010836][ T8182] netlink: 211924 bytes leftover after parsing attributes in process `syz.2.969'.
[  126.333239][ T8201] netlink: 92 bytes leftover after parsing attributes in process `syz.1.978'.
[  126.336189][ T8201] netlink: 92 bytes leftover after parsing attributes in process `syz.1.978'.
[  126.384439][ T8206] openvswitch: netlink: Unknown key attributes 1
[  126.413898][ T8209] netlink: 14 bytes leftover after parsing attributes in process `syz.2.981'.
[  126.651738][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.984'.
[  126.691249][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'.
[  126.889681][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'.
[  126.968029][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.984'.
[  126.973118][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.984'.
[  127.003008][ T8235] netlink: 'syz.2.992': attribute type 21 has an invalid length.
[  127.005591][ T8235] netlink: 'syz.2.992': attribute type 15 has an invalid length.
[  127.008138][ T8235] netlink: 156 bytes leftover after parsing attributes in process `syz.2.992'.
[  127.017048][ T8235] IPv6: NLM_F_CREATE should be specified when creating new route
[  127.049352][ T8235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.052032][ T8235] IPv6: NLM_F_CREATE should be set when creating new route
[  127.054501][ T8235] IPv6: NLM_F_CREATE should be set when creating new route
[  127.057030][ T8235] IPv6: NLM_F_CREATE should be set when creating new route
[  127.826343][ T5846] Bluetooth: hci2: command tx timeout
[  128.189754][ T8301] netlink: 'syz.1.1016': attribute type 12 has an invalid length.
[  128.710033][ T8346] veth0_vlan: entered allmulticast mode
[  128.715475][ T8347] netlink: 'syz.1.1034': attribute type 2 has an invalid length.
[  128.718145][ T8347] nbd: must specify a device to reconfigure
[  130.334967][ T5846] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  130.807019][ T8400] netlink: 'syz.1.1058': attribute type 10 has an invalid length.
[  131.240017][ T8421] __nla_validate_parse: 13 callbacks suppressed
[  131.240032][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1069'.
[  131.245077][ T8421] netlink: 'syz.0.1069': attribute type 2 has an invalid length.
[  131.781524][ T8430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.784384][ T8430] IPv6: NLM_F_CREATE should be set when creating new route
[  131.787253][ T8430] IPv6: NLM_F_CREATE should be set when creating new route
[  132.473959][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'.
[  132.519680][ T8449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.623421][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.626058][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.671650][ T8455] netlink: 'syz.1.1084': attribute type 22 has an invalid length.
[  132.674391][ T8455] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.1084'.
[  133.184838][ T8485] netlink: 'syz.0.1098': attribute type 11 has an invalid length.
[  133.187908][ T8485] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1098'.
[  133.691790][ T8504] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1107'.
[  133.699898][ T8504] netlink: 'syz.1.1107': attribute type 4 has an invalid length.
[  133.703186][ T8504] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1107'.
[  133.735356][ T8504] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  134.061072][ T8514] netlink: zone id is out of range
[  134.064628][ T8514] netlink: zone id is out of range
[  134.099407][ T8514] netlink: del zone limit has 4 unknown bytes
[  134.745636][ T8533] netlink: 'syz.1.1118': attribute type 21 has an invalid length.
[  134.748486][ T8533] netlink: 14565 bytes leftover after parsing attributes in process `syz.1.1118'.
[  134.828158][ T8541] sctp: [Deprecated]: syz.0.1125 (pid 8541) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.828158][ T8541] Use struct sctp_sack_info instead
[  135.096656][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  135.338640][ T8571] netlink: 'syz.1.1136': attribute type 1 has an invalid length.
[  135.711323][ T8581] lo: entered allmulticast mode
[  135.732738][ T8581] lo: entered promiscuous mode
[  135.740818][ T8581] lo: left allmulticast mode
[  136.458987][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  137.023096][ T8622] netlink: 'syz.2.1155': attribute type 4 has an invalid length.
[  138.092292][ T8650] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1167'.
[  138.099958][ T8650] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1167'.
[  138.105696][ T8650] netlink: 'syz.2.1167': attribute type 10 has an invalid length.
[  138.109768][ T8650] veth0_vlan: left allmulticast mode
[  138.157546][ T8650] veth0_vlan: left promiscuous mode
[  138.169034][ T8650] veth0_vlan: entered promiscuous mode
[  138.198046][ T8650] team0: Device veth0_vlan failed to register rx_handler
[  138.235196][ T8655] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1167'.
[  138.675209][ T8665] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1172'.
[  140.780580][ T8720] netlink: 'syz.1.1197': attribute type 2 has an invalid length.
[  140.783406][ T8720] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  140.786437][ T8720] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1197'.
[  140.792492][ T8720] nbd: illegal input index 65540
[  140.885263][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.931332][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'.
[  140.997099][ T8740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1205'.
[  141.010028][ T8740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1205'.
[  141.014935][ T8740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1205'.
[  141.043714][ T8744] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1207'.
[  141.056525][ T8746] netlink: zone id is out of range
[  141.058611][ T8746] netlink: get zone limit has 8 unknown bytes
[  141.246584][ T8765] netlink: 'syz.2.1217': attribute type 3 has an invalid length.
[  142.029599][ T5846] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  143.978535][ T8866] netlink: 'syz.1.1264': attribute type 2 has an invalid length.
[  145.056503][ T8899] __nla_validate_parse: 2 callbacks suppressed
[  145.056603][ T8899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'.
[  145.063049][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'.
[  145.066704][ T8899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'.
[  145.349851][ T8912] netlink: 'syz.0.1284': attribute type 21 has an invalid length.
[  145.576520][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'.
[  145.583942][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'.
[  145.631201][ T8918] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1287'.
[  145.634623][ T8918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1287'.
[  145.825981][ T8940] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1296'.
[  145.952315][   T54] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  146.276195][ T8975] netlink: 198328 bytes leftover after parsing attributes in process `syz.2.1314'.
[  146.284435][ T8975] netlink: 'syz.2.1314': attribute type 1 has an invalid length.
[  146.287791][ T8975] netlink: 'syz.2.1314': attribute type 2 has an invalid length.
[  146.342186][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'.
[  146.520096][ T8988] : renamed from bond0 (while UP)
[  146.712367][ T9002] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  147.840595][ T9043] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[  147.957595][   T54] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  147.957644][   T54] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  148.684996][ T9074] netlink: 'syz.2.1358': attribute type 39 has an invalid length.
[  148.840281][ T9080] netlink: 'syz.2.1361': attribute type 21 has an invalid length.
[  148.842837][ T9080] netlink: 'syz.2.1361': attribute type 4 has an invalid length.
[  148.969945][ T9088] openvswitch: netlink: Flow actions attr not present in new flow.
[  148.991778][ T9088] syzkaller0: entered promiscuous mode
[  149.010867][ T9094] netlink: 'syz.1.1368': attribute type 23 has an invalid length.
[  149.186197][ T9104] netlink: 'syz.0.1373': attribute type 2 has an invalid length.
[  149.313445][ T9100] netlink: 'syz.1.1371': attribute type 9 has an invalid length.
[  149.906281][ T9134] openvswitch: netlink: Flow key attribute not present in set flow.
[  149.914126][ T9122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.950441][ T9122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.175468][ T9151] netlink: 'syz.0.1393': attribute type 21 has an invalid length.
[  150.178516][ T9151] __nla_validate_parse: 11 callbacks suppressed
[  150.178526][ T9151] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1393'.
[  150.210361][ T9153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'.
[  151.461163][ T9168] openvswitch: netlink: Message has 1 unknown bytes.
[  151.463855][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.612222][   T54] Bluetooth: hci2: unknown advertising packet type: 0x5f
[  151.615972][ T9182] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1407'.
[  151.627655][ T9182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1407'.
[  152.576003][ T9225] netlink: 'syz.1.1428': attribute type 9 has an invalid length.
[  152.583777][ T9225] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1428'.
[  153.538101][ T9262] netlink: 'syz.0.1446': attribute type 39 has an invalid length.
[  153.727669][ T9262] hsr_slave_0 (unregistering): left promiscuous mode
[  153.877577][ T9272] netlink: 'syz.2.1451': attribute type 10 has an invalid length.
[  153.892007][ T9272] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1451'.
[  154.008604][ T9274] netlink: 'syz.2.1452': attribute type 29 has an invalid length.
[  154.048584][ T9276] : renamed from veth0_to_bond (while UP)
[  154.580806][ T9307] netlink: 'syz.2.1466': attribute type 2 has an invalid length.
[  155.155773][ T9318] netlink: 'syz.0.1471': attribute type 21 has an invalid length.
[  155.160479][ T9318] netlink: 'syz.0.1471': attribute type 1 has an invalid length.
[  155.163672][ T9318] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1471'.
[  155.299709][ T9324] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1474'.
[  155.556802][ T9350] netlink: 'syz.1.1487': attribute type 1 has an invalid length.
[  155.649256][ T9348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.655651][ T5854] lo speed is unknown, defaulting to 1000
[  155.657500][ T5854] syz2: Port: 1 Link DOWN
[  155.661985][    T9] lo speed is unknown, defaulting to 1000
[  155.978219][ T9382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'.
[  155.986896][ T9375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'.
[  155.999960][ T9382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'.
[  157.087115][ T9425] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1520'.
[  157.233789][ T9431] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1519'.
[  157.257146][ T9431] netlink: 'syz.1.1519': attribute type 10 has an invalid length.
[  157.272279][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1519'.
[  157.283322][ T9431] team0: entered promiscuous mode
[  157.288145][ T9431] team_slave_0: entered promiscuous mode
[  157.376668][ T9431] team_slave_1: entered promiscuous mode
[  157.654818][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'.
[  157.680181][ T9431] team0: entered allmulticast mode
[  157.693750][ T9431] team_slave_0: entered allmulticast mode
[  157.700169][ T9431] team_slave_1: entered allmulticast mode
[  157.730537][ T9431] bridge0: port 3(team0) entered blocking state
[  157.734747][ T9431] bridge0: port 3(team0) entered disabled state
[  157.801241][ T9431] bridge0: port 3(team0) entered blocking state
[  157.805093][ T9431] bridge0: port 3(team0) entered forwarding state
[  158.087205][ T9462] tmpfs: Bad value for 'gid'
[  158.093026][ T9462] tmpfs: Bad value for 'gid'
[  158.257839][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  158.365438][ T9480] netlink: 'syz.2.1544': attribute type 3 has an invalid length.
[  158.368045][ T9480] netlink: 'syz.2.1544': attribute type 1 has an invalid length.
[  158.372182][ T9480] netlink: 'syz.2.1544': attribute type 2 has an invalid length.
[  158.375131][ T9480] netlink: 'syz.2.1544': attribute type 8 has an invalid length.
[  158.377958][ T9480] netlink: 'syz.2.1544': attribute type 10 has an invalid length.
[  158.383094][ T9480] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.1544'.
[  160.033313][ T9550] : entered promiscuous mode
[  160.051109][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1574'.
[  160.306177][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  160.411038][ T9592] __nla_validate_parse: 6 callbacks suppressed
[  160.411096][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'.
[  160.464120][ T9596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1592'.
[  160.468140][ T9595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1592'.
[  160.472504][ T9596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1592'.
[  161.079121][ T9624] validate_nla: 1 callbacks suppressed
[  161.079177][ T9624] netlink: 'syz.1.1604': attribute type 4 has an invalid length.
[  161.434931][ T9626] netlink: 'syz.0.1605': attribute type 11 has an invalid length.
[  161.729163][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'.
[  162.147105][ T9652] netlink: 'syz.0.1617': attribute type 11 has an invalid length.
[  162.169093][ T9653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  162.180095][   T28] bridge0: port 3(team0) entered disabled state
[  162.523102][   T54] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  162.578356][ T9684] netlink: 'syz.1.1628': attribute type 21 has an invalid length.
[  162.786425][ T9693] netlink: 'syz.0.1632': attribute type 21 has an invalid length.
[  162.790306][ T9693] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1632'.
[  162.794898][ T9693] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1632'.
[  163.416644][ T9725] netlink: 'syz.1.1647': attribute type 3 has an invalid length.
[  163.479189][ T9728] netlink: 'syz.2.1643': attribute type 1 has an invalid length.
[  163.506012][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'.
[  163.838265][ T9744] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1655'.
[  163.916674][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1660'.
[  163.950544][ T9761] netlink: 'syz.2.1661': attribute type 1 has an invalid length.
[  163.991992][ T5846] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  163.995093][ T5846] Bluetooth: hci1: unexpected event for opcode 0x1004
[  164.038177][ T9771] netlink: 'syz.0.1666': attribute type 21 has an invalid length.
[  164.501568][ T9831] netlink: 'syz.1.1695': attribute type 3 has an invalid length.
[  164.551477][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  165.693982][ T9852] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  166.104160][ T9881] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  166.107035][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.115452][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.161498][ T9881] : (slave batadv_slave_0): Enslaving as an active interface with an up link
[  166.251182][ T9891] netlink: 'syz.2.1722': attribute type 21 has an invalid length.
[  166.632527][   T54] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  166.644528][ T9922] netlink: 'syz.2.1736': attribute type 6 has an invalid length.
[  166.653861][ T9924] netlink: 'syz.0.1737': attribute type 10 has an invalid length.
[  166.672790][ T9924] : (slave netdevsim0): Enslaving as an active interface with an up link
[  166.714047][ T9928] __nla_validate_parse: 4 callbacks suppressed
[  166.714057][ T9928] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1739'.
[  167.899918][ T9949] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1747'.
[  167.938834][ T9951] netlink: 'syz.0.1748': attribute type 22 has an invalid length.
[  167.942213][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  168.059820][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  168.063220][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  168.067623][ T5846] Bluetooth: hci1: hardware error 0x00
[  168.144908][ T9965] netlink: 'syz.0.1755': attribute type 1 has an invalid length.
[  168.231590][ T9971] netlink: 'syz.1.1758': attribute type 10 has an invalid length.
[  168.234183][ T9971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1758'.
[  169.130176][T10004] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  169.278201][T10012] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1776'.
[  170.219880][ T5846] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  170.534483][T10050] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1792'.
[  170.538419][T10050] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1792'.
[  170.542870][T10050] tc_dump_action: action bad kind
[  171.304518][T10117] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  171.851320][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'.
[  172.082454][T10163] sysfs: Unknown parameter 'subj_type'
[  173.467587][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.470890][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.473959][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.477660][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.493292][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.531153][T10185]  speed is unknown, defaulting to 1000
[  173.534229][T10185] lo speed is unknown, defaulting to 1000
[  173.783891][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.787030][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.790025][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.793374][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.795872][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.861912][T10190]  speed is unknown, defaulting to 1000
[  173.864527][T10190] lo speed is unknown, defaulting to 1000
[  173.876030][T10185] chnl_net:caif_netlink_parms(): no params data found
[  173.995686][T10185] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.998071][T10185] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.000636][T10185] bridge_slave_0: entered allmulticast mode
[  174.005155][T10185] bridge_slave_0: entered promiscuous mode
[  174.012784][T10185] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.015139][T10185] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.017538][T10185] bridge_slave_1: entered allmulticast mode
[  174.031448][T10185] bridge_slave_1: entered promiscuous mode
[  174.067504][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.074567][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.111584][T10185] team0: Port device team_slave_0 added
[  174.116527][T10185] team0: Port device team_slave_1 added
[  174.152215][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.154542][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.165726][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.183457][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.185855][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.195213][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.273309][T10185] hsr_slave_0: entered promiscuous mode
[  174.275732][T10185] hsr_slave_1: entered promiscuous mode
[  174.277924][T10185] debugfs: 'hsr0' already exists in 'hsr'
[  174.281116][T10185] Cannot create hsr debugfs directory
[  174.286574][T10190] chnl_net:caif_netlink_parms(): no params data found
[  174.379916][T10190] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.382616][T10190] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.384897][T10190] bridge_slave_0: entered allmulticast mode
[  174.387635][T10190] bridge_slave_0: entered promiscuous mode
[  174.401106][T10190] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.403593][T10190] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.405969][T10190] bridge_slave_1: entered allmulticast mode
[  174.410644][T10190] bridge_slave_1: entered promiscuous mode
[  174.441427][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.454700][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.494526][T10190] team0: Port device team_slave_0 added
[  174.497861][T10190] team0: Port device team_slave_1 added
[  174.531965][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.534269][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.544426][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.556700][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.560297][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.570649][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.584899][T10185] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  174.592213][T10185] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  174.606050][T10185] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  174.623729][T10185] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  174.633874][T10190] hsr_slave_0: entered promiscuous mode
[  174.636119][T10190] hsr_slave_1: entered promiscuous mode
[  174.638280][T10190] debugfs: 'hsr0' already exists in 'hsr'
[  174.642172][T10190] Cannot create hsr debugfs directory
[  174.773116][T10190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.836297][T10190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.846168][T10185] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.860375][T10185] 8021q: adding VLAN 0 to HW filter on device team0
[  174.865818][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.868621][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.883671][T10190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.900570][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.902983][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.951220][T10190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.077488][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.117112][T10185] veth0_vlan: entered promiscuous mode
[  175.146645][T10185] veth1_vlan: entered promiscuous mode
[  175.168304][T10185] veth0_macvtap: entered promiscuous mode
[  175.176943][T10190] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  175.183620][T10190] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  175.201552][T10190] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  175.212245][T10185] veth1_macvtap: entered promiscuous mode
[  175.214715][T10190] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  175.242097][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.260472][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.284577][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.305238][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.322533][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.334536][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.352285][T10190] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.397069][T10190] 8021q: adding VLAN 0 to HW filter on device team0
[  175.424798][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.430334][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.433242][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.436914][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.443794][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.446601][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.504178][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.508392][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.586918][   T54] Bluetooth: hci0: command tx timeout
[  175.782799][T10190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.818948][   T54] Bluetooth: hci1: command tx timeout
[  175.824501][T10190] veth0_vlan: entered promiscuous mode
[  175.841933][T10190] veth1_vlan: entered promiscuous mode
[  175.873851][T10190] veth0_macvtap: entered promiscuous mode
[  175.883695][T10190] veth1_macvtap: entered promiscuous mode
[  175.903457][T10190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.916245][T10190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.926392][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.941003][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.952996][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.980877][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.057780][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.063718][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.115653][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.119724][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.416605][T10243] netlink: 'syz.3.1856': attribute type 21 has an invalid length.
[  176.688135][T10257] cgroup: fork rejected by pids controller in /syz2
[  177.041816][T10276] netlink: 'syz.3.1868': attribute type 46 has an invalid length.
[  177.045351][T10276] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1868'.
[  177.562634][T10291] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1875'.
[  177.629748][T10293] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1876'.
[  177.659144][   T54] Bluetooth: hci0: command tx timeout
[  177.787038][T10301] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  178.024188][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.329143][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  178.333847][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  178.336942][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  178.341271][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  178.344359][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.383454][T10315]  speed is unknown, defaulting to 1000
[  178.386477][T10315] lo speed is unknown, defaulting to 1000
[  178.446961][T10321] netlink: 'syz.3.1889': attribute type 33 has an invalid length.
[  178.451675][T10321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1889'.
[  178.673636][T10329] pimreg: tun_chr_ioctl cmd 1074025678
[  178.681369][T10329] pimreg: tun_chr_ioctl cmd 1074025677
[  178.683607][T10329] pimreg: linktype set to 778
[  178.760958][T10315] chnl_net:caif_netlink_parms(): no params data found
[  178.871226][T10315] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.873843][T10315] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.876456][T10315] bridge_slave_0: entered allmulticast mode
[  178.879930][T10315] bridge_slave_0: entered promiscuous mode
[  178.884811][T10315] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.887727][T10315] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.891697][T10315] bridge_slave_1: entered allmulticast mode
[  178.895081][T10315] bridge_slave_1: entered promiscuous mode
[  178.951326][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.956913][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.020047][T10315] team0: Port device team_slave_0 added
[  179.026003][T10315] team0: Port device team_slave_1 added
[  179.084450][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.087211][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.098897][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.103237][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.105523][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.125429][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.221019][T10315] hsr_slave_0: entered promiscuous mode
[  179.224154][T10315] hsr_slave_1: entered promiscuous mode
[  179.227046][T10315] debugfs: 'hsr0' already exists in 'hsr'
[  179.230873][T10315] Cannot create hsr debugfs directory
[  179.422136][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.540737][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.644790][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.740685][   T54] Bluetooth: hci0: command tx timeout
[  179.778622][   T13] bridge_slave_1: left allmulticast mode
[  179.781339][   T13] bridge_slave_1: left promiscuous mode
[  179.785284][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.794187][   T13] bridge_slave_0: left allmulticast mode
[  179.796604][   T13] bridge_slave_0: left promiscuous mode
[  179.799971][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.054457][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.063038][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.066994][   T13] bond0 (unregistering): Released all slaves
[  180.379028][   T54] Bluetooth: hci1: command tx timeout
[  180.686478][T10315] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  180.705084][T10315] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  180.710783][T10315] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  180.715112][T10315] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  180.745892][   T13] hsr_slave_0: left promiscuous mode
[  180.750759][   T13] hsr_slave_1: left promiscuous mode
[  180.758561][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.767878][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.773435][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.780007][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  180.783610][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.810434][   T13] veth1_macvtap: left promiscuous mode
[  180.815744][   T13] veth0_macvtap: left promiscuous mode
[  180.820542][   T13] veth1_vlan: left promiscuous mode
[  180.822699][   T13] veth0_vlan: left promiscuous mode
[  181.431898][   T13] team0 (unregistering): Port device team_slave_1 removed
[  181.461034][   T13] team0 (unregistering): Port device team_slave_0 removed
[  181.819761][ T5846] Bluetooth: hci0: command tx timeout
[  182.012654][T10315] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.052221][T10315] 8021q: adding VLAN 0 to HW filter on device team0
[  182.086315][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.089475][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.100266][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.103347][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.348348][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.402844][T10315] veth0_vlan: entered promiscuous mode
[  182.414536][T10315] veth1_vlan: entered promiscuous mode
[  182.435503][T10315] veth0_macvtap: entered promiscuous mode
[  182.441119][T10315] veth1_macvtap: entered promiscuous mode
[  182.453560][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.458915][ T5846] Bluetooth: hci1: command tx timeout
[  182.465274][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.476255][ T5909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.493108][ T5909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.497344][ T5909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.505417][ T5909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.563613][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.567177][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.598115][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.602728][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.115855][T10420] netlink: 'syz.2.1916': attribute type 10 has an invalid length.
[  183.121645][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1916'.
[  183.125658][T10420] dummy0: entered promiscuous mode
[  183.480896][T10439] netlink: 'syz.3.1925': attribute type 29 has an invalid length.
[  183.491271][T10438] netlink: 'syz.3.1925': attribute type 10 has an invalid length.
[  183.512469][T10438] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.516590][T10438] team0: Port device bond0 added
[  183.575171][T10443] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1927'.
[  183.695136][T10451] netlink: 'syz.2.1931': attribute type 1 has an invalid length.
[  184.549146][ T5846] Bluetooth: hci1: command tx timeout
[  184.711477][T10467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  184.802888][T10469] tun0: tun_chr_ioctl cmd 1074812117
[  185.023849][T10474] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1939'.
[  185.142183][T10476] cgroup: Unknown subsys name '0x0000000000000000'
[  185.283741][T10480] netlink: 'syz.2.1942': attribute type 29 has an invalid length.
[  185.377389][T10480] netlink: 'syz.2.1942': attribute type 29 has an invalid length.
[  185.443586][T10480] netlink: 'syz.2.1942': attribute type 29 has an invalid length.
[  185.474464][T10480] netlink: 'syz.2.1942': attribute type 29 has an invalid length.
[  185.963154][T10493] delete_channel: no stack
[  186.629872][ T5846] Bluetooth: hci1: command tx timeout
[  187.439770][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.444059][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.447644][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.453088][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.455478][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.497810][T10521]  speed is unknown, defaulting to 1000
[  187.504770][T10521] lo speed is unknown, defaulting to 1000
[  187.507473][T10526] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  187.690567][T10530] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  189.498930][   T54] Bluetooth: hci2: command tx timeout
[  189.935316][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.021027][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.097324][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.643251][T10545] netlink: 'syz.2.1968': attribute type 2 has an invalid length.
[  190.725104][   T13] : (slave netdevsim0): Releasing backup interface
[  190.730836][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.770466][T10521] chnl_net:caif_netlink_parms(): no params data found
[  191.107310][T10566] netlink: 'syz.3.1977': attribute type 2 has an invalid length.
[  191.680800][   T54] Bluetooth: hci2: command tx timeout
[  191.946078][   T13] bridge_slave_1: left allmulticast mode
[  191.948539][   T13] bridge_slave_1: left promiscuous mode
[  191.959051][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.966003][   T13] bridge_slave_0: left allmulticast mode
[  191.968443][   T13] bridge_slave_0: left promiscuous mode
[  191.971466][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.091950][T10564] delete_channel: no stack
[  192.329226][   T13]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.335315][   T13]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.341354][   T13]  (unregistering): (slave batadv_slave_0): Releasing backup interface
[  192.346768][   T13]  (unregistering): Released all slaves
[  192.357636][T10521] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.361843][T10521] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.365018][T10521] bridge_slave_0: entered allmulticast mode
[  192.369799][T10521] bridge_slave_0: entered promiscuous mode
[  192.387522][T10521] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.393359][T10521] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.403902][T10521] bridge_slave_1: entered allmulticast mode
[  192.407092][T10521] bridge_slave_1: entered promiscuous mode
[  192.477472][   T13] : left promiscuous mode
[  192.485003][T10596] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  192.497321][T10521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.506376][T10521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.647319][T10521] team0: Port device team_slave_0 added
[  192.657725][T10521] team0: Port device team_slave_1 added
[  192.741592][T10521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.744546][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.762267][T10521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.783720][T10521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.792708][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.806674][T10521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.976595][T10521] hsr_slave_0: entered promiscuous mode
[  192.981803][T10521] hsr_slave_1: entered promiscuous mode
[  192.989046][T10521] debugfs: 'hsr0' already exists in 'hsr'
[  192.991346][T10521] Cannot create hsr debugfs directory
[  193.481380][T10626] netlink: 'syz.3.1996': attribute type 9 has an invalid length.
[  193.508208][T10632] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  193.513937][T10632] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  193.531695][T10635] netlink: 'syz.3.1997': attribute type 2 has an invalid length.
[  193.536135][T10635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1997'.
[  193.602960][T10637] netlink: 'syz.2.1999': attribute type 4 has an invalid length.
[  193.605333][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'.
[  193.748995][   T54] Bluetooth: hci2: command tx timeout
[  193.793664][T10645] sctp: [Deprecated]: syz.2.2001 (pid 10645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.793664][T10645] Use struct sctp_sack_info instead
[  193.825357][T10648] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2002'.
[  193.871266][T10521] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.042620][T10521] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.069291][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.071927][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.104430][T10521] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.148210][T10521] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.349077][   T13] hsr_slave_1: left promiscuous mode
[  194.364679][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.375422][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.399566][   T13] veth1_macvtap: left promiscuous mode
[  194.401556][   T13] veth0_macvtap: left promiscuous mode
[  194.403510][   T13] veth1_vlan: left promiscuous mode
[  194.405377][   T13] veth0_vlan: left promiscuous mode
[  194.685029][   T13] team0 (unregistering): Port device team_slave_1 removed
[  194.723456][   T13] team0 (unregistering): Port device team_slave_0 removed
[  195.059832][ T1092] smc: removing ib device syz1
[  195.168988][T10677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2006'.
[  195.292217][T10521] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.361285][T10521] 8021q: adding VLAN 0 to HW filter on device team0
[  195.395859][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.399030][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.413850][T10685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.441738][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.444227][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.494576][T10521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.504910][T10521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.676210][T10521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.819011][   T54] Bluetooth: hci2: command tx timeout
[  195.822855][T10697] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2013'.
[  196.478051][T10521] veth0_vlan: entered promiscuous mode
[  196.488232][T10521] veth1_vlan: entered promiscuous mode
[  196.508326][T10521] veth0_macvtap: entered promiscuous mode
[  196.517514][T10521] veth1_macvtap: entered promiscuous mode
[  196.535318][T10521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.546840][T10521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.557700][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.565248][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.602590][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.612058][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.932995][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.941745][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.981792][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.985742][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.027048][   T13] ------------[ cut here ]------------
[  197.030133][   T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  197.034598][   T13] Modules linked in:
[  197.036807][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  197.041701][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.045789][   T13] Workqueue: netns cleanup_net
[  197.047812][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  197.050463][   T13] Code: a8 d8 de f7 4b 83 3c 2c 00 75 19 e8 5c be 7a f7 49 81 fd f8 07 00 00 74 1d e8 4e be 7a f7 49 83 c5 08 eb c9 e8 43 be 7a f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  197.053166][T10742] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.058436][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  197.058484][   T13] RAX: ffffffff8a45031d RBX: ffff888021c3c000 RCX: ffff88801c2f8000
[  197.058494][   T13] RDX: 0000000000000000 RSI: ffffffff8d9bad57 RDI: ffff888021c3c000
[  197.058502][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3b437 R09: 1ffffffff1f47686
[  197.058510][   T13] R10: dffffc0000000000 R11: fffffbfff1f47687 R12: ffff888021c3c000
[  197.058517][   T13] R13: 0000000000000000 R14: ffff88801f0bc880 R15: dffffc0000000000
[  197.058524][   T13] FS:  0000000000000000(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  197.058533][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.058542][   T13] CR2: 00007fea02065a10 CR3: 0000000110842000 CR4: 00000000000006f0
[  197.058577][   T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  197.058585][   T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  197.058592][   T13] Call Trace:
[  197.058599][   T13]  <TASK>
[  197.072645][T10742] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.075408][   T13]  ops_undo_list+0x49a/0x990
[  197.075437][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  197.075455][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  197.075473][   T13]  cleanup_net+0x4c5/0x800
[  197.075488][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  197.075503][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.075519][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  197.075532][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  197.075544][   T13]  process_scheduled_works+0xae1/0x17b0
[  197.075580][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.075603][   T13]  worker_thread+0x8a0/0xda0
[  197.075633][   T13]  kthread+0x711/0x8a0
[  197.075651][   T13]  ? __pfx_worker_thread+0x10/0x10
[  197.075664][   T13]  ? __pfx_kthread+0x10/0x10
[  197.075680][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.075694][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.075707][   T13]  ? __pfx_kthread+0x10/0x10
[  197.075724][   T13]  ret_from_fork+0x439/0x7d0
[  197.075739][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  197.075756][   T13]  ? __switch_to_asm+0x39/0x70
[  197.075772][   T13]  ? __switch_to_asm+0x33/0x70
[  197.075786][   T13]  ? __pfx_kthread+0x10/0x10
[  197.075801][   T13]  ret_from_fork_asm+0x1a/0x30
[  197.075827][   T13]  </TASK>
[  197.075835][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  197.075845][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  197.075858][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.075865][   T13] Workqueue: netns cleanup_net
[  197.075881][   T13] Call Trace:
[  197.075886][   T13]  <TASK>
[  197.075891][   T13]  dump_stack_lvl+0x99/0x250
[  197.075907][   T13]  ? __asan_memcpy+0x40/0x70
[  197.075922][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.075936][   T13]  ? __pfx__printk+0x10/0x10
[  197.075959][   T13]  vpanic+0x281/0x750
[  197.075974][   T13]  ? __pfx__printk+0x10/0x10
[  197.075988][   T13]  ? __pfx_vpanic+0x10/0x10
[  197.076001][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  197.076025][   T13]  panic+0xb9/0xc0
[  197.076037][   T13]  ? __pfx_panic+0x10/0x10
[  197.076062][   T13]  __warn+0x31b/0x4b0
[  197.076100][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  197.076118][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  197.076134][   T13]  report_bug+0x2be/0x4f0
[  197.076148][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  197.076164][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  197.076180][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  197.076194][   T13]  handle_bug+0x84/0x160
[  197.076209][   T13]  exc_invalid_op+0x1a/0x50
[  197.076225][   T13]  asm_exc_invalid_op+0x1a/0x20
[  197.076237][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  197.076252][   T13] Code: a8 d8 de f7 4b 83 3c 2c 00 75 19 e8 5c be 7a f7 49 81 fd f8 07 00 00 74 1d e8 4e be 7a f7 49 83 c5 08 eb c9 e8 43 be 7a f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  197.076262][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  197.076271][   T13] RAX: ffffffff8a45031d RBX: ffff888021c3c000 RCX: ffff88801c2f8000
[  197.076281][   T13] RDX: 0000000000000000 RSI: ffffffff8d9bad57 RDI: ffff888021c3c000
[  197.076288][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3b437 R09: 1ffffffff1f47686
[  197.076297][   T13] R10: dffffc0000000000 R11: fffffbfff1f47687 R12: ffff888021c3c000
[  197.076305][   T13] R13: 0000000000000000 R14: ffff88801f0bc880 R15: dffffc0000000000
[  197.076317][   T13]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  197.076339][   T13]  ops_undo_list+0x49a/0x990
[  197.076358][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  197.076374][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  197.076391][   T13]  cleanup_net+0x4c5/0x800
[  197.076407][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  197.076422][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.076435][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  197.076445][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  197.076458][   T13]  process_scheduled_works+0xae1/0x17b0
[  197.076488][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.076510][   T13]  worker_thread+0x8a0/0xda0
[  197.076540][   T13]  kthread+0x711/0x8a0
[  197.076557][   T13]  ? __pfx_worker_thread+0x10/0x10
[  197.076575][   T13]  ? __pfx_kthread+0x10/0x10
[  197.076590][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.076602][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.076614][   T13]  ? __pfx_kthread+0x10/0x10
[  197.076629][   T13]  ret_from_fork+0x439/0x7d0
[  197.076643][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  197.076658][   T13]  ? __switch_to_asm+0x39/0x70
[  197.076672][   T13]  ? __switch_to_asm+0x33/0x70
[  197.076686][   T13]  ? __pfx_kthread+0x10/0x10
[  197.076700][   T13]  ret_from_fork_asm+0x1a/0x30
[  197.076724][   T13]  </TASK>
[  197.080032][   T13] Kernel Offset: disabled

VM DIAGNOSIS:
12:59:08  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc90000107230 RSP=ffffc90000107058
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff85503af0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff85503b67 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fea02065a10 CR3=0000000110842000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688aff ffffffff81688a6d
XMM02=00007fc7c53a7498 ffffffff81ceb0fa XMM03=00007fc7c53a74a8 00007fc7c53a74a0
XMM04=00007fc7c5f0d100 00007fc7c53a7460 XMM05=00007fc7c53a7478 00007fc7c53a74c0
XMM06=00007fc7c53a74b8 00007fc7c53a74b0 XMM07=00007fc7c53a74a8 00007fc7c53a74a0
XMM08=0000000000000000 00007fc7c5212f0f XMM09=0000000000000000 00007fc7c5212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000009608 RBX=0000000001998f8c RCX=0000000000000017 RDX=0000000000010000
RSI=0000000000000017 RDI=0000000000000040 RBP=0000000000009608 RSP=ffffc900001e0ac0
R8 =0000000000000000 R9 =ffffffff81ae170e R10=ffffc900001e0820 R11=ffffffff81725e10
R12=0000002dd71b0a99 R13=ffffffffffffffff R14=0000000000000017 R15=dffffc0000000000
RIP=ffffffff81bfc160 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3ecc0d36c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31418ff8 CR3=0000000035bb8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=00007f3ecb3a7498 00007f3ecb3a7470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f3ecb3a7478 00007f3ecb3a74c0
XMM06=00007f3ecb3a74b8 00007f3ecb3a74b0 XMM07=00007f3ecb3a74a8 00007f3ecb3a74a0
XMM08=0000000000000000 00007f3ecb212f0f XMM09=0000000000000000 00007f3ecb212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
