last executing test programs:

10m16.415199382s ago: executing program 32 (id=236):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1282, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)

9m56.878807235s ago: executing program 33 (id=284):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x89}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94)

8m56.553253548s ago: executing program 34 (id=899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000073010e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x382}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

8m4.148228645s ago: executing program 35 (id=1494):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104301, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040))

6m50.307588214s ago: executing program 36 (id=2407):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

6m47.836712396s ago: executing program 37 (id=2281):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)={'wg0', 0x32, 0x32}, 0x6)

5m56.432198252s ago: executing program 38 (id=3034):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x28, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002680)={&(0x7f0000000340)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0}, 0x8000)

4m45.116150187s ago: executing program 39 (id=3746):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x2a, &(0x7f0000000300), 0x4)

3m55.757162167s ago: executing program 40 (id=4309):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x32}], 0x10}, 0x40000)

3m33.514899188s ago: executing program 7 (id=4537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m33.418470671s ago: executing program 7 (id=4538):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xf}, 0x5828, 0xce0e, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x9, 0x4, 0x8, 0x0, 0x5874, 0x4023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x409, 0x8000000000000040, 0x0, 0x6, 0xfffffffffff7bbfe}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$inet6(0xa, 0x800, 0xfffffff7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0xa, 0x3, 0x3a)
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x94, &(0x7f0000000100)=""/148}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4c001}, 0x40)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="d38193bc4100000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)

3m30.488819551s ago: executing program 7 (id=4540):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4}, 0x20004080)
recvmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x10142)

3m30.420349124s ago: executing program 7 (id=4543):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb88, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m30.175314113s ago: executing program 7 (id=4546):
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8b7848, 0x0)

3m30.173490277s ago: executing program 7 (id=4549):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, 0x1411, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)

3m14.913581823s ago: executing program 41 (id=4549):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, 0x1411, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)

3m4.093975627s ago: executing program 4 (id=4839):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff3b)
sendmsg$kcm(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000780)="9effe89f8fca1e23804f850065ee85c1f80b562c13b54276ba1c54f46c06d0304adbd08a44de3c6c9d0eb11fa9f8d545b29b0bda076de481b9f638fb17b95917e57cdf74ac81628bfbbe45451c6fb5ea0aebaabb1fcea64a39f7301efc2f9d58c4d84554649020", 0x67}, {0x0}, {&(0x7f00000009c0)="893c92353588ee54ab32adee0f4e347ab76bc91f470f7150d4827fdd9985c022150520db432dfc1efec96505189697eb091e926b8e59436b4e794d921a0d89cfc1c84b166380d1c6094b0848ec63f85622d397290a1a346836c4457e925bcbf426688894ad1ee92f5e1eafa7a37e68e8fe0eb32d2df35e2b219c98929f4e0a9e82a43354ade180a072c1dc45797d6bc3ebe7526bf07e247dfce22ddc9b77246023e9b8a5c386882b9446006895a2c6bfa34bccabcdb5891f1df9fc7750e5a2a6d56c70aa6d3ec28836180d29fc5cb6da6a2b5fe04b", 0xd5}, {&(0x7f0000000ac0)}, {0x0, 0x2}], 0x5, &(0x7f0000000d40)}, 0x40840)

3m4.002771914s ago: executing program 4 (id=4841):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

3m3.796224623s ago: executing program 4 (id=4843):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xc, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0xbe}}}], 0x18}, 0xc4)

3m3.676196866s ago: executing program 4 (id=4844):
mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x24000, 0x0)

3m3.584731352s ago: executing program 4 (id=4845):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x8)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x0)
close(r1)

3m3.394138613s ago: executing program 4 (id=4848):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2181fdd0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

3m3.238632353s ago: executing program 42 (id=4848):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2181fdd0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

3m2.742898768s ago: executing program 0 (id=4863):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10000, 0x8, 0x0, 0x3, 0xc2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'x'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}]}, 0x70}, 0x1, 0x7}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000020}, 0x20000000)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0xfffffffffffffffc, 0x24000004)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000004c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004c00)={&(0x7f0000003b80)={0xbb8, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0xffffff81}, 0xa2, 0x0, 0x5, 0x2, 0x13, 'syz0\x00', "2320e090d006595166ae2fb26dbfd7fc31b29db5a202c0ced879e5f0b927cb04", "1ef8909bf2b513299cf54731358eef474f909afc1cf194282cf4cf0e87fb9613", [{0x235a, 0xfff8, {0x3, 0x1ff}}, {0xfffb, 0x8, {0x0, 0xffff}}, {0x4, 0x80, {0x0, 0x80}}, {0x5, 0x0, {0x3, 0x9bf7}}, {0x8, 0xff, {0x2, 0x5476}}, {0x3, 0x7, {0x2}}, {0xc, 0x9, {0x3, 0x49680000}}, {0x3179, 0x7ff, {0x2, 0x1000}}, {0x3, 0x1, {0x2, 0x101}}, {0x1, 0x0, {0x2, 0x81}}, {0x8ed0, 0x6, {0x0, 0x5}}, {0x7ff, 0x2, {0x3, 0x8e03}}, {0x9, 0x8, {0x1}}, {0x6, 0xdd, {0x0, 0x4}}, {0x401, 0x19a, {0x3, 0x744}}, {0x9e6, 0x37, {0x3, 0x8}}, {0xdda2, 0xf406, {0x1, 0x98b}}, {0xa, 0x0, {0x1, 0x1}}, {0xa, 0x6, {0x2, 0x80000001}}, {0x8000, 0x3, {0x3, 0xfe}}, {0x59, 0x1, {0x1, 0x7ff}}, {0x80, 0x3, {0x3}}, {0x0, 0xf, {0x3, 0x6}}, {0x9, 0x2, {0x3, 0xb62}}, {0x1, 0x20f, {0x1, 0xd4}}, {0x7, 0x5, {0x0, 0xd1}}, {0x3, 0x2, {0x3, 0x3ff}}, {0x0, 0x9, {0x1, 0x4}}, {0x9, 0x3, {0x1, 0x81}}, {0x8, 0x280c, {0x2, 0x1e}}, {0x84, 0x9, {0x3, 0x6}}, {0x9a93, 0x1, {0x2, 0x5}}, {0xd, 0x0, {0x0, 0x4}}, {0x4, 0x7ff, {0x2, 0x8}}, {0xe, 0x1000, {0x2, 0x80}}, {0x1, 0x5c, {0x1, 0x7}}, {0x3, 0x8, {0x0, 0x5}}, {0x5, 0x6, {0x2, 0xf381}}, {0x8, 0x5, {0x3, 0x526}}, {0x5, 0x6, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x8b070000}, 0x0, 0x0, 0x45, 0x7f, 0x28, 'syz0\x00', "c4967e8a0729d0a613b68cdf675dca1113b4c40e2e497fe511e53d2fca801783", "f7a1519fc706ef86e0498d1b8608579b3741030052329da4ab11cca7ea1de647", [{0x334b, 0x4, {0x1, 0x80000000}}, {0x4, 0x68ca, {0x2, 0xfffff6a3}}, {0x7, 0x2, {0x1, 0xfffffff7}}, {0x1000, 0x148f, {0x2, 0xfff}}, {0x7f, 0x2, {0x0, 0x800}}, {0xff01, 0x8, {0x3, 0x3}}, {0x3f48, 0x5, {0x0, 0x6}}, {0x8, 0xffff, {0x1, 0x7f}}, {0x4d, 0x2, {0x2, 0x7fffffff}}, {0x8001, 0x3, {0x3, 0x3}}, {0x3ff, 0xfffb, {0x2, 0x4}}, {0xde, 0xfff, {0x2, 0x7}}, {0x6, 0x5, {0x1, 0x8000}}, {0x4, 0x8, {0x0, 0x6}}, {0x8, 0x4, {0x0, 0x8}}, {0x0, 0x3, {0x0, 0x800}}, {0x6, 0x8, {0x1, 0x3}}, {0x400, 0x1, {0x0, 0x1}}, {0xb, 0x2, {0x1, 0x6}}, {0x3, 0x0, {0x3, 0x6}}, {0x2, 0x400, {0x3, 0x81}}, {0x400, 0x7, {0x0, 0x17}}, {0x3ff, 0x0, {0x1, 0x2}}, {0x4, 0x8b, {0x1, 0xd}}, {0x7, 0x2, {0x1, 0xfffffff9}}, {0x4, 0x7, {0x0, 0x6}}, {0x6, 0x9, {0x1, 0x4}}, {0x400, 0x0, {0x2, 0xfff}}, {0x8001, 0x6, {0x0, 0x400}}, {0x3, 0x2, {0x1, 0xad1a}}, {0xf, 0x6, {0x1, 0x93d}}, {0x2, 0x5, {0x2, 0xfff}}, {0x7, 0xc3, {0x3, 0x8f4b}}, {0xd3, 0x8, {0x1, 0x3}}, {0xa7ef, 0x7, {0x746027ae8efc9c44, 0x4}}, {0x6, 0x4, {0x1, 0x2}}, {0x7, 0x1000, {0x2, 0x6}}, {0x0, 0x1, {0x3, 0x7c}}, {0x9, 0x8, {0x3, 0x5}}, {0x6, 0x6, {0x1, 0xcfec}}]}}}, {{0x254, 0x1, {{0x1, 0xb}, 0x6, 0xff, 0xfcd9, 0x4, 0x17, 'syz1\x00', "180b9d1c052082c9ed356b70be6f5f4379c8d7934b1cb25348d4187b2341d47d", "eed31fc1ff7f816503e97fafe4cf5da5e9a2ebc9e18e6909a65ceb6085b90132", [{0x8, 0x0, {0x3, 0xfffffff9}}, {0x7fff, 0x4, {0x0, 0x1}}, {0x7, 0x2, {0x3}}, {0x1, 0x6, {0x0, 0x8}}, {0x6, 0x7, {0x1, 0x5}}, {0x5, 0x8, {0xec81ffa5f55ce335, 0x5}}, {0x5, 0x5, {0x0, 0x4}}, {0x7, 0xff8f, {0x0, 0x2}}, {0xfffb, 0xdbb, {0x1, 0xfffffffe}}, {0x6, 0x5, {0x3, 0x5}}, {0x2, 0x7, {0x1, 0xfffffff3}}, {0x0, 0x0, {0x1, 0x95c}}, {0xa, 0x80, {0x1, 0x77}}, {0x5, 0x6fce, {0x3, 0x100}}, {0x8, 0x5, {0x2}}, {0xac9f, 0xde, {0x3, 0x6}}, {0x278, 0xde, {0x0, 0x2}}, {0x800, 0x5, {0x2, 0x200}}, {0x0, 0xbbe5, {0x1}}, {0x2ca, 0x9, {0x1, 0x4}}, {0x3, 0x800, {0x1, 0x10001}}, {0x3121, 0xc550, {0x1, 0xd5c}}, {0x6, 0x4, {0x3, 0xfffffffb}}, {0xa, 0xd5f0, {0x0, 0x7260d583}}, {0x800, 0xfff9, {0x0, 0x1ff}}, {0x7, 0x9, {0x0, 0x1}}, {0xff, 0x5, {0x3, 0xe14}}, {0x5, 0x8, {0x1, 0x8000}}, {0xfff, 0x7fff, {0x2, 0xf}}, {0x401, 0x9, {0x2, 0xfdde}}, {0x7, 0x0, {0x1, 0x9}}, {0x1, 0x7231, {0x3, 0x10001}}, {0x4, 0x4, {0x0, 0x8001}}, {0x2, 0x6, {0x0, 0x1}}, {0x2, 0x14, {0x0, 0xe}}, {0x40, 0xa598, {0x0, 0x5}}, {0x200, 0x4, {0x2, 0x25a4ca4a}}, {0xdff, 0x5, {0x3}}, {0x8, 0x4, {0x3, 0x6}}, {0x5, 0xfd50}]}}}, {{0x254, 0x1, {{0x3, 0x101}, 0xb, 0xe, 0x0, 0x7ff, 0x10, 'syz0\x00', "2b3fc81319d13e4ae04b620d999b990ab1b99300089e2eb1db952ff5c950bfe7", "e84efb24d5934f1ffe28a87e8a33c2bc32602ed8d5d9802d6a81027d5ab4675e", [{0x9, 0x7ff, {0x1, 0x7}}, {0x7f, 0x4, {0x1, 0x7}}, {0x5, 0x69a0, {0x1, 0x2}}, {0xffc0, 0x28, {0x3, 0xb}}, {0x1, 0x200, {0x2, 0x7}}, {0x6, 0xa, {0x7, 0x80}}, {0xff, 0xd4, {0x1, 0xf5}}, {0x8, 0x1, {0x0, 0xdb}}, {0x5, 0x2, {0x3, 0x1}}, {0x7ff, 0xffe8, {0x2, 0x291}}, {0x4, 0x6, {0x0, 0x2}}, {0x1, 0x5, {0x0, 0xf93}}, {0x1, 0x0, {0x2, 0xfffff000}}, {0x81, 0x72c1, {0x0, 0xfe7}}, {0x8, 0x9, {0x1, 0xff}}, {0xb3, 0xb123, {0x3, 0x9}}, {0xf, 0x9, {0x0, 0x8}}, {0x3, 0xf1f1, {0x1, 0xd}}, {0x56b, 0xafa6, {0x2, 0x7248}}, {0x2, 0x2, {0x3, 0x52}}, {0x4, 0x9, {0x0, 0x100}}, {0x8, 0x4, {0x2, 0xa0}}, {0x9, 0x0, {0x1, 0x35c2cd62}}, {0x5, 0x390, {0x2, 0x8}}, {0x5, 0xfd2a, {0x1, 0x1000}}, {0xb, 0x0, {0x1, 0x5}}, {0x7, 0x4, {0x0, 0x70000000}}, {0x5, 0x2, {0x3, 0x3}}, {0x9, 0x7, {0x0, 0x7f}}, {0x3, 0x6, {0x0, 0xffff}}, {0x100, 0x0, {0x2, 0x77e}}, {0x7fff, 0x200, {0x0, 0x6}}, {0xfffd, 0x5, {0x0, 0xfffffff8}}, {0xfffa, 0x6, {0x2, 0xffffffff}}, {0x8, 0x8, {0x0, 0x1}}, {0x51d, 0x7, {0x0, 0x8}}, {0xa6, 0xc, {0x1, 0x7}}, {0x6, 0x2, {0x0, 0x1048369d}}, {0x5, 0x2, {0x1, 0x694}}, {0x9, 0xb, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0xfffff001}, 0x5, 0x99, 0x2, 0x1, 0x18, 'syz1\x00', "e2b3838ee8fd3c862cebb415679900edd04d13fe506cf2009dd1d34802934693", "b1ceea95a098390d2309f0743ff177868002afa34e4d6a9593b283dc9c88899f", [{0x8, 0x1, {0x2, 0x1}}, {0x8, 0x7ce, {0x2, 0x7}}, {0x8, 0xfce0, {0x2, 0xfffffffb}}, {0x9, 0xf, {0x0, 0x80000001}}, {0xc, 0x4, {0x0, 0x4}}, {0x5, 0xfffd, {0x3, 0x1}}, {0xa, 0x3e00, {0x3, 0xd}}, {0x7ff, 0x7, {0x3, 0x7ff}}, {0x800, 0x88, {0x6, 0x2}}, {0x9e, 0x5, {0x3, 0xb}}, {0x1, 0x3, {0x2, 0x98d}}, {0x5, 0x6, {0x1, 0xba44}}, {0x9ae, 0x0, {0x2, 0xfffffff8}}, {0x2, 0x0, {0x2, 0x4}}, {0x0, 0x938}, {0x40, 0x8, {0x2, 0xbba}}, {0x5, 0x9, {0x3, 0x2}}, {0x2, 0xbdc, {0x2, 0x4}}, {0x7ca5, 0x7, {0x0, 0x100}}, {0x8, 0x0, {0x0, 0xffff}}, {0x8, 0x886, {0x2, 0x715}}, {0x101, 0x8000, {0x3, 0x400}}, {0x9, 0x1, {0x6, 0x10000}}, {0x40, 0x0, {0x0, 0x6}}, {0x800, 0xc284, {0x3, 0x5}}, {0x2, 0x2, {0x1, 0xa}}, {0x8, 0x0, {0x2, 0x7}}, {0xfffc, 0x4, {0x1, 0xfffffffa}}, {0x7f, 0x7, {0x1}}, {0x9, 0x54a6, {0x3, 0x8}}, {0x0, 0x6, {0x1, 0x8cdb}}, {0x7, 0x2, {0x1, 0xfffffff2}}, {0x18, 0x1, {0x0, 0x36}}, {0x4414, 0x7, {0x1, 0x3}}, {0xbf1, 0x6, {0x3, 0x1}}, {0x0, 0x8, {0x1, 0x1}}, {0x3, 0x9, {0x2, 0x7}}, {0x9, 0x4, {0x3, 0x9a}}, {0x6, 0x0, {0x3, 0x10001}}, {0xe000, 0x0, {0x1, 0x9}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x801}, 0x24048000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}, 0x0)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

3m1.765246918s ago: executing program 0 (id=4871):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000240), 0x4)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x24000084)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}, 0x2400c890)

3m1.66178687s ago: executing program 0 (id=4872):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x80, 0x4, 0x49, 0x9, 0x0, 0x2, 0x20000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x1040, 0x3800000000, 0x6, 0x6, 0x6afcc830, 0x7, 0x3, 0x0, 0x100, 0x0, 0x4}, r4, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052)
r5 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x72, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x40049409, 0x3)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000080)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "0600000000000000"}, @NFTA_MATCH_NAME={0x8, 0x1, 'cpu\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xdaa8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7a10f49c}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x20054000)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000800)={&(0x7f0000000200)="458a0f41030ab12264626cfe442394b14814a9bb9e1d4fa1500f7284ac8a55541f05e9786c3f53d7d81090ad769414bd7ed0e483df95299054b39a5d3011cf38b93e8bcd9c0d3124640c65ec2d9ff054f002b68a7348907503a935a701d026c14c6bf6bb648e4297f8cbae8af0e794fd30ee36de58c4de21bf7abbd84485591b10a8135d41da7fbf7dddb817e1b3de138fff98519544528dc47a8162a436351ea3984489025cd8db7d0ca42b28aa2ef310712567bd40", &(0x7f0000000600)=""/172, &(0x7f00000006c0)="351d071b45e245a880dfe682bb74b2f746b2792165f66219993eec1a2935b6f63b9d7c15d9cb7df0fbdc222ad94f27cf63cc20477ddf33c4951789bc9ebd9a9dbb33c1f88bad869137054ddb9c47caa34617453092a8985361aafb2bb2731f1ffb7d185a7d4564bea86dba94f3d7775a8763c300f0d07d14b918d47d8dbd371f1095dd0974c795aeb9b34e52640bc12588bc9c13527b229436d8d44cd81455eb3723997900fc2f63ac10c810f6efa6f10c6fed18ce9fdf21ab6b3a288da7141d634cb383978913863ecaad1761aceb27118a5f4071757ac6ae00ef9b83938e20b07a38f9308a", &(0x7f00000007c0)="05", 0x5, r5, 0x4}, 0x38)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup=r4, 0x26, 0x1, 0x7fff, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0]}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)

3m1.622398441s ago: executing program 0 (id=4873):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x6132})
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(r0, &(0x7f0000001480)=ANY=[], 0xc54c295c)

3m1.133157129s ago: executing program 0 (id=4878):
getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a381, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000001, 0xffffffffffffffff}, 0x8, 0x0, 0xfffffffe, 0x9, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f000000fe80)={0x0, 0x0, &(0x7f000000fe40)={&(0x7f000000fb40)=@migrate={0xa0, 0x21, 0x9, 0x70bd27, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x4e22, 0x2, 0x4e22, 0x6, 0x0, 0xa0, 0x80}, 0x6e6bb1}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x3c, 0x0, 0x0, 0x3507, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x882}, 0x4000000)

3m0.920341152s ago: executing program 0 (id=4882):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"})
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004600070128bd700000000000017c0000070004802c2c0701"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x4000001)
sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x24004094)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x3c}}, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x35f}, {&(0x7f0000000300)}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85a029d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e0300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c525655586cfe6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324459b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe1f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3000000", 0x18e}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)

2m45.539907987s ago: executing program 43 (id=4882):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"})
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004600070128bd700000000000017c0000070004802c2c0701"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x4000001)
sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x24004094)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x3c}}, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x35f}, {&(0x7f0000000300)}, {&(0x7f0000000b00)="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", 0x18e}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)

2m40.199742995s ago: executing program 5 (id=5054):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8008, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2m39.983114491s ago: executing program 5 (id=5057):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x9, 0x7, 0x2, 0x5, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0x28}}, 0x40)

2m39.802916623s ago: executing program 5 (id=5058):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x800000d, 0x6489}, 0x104901, 0x4, 0x0, 0x7, 0x77fe, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x10000, @dev={0xfe, 0x80, '\x00', 0x5e}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="1b40679a", 0x4}], 0x1}, 0x20040812)

2m39.517928245s ago: executing program 5 (id=5059):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
socket$inet(0x2, 0x2, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)=@gettaction={0x230, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x707c2623}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x67, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe18}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x5, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xfffffffffffffebb, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdc7e}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x72ca3488}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x49}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x230}}, 0xc880)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4a4}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x4001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x15}]}}, 0x0, 0x2a, 0x0, 0xfffffffc}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0xfffffffb}, @alu={0x4, 0x1, 0xb, 0x1, 0x9, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x4, 0x0, 0xc, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x7, 0x9, 0x2, 0x50, 0x4}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x14, &(0x7f00000001c0)={0x800000, 0x7}, 0x10}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0x2}, {0x2, 0x2}, {0x3}]}, @enum, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @fwd={0xf}, @enum={0xf}]}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0xfcdb08892e9ad7a1, 0x30, 0x2e]}}, &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010)
socket$key(0xf, 0x3, 0x2)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

2m36.537000787s ago: executing program 5 (id=5061):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

2m36.421379451s ago: executing program 5 (id=5066):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa92a, 0x8000000000ca, 0xffffffff, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000700000009"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0xfffffffd, 0x1, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

2m21.347676059s ago: executing program 44 (id=5066):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa92a, 0x8000000000ca, 0xffffffff, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000700000009"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0xfffffffd, 0x1, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

1m37.37917851s ago: executing program 1 (id=5627):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a", 0x25}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={<r1=>0x0, 0x0})
close(r1)
socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)

1m37.362787752s ago: executing program 1 (id=5628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854)

1m37.288530087s ago: executing program 1 (id=5629):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f0000001c40)=""/4156, 0x103c}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000000200)=""/178, 0xb2}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f00000002c0)=""/83, 0x53}], 0xa}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

1m37.239219665s ago: executing program 1 (id=5631):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

1m37.238095639s ago: executing program 1 (id=5633):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000003040)={&(0x7f0000002e80)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000029000000390000003a000238000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESDEC], 0x40}, 0x10)

1m36.986839339s ago: executing program 1 (id=5639):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94)

1m36.897095409s ago: executing program 45 (id=5639):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94)

49.025048392s ago: executing program 3 (id=6182):
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x8}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, r0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54, 0x4}, 0x114905, 0xf, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f00000000c0), 0x12)
sendmsg$AUDIT_SET(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x8, 0x0, 0x2, r0, 0x1, 0x10000, 0x6, 0x0, 0x0, 0x8, 0x41}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80080}, 0x20000000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x29, 0x8, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x2000)
socketpair(0x28, 0x5, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1)
ioctl$TUNSETNOCSUM(r9, 0xc040ff0b, 0x200000000003)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000002070102000000000039d7ad8f0742e4fbe08aa27be7c43ba17c2abfd72740f495018100"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8481)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

48.023086858s ago: executing program 3 (id=6191):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdir(0x0, 0x18b)
socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000000000000090000000000008000000000090000000000000000"], 0x0, 0x96}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94)
sendmsg$nl_netfilter(r1, 0x0, 0xc000)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x7, 0x0, @val=@tcx}, 0x1c)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xcd}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x1011, &(0x7f0000000540)=""/4113, 0x40f00, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

47.716119763s ago: executing program 3 (id=6197):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x40, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

47.585591648s ago: executing program 3 (id=6203):
r0 = socket$kcm(0xa, 0x2, 0x73)
recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40)

47.585321332s ago: executing program 3 (id=6204):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190)

47.473004455s ago: executing program 3 (id=6205):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffd14000780080011400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

46.873282726s ago: executing program 2 (id=6209):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xd54c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x9, 0x0, 0x0, 0x297f, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0xc8, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)
socket$kcm(0x1e, 0x4, 0x0)

46.720730862s ago: executing program 2 (id=6211):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@li, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

46.642279574s ago: executing program 2 (id=6212):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
close(r0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)

46.584036509s ago: executing program 2 (id=6215):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

46.523599781s ago: executing program 2 (id=6217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38)

46.294188894s ago: executing program 2 (id=6220):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010)
sendmsg$inet(r2, 0x0, 0x300080c1)
setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000800)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x28, &(0x7f00000006c0)=ANY=[], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

46.129280389s ago: executing program 46 (id=6220):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010)
sendmsg$inet(r2, 0x0, 0x300080c1)
setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000800)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x28, &(0x7f00000006c0)=ANY=[], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

31.999340698s ago: executing program 47 (id=6205):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffd14000780080011400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.519093579s ago: executing program 6 (id=6626):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x2, 0x1, 0x0, 0x8, 0xa, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0)

3.471512181s ago: executing program 9 (id=6628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000706010300000000000000000a00000a0800064000000006050001"], 0x24}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000)

3.470834723s ago: executing program 9 (id=6630):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000080)={'team0\x00', @random='\x00\x00\x00\x00\x00 '})

3.410624116s ago: executing program 6 (id=6631):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'geneve0\x00', 0xc00})

3.410384971s ago: executing program 9 (id=6632):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

3.410103752s ago: executing program 9 (id=6633):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071104e000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

3.330488707s ago: executing program 9 (id=6634):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x80)
sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x20048801)
syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xd}, 0x11eea, 0x4, 0x0, 0x0, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x40000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000240)={r1})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x14\x96)]\xa3\xcdB!\xf7\xe5\fc\xe9\x00\x9c\x00\x00\x00\x00\x00\x00')
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24000800)

3.330352534s ago: executing program 6 (id=6635):
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x114, 0x14, 0x601, 0x70bd27, 0x0, {0x2b, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}}, 0x0)

3.24519275s ago: executing program 6 (id=6636):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48)
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x40002002)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.028154027s ago: executing program 8 (id=6640):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3.024958336s ago: executing program 8 (id=6641):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4000c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x4)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)=0x80000000000004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50)

190.642126ms ago: executing program 9 (id=6642):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f0000000100), &(0x7f00000002c0)=""/85, &(0x7f0000000380)="67f007e4a8fe129415dedc40eca9a2af5006d050671cfb94f03ffa639ec9e4e7c916dbd1fd1fca65845bbcee29150d67ec4007397b5cd0f34d527ca769f0f5d34d49f7abae2cbc5fda61b992c1b1f2e8834ddca5e242583fb916122cc6ddbac4b5883b03856bf12312132988e97f668e968c87012616a6c3c17c7ea6deb47afe2c867e3f877fee1e987f9b6ddf3dee5f07e7328cf6d2ff6e9608ad3b43adf24b333eebd359462a466f7225c9b53ab01a11daa40658417ea8e4ec9a22b7", &(0x7f0000000500)="be9fa91f80bd9648b54f7dc7ce78bc0d2dda6ec0cb714e2a183b3339032cc202ef5f1fb87e79b3768d46eb098e9beecedb3cb4b342b5df385501b2f7b62a2103af158a", 0x2, r0, 0x4}, 0x38)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x0, 0x0, 0xda]}}, 0x0, 0x49, 0x0, 0x1}, 0x28)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="4c9bc5376b22498d87e43aad998bc9e06a919b75a5961112c82908d5b9d2241e5997e7582aa760525176d638b52a3b8d2d582be3344647d5d21810603172887708857dc880a24bb357eb15ed0cb30d9bb9c8d52d8c82afa3ac22b2452d4f894031cfb85dcf44356861d02a8998e8444c44388a78586b87101320b41aaa136a3485e9abfc1e9a52ae65feb4947f7d30983d54c6ee")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080850700c3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b9565553133be2b9fe017ab65fba66a6f7ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, &(0x7f00000004c0)={[], [{@fowner_lt}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0xfce7, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x2, 0x0, 0x59}, 0x35)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r6, &(0x7f0000003640)={&(0x7f0000000f40)=@nl=@unspec, 0x80, 0x0}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140b, 0x0, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x9f, 0x6}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x800, @empty, 0x1}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0x5, @empty}}]}, 0x78}, 0x1, 0x7}, 0x0)

190.161336ms ago: executing program 8 (id=6643):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)

131.636299ms ago: executing program 6 (id=6644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

131.377269ms ago: executing program 8 (id=6645):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x10009}, 0x3}}, 0x80, 0x0}, 0x8810)

78.748898ms ago: executing program 6 (id=6646):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1200000016000000080000000200", @ANYRES32=0x0], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb"}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x11, 0x3, 0x300)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x29, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)

78.513128ms ago: executing program 8 (id=6647):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

0s ago: executing program 8 (id=6648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c000008"], 0x1c}}, 0xc000)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000009, 0x1}, 0x7602, 0x3ff, 0x6, 0x5, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x5, 0x7, 0x3, 0x10000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xc, @void, @value, @value=r0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x22a82, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000002c0)={0xa, 0xa, 0x6, @private1}, 0x1c, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.0.4677'.
[  514.147696][T18211] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  514.151245][T18211] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  514.544312][T18232] netlink: 'syz.0.4695': attribute type 3 has an invalid length.
[  514.546805][T18232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4695'.
[  514.718910][T18232] netlink: 'syz.0.4695': attribute type 2 has an invalid length.
[  514.727296][T18232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4695'.
[  515.089929][T18254] netlink: 'syz.0.4706': attribute type 10 has an invalid length.
[  516.320138][T18269] netlink: 'syz.0.4713': attribute type 2 has an invalid length.
[  516.438899][T18272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4714'.
[  516.898134][T18283] netlink: 'syz.0.4719': attribute type 3 has an invalid length.
[  517.619939][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  517.627280][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  517.632307][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  517.636044][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  517.638976][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  517.797414][T18303] lo speed is unknown, defaulting to 1000
[  517.800516][T18303] netdevsim0 speed is unknown, defaulting to 1000
[  517.946400][T18303] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.948722][T18303] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.950971][T18303] bridge_slave_0: entered allmulticast mode
[  517.955022][T18303] bridge_slave_0: entered promiscuous mode
[  517.959142][T18303] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.961637][T18303] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.964378][T18303] bridge_slave_1: entered allmulticast mode
[  517.968135][T18303] bridge_slave_1: entered promiscuous mode
[  518.014085][T18303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.047502][T18303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.071760][T18303] team0: Port device team_slave_0 added
[  518.075706][T18303] team0: Port device team_slave_1 added
[  518.158820][T18323] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4730'.
[  518.162677][T18303] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.165866][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.169292][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4730'.
[  518.175936][T18303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.182601][T18303] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.184890][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.192721][T18303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.257092][T18303] hsr_slave_0: entered promiscuous mode
[  518.260272][T18303] hsr_slave_1: entered promiscuous mode
[  518.279343][T18303] debugfs: 'hsr0' already exists in 'hsr'
[  518.287183][T18303] Cannot create hsr debugfs directory
[  518.460363][ T5505] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.815161][ T5505] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.132542][ T5505] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.288123][ T5505] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.299001][   T63] smbdirect: ib_dev[syz1] removed
[  519.579293][T18358] netlink: 'syz.2.4739': attribute type 5 has an invalid length.
[  519.581694][T18358] netlink: 'syz.2.4739': attribute type 17 has an invalid length.
[  519.678455][   T54] Bluetooth: hci2: command tx timeout
[  519.847913][ T5505] bridge0: port 3(team0) entered disabled state
[  519.876516][ T5505] bridge0: port 1(dummy0) entered disabled state
[  519.897430][ T5505] bridge_slave_1: left allmulticast mode
[  519.903171][ T5505] bridge_slave_1: left promiscuous mode
[  519.908879][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.259559][ T5505] .` (unregistering): (slave geneve1): Releasing backup interface
[  520.361190][ T5505] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.368565][ T5505] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.373375][ T5505] .` (unregistering): Released all slaves
[  520.451170][T18303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  520.477817][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  520.481419][T18303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  520.499530][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  520.505025][ T5505] : left promiscuous mode
[  520.545201][T18383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4743'.
[  520.548518][T18303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  520.556631][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  520.560380][T18303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  520.573040][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  520.684469][ T5505] mac80211_hwsim hwsim22 wlan0 (unregistering): left promiscuous mode
[  520.698834][ T5505] team0: Port device wlan0 removed
[  520.871965][ T5505] veth0_macvtap: left promiscuous mode
[  520.882172][ T5505] veth1_vlan: left promiscuous mode
[  520.886811][ T5505] veth0_vlan: left promiscuous mode
[  521.469188][ T5505] team_slave_1 (unregistering): left promiscuous mode
[  521.473735][ T5505] team_slave_1 (unregistering): left allmulticast mode
[  521.477311][ T5505] team0 (unregistering): Port device team_slave_1 removed
[  521.506361][ T5505] team_slave_0 (unregistering): left promiscuous mode
[  521.508456][ T5505] team_slave_0 (unregistering): left allmulticast mode
[  521.516791][ T5505] team0 (unregistering): Port device team_slave_0 removed
[  521.677329][T16481] lo speed is unknown, defaulting to 1000
[  521.680007][T16481] syz2: Port: 1 Link DOWN
[  521.681747][   T64] smbdirect: ib_dev[syz2] removed
[  521.692491][   T54] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5
[  521.710693][T18412] netlink: 'syz.2.4747': attribute type 2 has an invalid length.
[  521.723589][T18412] tipc: Started in network mode
[  521.731875][T18412] tipc: Node identity 30303030, cluster identity 4711
[  521.739448][T18412] tipc: Node number set to 808464432
[  521.754507][   T54] Bluetooth: hci2: command tx timeout
[  521.901687][T18303] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.963921][T18303] 8021q: adding VLAN 0 to HW filter on device team0
[  522.050415][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.053394][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.088265][T18430] netlink: 'syz.2.4753': attribute type 10 has an invalid length.
[  522.095038][T18430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4753'.
[  522.100028][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.103119][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.129642][T18430] team0: entered promiscuous mode
[  522.132082][T18430] team_slave_0: entered promiscuous mode
[  522.138789][T18430] team_slave_1: entered promiscuous mode
[  522.148151][T18430] team0: entered allmulticast mode
[  522.151930][T18430] team_slave_0: entered allmulticast mode
[  522.167821][T18430] team_slave_1: entered allmulticast mode
[  522.170912][T18430] bridge0: port 3(team0) entered blocking state
[  522.174002][T18430] bridge0: port 3(team0) entered disabled state
[  522.180066][T18430] bridge0: port 3(team0) entered blocking state
[  522.182628][T18430] bridge0: port 3(team0) entered forwarding state
[  522.569227][T18303] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.636041][T18462] netlink: 'syz.2.4759': attribute type 21 has an invalid length.
[  522.641964][T18462] IPv6: NLM_F_CREATE should be specified when creating new route
[  523.022727][T18303] veth0_vlan: entered promiscuous mode
[  523.031785][T18303] veth1_vlan: entered promiscuous mode
[  523.071833][T18303] veth0_macvtap: entered promiscuous mode
[  523.080387][T18303] veth1_macvtap: entered promiscuous mode
[  523.099162][T18303] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.110820][T18491] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4766'.
[  523.138238][T18491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.173779][T18303] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.190800][T17550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.196960][T17550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.209417][ T5505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.220838][ T5505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.672188][T14885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.686901][T14885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.787198][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.793780][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.811479][T18508] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  523.834561][   T54] Bluetooth: hci2: command tx timeout
[  523.849986][T18508] netlink: 'syz.0.4770': attribute type 1 has an invalid length.
[  523.858856][T18508] netlink: 'syz.0.4770': attribute type 2 has an invalid length.
[  523.863225][T18508] netlink: 'syz.0.4770': attribute type 3 has an invalid length.
[  523.903883][T18512] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  523.913595][T18512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.403584][T18525] netlink: 'syz.4.4773': attribute type 2 has an invalid length.
[  524.410555][T18525] tipc: Started in network mode
[  524.418109][T18525] tipc: Node identity 1340008, cluster identity 4711
[  524.421730][T18525] tipc: Node number set to 20185096
[  524.467289][ T5361] 8021q: adding VLAN 0 to HW filter on device eth5
[  524.470984][T18542] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4780'.
[  524.756475][   T54] Bluetooth: hci2: adv larger than maximum supported
[  524.756509][   T54] Bluetooth: hci2: adv larger than maximum supported
[  524.850776][ T5361] 8021q: adding VLAN 0 to HW filter on device eth6
[  525.234174][ T5361] 8021q: adding VLAN 0 to HW filter on device eth7
[  525.497213][T18627] netlink: 'syz.4.4809': attribute type 4 has an invalid length.
[  525.565771][ T5361] 8021q: adding VLAN 0 to HW filter on device eth8
[  525.914546][   T54] Bluetooth: hci2: command tx timeout
[  527.000115][T18718] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4834'.
[  529.142254][T17550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.286147][T17550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.316722][T18773] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4852'.
[  529.382130][T18777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4853'.
[  529.387195][T18777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4853'.
[  529.446356][T17550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.458867][ T5006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  529.472395][ T5006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  529.479698][ T5006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  529.482683][ T5006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  529.486176][ T5006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  529.573831][T17550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.963677][T17550] bridge_slave_1: left allmulticast mode
[  529.970562][T17550] bridge_slave_1: left promiscuous mode
[  529.976174][T17550] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.987213][T17550] bridge_slave_0: left allmulticast mode
[  529.989762][T17550] bridge_slave_0: left promiscuous mode
[  529.991587][T17550] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.086183][T18817] netlink: 'syz.2.4866': attribute type 1 has an invalid length.
[  530.343014][T17550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.348142][T17550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.352966][T17550] bond0 (unregistering): Released all slaves
[  530.360432][ T5361] 8021q: adding VLAN 0 to HW filter on device eth9
[  530.420093][T17550] tipc: Left network mode
[  530.713216][T17550] hsr_slave_0: left promiscuous mode
[  530.722153][T17550] hsr_slave_1: left promiscuous mode
[  530.727857][T17550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.731090][T17550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.738177][T17550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.744285][T17550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.765134][T17550] veth1_macvtap: left promiscuous mode
[  530.766804][T17550] veth0_macvtap: left promiscuous mode
[  530.769327][T17550] veth1_vlan: left promiscuous mode
[  530.771073][T17550] veth0_vlan: left promiscuous mode
[  530.991572][T17550] team0 (unregistering): Port device team_slave_1 removed
[  531.000663][T17550] team0 (unregistering): Port device team_slave_0 removed
[  531.091551][T18842] netlink: 'syz.2.4870': attribute type 4 has an invalid length.
[  531.097366][ T5361] 8021q: adding VLAN 0 to HW filter on device eth10
[  531.202919][T18780] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.209558][T18780] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.216059][T18780] bridge_slave_0: entered allmulticast mode
[  531.223136][T18780] bridge_slave_0: entered promiscuous mode
[  531.235156][T18780] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.238348][T18780] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.241274][T18780] bridge_slave_1: entered allmulticast mode
[  531.247143][T18780] bridge_slave_1: entered promiscuous mode
[  531.316516][T18780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.340127][T18780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.421198][T18863] netlink: 'syz.2.4879': attribute type 28 has an invalid length.
[  531.458135][T18866] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4880'.
[  531.470051][T18780] team0: Port device team_slave_0 added
[  531.482307][T18780] team0: Port device team_slave_1 added
[  531.519189][T18780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.521323][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.527224][ T5006] Bluetooth: hci0: command tx timeout
[  531.542876][T18780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.571284][T18780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.576735][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.589108][T18780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.765202][T18780] hsr_slave_0: entered promiscuous mode
[  531.768294][T18780] hsr_slave_1: entered promiscuous mode
[  531.771571][T18780] debugfs: 'hsr0' already exists in 'hsr'
[  531.773667][T18780] Cannot create hsr debugfs directory
[  531.841000][ T5361] 8021q: adding VLAN 0 to HW filter on device eth11
[  532.340239][ T5361] 8021q: adding VLAN 0 to HW filter on device eth12
[  532.343448][T18894] netlink: 'syz.2.4889': attribute type 29 has an invalid length.
[  532.352574][T18894] netlink: 'syz.2.4889': attribute type 29 has an invalid length.
[  532.364378][T18894] netlink: 'syz.2.4889': attribute type 29 has an invalid length.
[  532.440210][T18898] netlink: 'syz.2.4890': attribute type 41 has an invalid length.
[  533.085990][T18780] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  533.097797][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  533.103419][T18780] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  533.123791][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  533.131353][T18780] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  533.137552][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  533.141920][T18780] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  533.152094][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  533.278614][T18780] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.313797][T18780] 8021q: adding VLAN 0 to HW filter on device team0
[  533.326408][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.329150][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.351067][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.353896][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.366950][   T25] block nbd0: Possible stuck request ffff8881073b8000: control (read@0,4096B). Runtime 150 seconds
[  533.604394][ T5006] Bluetooth: hci0: command tx timeout
[  533.873818][T18780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.939579][T18780] veth0_vlan: entered promiscuous mode
[  533.960078][T18780] veth1_vlan: entered promiscuous mode
[  534.015942][T18780] veth0_macvtap: entered promiscuous mode
[  534.032544][T18780] veth1_macvtap: entered promiscuous mode
[  534.057229][T18780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.071782][T18780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  534.092908][ T5505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.101651][ T5505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.116781][ T5505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.126441][ T5505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.301372][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.310545][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.386427][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.394693][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.662678][T18973] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4900'.
[  534.665047][T18975] netlink: 'syz.1.4901': attribute type 16 has an invalid length.
[  534.675645][T18975] netlink: 'syz.1.4901': attribute type 17 has an invalid length.
[  534.679709][T18973] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4900'.
[  534.987433][T18975] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.055122][T18975] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.687738][ T5006] Bluetooth: hci0: command tx timeout
[  536.003016][ T5006] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[  537.754947][ T5006] Bluetooth: hci0: command tx timeout
[  539.762813][T19091] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4928'.
[  540.389371][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4938'.
[  540.393022][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4938'.
[  540.625531][T19127] netlink: 'syz.2.4943': attribute type 10 has an invalid length.
[  540.628572][T19127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.677571][T19131] netlink: 'syz.1.4945': attribute type 5 has an invalid length.
[  540.715935][T19127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.762674][T19127] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  540.817486][T19135] netlink: 'syz.1.4946': attribute type 1 has an invalid length.
[  541.242820][T19145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4951'.
[  541.247286][T19145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4951'.
[  541.384139][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4956'.
[  541.831740][T19167] syzkaller0: entered promiscuous mode
[  541.833684][T19167] syzkaller0: entered allmulticast mode
[  542.450273][T19176] netlink: 'syz.1.4963': attribute type 2 has an invalid length.
[  542.452844][T19176] netlink: 'syz.1.4963': attribute type 1 has an invalid length.
[  542.457033][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4963'.
[  544.827093][T19182] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4966'.
[  545.145632][T19186] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  545.153457][T19186] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  545.219993][T19186] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  545.320233][T19201] netlink: 'syz.2.4971': attribute type 3 has an invalid length.
[  545.326575][T19201] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4971'.
[  545.332074][T19201] netlink: 'syz.2.4971': attribute type 3 has an invalid length.
[  545.337212][T19201] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4971'.
[  545.449507][T19186] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  545.883799][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'.
[  546.069803][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.072981][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.076532][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.080585][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.083903][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.087840][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.090991][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.094023][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.097313][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.100316][T19225] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  547.126508][T19231] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4985'.
[  547.173094][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  547.186481][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  547.190919][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  547.200189][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  547.203862][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  547.712561][T19234] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.721712][T19234] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.724837][T19234] bridge_slave_0: entered allmulticast mode
[  547.728265][T19234] bridge_slave_0: entered promiscuous mode
[  547.733553][T19234] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.744464][T19234] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.747490][T19234] bridge_slave_1: entered allmulticast mode
[  547.756267][T19234] bridge_slave_1: entered promiscuous mode
[  547.793945][T19275] netlink: 'syz.1.4995': attribute type 2 has an invalid length.
[  547.796293][T19234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.796853][T19275] netlink: 'syz.1.4995': attribute type 1 has an invalid length.
[  547.811705][T19234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.837889][T19234] team0: Port device team_slave_0 added
[  547.841401][T19234] team0: Port device team_slave_1 added
[  547.866215][T19234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  547.868461][T19234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.877772][T19234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  547.883168][T19234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.885942][T19234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.893990][T19234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.929732][T19234] hsr_slave_0: entered promiscuous mode
[  547.932067][T19234] hsr_slave_1: entered promiscuous mode
[  547.934282][T19234] debugfs: 'hsr0' already exists in 'hsr'
[  547.944534][T19234] Cannot create hsr debugfs directory
[  548.248267][T19293] netlink: 'syz.2.5003': attribute type 16 has an invalid length.
[  548.256259][T19293] netlink: 'syz.2.5003': attribute type 17 has an invalid length.
[  548.301726][T19293] lo: entered promiscuous mode
[  548.346760][T19293] tunl0: entered promiscuous mode
[  548.348790][T19293] gre0: entered promiscuous mode
[  548.576808][T19293] gretap0: entered promiscuous mode
[  548.580761][T19293] erspan0: entered promiscuous mode
[  548.586772][T19293] ip_vti0: entered promiscuous mode
[  548.593889][T19293] ip6_vti0: entered promiscuous mode
[  548.604270][T19293] sit0: left allmulticast mode
[  548.629010][T19293] ip6tnl0: entered promiscuous mode
[  548.661648][T19293] ip6gre0: entered promiscuous mode
[  548.673823][T19293] syz_tun: entered promiscuous mode
[  548.683191][T19293] bridge0: entered promiscuous mode
[  548.696618][T19293] vcan0: entered promiscuous mode
[  548.704950][T19293] bond0: entered promiscuous mode
[  548.707142][T19293] bond_slave_0: entered promiscuous mode
[  548.710868][T19293] bond_slave_1: entered promiscuous mode
[  548.714930][T19293] batadv_slave_1: entered promiscuous mode
[  548.720626][T19293] dummy0: entered promiscuous mode
[  548.723351][T19293] nlmon0: entered promiscuous mode
[  548.739209][T19293] batadv0: entered promiscuous mode
[  548.751906][T19293] vxcan0: entered promiscuous mode
[  548.764619][T19293] vxcan1: entered promiscuous mode
[  548.771219][T19293] veth0: entered promiscuous mode
[  548.777696][T19293] veth1: entered promiscuous mode
[  548.783167][T19293] wg0: entered promiscuous mode
[  548.794614][T19293] wg1: entered promiscuous mode
[  548.802096][T19293] wg2: entered promiscuous mode
[  548.813163][T19293] veth0_to_bridge: entered promiscuous mode
[  548.822120][T19293] veth1_to_bridge: entered promiscuous mode
[  548.834140][T19293] veth0_to_bond: entered promiscuous mode
[  548.846839][T19293] veth1_to_bond: entered promiscuous mode
[  548.861971][T19293] veth0_to_team: entered promiscuous mode
[  548.881955][T19293] veth1_to_team: entered promiscuous mode
[  548.941706][T19293] veth0_to_batadv: entered promiscuous mode
[  548.953549][T19293] batadv_slave_0: entered promiscuous mode
[  548.958468][T19293] veth1_to_batadv: entered promiscuous mode
[  548.962074][T19293] xfrm0: entered promiscuous mode
[  548.965138][T19293] veth0_to_hsr: entered promiscuous mode
[  548.967899][T19293] veth1_to_hsr: entered promiscuous mode
[  548.970590][T19293] hsr0: entered promiscuous mode
[  548.972614][T19293] veth1_virt_wifi: entered promiscuous mode
[  548.975158][T19293] veth0_virt_wifi: entered promiscuous mode
[  548.977713][T19293] virt_wifi0: entered promiscuous mode
[  548.981325][T19293] vlan0: entered promiscuous mode
[  548.983384][T19293] vlan1: entered promiscuous mode
[  548.986356][T19293] macvlan0: entered promiscuous mode
[  548.989119][T19293] macvlan1: entered promiscuous mode
[  548.991353][T19293] ipvlan0: entered promiscuous mode
[  548.995615][T19293] ipvlan1: entered promiscuous mode
[  549.000096][T19293] macvtap0: entered promiscuous mode
[  549.002732][T19293] macsec0: entered promiscuous mode
[  549.007527][T19293] geneve0: entered promiscuous mode
[  549.010523][T19293] geneve1: entered promiscuous mode
[  549.012986][T19293] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  549.017993][T19293] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  549.021602][T19293] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  549.025702][T19293] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  549.029173][T19293] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  549.032676][T19293] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode
[  549.038200][T19293] ip6tnl1: entered promiscuous mode
[  549.042013][T19293] 1]: entered promiscuous mode
[  549.046442][T19293] #!: entered promiscuous mode
[  549.274509][   T54] Bluetooth: hci2: command tx timeout
[  549.606190][T19234] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  549.619332][T19234] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  549.624072][T19339] netlink: 'syz.2.5018': attribute type 39 has an invalid length.
[  549.629913][T19234] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  549.638612][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5017'.
[  549.644313][T19234] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.694165][T19234] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  549.704592][T19234] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.710359][T19234] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  549.726097][T19234] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  549.819253][T19354] netlink: 'syz.1.5020': attribute type 1 has an invalid length.
[  549.825672][T19354] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5020'.
[  549.829840][T19234] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.857913][T19234] 8021q: adding VLAN 0 to HW filter on device team0
[  549.871725][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.874629][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.889543][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.891770][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.991336][T19364] netlink: 'syz.2.5023': attribute type 2 has an invalid length.
[  550.239290][T19381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5026'.
[  550.341149][T19388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5027'.
[  550.370472][T19234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.627247][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5032'.
[  550.971101][T19415] netlink: 'syz.1.5033': attribute type 29 has an invalid length.
[  551.003877][T19413] netlink: 'syz.1.5033': attribute type 29 has an invalid length.
[  551.023043][T19417] netlink: 'syz.1.5033': attribute type 29 has an invalid length.
[  551.123363][T19234] veth0_vlan: entered promiscuous mode
[  551.158140][T19234] veth1_vlan: entered promiscuous mode
[  551.245636][T19234] veth0_macvtap: entered promiscuous mode
[  551.257792][T19234] veth1_macvtap: entered promiscuous mode
[  551.287372][T19234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.321339][T19234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.353853][ T6400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.357709][   T54] Bluetooth: hci2: command tx timeout
[  551.370796][ T6400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.384720][ T6400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.419927][ T6400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.477422][   T54] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  551.558580][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5037'.
[  551.566549][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5037'.
[  551.582308][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.589991][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.622357][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.629968][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.073932][T19479] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5048'.
[  552.332516][T19491] syzkaller0: entered promiscuous mode
[  552.337082][T19491] syzkaller0: entered allmulticast mode
[  553.438123][   T54] Bluetooth: hci2: command tx timeout
[  555.525187][   T54] Bluetooth: hci2: command tx timeout
[  556.312577][ T5681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.540518][ T5681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.573470][ T5006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  556.589546][ T5006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  556.601438][ T5006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  556.605446][ T5006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  556.611047][ T5006] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  556.718235][ T5681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.723873][T19543] netlink: 'syz.1.5070': attribute type 2 has an invalid length.
[  556.727784][T19543] netlink: 'syz.1.5070': attribute type 3 has an invalid length.
[  556.732661][T19543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5070'.
[  556.854073][T19547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5071'.
[  556.897937][ T5681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.210941][ T5681] team0: left allmulticast mode
[  557.212727][ T5681] team_slave_0: left allmulticast mode
[  557.215450][ T5681] team_slave_1: left allmulticast mode
[  557.221232][ T5681] bridge0: port 3(team0) entered disabled state
[  557.239053][ T5681] bridge_slave_1: left allmulticast mode
[  557.243281][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.256651][ T5681] bridge_slave_0: left allmulticast mode
[  557.258706][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.631144][ T5681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  557.648895][ T5681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  557.661483][ T5681] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface
[  557.679753][ T5681] bond0 (unregistering): Released all slaves
[  557.843495][ T5681] tipc: Left network mode
[  558.101966][ T5361] 8021q: adding VLAN 0 to HW filter on device eth13
[  558.273023][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  558.341825][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.353473][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  558.642145][   T54] Bluetooth: hci1: command tx timeout
[  558.648848][ T5681] team0 (unregistering): Port device team_slave_1 removed
[  558.658541][ T5681] team0 (unregistering): Port device team_slave_0 removed
[  558.817879][T19579] netem: change failed
[  558.821692][ T5361] 8021q: adding VLAN 0 to HW filter on device eth14
[  558.971818][T19538] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.981025][T19538] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.990611][T19538] bridge_slave_0: entered allmulticast mode
[  559.015054][T19538] bridge_slave_0: entered promiscuous mode
[  559.027627][T19538] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.038030][T19538] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.050907][T19538] bridge_slave_1: entered allmulticast mode
[  559.075967][T19538] bridge_slave_1: entered promiscuous mode
[  559.216256][T19538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.223230][T19538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.342023][T19538] team0: Port device team_slave_0 added
[  559.355439][T19538] team0: Port device team_slave_1 added
[  559.400073][T19538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  559.402222][T19538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.454252][T19538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.459010][T19538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  559.464668][T19538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.497872][T19538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  559.699787][ T5361] 8021q: adding VLAN 0 to HW filter on device eth15
[  559.754151][T19538] hsr_slave_0: entered promiscuous mode
[  559.760754][T19538] hsr_slave_1: entered promiscuous mode
[  560.669549][T19619] netlink: 'syz.1.5087': attribute type 2 has an invalid length.
[  560.677381][T19619] netlink: 'syz.1.5087': attribute type 2 has an invalid length.
[  560.715506][   T54] Bluetooth: hci1: command tx timeout
[  560.744915][ T5681] bridge_slave_1: left allmulticast mode
[  560.749499][ T5681] bridge_slave_1: left promiscuous mode
[  560.753055][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.768474][ T5681] bridge_slave_0: left allmulticast mode
[  560.775196][ T5681] bridge_slave_0: left promiscuous mode
[  560.780877][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.808065][ T5681] batadv0: left allmulticast mode
[  560.818816][ T5681] batadv0: left promiscuous mode
[  560.823724][ T5681] : port 1(batadv0) entered disabled state
[  561.170584][ T5681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.181223][ T5681] bond0 (unregistering): Released all slaves
[  561.818463][ T5361] 8021q: adding VLAN 0 to HW filter on device eth23
[  561.841631][ T5681] hsr_slave_0: left promiscuous mode
[  561.850767][ T5681] hsr_slave_1: left promiscuous mode
[  561.855933][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.861122][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.069842][ T5681] team0 (unregistering): Port device team_slave_1 removed
[  562.086605][ T5681] team0 (unregistering): Port device team_slave_0 removed
[  562.128249][ T5681] team0 (unregistering): Port device bond_slave_0 removed
[  562.280249][T19642] 0: renamed from bond_slave_0 (while UP)
[  562.333452][T19538] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  562.350054][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  562.362271][T19538] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  562.412441][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  562.424972][T19538] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  562.438296][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  562.441210][T19538] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  562.448261][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  562.681222][T19658] netlink: 'syz.1.5095': attribute type 10 has an invalid length.
[  562.690554][T19658] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5095'.
[  562.696354][T19538] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.741961][T19538] 8021q: adding VLAN 0 to HW filter on device team0
[  562.771183][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.774049][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  562.786756][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.789632][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  562.795275][   T54] Bluetooth: hci1: command tx timeout
[  562.832754][T19663] netlink: 'syz.1.5096': attribute type 41 has an invalid length.
[  562.970723][ T5361] 8021q: adding VLAN 0 to HW filter on device eth16
[  563.048319][T19673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5098'.
[  563.437528][   T25] block nbd0: Possible stuck request ffff8881073b8000: control (read@0,4096B). Runtime 180 seconds
[  563.446610][ T5361] 8021q: adding VLAN 0 to HW filter on device eth24
[  563.464111][T19538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.519911][T19538] veth0_vlan: entered promiscuous mode
[  563.532211][T19538] veth1_vlan: entered promiscuous mode
[  563.563822][T19538] veth0_macvtap: entered promiscuous mode
[  563.572596][T19538] veth1_macvtap: entered promiscuous mode
[  563.587152][T19538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  563.595967][T19538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.607995][ T5681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.612092][ T5681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.811508][ T5681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.822159][ T5681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.962161][ T5361] 8021q: adding VLAN 0 to HW filter on device eth25
[  563.992382][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.006480][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.031361][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.034489][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.874439][   T54] Bluetooth: hci1: command tx timeout
[  565.641063][T19760] netlink: 'syz.1.5115': attribute type 1 has an invalid length.
[  565.648178][T19760] netlink: 'syz.1.5115': attribute type 1 has an invalid length.
[  565.931048][T19775] netlink: 'syz.1.5121': attribute type 2 has an invalid length.
[  565.933595][T19775] netlink: 'syz.1.5121': attribute type 1 has an invalid length.
[  566.041060][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5125'.
[  566.589723][T19796] netlink: 'syz.2.5129': attribute type 16 has an invalid length.
[  566.596958][T19796] netlink: 'syz.2.5129': attribute type 3 has an invalid length.
[  566.601524][T19796] netlink: 'syz.2.5129': attribute type 1 has an invalid length.
[  566.606510][T19796] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5129'.
[  567.030288][ T5065] udevd[5065]: worker [13221] /devices/virtual/block/nbd0 timeout; kill it
[  567.039038][ T5065] udevd[5065]: seq 16724 '/devices/virtual/block/nbd0' killed
[  567.360486][T19827] netlink: 'syz.1.5143': attribute type 1 has an invalid length.
[  567.460670][T19833] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5146'.
[  567.500726][T19835] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5147'.
[  567.504684][T19835] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5147'.
[  567.768847][T19841] validate_nla: 3 callbacks suppressed
[  567.768858][T19841] netlink: 'syz.2.5150': attribute type 5 has an invalid length.
[  567.784468][T19841] netlink: 'syz.2.5150': attribute type 5 has an invalid length.
[  568.370979][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5155'.
[  568.562474][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  568.565184][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  569.279908][T19872] netlink: 'syz.2.5162': attribute type 33 has an invalid length.
[  569.290236][T19872] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5162'.
[  570.602595][   T54] Bluetooth: hci0: unknown advertising packet type: 0x80
[  570.602615][   T54] Bluetooth: hci0: Malformed LE Event: 0x02
[  570.963946][T19898] netlink: 'syz.1.5172': attribute type 10 has an invalid length.
[  571.198009][T19898] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  571.257050][T19898] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  571.367120][ T5006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  571.381805][ T5006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  571.389985][ T5006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  571.397127][ T5006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  571.400392][ T5006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  571.424145][T19907] netlink: 'syz.1.5176': attribute type 19 has an invalid length.
[  571.428087][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'.
[  571.657934][T19923] netlink: 'syz.2.5182': attribute type 10 has an invalid length.
[  571.664883][T19923] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  571.685297][T19923] net_ratelimit: 3319 callbacks suppressed
[  571.685314][T19923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  571.725567][T19928] netlink: 'syz.1.5184': attribute type 10 has an invalid length.
[  571.732068][T19928] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  571.742012][T19928] bond0: (slave netdevsim1): Releasing backup interface
[  571.747668][T19928] bridge0: port 3(netdevsim1) entered blocking state
[  571.753656][T19928] bridge0: port 3(netdevsim1) entered disabled state
[  571.757382][T19928] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  571.911099][ T6400] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.083541][ T6400] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.255395][ T6400] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.264496][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'.
[  572.290497][T19904] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.292854][T19904] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.298316][T19904] bridge_slave_0: entered allmulticast mode
[  572.302012][T19904] bridge_slave_0: entered promiscuous mode
[  572.308098][T19904] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.311035][T19904] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.313834][T19904] bridge_slave_1: entered allmulticast mode
[  572.327044][T19904] bridge_slave_1: entered promiscuous mode
[  572.380013][ T6400] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.422873][T19904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.711558][T19904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.749811][T19904] team0: Port device team_slave_0 added
[  572.763422][T19904] team0: Port device team_slave_1 added
[  572.801709][T19904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.804605][T19904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.825597][T19904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.838108][T19904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.841437][T19971] netlink: 'syz.2.5199': attribute type 10 has an invalid length.
[  572.844760][T19904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.861832][T19904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.874139][T19971] team0: Device vxcan0 is of different type
[  573.033332][T19904] hsr_slave_0: entered promiscuous mode
[  573.042302][T19904] hsr_slave_1: entered promiscuous mode
[  573.046629][T19904] debugfs: 'hsr0' already exists in 'hsr'
[  573.048422][T19904] Cannot create hsr debugfs directory
[  573.203874][ T6400] bridge_slave_1: left allmulticast mode
[  573.211829][ T6400] bridge_slave_1: left promiscuous mode
[  573.219435][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.279715][ T6400] bridge_slave_0: left allmulticast mode
[  573.282379][ T6400] bridge_slave_0: left promiscuous mode
[  573.286599][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.286667][T19969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.440797][   T54] Bluetooth: hci3: command tx timeout
[  574.419174][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.429239][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.435757][ T6400] bond0 (unregistering): Released all slaves
[  574.451417][ T5361] 8021q: adding VLAN 0 to HW filter on device eth13
[  574.453707][T19989] C: renamed from veth1_to_team (while UP)
[  574.458972][T19989] netlink: 'syz.1.5203': attribute type 3 has an invalid length.
[  574.464170][T19989] netlink: 'syz.1.5203': attribute type 1 has an invalid length.
[  574.469783][T19989] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5203'.
[  574.874418][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5206'.
[  574.912997][ T5361] 8021q: adding VLAN 0 to HW filter on device eth14
[  575.173069][T20010] netlink: 'syz.1.5209': attribute type 10 has an invalid length.
[  575.239687][T20010] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  575.467919][ T6400] hsr_slave_0: left promiscuous mode
[  575.482242][ T6400] hsr_slave_1: left promiscuous mode
[  575.488803][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.495998][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.505110][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.509754][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.524430][   T54] Bluetooth: hci3: command tx timeout
[  575.544872][ T6400] veth1_macvtap: left promiscuous mode
[  575.551698][ T6400] veth0_macvtap: left promiscuous mode
[  575.559263][ T6400] veth1_vlan: left promiscuous mode
[  575.563567][ T6400] veth0_vlan: left promiscuous mode
[  575.663389][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5217'.
[  575.945338][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  575.973522][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  576.009942][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5221'.
[  576.268120][ T5361] 8021q: adding VLAN 0 to HW filter on device eth15
[  576.835341][T20063] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5229'.
[  576.863527][T19904] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  576.868195][T19904] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  576.872778][ T5361] 8021q: adding VLAN 0 to HW filter on device eth26
[  576.883459][T19904] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  576.898482][T19904] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  576.906521][T19904] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  576.919903][T19904] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  576.922997][T19904] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  576.931168][T19904] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  577.067012][T19904] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.084025][T19904] 8021q: adding VLAN 0 to HW filter on device team0
[  577.103555][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.105844][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.120229][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.122458][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.370644][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5234'.
[  577.595746][   T54] Bluetooth: hci3: command tx timeout
[  577.671258][T19904] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.761884][T19904] veth0_vlan: entered promiscuous mode
[  577.800037][T19904] veth1_vlan: entered promiscuous mode
[  577.868661][T19904] veth0_macvtap: entered promiscuous mode
[  577.876882][T20135] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5244'.
[  577.894610][T19904] veth1_macvtap: entered promiscuous mode
[  578.112425][T19904] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.121021][T19904] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.129595][ T5505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.139397][ T5505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.156841][ T5505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.166727][ T5505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.251321][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.262731][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.395276][T20156] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5250'.
[  578.399316][T20156] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5250'.
[  578.402496][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5250'.
[  578.441489][T14885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.445210][T14885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.684282][   T54] Bluetooth: hci3: command tx timeout
[  587.881464][T20242] netlink: 'syz.1.5254': attribute type 3 has an invalid length.
[  587.894276][T20242] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.5254'.
[  587.938640][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5260'.
[  587.942300][T20248] netem: unknown loss type 13
[  587.943936][T20248] netem: change failed
[  587.962339][T20251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5259'.
[  588.120906][T20257] netlink: 'syz.1.5263': attribute type 2 has an invalid length.
[  588.379073][   T54] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13
[  588.777702][T20293] syzkaller0: entered promiscuous mode
[  588.787811][T20293] syzkaller0: entered allmulticast mode
[  590.150254][T20325] proc: Bad value for 'gid'
[  590.226086][   T54] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  590.349763][T20342] netlink: 'syz.3.5299': attribute type 21 has an invalid length.
[  590.361255][T20342] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5299'.
[  590.797568][T20372] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  591.916111][T20407] openvswitch: netlink: Actions may not be safe on all matching packets
[  592.132751][T20411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5328'.
[  592.307064][T20440] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5337'.
[  592.720333][T20458] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  592.733350][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.717423][   T25] block nbd0: Possible stuck request ffff8881073b8000: control (read@0,4096B). Runtime 210 seconds
[  593.906586][T20493] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.5360'.
[  593.972459][T20498] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5363'.
[  593.977016][T20499] netlink: 'syz.2.5362': attribute type 21 has an invalid length.
[  593.991144][   T54] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  594.416395][T20541] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.5383'.
[  594.612254][T20553] netlink: 'syz.1.5389': attribute type 4 has an invalid length.
[  594.713029][T20561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5391'.
[  594.790777][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5392'.
[  594.831865][   T54] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  594.836076][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  594.840312][   T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[  594.840326][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  594.840332][   T54] Workqueue: hci3 hci_rx_work
[  594.840348][   T54] Call Trace:
[  594.840352][   T54]  <TASK>
[  594.840358][   T54]  dump_stack_lvl+0xe8/0x150
[  594.840371][   T54]  sysfs_create_dir_ns+0x271/0x2a0
[  594.840385][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  594.840398][   T54]  ? do_raw_spin_unlock+0x4d/0x210
[  594.840413][   T54]  kobject_add_internal+0x622/0xcd0
[  594.840428][   T54]  kobject_add+0x163/0x240
[  594.840440][   T54]  ? __pfx_kobject_add+0x10/0x10
[  594.840452][   T54]  ? get_device_parent+0x366/0x3a0
[  594.840468][   T54]  device_add+0x3fa/0xb90
[  594.840481][   T54]  hci_conn_add_sysfs+0xd5/0x210
[  594.840496][   T54]  le_conn_complete_evt+0xfef/0x1580
[  594.840514][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  594.840523][   T54]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  594.840536][   T54]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  594.840569][   T54]  ? skb_pull_data+0xf0/0x200
[  594.840582][   T54]  hci_le_conn_complete_evt+0x187/0x470
[  594.840597][   T54]  hci_event_packet+0x67a/0xf10
[  594.840611][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  594.840621][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  594.840633][   T54]  ? tag_mounts+0x1450/0x1600
[  594.840646][   T54]  ? hci_send_to_monitor+0xe2/0x590
[  594.840659][   T54]  hci_rx_work+0x3ee/0x1020
[  594.840673][   T54]  ? process_scheduled_works+0xa20/0x14e0
[  594.840681][   T54]  process_scheduled_works+0xa8e/0x14e0
[  594.840705][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  594.840718][   T54]  ? assign_work+0x3cf/0x5d0
[  594.840729][   T54]  worker_thread+0xa47/0xfb0
[  594.840753][   T54]  kthread+0x389/0x470
[  594.840764][   T54]  ? __pfx_worker_thread+0x10/0x10
[  594.840771][   T54]  ? __pfx_kthread+0x10/0x10
[  594.840782][   T54]  ret_from_fork+0x514/0xb70
[  594.840793][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  594.840801][   T54]  ? __switch_to+0xc89/0x1420
[  594.840814][   T54]  ? __pfx_kthread+0x10/0x10
[  594.840825][   T54]  ret_from_fork_asm+0x1a/0x30
[  594.840845][   T54]  </TASK>
[  594.840862][   T54] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  594.913520][   T54] Bluetooth: hci3: failed to register connection device
[  595.255693][T20591] siw: device registration error -23
[  595.295085][T20593] netlink: 'syz.1.5406': attribute type 1 has an invalid length.
[  595.297676][T20593] netlink: 'syz.1.5406': attribute type 1 has an invalid length.
[  595.431704][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5409'.
[  595.437841][T20601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5409'.
[  595.534821][T20614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5417'.
[  595.555632][T20614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.561705][T20614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.568897][T20614] bond0 (unregistering): Released all slaves
[  595.733743][T20627] syzkaller0: entered promiscuous mode
[  595.736040][T20627] syzkaller0: entered allmulticast mode
[  595.744680][T20627] syzkaller0: tun_chr_ioctl cmd 2147767520
[  595.747634][T20627] syzkaller0: tun_net_xmit 1280
[  595.773976][T20633] netlink: 'syz.3.5425': attribute type 3 has an invalid length.
[  595.876539][   T54] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  596.077998][   T54] Bluetooth: hci3: command 0x2016 tx timeout
[  596.315009][ T5006] Bluetooth: hci0: command 0x0406 tx timeout
[  597.642175][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5440'.
[  598.164365][T14597] Bluetooth: hci3: command 0x2016 tx timeout
[  599.248414][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5443'.
[  599.461121][T20682] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5448'.
[  599.716190][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5452'.
[  600.202145][T20715] netlink: 'syz.3.5462': attribute type 10 has an invalid length.
[  600.210552][T20715] team0: Port device dummy0 added
[  600.234432][T14597] Bluetooth: hci3: command 0x2016 tx timeout
[  600.251813][T20715] netlink: 'syz.3.5462': attribute type 10 has an invalid length.
[  600.293196][T20715] team0: Port device dummy0 removed
[  600.605360][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'.
[  600.629809][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5469'.
[  602.057904][T20787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5491'.
[  602.322054][   T54] Bluetooth: hci3: command 0x2016 tx timeout
[  603.051456][T20801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5497'.
[  603.172987][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'.
[  603.223141][T20817] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5504'.
[  603.353263][T20828] syzkaller0: entered promiscuous mode
[  603.355626][T20828] syzkaller0: entered allmulticast mode
[  603.407518][T20832] netlink: 'syz.3.5511': attribute type 5 has an invalid length.
[  603.410576][T20832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5511'.
[  603.480270][T20840] netlink: 'syz.2.5516': attribute type 29 has an invalid length.
[  603.489374][T20840] netlink: 'syz.2.5516': attribute type 29 has an invalid length.
[  603.504428][T20840] netlink: 'syz.2.5516': attribute type 29 has an invalid length.
[  606.677026][T20856] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode
[  606.680752][T20862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5526'.
[  606.730241][T20864] netlink: 'syz.3.5527': attribute type 12 has an invalid length.
[  606.732725][T20864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5527'.
[  606.856781][T20875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.922095][T20881] netlink: 'syz.3.5535': attribute type 2 has an invalid length.
[  607.123595][T20896] netlink: 'syz.2.5543': attribute type 21 has an invalid length.
[  607.127614][T20896] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5543'.
[  607.376466][T20917] set match dimension is over the limit!
[  607.519421][T20928] netlink: 544 bytes leftover after parsing attributes in process `syz.3.5556'.
[  607.551866][T20929] netlink: 'syz.2.5557': attribute type 29 has an invalid length.
[  607.566156][T20929] netlink: 'syz.2.5557': attribute type 29 has an invalid length.
[  607.651104][T20932] netlink: 'syz.2.5557': attribute type 29 has an invalid length.
[  607.749330][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'.
[  607.990965][T20949] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5564'.
[  608.009671][T20949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.091444][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5568'.
[  608.109744][T20956] netlink: 'syz.1.5569': attribute type 10 has an invalid length.
[  608.113056][T20953] nbd: must specify a device to reconfigure
[  608.203442][T20956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5569'.
[  608.209114][T20956] team0: entered promiscuous mode
[  608.210817][T20956] team_slave_0: entered promiscuous mode
[  608.220026][T20956] team_slave_1: entered promiscuous mode
[  608.226994][T20956] team0: entered allmulticast mode
[  608.229051][T20956] team_slave_0: entered allmulticast mode
[  608.231215][T20956] team_slave_1: entered allmulticast mode
[  608.256093][T20956] bridge0: port 4(team0) entered blocking state
[  608.261092][T20956] bridge0: port 4(team0) entered disabled state
[  608.488117][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5572'.
[  608.727792][T20971] netlink: 'syz.1.5575': attribute type 7 has an invalid length.
[  608.857563][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5577'.
[  609.642097][T20988] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  609.730582][T20993] syzkaller0: tun_chr_ioctl cmd 1074025680
[  609.742206][T20991] netlink: 'syz.1.5584': attribute type 2 has an invalid length.
[  610.098379][T21007] netlink: 'syz.2.5591': attribute type 11 has an invalid length.
[  615.044711][T21091] __nla_validate_parse: 4 callbacks suppressed
[  615.044722][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5626'.
[  615.142522][T21097] netlink: 'syz.1.5629': attribute type 29 has an invalid length.
[  615.148516][T21097] netlink: 'syz.1.5629': attribute type 29 has an invalid length.
[  615.151624][T21097] netlink: 'syz.1.5629': attribute type 29 has an invalid length.
[  615.528273][ T6400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.718748][ T6400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.732307][T14597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  615.744687][T14597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  615.749130][T14597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  615.758635][T14597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  615.768601][T14597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  615.858000][ T6400] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  615.865364][ T6400] bridge0: port 3(netdevsim1) entered disabled state
[  615.877111][ T6400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.891734][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5649'.
[  615.898218][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5649'.
[  615.969586][ T6400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.993774][T21143] openvswitch: netlink: Missing key (keys=800040, expected=2000)
[  616.247441][ T6400] bridge0: port 4(team0) entered disabled state
[  616.257856][ T6400] bridge_slave_1: left allmulticast mode
[  616.261446][ T6400] bridge_slave_1: left promiscuous mode
[  616.263499][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.273526][ T6400] bridge_slave_0: left allmulticast mode
[  616.276005][ T6400] bridge_slave_0: left promiscuous mode
[  616.278483][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.491427][ T6400] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  616.549824][ T6400] bond0 (unregistering): (slave 10): Releasing backup interface
[  616.554430][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.559832][ T6400] bond0 (unregistering): Released all slaves
[  616.568824][ T5361] 8021q: adding VLAN 0 to HW filter on device eth17
[  616.830802][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5664'.
[  616.969866][ T5361] 8021q: adding VLAN 0 to HW filter on device eth18
[  617.052237][ T6400] hsr_slave_0: left promiscuous mode
[  617.057205][ T6400] hsr_slave_1: left promiscuous mode
[  617.059922][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  617.062920][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  617.066894][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.069823][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  617.079576][ T6400] veth1_macvtap: left promiscuous mode
[  617.081768][ T6400] veth0_macvtap: left promiscuous mode
[  617.085528][ T6400] veth1_vlan: left promiscuous mode
[  617.087625][ T6400] veth0_vlan: left promiscuous mode
[  617.112174][T21208] netlink: 'syz.3.5670': attribute type 10 has an invalid length.
[  617.340569][ T6400] team_slave_1 (unregistering): left promiscuous mode
[  617.342774][ T6400] team_slave_1 (unregistering): left allmulticast mode
[  617.352807][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  617.361822][ T6400] team_slave_0 (unregistering): left promiscuous mode
[  617.364633][ T6400] team_slave_0 (unregistering): left allmulticast mode
[  617.367530][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  617.382810][   T34] smbdirect: ib_dev[syz1] removed
[  617.564134][ T5614] infiniband syz1: ib_query_port failed (-19)
[  617.564649][T21130] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.573975][T21130] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.586329][T21130] bridge_slave_0: entered allmulticast mode
[  617.599731][T21130] bridge_slave_0: entered promiscuous mode
[  617.620052][T21130] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.629487][T21130] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.632590][T21130] bridge_slave_1: entered allmulticast mode
[  617.653150][T21130] bridge_slave_1: entered promiscuous mode
[  617.722216][T21130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.731337][T21130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.801182][T21130] team0: Port device team_slave_0 added
[  617.809933][T21130] team0: Port device team_slave_1 added
[  617.837664][T14597] Bluetooth: hci0: command tx timeout
[  617.866090][T21130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.881076][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.904620][T21130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.920501][T21130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.927541][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.971322][T21130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.059853][T21130] hsr_slave_0: entered promiscuous mode
[  618.069061][T21130] hsr_slave_1: entered promiscuous mode
[  618.075643][T21130] debugfs: 'hsr0' already exists in 'hsr'
[  618.079497][T21130] Cannot create hsr debugfs directory
[  618.118829][ T5361] 8021q: adding VLAN 0 to HW filter on device eth19
[  618.152882][T21233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5679'.
[  618.501009][ T5361] 8021q: adding VLAN 0 to HW filter on device eth20
[  618.718953][T21255] netlink: 'syz.2.5685': attribute type 10 has an invalid length.
[  618.738615][T21255] macvlan1: entered promiscuous mode
[  618.746471][T21255] macvlan1: entered allmulticast mode
[  619.066089][T21130] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  619.078045][T21130] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  619.085427][T21130] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  619.107329][T21130] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  619.118747][T21130] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  619.126482][T21130] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  619.135067][T21130] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  619.135572][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5694'.
[  619.142711][T21130] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  619.280661][T21130] 8021q: adding VLAN 0 to HW filter on device bond0
[  619.299664][T21130] 8021q: adding VLAN 0 to HW filter on device team0
[  619.308207][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.310499][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  619.318890][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.321151][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  619.493807][T21306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5699'.
[  619.517256][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5699'.
[  619.614040][T21306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5699'.
[  619.786887][T21130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.914411][T14597] Bluetooth: hci0: command tx timeout
[  620.162548][T21130] veth0_vlan: entered promiscuous mode
[  620.189956][T21130] veth1_vlan: entered promiscuous mode
[  620.222250][T21130] veth0_macvtap: entered promiscuous mode
[  620.236459][T21130] veth1_macvtap: entered promiscuous mode
[  620.274945][T21130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  620.292824][T21130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  620.551236][ T5681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.614895][ T5681] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.621268][ T5681] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.635398][ T5681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.767499][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5702'.
[  620.770611][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.770653][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.810123][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.817336][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.398629][T21398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5713'.
[  621.994550][T14597] Bluetooth: hci0: command tx timeout
[  624.074474][T14597] Bluetooth: hci0: command tx timeout
[  624.245192][   T25] block nbd0: Possible stuck request ffff8881073b8000: control (read@0,4096B). Runtime 240 seconds
[  624.571541][T21421] netlink: 'syz.3.5720': attribute type 10 has an invalid length.
[  624.575116][T21421] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5720'.
[  624.687591][T21428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5724'.
[  625.082223][T21431] netlink: 'syz.6.5725': attribute type 29 has an invalid length.
[  625.106963][T21431] netlink: 'syz.6.5725': attribute type 29 has an invalid length.
[  625.118193][T21431] netlink: 'syz.6.5725': attribute type 29 has an invalid length.
[  625.681095][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5741'.
[  625.711728][T21470] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5743'.
[  627.505881][T21514] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5749'.
[  628.838428][T21527] netlink: 'syz.2.5754': attribute type 21 has an invalid length.
[  628.853161][T21527] netlink: 'syz.2.5754': attribute type 7 has an invalid length.
[  629.951260][T21549] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5764'.
[  630.114880][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  630.117774][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  630.300902][T21560] netlink: 'syz.2.5769': attribute type 1 has an invalid length.
[  630.304009][T21560] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5769'.
[  630.471637][T21564] netlink: 'syz.3.5771': attribute type 21 has an invalid length.
[  630.475850][T21564] netlink: 'syz.3.5771': attribute type 20 has an invalid length.
[  632.510641][T21593] openvswitch: netlink: IP tunnel dst address not specified
[  632.895709][T21532] infiniband syg0: set active
[  632.897825][T21532] infiniband syg0: added team0
[  633.594094][T21532] smbdirect: ib_dev[syg0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  633.602825][T21532] smbdirect: ib_dev[syg0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  633.620773][T21532] smbdirect: ib_dev[syg0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  634.520691][T21532] RDS/IB: syg0: added
[  634.522306][T21532] smc: adding ib device syg0 with port count 1
[  634.525260][T21532] smc:    ib device syg0 port 1 has no pnetid
[  635.624687][T21602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5786'.
[  635.698187][T21602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5786'.
[  635.909611][T21617] netlink: 'syz.2.5790': attribute type 10 has an invalid length.
[  635.916646][T21617] team0: Cannot enslave team device to itself
[  635.972787][T21623] netlink: 'syz.3.5792': attribute type 4 has an invalid length.
[  636.285188][T21640] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.5799'.
[  636.329092][T21636] netlink: 'syz.2.5797': attribute type 11 has an invalid length.
[  636.550536][T21648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5801'.
[  637.658273][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5816'.
[  638.972761][T21707] netlink: 'syz.3.5824': attribute type 16 has an invalid length.
[  638.992049][T21707] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5824'.
[  639.383796][T21725] netlink: 'syz.6.5831': attribute type 10 has an invalid length.
[  639.439965][T21744] nft_compat: unsupported protocol 5
[  639.664080][T21725] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  639.905778][T21772] netlink: 'syz.2.5852': attribute type 5 has an invalid length.
[  640.088986][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5858'.
[  640.097028][T21792] openvswitch: netlink: Flow key attr not present in new flow.
[  640.967882][T21824] netlink: 'syz.3.5863': attribute type 6 has an invalid length.
[  641.195790][T21843] netlink: 'syz.6.5872': attribute type 3 has an invalid length.
[  641.467954][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5880'.
[  641.909004][T21882] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5890'.
[  641.938508][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5890'.
[  642.209554][T14597] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6
[  642.539144][T21910] netlink: 'syz.3.5902': attribute type 10 has an invalid length.
[  642.543921][T21910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5902'.
[  642.994101][T21930] netlink: 'syz.2.5911': attribute type 4 has an invalid length.
[  642.997634][T21930] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5911'.
[  645.869761][T21935] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5912'.
[  645.959743][T21944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5917'.
[  646.042442][T21954] netlink: 182 bytes leftover after parsing attributes in process `syz.3.5921'.
[  646.142603][T21967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5927'.
[  646.483731][T14597] Bluetooth: hci0: unknown advertising packet type: 0x8a
[  646.535884][T21990] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5939'.
[  647.208468][T22019] netlink: 'syz.3.5952': attribute type 1 has an invalid length.
[  647.211049][T22019] netlink: 'syz.3.5952': attribute type 3 has an invalid length.
[  647.213568][T22019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5952'.
[  647.625722][T22027] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.628262][T22027] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.637903][T22027] bridge0: entered allmulticast mode
[  647.752385][T22027] bridge_slave_1: left allmulticast mode
[  647.756578][T22027] bridge_slave_1: left promiscuous mode
[  647.783291][T22027] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.799342][T22036] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5956'.
[  648.561661][T22027] bridge_slave_0: left allmulticast mode
[  648.576711][T22027] bridge_slave_0: left promiscuous mode
[  648.589278][T22027] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.836000][T22055] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5967'.
[  650.110322][T22074] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5975'.
[  650.360065][T22083] nftables ruleset with unbound set
[  650.708195][T22085] netlink: 'syz.6.5980': attribute type 33 has an invalid length.
[  650.710750][T22085] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5980'.
[  650.790298][T22091] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5983'.
[  652.402904][T22158] netlink: 'syz.2.6013': attribute type 10 has an invalid length.
[  652.507322][T22158] batman_adv: batadv0: Adding interface: dummy0
[  652.510349][T22158] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.524165][T22158] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  652.795366][T22187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6026'.
[  652.800075][T22189] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6027'.
[  653.786611][T22245] netlink: 'syz.6.6051': attribute type 40 has an invalid length.
[  654.320470][   T25] block nbd0: Possible stuck request ffff8881073b8000: control (read@0,4096B). Runtime 270 seconds
[  654.706019][T22270] netem: change failed
[  655.061590][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6067'.
[  655.628676][T22284] netlink: 'syz.2.6068': attribute type 13 has an invalid length.
[  655.631895][T22284] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.6068'.
[  656.603900][T22320] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  656.606698][T22320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  656.768696][T22338] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6095'.
[  657.889207][T22366] tmpfs: Bad value for 'uid'
[  657.894357][T22366] tmpfs: Bad value for 'uid'
[  657.932581][T22368] netlink: 'syz.2.6108': attribute type 21 has an invalid length.
[  658.130568][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'.
[  658.195503][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'.
[  658.368786][T22409] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.6128'.
[  658.374642][T22409] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.6128'.
[  658.523757][T22422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6133'.
[  662.118495][T22499] netlink: 'syz.6.6155': attribute type 10 has an invalid length.
[  662.121789][T22499] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6155'.
[  662.580539][T22527] netlink: 'syz.3.6169': attribute type 1 has an invalid length.
[  662.589008][T22527] netlink: 'syz.3.6169': attribute type 2 has an invalid length.
[  662.666795][T22527] netlink: 'syz.3.6169': attribute type 4 has an invalid length.
[  662.675280][T22527] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6169'.
[  663.139562][T22550] netlink: 762 bytes leftover after parsing attributes in process `syz.2.6179'.
[  663.511704][T22535] syz.6.6173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  663.539485][T22535] CPU: 0 UID: 0 PID: 22535 Comm: syz.6.6173 Not tainted syzkaller #0 PREEMPT(full) 
[  663.539507][T22535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  663.539519][T22535] Call Trace:
[  663.539527][T22535]  <TASK>
[  663.539534][T22535]  dump_stack_lvl+0xe8/0x150
[  663.539570][T22535]  warn_alloc+0x249/0x340
[  663.539620][T22535]  ? ktime_get+0x45/0x220
[  663.539642][T22535]  ? lock_acquire+0x106/0x350
[  663.539663][T22535]  ? __pfx_warn_alloc+0x10/0x10
[  663.539692][T22535]  ? perf_trace_lock+0xff/0x410
[  663.539724][T22535]  __vmalloc_node_range_noprof+0x12c/0x1730
[  663.539774][T22535]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  663.539804][T22535]  ? __pfx_clockevents_program_event+0x10/0x10
[  663.539828][T22535]  ? irqentry_exit+0x8a3/0x8e0
[  663.539888][T22535]  ? irqentry_exit+0x218/0x8e0
[  663.539913][T22535]  ? lockdep_hardirqs_on+0x7a/0x110
[  663.539938][T22535]  ? irqentry_exit+0x218/0x8e0
[  663.539956][T22535]  ? trace_irq_disable+0x3b/0x140
[  663.539989][T22535]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  663.540078][T22535]  vmalloc_user_noprof+0xad/0xe0
[  663.540107][T22535]  ? xskq_create+0xbf/0x170
[  663.540138][T22535]  xskq_create+0xbf/0x170
[  663.540175][T22535]  xsk_init_queue+0x8a/0xe0
[  663.540212][T22535]  xsk_setsockopt+0x5e0/0x960
[  663.540235][T22535]  ? __fget_files+0x2a/0x420
[  663.540265][T22535]  ? __pfx_xsk_setsockopt+0x10/0x10
[  663.540291][T22535]  ? __pfx_aa_sk_perm+0x10/0x10
[  663.540330][T22535]  ? __fget_files+0x2a/0x420
[  663.540349][T22535]  ? aa_sock_opt_perm+0xff/0x1a0
[  663.540391][T22535]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  663.540413][T22535]  ? __pfx_xsk_setsockopt+0x10/0x10
[  663.540445][T22535]  do_sock_setsockopt+0x17c/0x1b0
[  663.540490][T22535]  __x64_sys_setsockopt+0x13d/0x1b0
[  663.540525][T22535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.540551][T22535]  do_syscall_64+0x174/0x580
[  663.540603][T22535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.540620][T22535] RIP: 0033:0x7f568d59ce59
[  663.540643][T22535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.540656][T22535] RSP: 002b:00007f568e36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  663.540673][T22535] RAX: ffffffffffffffda RBX: 00007f568d815fa0 RCX: 00007f568d59ce59
[  663.540684][T22535] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f
[  663.540694][T22535] RBP: 00007f568d632e6f R08: 0000000000000004 R09: 0000000000000000
[  663.540703][T22535] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  663.540712][T22535] R13: 00007f568d816038 R14: 00007f568d815fa0 R15: 00007fff3e994108
[  663.540815][T22535]  </TASK>
[  663.725705][T22565] netlink: 'syz.6.6173': attribute type 3 has an invalid length.
[  663.797990][T22535] Mem-Info:
[  663.813458][T22535] active_anon:26984 inactive_anon:0 isolated_anon:0
[  663.813458][T22535]  active_file:20459 inactive_file:38626 isolated_file:0
[  663.813458][T22535]  unevictable:1768 dirty:151 writeback:0
[  663.813458][T22535]  slab_reclaimable:6452 slab_unreclaimable:93791
[  663.813458][T22535]  mapped:18210 shmem:2373 pagetables:1879
[  663.813458][T22535]  sec_pagetables:0 bounce:0
[  663.813458][T22535]  kernel_misc_reclaimable:0
[  663.813458][T22535]  free:1093376 free_pcp:19051 free_cma:0
[  663.893027][T22535] Node 0 active_anon:30592kB inactive_anon:0kB active_file:31956kB inactive_file:18676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12064kB dirty:268kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4888kB pagetables:3824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  663.953324][T22567] netlink: 'syz.3.6182': attribute type 39 has an invalid length.
[  663.974192][T22535] Node 1 active_anon:77344kB inactive_anon:0kB active_file:49880kB inactive_file:135828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60976kB dirty:336kB writeback:0kB shmem:4712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9640kB pagetables:3692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  664.055465][T22535] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  664.070350][T22535] lowmem_reserve[]: 0 1587 2118 2118 2118
[  664.077040][T22535] Node 0 DMA32 free:1580896kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:464kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625936kB mlocked:0kB bounce:0kB free_pcp:23540kB local_pcp:13488kB free_cma:0kB
[  664.087977][T22535] lowmem_reserve[]: 0 0 530 530 530
[  664.089886][T22535] Node 0 Normal free:111928kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30180kB inactive_anon:0kB active_file:31956kB inactive_file:18660kB unevictable:3536kB writepending:268kB zspages:0kB present:1572868kB managed:543176kB mlocked:0kB bounce:0kB free_pcp:604kB local_pcp:496kB free_cma:0kB
[  664.102677][T22535] lowmem_reserve[]: 0 0 0 0 0
[  664.106968][T22535] Node 1 Normal free:2665208kB boost:0kB min:56340kB low:70424kB high:84508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77244kB inactive_anon:0kB active_file:49880kB inactive_file:135828kB unevictable:3536kB writepending:336kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:52784kB local_pcp:28424kB free_cma:0kB
[  664.121919][T22535] lowmem_reserve[]: 0 0 0 0 0
[  664.129292][T22535] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  664.134882][T22535] Node 0 DMA32: 2*4kB (U) 49*8kB (UM) 39*16kB (UM) 65*32kB (UM) 67*64kB (UM) 59*128kB (UM) 55*256kB (UM) 43*512kB (UM) 36*1024kB (UM) 25*2048kB (UM) 352*4096kB (UM) = 1580896kB
[  664.141490][T22535] Node 0 Normal: 1069*4kB (UME) 1141*8kB (UME) 703*16kB (UME) 807*32kB (UME) 428*64kB (UME) 143*128kB (UME) 40*256kB (UME) 7*512kB (UE) 1*1024kB (E) 0*2048kB 0*4096kB = 111020kB
[  664.148165][T22535] Node 1 Normal: 1378*4kB (UE) 774*8kB (UME) 191*16kB (UME) 183*32kB (UME) 226*64kB (UME) 330*128kB (UME) 153*256kB (UME) 74*512kB (UME) 52*1024kB (UME) 38*2048kB (UME) 581*4096kB (UM) = 2665224kB
[  664.154452][T22535] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  664.157299][T22535] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  664.160208][T22535] 61458 total pagecache pages
[  664.161621][T22535] 0 pages in swap cache
[  664.162871][T22535] Free swap  = 124996kB
[  664.164119][T22535] Total swap = 124996kB
[  664.165484][T22535] 1834877 pages RAM
[  664.166733][T22535] 0 pages HighMem/MovableOnly
[  664.168372][T22535] 390088 pages reserved
[  664.169947][T22535] 0 pages cma reserved
[  664.183482][T22559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6182'.
[  664.194058][T22567] hsr_slave_0: left promiscuous mode
[  664.198252][T22567] hsr_slave_1: left promiscuous mode
[  664.450040][T22585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6192'.
[  664.487074][T22588] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6193'.
[  664.729968][T22601] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6199'.
[  664.769082][T22603] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.6198'.
[  664.780296][T22603] netlink: 'syz.6.6198': attribute type 1 has an invalid length.
[  664.783850][T22603] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.6198'.
[  664.826342][T22603] nbd: nbd0 already in use
[  664.936978][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'.
[  664.941224][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'.
[  665.388523][T22618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.846298][T22634] netlink: 376 bytes leftover after parsing attributes in process `syz.6.6214'.
[  666.017764][T22640] netlink: 'syz.6.6216': attribute type 12 has an invalid length.
[  666.143871][T22644] tmpfs: Bad value for 'uid'
[  666.146808][T22644] tmpfs: Bad value for 'uid'
[  666.232819][ T5505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.349769][ T5505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.405767][T22651] netlink: 'syz.6.6224': attribute type 21 has an invalid length.
[  666.441179][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  666.451567][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  666.459231][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  666.463399][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  666.469222][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  666.504843][ T5505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.621582][ T5505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.247135][T22652] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.253074][T22652] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.258992][T22652] bridge_slave_0: entered allmulticast mode
[  667.265879][T22652] bridge_slave_0: entered promiscuous mode
[  667.272042][T22652] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.285007][T22652] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.288229][T22652] bridge_slave_1: entered allmulticast mode
[  667.292514][T22652] bridge_slave_1: entered promiscuous mode
[  667.338204][T22652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.352392][T22652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.395337][T22652] team0: Port device team_slave_0 added
[  667.404654][T22652] team0: Port device team_slave_1 added
[  667.448291][T22652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.457202][T22652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.475472][T22652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.489252][T22652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.497243][T22652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.512555][T22652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.605304][T22652] hsr_slave_0: entered promiscuous mode
[  667.607685][T22652] hsr_slave_1: entered promiscuous mode
[  667.609935][T22652] debugfs: 'hsr0' already exists in 'hsr'
[  667.612000][T22652] Cannot create hsr debugfs directory
[  667.770772][T22682] openvswitch: netlink: IP tunnel dst address not specified
[  667.961989][ T5505] bridge_slave_1: left allmulticast mode
[  667.965013][ T5505] bridge_slave_1: left promiscuous mode
[  667.967134][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.971765][ T5505] bridge_slave_0: left allmulticast mode
[  667.973867][ T5505] bridge_slave_0: left promiscuous mode
[  667.978522][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.212592][ T5505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.216983][ T5505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.220552][ T5505] bond0 (unregistering): Released all slaves
[  668.554547][   T54] Bluetooth: hci1: command tx timeout
[  668.639650][ T5361] 8021q: adding VLAN 0 to HW filter on device eth21
[  669.000294][ T5361] 8021q: adding VLAN 0 to HW filter on device eth22
[  669.547140][ T5505] hsr_slave_0: left promiscuous mode
[  669.549926][ T5505] hsr_slave_1: left promiscuous mode
[  669.551915][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.554725][ T5505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.557363][T22711] __nla_validate_parse: 7 callbacks suppressed
[  669.557372][T22711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6236'.
[  669.562478][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.566021][ T5505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.569431][ T5505] batman_adv: batadv0: Removing interface: dummy0
[  669.578008][ T5505] veth1_macvtap: left promiscuous mode
[  669.580565][ T5505] veth0_macvtap: left promiscuous mode
[  669.583873][ T5505] veth1_vlan: left promiscuous mode
[  669.593387][ T5505] veth0_vlan: left promiscuous mode
[  669.643376][T22713] netlink: get zone limit has 4 unknown bytes
[  670.021710][ T5505] team0 (unregistering): Port device team_slave_1 removed
[  670.072117][ T5505] team0 (unregistering): Port device team_slave_0 removed
[  670.307585][ T5361] 8021q: adding VLAN 0 to HW filter on device eth27
[  670.617259][ T5361] 8021q: adding VLAN 0 to HW filter on device eth28
[  670.634343][   T54] Bluetooth: hci1: command tx timeout
[  670.971006][T22652] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  670.982155][T22652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  670.989918][T22652] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  671.005254][T22652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  671.011451][T22652] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  671.038123][T22652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  671.040992][T22652] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  671.058391][T22652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  671.146512][T22652] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.171053][T22652] 8021q: adding VLAN 0 to HW filter on device team0
[  671.176007][T22761] sock: sock_timestamping_bind_phc: sock not bind to device
[  671.185991][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.188542][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.214962][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.217137][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.668284][T22652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.960362][T22652] veth0_vlan: entered promiscuous mode
[  671.979971][T22652] veth1_vlan: entered promiscuous mode
[  672.011890][T22652] veth0_macvtap: entered promiscuous mode
[  672.026670][T22652] veth1_macvtap: entered promiscuous mode
[  672.087201][T22652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.100243][T22652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  672.124158][ T5681] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.135717][ T5681] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.146953][ T5681] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.155677][ T5681] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.312517][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.318630][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.376548][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.385943][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.410866][T22829] netlink: 'syz.6.6261': attribute type 4 has an invalid length.
[  672.419470][T22829] IPv6: NLM_F_CREATE should be specified when creating new route
[  672.714504][   T54] Bluetooth: hci1: command tx timeout
[  672.820550][T22852] netlink: 'syz.8.6265': attribute type 5 has an invalid length.
[  673.592482][T22871] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6270'.
[  674.279327][T22901] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6277'.
[  674.319866][T22901] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  674.583423][T22907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6280'.
[  674.794782][   T54] Bluetooth: hci1: command tx timeout
[  675.608187][T22941] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6295'.
[  676.784147][T22965] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6303'.
[  676.808441][T22965] syzkaller0: tun_chr_ioctl cmd 1074025684
[  676.821386][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6303'.
[  679.457139][ T5681] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.622026][T14597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  679.628202][ T5681] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.634765][T14597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  679.639999][T14597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  679.647194][T14597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  679.652340][T14597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  679.818917][ T5681] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.908024][ T5681] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.458049][ T5361] 8021q: adding VLAN 0 to HW filter on device eth29
[  680.559641][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  680.570845][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  680.574313][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  680.583191][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  680.588174][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  680.621583][T22998] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.631716][T22998] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.637806][T22998] bridge_slave_0: entered allmulticast mode
[  680.648257][T22998] bridge_slave_0: entered promiscuous mode
[  680.662176][T22998] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.676842][T22998] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.682389][T22998] bridge_slave_1: entered allmulticast mode
[  680.697810][T22998] bridge_slave_1: entered promiscuous mode
[  680.768297][ T5361] 8021q: adding VLAN 0 to HW filter on device eth30
[  680.781038][T22998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.796522][T22998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.827520][T22998] team0: Port device team_slave_0 added
[  680.835096][T22998] team0: Port device team_slave_1 added
[  680.865784][T22998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.867920][T22998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.876328][T22998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.882697][T22998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.888207][T22998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.904716][T22998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.999077][ T5681] bridge_slave_1: left allmulticast mode
[  681.000932][ T5681] bridge_slave_1: left promiscuous mode
[  681.007400][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.015233][ T5681] bridge_slave_0: left allmulticast mode
[  681.017788][ T5681] bridge_slave_0: left promiscuous mode
[  681.020124][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.240621][T23049] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6324'.
[  681.255272][T23049] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6324'.
[  681.310908][ T5681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  681.317187][ T5681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.322166][ T5681] bond0 (unregistering): Released all slaves
[  681.426937][T22998] hsr_slave_0: entered promiscuous mode
[  681.430100][T22998] hsr_slave_1: entered promiscuous mode
[  681.676341][   T54] Bluetooth: hci1: command tx timeout
[  681.696632][ T5361] 8021q: adding VLAN 0 to HW filter on device eth31
[  682.003393][T23070] netlink: 'syz.6.6329': attribute type 27 has an invalid length.
[  682.012106][T23070] netlink: 'syz.6.6329': attribute type 4 has an invalid length.
[  682.021509][T23070] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6329'.
[  682.189676][ T5681] hsr_slave_0: left promiscuous mode
[  682.197213][ T5681] hsr_slave_1: left promiscuous mode
[  682.201620][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.214391][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.218120][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  682.220945][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.237132][ T5681] veth1_macvtap: left promiscuous mode
[  682.239360][ T5681] veth0_macvtap: left promiscuous mode
[  682.241595][ T5681] veth1_vlan: left promiscuous mode
[  682.243658][ T5681] veth0_vlan: left promiscuous mode
[  682.501054][ T5681] team0 (unregistering): Port device team_slave_1 removed
[  682.535483][ T5681] team0 (unregistering): Port device team_slave_0 removed
[  682.634540][   T54] Bluetooth: hci2: command tx timeout
[  682.794300][T23086] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6331'.
[  682.811574][T23086] netlink: 'syz.6.6331': attribute type 8 has an invalid length.
[  683.087568][T23026] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.090383][T23026] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.093525][T23026] bridge_slave_0: entered allmulticast mode
[  683.101102][T23026] bridge_slave_0: entered promiscuous mode
[  683.132381][T23026] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.138903][T23026] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.145577][T23026] bridge_slave_1: entered allmulticast mode
[  683.149665][T23026] bridge_slave_1: entered promiscuous mode
[  683.186003][T23026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.198911][T23026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  683.307875][T23026] team0: Port device team_slave_0 added
[  683.311163][T23026] team0: Port device team_slave_1 added
[  683.356534][T22998] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  683.361793][T22998] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  683.364963][T22998] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  683.373884][T22998] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  683.378601][T23026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  683.383214][T23026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  683.402011][T23026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  683.411253][T23026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  683.413592][T23026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  683.421456][T23026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.425726][T22998] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  683.436718][T22998] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  683.444540][T22998] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  683.449687][T22998] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  683.505897][T23026] hsr_slave_0: entered promiscuous mode
[  683.508886][T23026] hsr_slave_1: entered promiscuous mode
[  683.511741][T23026] debugfs: 'hsr0' already exists in 'hsr'
[  683.536995][T23026] Cannot create hsr debugfs directory
[  683.652857][ T5681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.756374][   T54] Bluetooth: hci1: command tx timeout
[  683.801226][ T5681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.894915][T23140] netlink: 'syz.6.6341': attribute type 46 has an invalid length.
[  684.132931][ T5681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.229770][T22998] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.309924][ T5681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.412452][   T25] block nbd0: Possible stuck request ffff8881073b8000: control (read@0,4096B). Runtime 300 seconds
[  684.457360][T22998] 8021q: adding VLAN 0 to HW filter on device team0
[  684.482941][T14885] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.485860][T14885] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.599047][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.601953][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.647606][T23179] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6343'.
[  684.659944][T23179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  684.714720][   T54] Bluetooth: hci2: command tx timeout
[  684.730175][ T5681] bridge_slave_1: left allmulticast mode
[  684.735053][ T5681] bridge_slave_1: left promiscuous mode
[  684.736953][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.743909][ T5681] bridge_slave_0: left allmulticast mode
[  684.754578][ T5681] bridge_slave_0: left promiscuous mode
[  684.756481][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.411358][T22998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.572020][   T54] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  685.583436][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  685.594866][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.618909][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  685.623392][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  685.640745][ T5681] veth1_vlan: left promiscuous mode
[  685.643165][ T5681] veth0_vlan: left promiscuous mode
[  685.826164][ T5681] team0 (unregistering): Port device team_slave_1 removed
[  685.837213][   T54] Bluetooth: hci1: command tx timeout
[  685.851173][ T5681] team0 (unregistering): Port device team_slave_0 removed
[  686.258268][T22998] veth0_vlan: entered promiscuous mode
[  686.289483][T22998] veth1_vlan: entered promiscuous mode
[  686.369865][T22998] veth0_macvtap: entered promiscuous mode
[  686.391848][T22998] veth1_macvtap: entered promiscuous mode
[  686.420593][T23242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6351'.
[  686.436472][T22998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.485531][T22998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.504510][ T6400] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.508705][ T6400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.521290][ T6400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.527823][ T6400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.714762][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.722728][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.790018][T22963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.795061][   T54] Bluetooth: hci2: command tx timeout
[  686.795950][T22963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.870188][   T54] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  687.060078][T23026] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  687.076621][T23026] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  687.083343][T23026] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  687.094717][T23026] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  687.102590][T23026] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  687.136706][T23026] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  687.162897][T23026] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  687.191471][T23026] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  687.351168][T23280] netlink: 'syz.6.6359': attribute type 1 has an invalid length.
[  687.366347][T23280] netlink: 157116 bytes leftover after parsing attributes in process `syz.6.6359'.
[  687.399026][T23026] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.426638][T23026] 8021q: adding VLAN 0 to HW filter on device team0
[  687.458359][T22963] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.461169][T22963] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.498066][T22963] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.501028][T22963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  687.805727][T23308] netlink: 'syz.6.6366': attribute type 13 has an invalid length.
[  687.841753][T23308] gretap0: refused to change device tx_queue_len
[  687.848592][T23308] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  687.918558][   T54] Bluetooth: hci1: command tx timeout
[  688.003400][T23026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.359573][T23026] veth0_vlan: entered promiscuous mode
[  688.367337][T23026] veth1_vlan: entered promiscuous mode
[  688.397838][T23026] veth0_macvtap: entered promiscuous mode
[  688.402835][T23026] veth1_macvtap: entered promiscuous mode
[  688.429347][T23026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  688.445586][T23026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  688.453943][ T6400] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  688.467556][ T6400] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  688.473368][ T6400] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  688.495981][ T6400] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  688.565186][T23342] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6369'.
[  688.673032][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.682147][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.724359][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.728069][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.792015][T23353] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6320'.
[  688.804145][T23353] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6320'.
[  688.820735][ T5361] 8021q: adding VLAN 0 to HW filter on device eth2
[  688.921974][   T54] Bluetooth: hci2: command tx timeout
[  688.929669][T23360] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6375'.
[  688.965914][   T54] Bluetooth: hci0: command 0x2016 tx timeout
[  689.598473][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  689.602892][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  689.809265][T23395] netlink: 292 bytes leftover after parsing attributes in process `syz.8.6381'.
[  689.811172][ T5361] 8021q: adding VLAN 0 to HW filter on device eth1
[  689.840270][   T54] Bluetooth: hci2: ISO packet too small
[  689.889508][T23397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6383'.
[  690.115506][ T5361] 8021q: adding VLAN 0 to HW filter on device eth3
[  690.361075][ T5361] 8021q: adding VLAN 0 to HW filter on device eth4
[  690.387423][T23437] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6393'.
[  690.415660][T23437] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6393'.
[  690.918732][T23480] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  690.922420][T23480] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  691.034361][   T54] Bluetooth: hci0: command 0x2016 tx timeout
[  691.174175][T14597] Bluetooth: hci0: hardware error 0x00
[  691.441859][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  691.445420][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  691.601642][T23500] netlink: 'syz.9.6420': attribute type 1 has an invalid length.
[  691.608167][T23500] netlink: 'syz.9.6420': attribute type 3 has an invalid length.
[  691.611758][T23500] __nla_validate_parse: 3 callbacks suppressed
[  691.611771][T23500] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6420'.
[  691.780265][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[  691.875470][T23513] netlink: 'syz.6.6426': attribute type 2 has an invalid length.
[  692.311491][T23539] netlink: 'syz.6.6439': attribute type 21 has an invalid length.
[  692.320049][T23539] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6439'.
[  692.326370][T23539] netlink: 'syz.6.6439': attribute type 4 has an invalid length.
[  692.331089][T23539] netlink: 'syz.6.6439': attribute type 3 has an invalid length.
[  692.334761][T23539] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6439'.
[  692.471964][T23549] netlink: 'syz.9.6441': attribute type 16 has an invalid length.
[  692.537563][T23549] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.540285][T23549] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.598973][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  692.605962][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  692.723228][ T6400] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  692.732939][ T6400] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  692.747807][ T6400] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  692.759336][ T6400] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.282155][T14597] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  694.382212][T23601] netlink: 'syz.6.6466': attribute type 10 has an invalid length.
[  694.401168][T23601] 8021q: adding VLAN 0 to HW filter on device bond0
[  694.411552][T23601] team0: Port device bond0 added
[  695.515054][T23635] netlink: 'syz.9.6481': attribute type 49 has an invalid length.
[  695.587813][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6484'.
[  696.601649][T23635] ip6gretap0: entered promiscuous mode
[  696.603995][T23635] ip6gretap0: entered allmulticast mode
[  696.771335][T23659] xt_l2tp: missing protocol rule (udp|l2tpip)
[  697.273910][T23692] netem: change failed
[  697.328641][T23695] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6501'.
[  697.332450][T23695] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6501'.
[  697.338613][T23695] netlink: 'syz.9.6501': attribute type 6 has an invalid length.
[  697.342589][T23695] netlink: 'syz.9.6501': attribute type 5 has an invalid length.
[  697.348232][T23695] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6501'.
[  697.431119][T23700] netlink: 'syz.8.6504': attribute type 21 has an invalid length.
[  697.797295][T23710] netlink: 56537 bytes leftover after parsing attributes in process `syz.8.6507'.
[  698.193481][T23733] netlink: 'syz.8.6518': attribute type 3 has an invalid length.
[  698.911563][T23779] netlink: 'syz.6.6534': attribute type 19 has an invalid length.
[  698.924745][T23779] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6534'.
[  699.230923][T23791] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6537'.
[  701.317652][T23815] netlink: 'syz.9.6539': attribute type 2 has an invalid length.
[  701.321183][T23815] netlink: 'syz.9.6539': attribute type 1 has an invalid length.
[  701.325507][T23815] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.6539'.
[  701.540323][T23825] netlink: 'syz.6.6545': attribute type 3 has an invalid length.
[  701.567784][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6545'.
[  701.770200][T23844] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6551'.
[  702.008211][T23858] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6557'.
[  702.260741][T23877] netlink: 'syz.6.6564': attribute type 2 has an invalid length.
[  702.263078][T23877] netlink: 'syz.6.6564': attribute type 5 has an invalid length.
[  702.275003][T23877] netlink: 'syz.6.6564': attribute type 2 has an invalid length.
[  702.277988][T23877] netlink: 'syz.6.6564': attribute type 5 has an invalid length.
[  703.111106][T23897] __nla_validate_parse: 1 callbacks suppressed
[  703.111324][T23897] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6568'.
[  703.140844][T14597] Bluetooth: hci2: unexpected event 0x3c length: 151 > 7
[  703.357566][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6580'.
[  703.425165][T23921] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6580'.
[  703.494048][T23938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6587'.
[  703.676395][T23956] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6594'.
[  703.679779][T23956] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6594'.
[  703.949275][T23976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  707.018662][T24020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6611'.
[  707.903252][T24047] netlink: 'syz.9.6619': attribute type 1 has an invalid length.
[  709.206995][T24093] netlink: 'syz.8.6637': attribute type 16 has an invalid length.
[  709.210431][T24093] netlink: 'syz.8.6637': attribute type 3 has an invalid length.
[  709.213064][T24093] netlink: 'syz.8.6637': attribute type 1 has an invalid length.
[  709.216953][T24093] netlink: 112 bytes leftover after parsing attributes in process `syz.8.6637'.
[  709.449035][T24102] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6641'.
[  712.347840][T24106] proc: Unknown parameter 'fowner<00000000000000000000'
[  712.559508][   T35] INFO: task udevd:13221 blocked in I/O wait for more than 143 seconds.
[  712.565222][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  712.571941][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  712.582236][   T35] task:udevd           state:D stack:22264 pid:13221 tgid:13221 ppid:5065   task_flags:0x400140 flags:0x00080802
[  712.593658][T24123] netlink: 'syz.6.6646': attribute type 10 has an invalid length.
[  712.595140][   T35] Call Trace:
[  712.601734][   T35]  <TASK>
[  712.606904][   T35]  __schedule+0x1840/0x57a0
[  712.612895][   T35]  ? __lock_acquire+0x683/0x2cd0
[  712.618545][   T35]  ? __lock_acquire+0x683/0x2cd0
[  712.623419][   T35]  ? __pfx___schedule+0x10/0x10
[  712.633845][   T35]  ? schedule+0x90/0x360
[  712.641895][   T35]  schedule+0x164/0x360
[  712.643254][   T35]  io_schedule+0x7f/0xd0
[  712.650644][   T35]  folio_wait_bit_common+0x836/0xbc0
[  712.656040][   T35]  ? filemap_get_entry+0xcd/0x3f0
[  712.667394][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  712.670939][   T35]  ? filemap_read_folio+0x234/0x3a0
[  712.674441][   T35]  ? __pfx_wake_page_function+0x10/0x10
[  712.680835][   T35]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  712.691109][   T35]  do_read_cache_folio+0x1ac/0x590
[  712.694746][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[  712.699879][   T35]  read_part_sector+0xb6/0x2b0
[  712.702624][   T35]  adfspart_check_POWERTEC+0x9a/0x7a0
[  712.706203][   T35]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  712.711878][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  712.715889][   T35]  ? alloc_pages_mpol+0x24a/0x380
[  712.721633][   T35]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  712.732328][   T35]  bdev_disk_changed+0x82b/0x1780
[  712.737273][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[  712.741578][   T35]  blkdev_get_whole+0x372/0x510
[  712.745443][   T35]  bdev_open+0x324/0xd70
[  712.748970][   T35]  blkdev_open+0x461/0x600
[  712.752589][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  712.756405][   T35]  do_dentry_open+0x816/0x1380
[  712.758550][   T35]  vfs_open+0x3b/0x340
[  712.760423][   T35]  ? path_openat+0x2e23/0x3890
[  712.762607][   T35]  path_openat+0x2e3b/0x3890
[  712.765619][   T35]  ? arch_stack_walk+0xfb/0x150
[  712.767760][   T35]  ? do_getname+0x2e/0x250
[  712.769809][   T35]  ? stack_depot_save_flags+0x33/0x800
[  712.772156][   T35]  ? __pfx_path_openat+0x10/0x10
[  712.774376][   T35]  ? __x64_sys_openat+0x138/0x170
[  712.776511][   T35]  ? __lock_acquire+0x683/0x2cd0
[  712.778652][   T35]  do_file_open+0x23e/0x4a0
[  712.780720][   T35]  ? __pfx_do_file_open+0x10/0x10
[  712.782852][   T35]  ? alloc_fd+0x62e/0x6a0
[  712.787695][   T35]  do_sys_openat2+0x113/0x200
[  712.791460][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  712.796302][   T35]  ? rcu_is_watching+0x15/0xb0
[  712.798970][   T35]  __x64_sys_openat+0x138/0x170
[  712.801211][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.803835][   T35]  do_syscall_64+0x174/0x580
[  712.806419][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.809025][   T35] RIP: 0033:0x7f7929f169a4
[  712.810977][   T35] RSP: 002b:00007fff6814b830 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  712.814803][   T35] RAX: ffffffffffffffda RBX: 000055f7ed0da780 RCX: 00007f7929f169a4
[  712.818164][   T35] RDX: 00000000000a0800 RSI: 000055f7ed0ce840 RDI: 00000000ffffff9c
[  712.821429][   T35] RBP: 000055f7ed0ce840 R08: 0000000000000001 R09: 3fffffffffffffff
[  712.825270][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  712.828683][   T35] R13: 000055f7ed0cbaa0 R14: 0000000000000001 R15: 000055f7ed0ba910
[  712.832136][   T35]  </TASK>
[  712.833659][   T35] 
[  712.833659][   T35] Showing all locks held in the system:
[  712.837488][   T35] 1 lock held by khungtaskd/35:
[  712.839693][   T35]  #0: ffffffff8e95c700 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  712.843721][   T35] 2 locks held by getty/5443:
[  712.846289][   T35]  #0: ffff8881764820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  712.850486][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380
[  712.857072][   T35] 1 lock held by syz-executor/5597:
[  712.860154][   T35] 3 locks held by kworker/1:3/5614:
[  712.862509][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  712.867408][   T35]  #1: ffffc90004b6fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  712.871723][   T35]  #2: ffffffff8e962a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  712.882122][   T35] 1 lock held by udevd/13221:
[  712.884396][   T35]  #0: ffff888108a4e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  712.888379][   T35] 3 locks held by kworker/1:12/17157:
[  712.890725][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  712.896835][   T35]  #1: ffffc90005d37c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  712.901301][   T35]  #2: ffffffff8e962a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  712.907558][   T35] 5 locks held by syz.9.6642/24106:
[  712.912518][   T35] 
[  712.913624][   T35] =============================================
[  712.913624][   T35] 
[  712.922648][   T35] NMI backtrace for cpu 0
[  712.922662][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  712.922679][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  712.922687][   T35] Call Trace:
[  712.922693][   T35]  <TASK>
[  712.922700][   T35]  dump_stack_lvl+0xe8/0x150
[  712.922722][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  712.922742][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  712.922762][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  712.922782][   T35]  sys_info+0x135/0x170
[  712.922796][   T35]  watchdog+0xfd7/0x1030
[  712.922819][   T35]  ? watchdog+0x1c7/0x1030
[  712.922844][   T35]  kthread+0x389/0x470
[  712.922864][   T35]  ? __pfx_watchdog+0x10/0x10
[  712.922882][   T35]  ? __pfx_kthread+0x10/0x10
[  712.922901][   T35]  ret_from_fork+0x514/0xb70
[  712.922920][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  712.922937][   T35]  ? __switch_to+0xc89/0x1420
[  712.922959][   T35]  ? __pfx_kthread+0x10/0x10
[  712.923004][   T35]  ret_from_fork_asm+0x1a/0x30
[  712.923037][   T35]  </TASK>
[  712.923043][   T35] Sending NMI from CPU 0 to CPUs 1:
[  712.967667][    C1] NMI backtrace for cpu 1
[  712.967683][    C1] CPU: 1 UID: 0 PID: 24106 Comm: syz.9.6642 Not tainted syzkaller #0 PREEMPT(full) 
[  712.967699][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  712.967707][    C1] RIP: 0010:lock_release+0x44/0x3c0
[  712.967726][    C1] Code: 8b 05 00 0d 95 11 48 89 44 24 28 e9 05 03 00 00 65 8b 05 03 0d 95 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 ac ff 8d 0e <73> 0d e8 a5 f0 08 00 84 c0 0f 84 94 02 00 00 83 3d 86 32 8e 0e 00
[  712.967736][    C1] RSP: 0018:ffffc900089ded98 EFLAGS: 00000297
[  712.967747][    C1] RAX: 0000000000000001 RBX: ffffffff933711d0 RCX: 0000000000000000
[  712.967754][    C1] RDX: 0000000000000004 RSI: 0000000000000004 RDI: ffffffff8e9bc700
[  712.967761][    C1] RBP: 1ffffffff21a0d01 R08: ffffc900089df2b0 R09: 0000000000000000
[  712.967769][    C1] R10: ffffc900089deef8 R11: fffff5200113bde1 R12: ffffffff8e95c700
[  712.967777][    C1] R13: ffffffff81769f7f R14: ffffffff8e95c700 R15: ffffffff81769f7f
[  712.967785][    C1] FS:  00007f5b05dfd6c0(0000) GS:ffff8882a92b8000(0000) knlGS:0000000000000000
[  712.967794][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  712.967802][    C1] CR2: 00007fe2d95eb078 CR3: 000000011838a000 CR4: 00000000000006f0
[  712.967832][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  712.967840][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  712.967847][    C1] Call Trace:
[  712.967852][    C1]  <TASK>
[  712.967856][    C1]  ? lock_acquire+0x221/0x350
[  712.967886][    C1]  ? deref_stack_reg+0x18e/0x220
[  712.967901][    C1]  ? unwind_next_frame+0x8f/0x2550
[  712.967914][    C1]  unwind_next_frame+0x1baa/0x2550
[  712.967929][    C1]  ? kmem_cache_free+0x182/0x650
[  712.967945][    C1]  ? unwind_next_frame+0x8f/0x2550
[  712.967959][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  712.968012][    C1]  arch_stack_walk+0x11b/0x150
[  712.968029][    C1]  ? __tcf_kfree_skb_list+0x14b/0x300
[  712.968048][    C1]  stack_trace_save+0xa9/0x100
[  712.968063][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  712.968076][    C1]  ? kfree+0x1c5/0x640
[  712.968089][    C1]  ? __dev_queue_xmit+0x2058/0x37f0
[  712.968100][    C1]  ? __bpf_redirect+0xa76/0x1250
[  712.968117][    C1]  ? bpf_clone_redirect+0x319/0x4b0
[  712.968131][    C1]  ? bpf_prog_00acfd19bb8886f4+0x5f/0x68
[  712.968139][    C1]  ? bpf_test_run+0x354/0x830
[  712.968153][    C1]  kasan_save_track+0x3e/0x80
[  712.968165][    C1]  ? kasan_save_track+0x3e/0x80
[  712.968175][    C1]  ? kasan_save_free_info+0x40/0x50
[  712.968186][    C1]  ? __kasan_slab_free+0x5c/0x80
[  712.968197][    C1]  ? kmem_cache_free+0x182/0x650
[  712.968236][    C1]  ? __tcf_kfree_skb_list+0x14b/0x300
[  712.968247][    C1]  kasan_save_free_info+0x40/0x50
[  712.968258][    C1]  __kasan_slab_free+0x5c/0x80
[  712.968275][    C1]  kmem_cache_free+0x182/0x650
[  712.968289][    C1]  __tcf_kfree_skb_list+0x14b/0x300
[  712.968304][    C1]  __dev_queue_xmit+0x2058/0x37f0
[  712.968320][    C1]  ? __dev_queue_xmit+0x29b/0x37f0
[  712.968330][    C1]  ? perf_trace_preemptirq_template+0xb2/0x350
[  712.968345][    C1]  ? irqentry_exit+0x218/0x8e0
[  712.968361][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  712.968377][    C1]  ? __pfx_clockevents_program_event+0x10/0x10
[  712.968391][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  712.968406][    C1]  ? irqentry_exit+0x218/0x8e0
[  712.968419][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  712.968431][    C1]  ? irqentry_exit+0x218/0x8e0
[  712.968443][    C1]  ? trace_irq_disable+0x3b/0x140
[  712.968469][    C1]  __bpf_redirect+0xa76/0x1250
[  712.968489][    C1]  bpf_clone_redirect+0x319/0x4b0
[  712.968507][    C1]  ? bpf_test_run+0x1d1/0x830
[  712.968525][    C1]  bpf_prog_00acfd19bb8886f4+0x5f/0x68
[  712.968538][    C1]  ? trace_array_printk_buf+0xc0/0x1c0
[  712.968561][    C1]  ? __pfx___schedule+0x10/0x10
[  712.968581][    C1]  ? perf_trace_preemptirq_template+0x2cd/0x350
[  712.968600][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  712.968611][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  712.968629][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  712.968644][    C1]  ? preempt_schedule_common+0x82/0xd0
[  712.968660][    C1]  ? bpf_test_run+0x1d1/0x830
[  712.968678][    C1]  ? bpf_test_timer_continue+0x10c/0x320
[  712.968696][    C1]  bpf_test_run+0x354/0x830
[  712.968725][    C1]  ? __pfx_bpf_test_run+0x10/0x10
[  712.968747][    C1]  ? trace_kmem_cache_alloc+0x29/0xe0
[  712.968767][    C1]  ? __kasan_krealloc+0xec/0x110
[  712.968789][    C1]  ? skb_dst_set+0x72/0x140
[  712.968807][    C1]  bpf_prog_test_run_skb+0xe35/0x2230
[  712.968838][    C1]  ? __fget_files+0x3a2/0x420
[  712.968852][    C1]  ? __fget_files+0x2a/0x420
[  712.968871][    C1]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  712.968889][    C1]  bpf_prog_test_run+0x2c5/0x340
[  712.968905][    C1]  __sys_bpf+0x643/0x950
[  712.968926][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  712.968948][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  712.968998][    C1]  ? rcu_is_watching+0x15/0xb0
[  712.969019][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.969035][    C1]  __x64_sys_bpf+0x7c/0x90
[  712.969051][    C1]  do_syscall_64+0x174/0x580
[  712.969074][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.969087][    C1] RIP: 0033:0x7f5b04f9ce59
[  712.969100][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.969119][    C1] RSP: 002b:00007f5b05dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  712.969133][    C1] RAX: ffffffffffffffda RBX: 00007f5b05215fa0 RCX: 00007f5b04f9ce59
[  712.969143][    C1] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a
[  712.969151][    C1] RBP: 00007f5b05032e6f R08: 0000000000000000 R09: 0000000000000000
[  712.969159][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.969165][    C1] R13: 00007f5b05216038 R14: 00007f5b05215fa0 R15: 00007ffffba940c8
[  712.969183][    C1]  </TASK>
[  713.322253][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  713.324727][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  713.328001][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  713.331098][   T35] Call Trace:
[  713.332145][   T35]  <TASK>
[  713.333071][   T35]  vpanic+0x56c/0xa60
[  713.334273][   T35]  ? __pfx___schedule+0x10/0x10
[  713.335726][   T35]  ? __pfx_vpanic+0x10/0x10
[  713.337123][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  713.339030][   T35]  panic+0xc5/0xd0
[  713.340157][   T35]  ? __pfx_panic+0x10/0x10
[  713.341496][   T35]  ? preempt_schedule_common+0x82/0xd0
[  713.343238][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  713.344853][   T35]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  713.346800][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  713.348790][   T35]  watchdog+0x1030/0x1030
[  713.350103][   T35]  ? watchdog+0x1c7/0x1030
[  713.351780][   T35]  kthread+0x389/0x470
[  713.353382][   T35]  ? __pfx_watchdog+0x10/0x10
[  713.355284][   T35]  ? __pfx_kthread+0x10/0x10
[  713.356703][   T35]  ret_from_fork+0x514/0xb70
[  713.358088][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  713.359818][   T35]  ? __switch_to+0xc89/0x1420
[  713.361356][   T35]  ? __pfx_kthread+0x10/0x10
[  713.362769][   T35]  ret_from_fork_asm+0x1a/0x30
[  713.364288][   T35]  </TASK>
[  713.365807][   T35] Kernel Offset: disabled
[  713.367115][   T35] Rebooting in 86400 seconds..
