last executing test programs:

10m16.151984614s ago: executing program 32 (id=40):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000006007ace7748ff040000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000181401000000000000000000d55e4002b23a8f973c2bb0354808fbc2b567d746bb350e992102000000000000001684a2a8ab6d9e50551058b5b6c66990ba53b12fe43bc845557e36de2dea2c918aa238d61f4082e54ae6e1d4c5bfddb74b346035eb14ca121beae994d888939fa213e330e3046e355072beee485f37c45fe5ceb182180849ca3a06e823a8ecb4ccee8fffefa244734ccd7963f2499b29000000000000d09bb7"], 0x10}}, 0x400c044)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4000010)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'erspan0\x00', @random="004023ea1c00"})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m0.36566883s ago: executing program 33 (id=824):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000001c0)=@del={0xe0, 0x15, 0x1, 0x70bd26, 0x25dfdbfc, {{'xts-camellia-aesni\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x40400c4)

8m36.139883862s ago: executing program 34 (id=1453):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x89, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7013a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x1}, 0x108, 0x0, 0x4000000, 0x3, 0x3fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x41, 0x0, 0x8f00)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000)=r2, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82", 0x32}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa8f}], 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=' ', 0x1}, {&(0x7f00000017c0)="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", 0x582}], 0x2}, 0x11895)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="177c3c7c0d87f6347b6eeb6c3d9ef497b5721c46a6549ef06966452dae0cd89df3d36433c2994cb8a803b2ee09fd03b6cb3f3b686f39f135b0b8fe675f243041afbc72012589aa693cf188e2c1931065daf67cab28e518ba861b6f9120879853a3ae68e31e4fbc1d800357f2e82115c2a58630d6044efc06", 0x78}, {0x0}], 0x2, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}], 0x38}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
socket$kcm(0x10, 0x3, 0x10)

7m26.868870262s ago: executing program 1 (id=2456):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000190001202600000000001c0080"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800)

7m26.766399433s ago: executing program 1 (id=2458):
r0 = socket$kcm(0x28, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x40001)

7m26.692003668s ago: executing program 1 (id=2461):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xf}, 0x106581, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x4008000)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={<r3=>r2})
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r3})

7m26.602496604s ago: executing program 1 (id=2464):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)

7m26.507816128s ago: executing program 1 (id=2468):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

7m26.507133542s ago: executing program 1 (id=2469):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080)=r0, 0x12)
socket$kcm(0xa, 0x5, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}}, 0x4c}}, 0x20004010)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffffff510000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd25, 0xfffffffc, 0xfffffffc, 0x2}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd320-generic\x00'}}}]}, 0x1a0}}, 0x0)

7m11.332382828s ago: executing program 35 (id=2469):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080)=r0, 0x12)
socket$kcm(0xa, 0x5, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}}, 0x4c}}, 0x20004010)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffffff510000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd25, 0xfffffffc, 0xfffffffc, 0x2}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd320-generic\x00'}}}]}, 0x1a0}}, 0x0)

5m30.194077112s ago: executing program 6 (id=4033):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200"/56, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

5m30.114683445s ago: executing program 6 (id=4034):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000081117e000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94)

5m30.064565084s ago: executing program 6 (id=4036):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

5m30.064223231s ago: executing program 6 (id=4037):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

5m29.928017696s ago: executing program 6 (id=4040):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x34)
close(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x40012100)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001e0021002bbd7000000000000a000000050000000000000014"], 0x30}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x120}}, 0x4000000)
ioctl$SIOCSIFHWADDR(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000080000000000000850000002300000095000000000000000479c8e38bbe97818d5a59aac2a36c24f0ec2e3fbdd887331e5e6da6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socket$kcm(0x29, 0x7, 0x0)

5m27.214152651s ago: executing program 6 (id=4042):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x4, 0x64de13ae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000, 0xffffffff}, 0x50)

5m11.285602896s ago: executing program 36 (id=4042):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x4, 0x64de13ae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000, 0xffffffff}, 0x50)

4m13.705605882s ago: executing program 5 (id=5289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4m13.647782367s ago: executing program 5 (id=5292):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4m13.598380671s ago: executing program 5 (id=5293):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x9, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x37}], 0x1}, 0x41)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000700)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c", 0x15}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804)

4m13.531899294s ago: executing program 5 (id=5296):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92340, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24008080)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x800)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880)
sendmsg$kcm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
sendmsg$sock(r1, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

4m10.588306157s ago: executing program 5 (id=5299):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

4m10.455302469s ago: executing program 5 (id=5303):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000000001010b000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

3m55.439682338s ago: executing program 37 (id=5303):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000000001010b000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

3m44.006116876s ago: executing program 8 (id=5553):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))

3m43.942611885s ago: executing program 8 (id=5618):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3m43.853463295s ago: executing program 8 (id=5620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001032400002b69124db134"], 0x14}}, 0x0)

3m43.805088924s ago: executing program 8 (id=5623):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

3m42.554327262s ago: executing program 8 (id=5629):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880)

3m27.558575226s ago: executing program 38 (id=5629):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880)

2m50.277133372s ago: executing program 3 (id=6033):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4f3e, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x2, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x6, 0x4, 0xfffff26d, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)

2m50.171982439s ago: executing program 3 (id=6035):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts={{0x18, 0x29, 0x36, {0x1d}}}], 0x18}, 0x922bac8576b92dde)

2m50.111831358s ago: executing program 3 (id=6037):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6287"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090)

2m49.980975575s ago: executing program 3 (id=6039):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x9a)

2m49.861253892s ago: executing program 3 (id=6040):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
socket$nl_route(0x10, 0x3, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m49.771475945s ago: executing program 3 (id=6043):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

2m34.742895703s ago: executing program 39 (id=6043):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m1.480482215s ago: executing program 2 (id=7295):
socketpair(0x26, 0x5, 0x0, &(0x7f0000000000))

1m1.386118621s ago: executing program 2 (id=7296):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m1.261047674s ago: executing program 2 (id=7301):
r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="ef", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000500), 0xc62, r3, 0x4}, 0x38)
syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000680), 0x0, 0x52, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff0a, 0x0)

1m0.582383439s ago: executing program 2 (id=7313):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

1m0.41434611s ago: executing program 2 (id=7318):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)

59.343603679s ago: executing program 2 (id=7324):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000)

59.172861511s ago: executing program 40 (id=7324):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000)

41.472017386s ago: executing program 9 (id=7551):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x33}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000140)="b9ff033168440372b89e14f00800a25e4113c182", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

41.470920431s ago: executing program 9 (id=7553):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x93, 0xe, 0x0, 0x0, 0x0, 0xb, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16390000, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x2, 0xfc89, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x3a, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

41.282449643s ago: executing program 9 (id=7561):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004000)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x82)

41.218713754s ago: executing program 9 (id=7564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x44}}, 0x0)

41.17278133s ago: executing program 9 (id=7565):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6f626a5f747970653d2f2f7379730000000000028000340000732792796e635f9396ff92af005365f4342e002c"])

40.860940796s ago: executing program 9 (id=7568):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

25.693878486s ago: executing program 41 (id=7568):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

16.681064352s ago: executing program 0 (id=7890):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x62, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1002, 0x7cf}, 0x0, 0x0, 0x0, 0x8, 0x802, 0x7fffff7f, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}, 0x0)

16.619327461s ago: executing program 4 (id=7893):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r2, r3, 0x4, r0}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0)

16.619153018s ago: executing program 0 (id=7894):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8004, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22)

16.540651219s ago: executing program 0 (id=7897):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

16.540350911s ago: executing program 4 (id=7898):
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x6, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x122)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

16.450010243s ago: executing program 0 (id=7899):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

16.449574012s ago: executing program 0 (id=7900):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x3, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040011)
r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r3)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[], 0x20)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x20000044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a020000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x10, 0x2, 0x4)

16.383330576s ago: executing program 4 (id=7902):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtclass={0x38, 0x28, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0xffe0, 0x10}, {0xffff, 0x4}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x38}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

16.314745557s ago: executing program 4 (id=7904):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x2000, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16.257711649s ago: executing program 0 (id=7906):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xcf, 0x0, 0x0, 0x800000000002, 0x2342, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x828, 0x0, 0x81, 0x9, 0xf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

16.25743959s ago: executing program 4 (id=7907):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a60000000060a0b0400000000000000000200fffe34000480300001800a0001006d6174636800000020000280080003000522191e08000240000000000a00010073746174650000000900010073797a30000000000900020073797a32000000001400"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}], 0x30}, 0x0)

16.191105323s ago: executing program 7 (id=7908):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000010000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa60}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

16.190671303s ago: executing program 7 (id=7909):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)

16.160251743s ago: executing program 7 (id=7910):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0x180, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x2, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0xffffffffffffffff, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'rmd256-generic\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

16.05025689s ago: executing program 4 (id=7911):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x5, 0x3}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000884)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000050)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, 0x0, 0x24000008)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340))
r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, 0x0)
sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080)
mkdir(0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x3, 0x0, &(0x7f0000000980)="ffc443", 0x0, 0x2, 0x0, 0x10000}, 0x50)

16.050029321s ago: executing program 7 (id=7912):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0xe, 0xfffffff7}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x1e, 0x2e]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28)

15.968556623s ago: executing program 7 (id=7913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

15.906631386s ago: executing program 7 (id=7914):
socket$kcm(0x2c, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r2 = getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[])
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002a00070127bd700000000000017c00000c00028005007c802800000004000700e08eba8a601aec4134541c6624"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)

1.116440617s ago: executing program 42 (id=7906):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xcf, 0x0, 0x0, 0x800000000002, 0x2342, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x828, 0x0, 0x81, 0x9, 0xf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

116.912279ms ago: executing program 43 (id=7911):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x5, 0x3}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000884)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000050)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, 0x0, 0x24000008)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340))
r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, 0x0)
sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080)
mkdir(0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x3, 0x0, &(0x7f0000000980)="ffc443", 0x0, 0x2, 0x0, 0x10000}, 0x50)

0s ago: executing program 44 (id=7914):
socket$kcm(0x2c, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r2 = getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[])
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002a00070127bd700000000000017c00000c00028005007c802800000004000700e08eba8a601aec4134541c6624"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)

kernel console output (not intermixed with test programs):

ibute type 21 has an invalid length.
[  373.863596][T15960] IPv6: NLM_F_CREATE should be specified when creating new route
[  374.035036][T15966] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.4211'.
[  376.267405][T16023] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.400467][T16023] bridge_slave_0 (unregistering): left promiscuous mode
[  376.404072][T16023] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.018339][ T5808] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  379.304590][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  379.312787][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  379.316011][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  379.319731][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  379.322687][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  379.481405][T16060] lo speed is unknown, defaulting to 1000
[  379.668303][T16060] chnl_net:caif_netlink_parms(): no params data found
[  379.748498][T16060] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.766849][T16060] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.769482][T16060] bridge_slave_0: entered allmulticast mode
[  379.773581][T16060] bridge_slave_0: entered promiscuous mode
[  379.777555][T16060] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.780779][T16060] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.783054][T16060] bridge_slave_1: entered allmulticast mode
[  379.786443][T16060] bridge_slave_1: entered promiscuous mode
[  379.789544][T16078] __nla_validate_parse: 5 callbacks suppressed
[  379.789560][T16078] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4256'.
[  379.795733][T16078] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4256'.
[  379.831389][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.846496][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.870182][T16060] team0: Port device team_slave_0 added
[  379.874461][T16060] team0: Port device team_slave_1 added
[  379.896159][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.898402][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.907113][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.912472][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.914599][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.926425][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.961506][T16060] hsr_slave_0: entered promiscuous mode
[  379.964631][T16060] hsr_slave_1: entered promiscuous mode
[  380.119180][T16060] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  380.185751][T16060] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  380.237213][T16060] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  380.299221][T16060] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  380.346597][T16060] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.349787][T16060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.352268][T16060] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.354570][T16060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.450713][T15365] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.454840][T15365] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.479962][T16060] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.487966][T16104] syzkaller0: entered promiscuous mode
[  380.496333][T16104] syzkaller0: entered allmulticast mode
[  380.517431][T16060] 8021q: adding VLAN 0 to HW filter on device team0
[  380.527145][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.529373][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.543566][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.545967][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.665967][T16116] netlink: 'syz.5.4271': attribute type 3 has an invalid length.
[  380.774818][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.959987][T16141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4274'.
[  381.358998][   T54] Bluetooth: hci0: command tx timeout
[  381.479699][T16060] veth0_vlan: entered promiscuous mode
[  381.491483][T16060] veth1_vlan: entered promiscuous mode
[  381.534076][T16060] veth0_macvtap: entered promiscuous mode
[  381.544902][T16060] veth1_macvtap: entered promiscuous mode
[  381.572012][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.584564][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.615657][ T5817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.618975][ T5817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.622189][ T5817] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.625485][ T5817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.716973][T16162] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4289'.
[  381.793006][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.795957][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.835110][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.838221][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.977693][T16168] lo speed is unknown, defaulting to 1000
[  382.162259][T16168] netlink: 'syz.5.4291': attribute type 4 has an invalid length.
[  382.375376][T16191] netlink: 'syz.5.4300': attribute type 20 has an invalid length.
[  382.377733][T16191] IPv6: NLM_F_CREATE should be specified when creating new route
[  382.423592][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4301'.
[  382.733227][T16206] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4307'.
[  382.738244][T16206] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4307'.
[  382.746043][T16206] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4307'.
[  383.203760][T16221] netlink: 'syz.5.4313': attribute type 9 has an invalid length.
[  383.448830][   T54] Bluetooth: hci0: command tx timeout
[  383.593459][T16243] netlink: 'syz.5.4325': attribute type 3 has an invalid length.
[  383.595727][T16243] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4325'.
[  384.004881][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  384.007766][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  384.252244][T16283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4343'.
[  384.515243][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.407698][T16342] __nla_validate_parse: 5 callbacks suppressed
[  385.407723][T16342] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4371'.
[  385.472168][T16346] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4373'.
[  385.554021][   T54] Bluetooth: hci0: command tx timeout
[  385.584711][T16358] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.4378'.
[  385.599464][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'.
[  385.654823][T16360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4379'.
[  385.658139][T16360] openvswitch: netlink: Flow key attr not present in new flow.
[  385.871288][T16371] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4384'.
[  386.033625][T16381] -: renamed from syzkaller0 (while UP)
[  386.123366][T16384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4389'.
[  386.664031][T16399] netlink: 'syz.3.4396': attribute type 3 has an invalid length.
[  386.666510][T16399] netlink: 'syz.3.4396': attribute type 8 has an invalid length.
[  386.672819][T16399] netlink: 'syz.3.4396': attribute type 10 has an invalid length.
[  386.676353][T16399] netlink: 'syz.3.4396': attribute type 11 has an invalid length.
[  386.679773][T16399] netlink: 'syz.3.4396': attribute type 1 has an invalid length.
[  386.689054][T16399] netlink: 199340 bytes leftover after parsing attributes in process `syz.3.4396'.
[  386.807039][T16405] netlink: 'syz.5.4394': attribute type 10 has an invalid length.
[  386.815999][T16405] macvlan0: entered allmulticast mode
[  386.844291][T16405] veth1_vlan: entered allmulticast mode
[  386.854970][T16405] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  387.053340][T16418] nbd: must specify at least one socket
[  387.285958][T16426] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4407'.
[  387.599700][   T54] Bluetooth: hci0: command tx timeout
[  388.068499][T16468] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.4416'.
[  388.278433][T16487] netlink: 'syz.3.4426': attribute type 13 has an invalid length.
[  388.615432][T16514] netlink: 'syz.5.4439': attribute type 1 has an invalid length.
[  390.093424][T16584] syzkaller0: entered promiscuous mode
[  394.054374][T16591] veth1_macvtap: left promiscuous mode
[  394.068841][T16591] macsec0: entered allmulticast mode
[  394.077869][T16593] veth1_macvtap: entered promiscuous mode
[  394.080416][T16593] veth1_macvtap: entered allmulticast mode
[  394.082668][T16593] macsec0: entered promiscuous mode
[  394.326429][T16608] netlink: 'syz.3.4483': attribute type 3 has an invalid length.
[  394.331460][T16608] __nla_validate_parse: 6 callbacks suppressed
[  394.331472][T16608] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.4483'.
[  394.377195][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.570180][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.612313][T16623] delete_channel: no stack
[  394.688219][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.072397][   T12] team0: Port device netdevsim0 removed
[  395.077825][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.286994][T16641] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4497'.
[  395.423715][T16646] netlink: 'syz.3.4499': attribute type 21 has an invalid length.
[  395.426817][T16646] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4499'.
[  395.690725][   T54] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28
[  395.693017][   T54] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  395.739054][   T12] bridge_slave_1: left allmulticast mode
[  395.741231][   T12] bridge_slave_1: left promiscuous mode
[  395.743559][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.757894][   T12] bridge_slave_0: left allmulticast mode
[  395.760457][   T12] bridge_slave_0: left promiscuous mode
[  395.762742][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.038261][T16656] netlink: 'syz.3.4503': attribute type 10 has an invalid length.
[  396.251410][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.255597][   T12] bond0 (unregistering): Released all slaves
[  396.385874][T16656] team0: Device vxcan1 is of different type
[  397.687738][T16726] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4522'.
[  397.900249][T16741] netlink: 'syz.5.4528': attribute type 2 has an invalid length.
[  397.947209][T16743] netlink: get zone limit has 8 unknown bytes
[  397.972969][   T12] hsr_slave_0: left promiscuous mode
[  398.041642][   T12] hsr_slave_1: left promiscuous mode
[  398.053552][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.055949][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.071280][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.073476][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.075768][T16752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4528'.
[  398.106978][   T12] veth1_macvtap: left promiscuous mode
[  398.110403][   T12] veth0_macvtap: left promiscuous mode
[  398.112551][   T12] veth1_vlan: left promiscuous mode
[  398.156992][T16754] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4534'.
[  399.243100][   T12] team0 (unregistering): Port device team_slave_1 removed
[  399.276007][   T12] team0 (unregistering): Port device team_slave_0 removed
[  399.758721][T16741] #{6c: entered promiscuous mode
[  399.763751][T16756] sit0: entered allmulticast mode
[  399.922933][T16772] netlink: 64019 bytes leftover after parsing attributes in process `syz.7.4538'.
[  400.176496][T16782] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4542'.
[  400.210711][T16782] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4542'.
[  400.225249][T16782] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4542'.
[  400.335554][T16789] nbd: couldn't find device at index -2127233020
[  400.366736][   T54] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  400.528504][T16803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4552'.
[  400.654688][   T54] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  400.961877][T16835] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4568'.
[  400.968973][T16835] D`: renamed from hsr_slave_1 (while UP)
[  401.025052][T16838] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4571'.
[  401.107632][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4575'.
[  401.151152][T16841] netlink: 'syz.3.4572': attribute type 10 has an invalid length.
[  401.155145][T16841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4572'.
[  401.446415][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4577'.
[  401.915570][T16840] delete_channel: no stack
[  401.950488][T16841] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  402.118098][T16872] openvswitch: netlink: Duplicate key (type 32).
[  402.317356][T16885] netlink: 'syz.5.4590': attribute type 62 has an invalid length.
[  402.416284][T16893] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  404.912887][T17034] netlink: 'syz.5.4657': attribute type 11 has an invalid length.
[  404.982946][T17040] syzkaller0: tun_chr_ioctl cmd 1074025673
[  404.985721][T17040] syzkaller0: tun_chr_ioctl cmd 1074025678
[  404.988092][T17040] syzkaller0: group set to 0
[  405.133282][T17048] __nla_validate_parse: 2 callbacks suppressed
[  405.133295][T17048] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4664'.
[  405.161101][T17049] : port 1(erspan0) entered blocking state
[  405.167696][T17049] : port 1(erspan0) entered disabled state
[  405.170357][T17049] erspan0: entered allmulticast mode
[  405.173489][T17049] erspan0: entered promiscuous mode
[  405.369828][T17061] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4664'.
[  405.533840][T17077] netlink: 'syz.5.4668': attribute type 10 has an invalid length.
[  405.571722][T17077] team0: Port device hsr_slave_0 added
[  405.799040][T17100] netlink: 'syz.3.4677': attribute type 9 has an invalid length.
[  405.890882][T17106] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  406.041003][T17117] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4684'.
[  406.077849][T17119] syzkaller0: left promiscuous mode
[  406.083728][T17119] syzkaller0: left allmulticast mode
[  406.151932][T17128] openvswitch: netlink: Actions may not be safe on all matching packets
[  406.157087][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4687'.
[  406.338049][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4693'.
[  406.800633][T17163] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  406.804515][T17163] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  407.593132][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4706'.
[  407.596302][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4706'.
[  407.690117][T17175] syzkaller0: entered allmulticast mode
[  407.723455][T17180] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4710'.
[  407.726047][T17180] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4710'.
[  408.211641][T17200] tap0: tun_chr_ioctl cmd 1074025677
[  408.214936][T17200] tap0: linktype set to 778
[  408.368179][T17215] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4723'.
[  408.479678][T17230] netlink: 'syz.7.4730': attribute type 2 has an invalid length.
[  408.522835][T17232] netlink: 'syz.7.4732': attribute type 2 has an invalid length.
[  408.728058][T17246] H: renamed from wg2 (while UP)
[  408.736398][T17235] delete_channel: no stack
[  408.807770][T17254] netlink: 'syz.5.4741': attribute type 29 has an invalid length.
[  408.812236][T17254] netlink: 'syz.5.4741': attribute type 29 has an invalid length.
[  408.815601][T17254] netlink: 'syz.5.4741': attribute type 29 has an invalid length.
[  409.641482][T17298] netlink: 'syz.7.4754': attribute type 4 has an invalid length.
[  410.000762][T17308] netlink: 'syz.7.4756': attribute type 1 has an invalid length.
[  410.084615][T17312] netlink: 'syz.7.4757': attribute type 10 has an invalid length.
[  410.086904][T17312] batadv0: entered promiscuous mode
[  410.088445][T17312] batadv0: entered allmulticast mode
[  410.092210][T17312] bridge0: port 3(batadv0) entered blocking state
[  410.095275][T17312] bridge0: port 3(batadv0) entered disabled state
[  410.105988][T17314] netlink: 'syz.5.4752': attribute type 6 has an invalid length.
[  410.113034][T17312] bridge0: port 3(batadv0) entered blocking state
[  410.115675][T17312] bridge0: port 3(batadv0) entered forwarding state
[  410.562217][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  410.565291][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  410.651140][T17338] __nla_validate_parse: 8 callbacks suppressed
[  410.651194][T17338] netlink: 763 bytes leftover after parsing attributes in process `syz.7.4767'.
[  411.615354][T17396] netlink: 'syz.7.4793': attribute type 2 has an invalid length.
[  412.438078][T17438] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  412.547732][T17444] netlink: 332 bytes leftover after parsing attributes in process `syz.7.4816'.
[  412.580120][T17442] lo speed is unknown, defaulting to 1000
[  412.594942][T17446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.994817][T17463] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4824'.
[  413.218298][   T54] Bluetooth: hci2: Malformed LE Event: 0x1d
[  413.378355][T17480] netlink: 766 bytes leftover after parsing attributes in process `syz.3.4832'.
[  413.411975][T17474] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.415582][T17474] bridge_slave_1: left allmulticast mode
[  413.417764][T17474] bridge_slave_1: left promiscuous mode
[  413.428521][T17474] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.512447][T17474] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  413.718618][T17497] validate_nla: 3 callbacks suppressed
[  413.728502][T17497] netlink: 'syz.3.4840': attribute type 10 has an invalid length.
[  413.816114][T17504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.924984][T17510] netlink: 'syz.5.4847': attribute type 2 has an invalid length.
[  414.093830][T17519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.575948][T17552] netlink: 'syz.5.4866': attribute type 11 has an invalid length.
[  415.328054][T17574] netlink: ct family unspecified
[  415.339371][T17574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.493625][T17585] nbd: socks must be embedded in a SOCK_ITEM attr
[  417.191603][T17625] netlink: 'syz.3.4901': attribute type 21 has an invalid length.
[  417.193964][T17625] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4901'.
[  417.197153][T17625] netlink: 'syz.3.4901': attribute type 5 has an invalid length.
[  417.204760][T17625] netlink: 'syz.3.4901': attribute type 6 has an invalid length.
[  417.207214][T17625] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4901'.
[  419.665177][T17683] netlink: 'syz.3.4926': attribute type 27 has an invalid length.
[  419.687936][T17685] xt_l2tp: missing protocol rule (udp|l2tpip)
[  419.785842][T17687] tmpfs: Bad value for 'mode'
[  420.813339][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4933'.
[  420.907584][T17703] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4935'.
[  421.220445][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4947'.
[  421.533965][T17748] netlink: 'syz.5.4956': attribute type 2 has an invalid length.
[  421.537213][T17748] netlink: 'syz.5.4956': attribute type 8 has an invalid length.
[  421.544055][T17748] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4956'.
[  421.907999][T17766] netlink: 'syz.5.4965': attribute type 1 has an invalid length.
[  421.978118][T17770] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4966'.
[  422.195377][T17778] netlink: 'syz.5.4971': attribute type 10 has an invalid length.
[  422.366038][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4976'.
[  422.368856][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4976'.
[  422.631358][T17778] 8021q: adding VLAN 0 to HW filter on device team0
[  422.655153][T17778] bond0: (slave team0): Enslaving as an active interface with an up link
[  422.658293][T17788] netlink: 'syz.3.4975': attribute type 1 has an invalid length.
[  422.778516][T17778] syz.5.4971 (17778) used greatest stack depth: 17296 bytes left
[  422.796211][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4980'.
[  422.829504][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4981'.
[  422.832646][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4981'.
[  423.028589][T17811] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4985'.
[  425.334569][T17829] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.4995'.
[  425.961221][T17864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5011'.
[  425.982512][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5012'.
[  426.293532][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[  426.293592][T17891] netlink: 'syz.3.5024': attribute type 21 has an invalid length.
[  426.299549][T17891] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5024'.
[  426.551096][T17907] netlink: 'syz.3.5032': attribute type 21 has an invalid length.
[  426.558860][T17907] IPv6: NLM_F_CREATE should be specified when creating new route
[  426.562590][T17907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  426.565566][T17907] IPv6: NLM_F_CREATE should be set when creating new route
[  426.568473][T17907] IPv6: NLM_F_CREATE should be set when creating new route
[  426.571509][T17907] IPv6: NLM_F_CREATE should be set when creating new route
[  426.657464][T17915] netlink: 'syz.3.5036': attribute type 1 has an invalid length.
[  427.070209][T17943] netlink: 'syz.5.5048': attribute type 3 has an invalid length.
[  428.042221][T17979] netlink: 'syz.7.5061': attribute type 2 has an invalid length.
[  428.051184][T17979] hmac(sha2: entered promiscuous mode
[  428.104451][T17967] netlink: 'syz.3.5056': attribute type 13 has an invalid length.
[  428.106942][T17967] netlink: 'syz.3.5056': attribute type 58 has an invalid length.
[  428.128320][T17967] __nla_validate_parse: 1 callbacks suppressed
[  428.128363][T17967] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5056'.
[  428.252884][T17993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.696726][T18029] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5081'.
[  429.010509][T18055] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5093'.
[  429.013705][T18055] netlink: ct family unspecified
[  429.391965][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'.
[  429.396357][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'.
[  429.401014][T18077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.573285][T18085] netlink: 'syz.5.5106': attribute type 39 has an invalid length.
[  429.935594][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5117'.
[  429.944451][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5117'.
[  429.949494][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5117'.
[  429.954280][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5117'.
[  430.016915][T18112] netlink: 'syz.5.5118': attribute type 4 has an invalid length.
[  430.134777][T18128] netlink: 'syz.5.5127': attribute type 3 has an invalid length.
[  431.054737][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5159'.
[  431.188527][   T33] audit: type=1107 audit(1770142801.070:6): pid=18198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  431.192502][T18199] sctp: [Deprecated]: syz.3.5162 (pid 18199) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.192502][T18199] Use struct sctp_sack_info instead
[  431.400946][T18223] validate_nla: 1 callbacks suppressed
[  431.400959][T18223] netlink: 'syz.5.5172': attribute type 39 has an invalid length.
[  431.550492][T18232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.761858][T18245] netlink: 'syz.3.5181': attribute type 2 has an invalid length.
[  431.764956][T18245] netlink: 'syz.3.5181': attribute type 8 has an invalid length.
[  432.018177][   T54] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  433.010565][T18295] netlink: 'syz.3.5207': attribute type 2 has an invalid length.
[  433.047851][T18299] netlink: 'syz.3.5208': attribute type 1 has an invalid length.
[  433.093526][T18303] netlink: 'syz.7.5209': attribute type 10 has an invalid length.
[  433.109046][T18302] netlink: 'syz.3.5210': attribute type 7 has an invalid length.
[  433.252624][T18313] __nla_validate_parse: 6 callbacks suppressed
[  433.252639][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5216'.
[  433.257292][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5216'.
[  433.262428][T18313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5216'.
[  433.275136][T18315] netlink: 'syz.5.5215': attribute type 10 has an invalid length.
[  433.277662][T18315] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.5215'.
[  433.384876][T18323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5220'.
[  433.530781][T18334] netlink: 'syz.3.5224': attribute type 9 has an invalid length.
[  433.548953][T18338] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5227'.
[  433.963307][T18363] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5239'.
[  434.422559][T18378] netlink: 'syz.7.5246': attribute type 27 has an invalid length.
[  434.425749][T18378] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5246'.
[  434.555932][T18380] Cannot find add_set index 46338 as target
[  434.761391][T18402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5257'.
[  434.764800][T18402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5257'.
[  435.682749][T18415] ref_ctr_offset mismatch. inode: 0x17c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  436.080695][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  436.084075][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  436.087545][   T54] Bluetooth: hci0: hardware error 0x00
[  436.776213][T18474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.158907][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  440.118984][T18503] validate_nla: 2 callbacks suppressed
[  440.119004][T18503] netlink: 'syz.3.5305': attribute type 33 has an invalid length.
[  440.124194][T18503] __nla_validate_parse: 3 callbacks suppressed
[  440.124211][T18503] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5305'.
[  440.282408][T18509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5308'.
[  440.299051][T18509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5308'.
[  440.310764][T18509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5308'.
[  440.811642][T18527] netlink: 'syz.7.5315': attribute type 10 has an invalid length.
[  440.814047][T18527] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.5315'.
[  441.030414][T18543] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5323'.
[  441.325205][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5332'.
[  441.336230][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5332'.
[  441.493401][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5336'.
[  441.571714][T18575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5339'.
[  442.614089][T18637] netlink: 'syz.7.5369': attribute type 10 has an invalid length.
[  442.643412][T18640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.743388][T18649] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  443.131606][T18669] netlink: 'syz.7.5385': attribute type 29 has an invalid length.
[  443.139289][T18669] netlink: 'syz.7.5385': attribute type 29 has an invalid length.
[  445.452995][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  445.455609][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  445.956845][T18681] __nla_validate_parse: 8 callbacks suppressed
[  445.956864][T18681] netlink: 830 bytes leftover after parsing attributes in process `syz.7.5390'.
[  445.962700][T18681] bond_slave_0: entered promiscuous mode
[  445.964933][T18681] bond_slave_1: entered promiscuous mode
[  445.966688][T18681] bridge_slave_1: entered promiscuous mode
[  446.142554][T18694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5396'.
[  447.050940][T18722] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5410'.
[  447.064747][T18722] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5410'.
[  447.075265][T18722] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5410'.
[  448.406932][T18750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5424'.
[  448.437468][T18752] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.5425'.
[  448.527194][T18760] netlink: 'syz.3.5429': attribute type 5 has an invalid length.
[  450.617593][T18838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5465'.
[  450.626606][T18838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5465'.
[  451.160981][T18867] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5479'.
[  451.423562][T18885] netlink: 'syz.7.5488': attribute type 10 has an invalid length.
[  451.951003][T18910] netlink: 'syz.7.5500': attribute type 27 has an invalid length.
[  452.011956][T18915] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5502'.
[  452.395745][T18928] netlink: 'syz.3.5509': attribute type 2 has an invalid length.
[  452.405986][T18928] netlink: 'syz.3.5509': attribute type 2 has an invalid length.
[  452.582960][T18939] netlink: 'syz.3.5514': attribute type 33 has an invalid length.
[  452.585506][T18939] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5514'.
[  452.828788][T18956] netlink: 'syz.7.5523': attribute type 10 has an invalid length.
[  452.861925][T18956] batman_adv: batadv0: Adding interface: netdevsim0
[  452.863954][T18956] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.928898][T18956] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  453.840841][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5537'.
[  453.844291][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5537'.
[  453.848038][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5537'.
[  453.981848][T18993] netlink: 'syz.7.5541': attribute type 13 has an invalid length.
[  453.993329][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5540'.
[  454.066392][T18993] gretap0: refused to change device tx_queue_len
[  454.068416][T18993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  454.382487][T19011] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.5547'.
[  455.325580][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  455.339175][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  455.343161][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  455.346665][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  455.350203][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  455.399559][T19032] lo speed is unknown, defaulting to 1000
[  455.465903][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.576283][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.660339][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.833262][   T13] team0: Port device netdevsim0 removed
[  455.838078][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.929678][T19032] chnl_net:caif_netlink_parms(): no params data found
[  456.132087][T19032] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.138614][T19032] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.153598][T19032] bridge_slave_0: entered allmulticast mode
[  456.164396][T19032] bridge_slave_0: entered promiscuous mode
[  456.177351][T19032] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.182909][T19032] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.185317][T19032] bridge_slave_1: entered allmulticast mode
[  456.188381][T19032] bridge_slave_1: entered promiscuous mode
[  456.253110][T19032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.262639][T19032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.304768][T19032] team0: Port device team_slave_0 added
[  456.311484][T19032] team0: Port device team_slave_1 added
[  457.439038][ T5808] Bluetooth: hci3: command tx timeout
[  459.342986][T19032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.352085][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.369131][T19032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.383447][T19032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.385622][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.399775][T19032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.434211][T19032] hsr_slave_0: entered promiscuous mode
[  459.436944][T19032] hsr_slave_1: entered promiscuous mode
[  459.439936][T19032] debugfs: 'hsr0' already exists in 'hsr'
[  459.441711][T19032] Cannot create hsr debugfs directory
[  459.518857][ T5808] Bluetooth: hci3: command tx timeout
[  459.614941][T19032] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  459.621582][T19032] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  459.626382][T19032] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  459.632291][T19032] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  459.641107][T19072] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5569'.
[  459.712070][T19032] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.728466][T19032] 8021q: adding VLAN 0 to HW filter on device team0
[  459.736704][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.739533][ T6360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.751765][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.754826][ T6360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.931016][   T13] bridge0: port 3(dummy0) entered disabled state
[  459.934671][   T13] bridge_slave_1: left allmulticast mode
[  459.939160][   T13] bridge_slave_1: left promiscuous mode
[  459.942726][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.945584][T19091] netlink: 'syz.7.5574': attribute type 1 has an invalid length.
[  459.964683][   T13] erspan0: left allmulticast mode
[  459.967513][   T13] erspan0: left promiscuous mode
[  459.969546][   T13] : port 1(erspan0) entered disabled state
[  460.586873][   T13] bond0 (unregistering): (slave c0): Releasing backup interface
[  460.594031][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.600974][   T13] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  460.606286][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  460.612977][   T13] veth1_vlan: left allmulticast mode
[  460.620792][   T13] bond0 (unregistering): (slave team0): Releasing backup interface
[  460.649446][   T13] bond0 (unregistering): Released all slaves
[  460.782749][   T13] : left promiscuous mode
[  461.006575][T19115] syzkaller0: entered promiscuous mode
[  461.009090][T19115] syzkaller0: entered allmulticast mode
[  461.014939][   T13] #{6c: left promiscuous mode
[  461.599372][ T5808] Bluetooth: hci3: command tx timeout
[  462.510045][T19124] netlink: 'syz.3.5585': attribute type 29 has an invalid length.
[  462.589264][T19032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.747369][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5588'.
[  463.094758][T19032] veth0_vlan: entered promiscuous mode
[  463.135552][T19032] veth1_vlan: entered promiscuous mode
[  463.320832][T19032] veth0_macvtap: entered promiscuous mode
[  463.357662][T19032] veth1_macvtap: entered promiscuous mode
[  463.419319][T19154] syz.3.5592 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  463.422601][T19154] CPU: 1 UID: 0 PID: 19154 Comm: syz.3.5592 Not tainted syzkaller #0 PREEMPT(full) 
[  463.422613][T19154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  463.422619][T19154] Call Trace:
[  463.422624][T19154]  <TASK>
[  463.422627][T19154]  dump_stack_lvl+0xe8/0x150
[  463.422644][T19154]  dump_header+0xd3/0x4c0
[  463.422656][T19154]  oom_kill_process+0x263/0x800
[  463.422674][T19154]  out_of_memory+0xe55/0x11f0
[  463.422688][T19154]  ? __pfx___mutex_lock+0x10/0x10
[  463.422701][T19154]  ? __pfx_out_of_memory+0x10/0x10
[  463.422717][T19154]  mem_cgroup_out_of_memory+0x158/0x270
[  463.422732][T19154]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  463.422749][T19154]  ? _raw_spin_unlock+0x28/0x50
[  463.422761][T19154]  ? memcg1_oom_prepare+0x37e/0x450
[  463.422771][T19154]  try_charge_memcg+0xdfb/0x12a0
[  463.422788][T19154]  ? __pfx_try_charge_memcg+0x10/0x10
[  463.422805][T19154]  charge_memcg+0x9f/0x180
[  463.422814][T19154]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  463.422823][T19154]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  463.422834][T19154]  __swap_cache_prepare_and_add+0x52a/0x700
[  463.422857][T19154]  swap_cache_alloc_folio+0xf1/0x240
[  463.422870][T19154]  swap_cluster_readahead+0x369/0x690
[  463.422885][T19154]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  463.422903][T19154]  ? get_vma_policy+0x27b/0x3c0
[  463.422915][T19154]  swapin_readahead+0x196/0xc50
[  463.422932][T19154]  ? __pfx_swapin_readahead+0x10/0x10
[  463.422945][T19154]  ? swap_table_get+0x1e/0x260
[  463.422955][T19154]  ? swap_table_get+0x1e/0x260
[  463.422965][T19154]  ? swap_table_get+0x1e/0x260
[  463.422976][T19154]  ? swap_table_get+0x216/0x260
[  463.422987][T19154]  ? swap_cache_get_folio+0x513/0x520
[  463.423001][T19154]  do_swap_page+0x49e/0x58a0
[  463.423023][T19154]  ? do_swap_page+0x12c/0x58a0
[  463.423033][T19154]  ? __pfx_do_swap_page+0x10/0x10
[  463.423043][T19154]  ? __pte_offset_map+0x1ae/0x240
[  463.423059][T19154]  ? pte_offset_map_rw_nolock+0xea/0x160
[  463.423072][T19154]  handle_mm_fault+0x12d2/0x32b0
[  463.423090][T19154]  ? handle_mm_fault+0xee/0x32b0
[  463.423105][T19154]  ? __pfx_handle_mm_fault+0x10/0x10
[  463.423115][T19154]  ? lock_vma_under_rcu+0x45a/0x500
[  463.423140][T19154]  do_user_addr_fault+0xa73/0x1340
[  463.423157][T19154]  ? rcu_is_watching+0x15/0xb0
[  463.423166][T19154]  ? trace_page_fault_user+0x84/0x210
[  463.423179][T19154]  exc_page_fault+0x6a/0xc0
[  463.423193][T19154]  asm_exc_page_fault+0x26/0x30
[  463.423201][T19154] RIP: 0033:0x7fbf59355e94
[  463.423211][T19154] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ce f6 28 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[  463.423219][T19154] RSP: 002b:00007fff2c4a3500 EFLAGS: 00010246
[  463.423227][T19154] RAX: 0000000000000000 RBX: 0000555579791500 RCX: 0000000000000000
[  463.423233][T19154] RDX: 00007fff2c4a3540 RSI: 0000000000000000 RDI: 0000000000000000
[  463.423238][T19154] RBP: 00007fbf59617da0 R08: 0000000000000000 R09: 0000000000000000
[  463.423243][T19154] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007131c
[  463.423248][T19154] R13: 00007fbf59615fac R14: 000000000007100d R15: 00007fff2c4a3670
[  463.423262][T19154]  </TASK>
[  463.423265][T19154] memory: usage 307200kB, limit 307200kB, failcnt 218
[  463.563779][T19154] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[  463.566102][T19154] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  463.567519][T19032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.568099][T19154] Memory cgroup stats for /syz3:
[  463.588916][T19154] cache 0
[  463.591829][T19154] rss 0
[  463.592767][T19154] rss_huge 0
[  463.593704][T19154] shmem 0
[  463.594529][T19154] mapped_file 0
[  463.595513][T19154] dirty 0
[  463.596318][T19154] writeback 0
[  463.597281][T19154] workingset_refault_anon 17
[  463.598347][T19032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.598588][T19154] workingset_refault_file 0
[  463.598594][T19154] swap 90112
[  463.640739][T19154] swapcached 122880
[  463.641920][T19154] pgpgin 99899
[  463.666936][T19154] pgpgout 99891
[  463.668020][T19154] pgfault 241022
[  463.669906][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.679313][ T5808] Bluetooth: hci3: command tx timeout
[  463.680704][T19154] pgmajfault 19
[  463.682302][T19154] inactive_anon 32768
[  463.683441][T19154] active_anon 0
[  463.684503][T19154] inactive_file 0
[  463.685564][T19154] active_file 0
[  463.686576][T19154] unevictable 0
[  463.687559][T19154] hierarchical_memory_limit 314572800
[  463.715963][T19154] hierarchical_memsw_limit 9223372036854771712
[  463.717083][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.718134][T19154] total_cache 0
[  463.728746][T19154] total_rss 0
[  463.729803][T19154] total_rss_huge 0
[  463.730851][T19154] total_shmem 0
[  463.731841][T19154] total_mapped_file 0
[  463.732947][T19154] total_dirty 0
[  463.733914][T19154] total_writeback 0
[  463.735054][T19154] total_workingset_refault_anon 17
[  463.736261][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.736487][T19154] total_workingset_refault_file 0
[  463.736493][T19154] total_swap 90112
[  463.750989][T19154] total_swapcached 122880
[  463.761513][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.765406][T19154] total_pgpgin 99899
[  463.766671][T19154] total_pgpgout 99891
[  463.767999][T19154] total_pgfault 241028
[  463.769447][T19154] total_pgmajfault 19
[  463.770630][T19154] total_inactive_anon 32768
[  463.771953][T19154] total_active_anon 0
[  463.773116][T19154] total_inactive_file 0
[  463.779179][T19154] total_active_file 0
[  463.780402][T19154] total_unevictable 0
[  463.781553][T19154] anon_cost 0
[  463.798025][T19154] file_cost 0
[  463.799250][T19154] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5592,pid=19154,uid=0
[  463.814848][T19154] Memory cgroup out of memory: Killed process 19154 (syz.3.5592) total-vm:102196kB, anon-rss:1220kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  463.886779][   T13] veth1_macvtap: left allmulticast mode
[  463.888616][   T13] veth1_macvtap: left promiscuous mode
[  463.907792][   T13] veth0_macvtap: left promiscuous mode
[  463.910213][   T13] veth1_vlan: left promiscuous mode
[  464.190990][T19193] netlink: 'syz.3.5607': attribute type 39 has an invalid length.
[  465.840747][   T13] team0 (unregistering): Port device hsr_slave_0 removed
[  465.923105][   T13] team0 (unregistering): Port device team_slave_1 removed
[  465.950176][   T13] team0 (unregistering): Port device C removed
[  466.316278][T15365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.320335][T19213] netlink: 'syz.7.5613': attribute type 89 has an invalid length.
[  466.325946][T15365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.380529][T15365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.382808][T15365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.516603][T19222] netlink: 'syz.7.5617': attribute type 3 has an invalid length.
[  466.524843][T19222] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.5617'.
[  466.885542][T19237] syzkaller0: entered promiscuous mode
[  466.887156][T19237] syzkaller0: entered allmulticast mode
[  467.068075][T19257] netlink: 'syz.3.5628': attribute type 62 has an invalid length.
[  468.607336][T19266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5631'.
[  468.666884][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5632'.
[  468.670574][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5632'.
[  468.990615][T19289] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5641'.
[  471.369202][T19329] netlink: 'syz.3.5658': attribute type 2 has an invalid length.
[  471.371517][T19329] netlink: 'syz.3.5658': attribute type 1 has an invalid length.
[  471.374158][T19329] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5658'.
[  471.525258][T19335] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5661'.
[  471.917392][T19347] syzkaller0: entered promiscuous mode
[  471.920157][T19347] syzkaller0: entered allmulticast mode
[  472.009546][T19349] netlink: 'syz.3.5668': attribute type 29 has an invalid length.
[  472.013313][T19349] netlink: 'syz.3.5668': attribute type 29 has an invalid length.
[  473.564236][T19366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.243504][T19391] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5686'.
[  474.322423][T19392] bridge0: port 2(team0) entered blocking state
[  474.328098][T19392] bridge0: port 2(team0) entered disabled state
[  474.334796][T19392] team0: entered allmulticast mode
[  474.338735][T19392] team_slave_0: entered allmulticast mode
[  474.343970][T19392] team_slave_1: entered allmulticast mode
[  474.362059][T19392] team0: entered promiscuous mode
[  474.365923][T19392] team_slave_0: entered promiscuous mode
[  474.369853][T19392] team_slave_1: entered promiscuous mode
[  474.381228][T19392] bridge0: port 2(team0) entered blocking state
[  474.383332][T19392] bridge0: port 2(team0) entered forwarding state
[  482.400287][T19463] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5707'.
[  482.404234][T19463] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5707'.
[  482.420556][T19463] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5707'.
[  482.426854][T19463] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5707'.
[  482.430548][T19463] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5707'.
[  483.103878][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  483.108174][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  483.119690][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  483.124115][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  483.127435][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  483.167523][T19472] lo speed is unknown, defaulting to 1000
[  483.316796][T19472] chnl_net:caif_netlink_parms(): no params data found
[  483.420440][T19472] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.423604][T19472] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.426778][T19472] bridge_slave_0: entered allmulticast mode
[  483.431601][T19472] bridge_slave_0: entered promiscuous mode
[  483.437416][T19472] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.449060][T19472] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.452044][T19472] bridge_slave_1: entered allmulticast mode
[  483.457206][T19472] bridge_slave_1: entered promiscuous mode
[  483.494977][T19472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.504915][T19472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.540373][T19472] team0: Port device team_slave_0 added
[  483.546462][T19472] team0: Port device team_slave_1 added
[  483.587753][T19472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.590663][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.600736][T19472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.608022][T19472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.610885][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.621189][T19472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.686077][T19472] hsr_slave_0: entered promiscuous mode
[  483.690228][T19472] hsr_slave_1: entered promiscuous mode
[  483.693747][T19472] debugfs: 'hsr0' already exists in 'hsr'
[  483.696002][T19472] Cannot create hsr debugfs directory
[  483.964566][T19472] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  484.028990][T19472] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  484.035712][T19472] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  484.046210][T19472] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  484.145480][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.172135][T19472] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.175113][T19472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.178166][T19472] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.181218][T19472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.256886][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.544412][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.580429][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.584293][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.605376][T19472] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.637207][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.695092][T19472] 8021q: adding VLAN 0 to HW filter on device team0
[  484.712156][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.714917][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.738567][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.741358][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.007886][T19472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.199079][   T54] Bluetooth: hci1: command tx timeout
[  485.254659][T19472] veth0_vlan: entered promiscuous mode
[  485.265438][T19472] veth1_vlan: entered promiscuous mode
[  485.319571][T19472] veth0_macvtap: entered promiscuous mode
[  485.332422][T19472] veth1_macvtap: entered promiscuous mode
[  485.370175][T19472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.389306][T19472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.418977][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.425642][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.437417][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.446024][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.279273][   T54] Bluetooth: hci1: command tx timeout
[  488.085199][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.087527][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.107683][   T13] bridge_slave_1: left allmulticast mode
[  488.112564][   T13] bridge_slave_1: left promiscuous mode
[  488.114891][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.128576][   T13] bridge_slave_0: left allmulticast mode
[  488.139334][   T13] bridge_slave_0: left promiscuous mode
[  488.141786][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.376461][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'.
[  488.379771][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5731'.
[  488.383142][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'.
[  488.575106][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.584285][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.592136][   T13] bond0 (unregistering): Released all slaves
[  488.677273][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.682311][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.362504][   T54] Bluetooth: hci1: command tx timeout
[  491.440073][   T54] Bluetooth: hci1: command tx timeout
[  491.895781][   T13] hsr_slave_0: left promiscuous mode
[  491.898461][   T13] hsr_slave_1: left promiscuous mode
[  491.901433][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.903775][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.906850][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.909698][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.937942][   T13] veth1_macvtap: left promiscuous mode
[  491.940282][   T13] veth0_macvtap: left promiscuous mode
[  491.942829][   T13] veth1_vlan: left promiscuous mode
[  491.945042][   T13] veth0_vlan: left promiscuous mode
[  492.827680][   T13] team0 (unregistering): Port device team_slave_1 removed
[  492.875346][   T13] team0 (unregistering): Port device team_slave_0 removed
[  493.309088][T19578] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5743'.
[  493.473337][T19596] netlink: 'syz.3.5750': attribute type 1 has an invalid length.
[  494.128031][T19636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5761'.
[  494.134600][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5761'.
[  495.262771][T19674] netlink: 'syz.3.5773': attribute type 4 has an invalid length.
[  495.992113][T19681] netlink: 4432 bytes leftover after parsing attributes in process `syz.9.5775'.
[  496.062201][T19680] lo speed is unknown, defaulting to 1000
[  499.747683][T19733] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.5792'.
[  500.720154][T19747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5796'.
[  500.741697][T19747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5796'.
[  501.821188][T19761] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.824530][T19761] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.922740][T19761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.930936][T19761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.946433][T19807] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5825'.
[  502.105413][T19797] bridge0: port 2(team0) entered disabled state
[  502.107453][T19797] bridge0: port 3(batadv0) entered disabled state
[  502.110218][T19797] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.143312][T19797] bond_slave_0: left promiscuous mode
[  502.145726][T19797] bond_slave_1: left promiscuous mode
[  502.148126][T19797] bridge_slave_1: left promiscuous mode
[  502.243738][T19797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.258007][T19797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.338014][   T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.341404][   T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.344102][   T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.347759][   T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.367594][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.376519][   T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.386989][   T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.412859][   T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.627347][T19853] netlink: 'syz.3.5845': attribute type 21 has an invalid length.
[  503.633891][T19853] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5845'.
[  504.064070][T19881] netlink: 'syz.9.5858': attribute type 1 has an invalid length.
[  504.067659][T19881] netlink: 2096 bytes leftover after parsing attributes in process `syz.9.5858'.
[  504.073048][T19881] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5858'.
[  505.853685][T19932] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  505.856631][T19932] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  506.887023][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  506.890845][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  509.911624][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5909'.
[  509.915501][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5909'.
[  510.442607][T20046] netlink: 'syz.3.5919': attribute type 1 has an invalid length.
[  510.480065][T20050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5921'.
[  514.768041][T20083] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5937'.
[  514.982517][T20102] bridge0: entered allmulticast mode
[  515.030795][T20106] netlink: 'syz.7.5948': attribute type 6 has an invalid length.
[  515.039176][T20106] netlink: 'syz.7.5948': attribute type 23 has an invalid length.
[  515.042340][T20106] IPv6: NLM_F_CREATE should be specified when creating new route
[  515.152424][T20113] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5951'.
[  515.348566][T20123] netlink: 'syz.7.5955': attribute type 21 has an invalid length.
[  515.465315][   T54] Bluetooth: hci1: Malformed LE Event: 0x1b
[  515.663315][T20141] tap0: tun_chr_ioctl cmd 1074025677
[  515.665612][T20141] tap0: linktype set to 1
[  515.832906][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5969'.
[  516.475644][T20183] netlink: 'syz.9.5982': attribute type 2 has an invalid length.
[  517.621037][T20207] netlink: 'syz.7.5992': attribute type 10 has an invalid length.
[  517.626552][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5993'.
[  517.630403][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5993'.
[  517.651017][T20207] vxcan1: entered promiscuous mode
[  517.653577][T20207] vxcan1: entered allmulticast mode
[  517.656034][T20207] team0: Device vxcan1 is of different type
[  518.172214][T20226] netlink: 'syz.9.6000': attribute type 1 has an invalid length.
[  518.270339][T20239] netlink: 'syz.9.6005': attribute type 32 has an invalid length.
[  518.382888][T20246] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode
[  518.391855][T20246] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode
[  518.864807][T20266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6014'.
[  519.030282][T20274] netlink: 'syz.9.6017': attribute type 3 has an invalid length.
[  519.081482][T20276] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6018'.
[  519.258965][T20289] netlink: 'syz.9.6024': attribute type 1 has an invalid length.
[  519.269173][T20290] bridge0: entered allmulticast mode
[  519.281967][T20291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6022'.
[  520.138081][T20307] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6032'.
[  520.530471][   T54] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  521.024007][T20361] netlink: 'syz.7.6047': attribute type 1 has an invalid length.
[  521.037044][T20361] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6047'.
[  521.049485][T20361] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6047'.
[  521.280333][T20368] netlink: 'syz.7.6050': attribute type 46 has an invalid length.
[  521.283634][T20368] netlink: 55 bytes leftover after parsing attributes in process `syz.7.6050'.
[  521.885181][T20397] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6062'.
[  521.956369][   T12] tipc: Subscription rejected, illegal request
[  522.177751][T20403] netlink: 'syz.9.6064': attribute type 10 has an invalid length.
[  522.252779][T20403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.281194][T20403] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  522.284817][T20406] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.303866][T20406] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.339214][T20406] bond0: (slave batadv0): Releasing backup interface
[  522.476194][T20411] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6067'.
[  522.596463][T20419] netlink: 328 bytes leftover after parsing attributes in process `syz.7.6071'.
[  524.243838][T20452] netlink: 'syz.7.6087': attribute type 3 has an invalid length.
[  524.247899][T20452] netlink: 16066 bytes leftover after parsing attributes in process `syz.7.6087'.
[  524.533084][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6090'.
[  525.040272][T20469] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6095'.
[  525.101909][T20475] netlink: 'syz.7.6098': attribute type 1 has an invalid length.
[  525.382017][T20491] netlink: 'syz.7.6104': attribute type 21 has an invalid length.
[  525.385475][T20491] IPv6: NLM_F_CREATE should be specified when creating new route
[  526.643434][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6120'.
[  527.525880][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6131'.
[  529.163708][   T54] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  530.746359][T20648] netlink: get zone limit has 8 unknown bytes
[  531.753322][T20690] infiniband: Added to hash: ib_dev=ffff888112da8000 (0)() ndev=ffff8881bb918000 (24)(lo)
[  531.757700][T20690] siw: device registration error -23
[  531.763503][T20690] infiniband: Removed from hash: ib_dev=ffff888112da8000 (0)() ndev=ffff8881bb918000 (24)(lo)
[  532.471469][T20695] netlink: 'syz.9.6195': attribute type 29 has an invalid length.
[  532.474656][T20695] netlink: 'syz.9.6195': attribute type 29 has an invalid length.
[  533.740286][T20732] : entered promiscuous mode
[  534.291233][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.344059][T20759] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6224'.
[  535.799875][T20792] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6239'.
[  535.900791][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  535.904827][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  535.918512][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  535.928214][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  535.932277][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  535.981307][T20798] lo speed is unknown, defaulting to 1000
[  536.266200][T20798] chnl_net:caif_netlink_parms(): no params data found
[  536.466668][   T12] batman_adv: batadv0: Removing interface: netdevsim0
[  536.547839][T20798] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.550753][T20798] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.553154][T20798] bridge_slave_0: entered allmulticast mode
[  536.556598][T20798] bridge_slave_0: entered promiscuous mode
[  536.560893][T20798] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.563296][T20798] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.565583][T20798] bridge_slave_1: entered allmulticast mode
[  536.569595][T20798] bridge_slave_1: entered promiscuous mode
[  536.600086][T20798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.607536][T20798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.692564][T20798] team0: Port device team_slave_0 added
[  536.717851][T20798] team0: Port device team_slave_1 added
[  536.832733][T20798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.835755][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.850314][T20798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.862081][   T12] vlan0: left allmulticast mode
[  536.868470][   T12] vlan0: left promiscuous mode
[  536.873507][   T12] : port 1(vlan0) entered disabled state
[  537.470339][   T12] bond0 (unregistering): (slave 5): Releasing backup interface
[  537.475385][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.481053][   T12] bond0 (unregistering): Released all slaves
[  537.490789][T20798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.492887][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  537.500689][T20798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.504209][T20828] netlink: 763 bytes leftover after parsing attributes in process `syz.9.6250'.
[  537.614032][T20838] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6253'.
[  537.625894][T20798] hsr_slave_0: entered promiscuous mode
[  537.630615][T20798] hsr_slave_1: entered promiscuous mode
[  537.634216][T20798] debugfs: 'hsr0' already exists in 'hsr'
[  537.636457][T20798] Cannot create hsr debugfs directory
[  537.668815][T20838] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6253'.
[  537.707609][T20838] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6253'.
[  538.000101][   T54] Bluetooth: hci3: command tx timeout
[  538.371971][T20861] ref_ctr_offset mismatch. inode: 0xe1e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  538.460513][   T12] hsr_slave_0: left promiscuous mode
[  538.464098][   T12] hsr_slave_1: left promiscuous mode
[  538.467470][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.475588][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.603634][T20867] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6262'.
[  538.626145][T20867] netlink: 'syz.7.6262': attribute type 10 has an invalid length.
[  538.633492][T20867] netlink: 55 bytes leftover after parsing attributes in process `syz.7.6262'.
[  540.078763][   T54] Bluetooth: hci3: command tx timeout
[  540.292246][   T12] team0 (unregistering): Port device team_slave_1 removed
[  540.323037][   T12] team0 (unregistering): Port device C removed
[  540.582672][   T62] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88816b870000 (7)(syz1) start
[  540.595154][   T62] infiniband: Removed from hash: ib_dev=ffff88816b870000 (0)(syz1) ndev=ffff8881bc382000 (4)(lo)
[  540.600578][   T62] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88816b870000 (0)(syz1) end
[  541.193548][T20798] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  541.205055][T20798] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  541.221222][T20798] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  541.246465][T20798] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  541.481145][T20798] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.497619][T20798] 8021q: adding VLAN 0 to HW filter on device team0
[  541.506007][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.508216][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.519173][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.521410][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.845428][T20798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.965408][T20798] veth0_vlan: entered promiscuous mode
[  541.974895][T20798] veth1_vlan: entered promiscuous mode
[  542.022193][T20798] veth0_macvtap: entered promiscuous mode
[  542.046313][T20798] veth1_macvtap: entered promiscuous mode
[  542.066170][T20926] can: request_module (can-proto-0) failed.
[  542.067475][T20798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.087673][T20798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.115181][ T6266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.119570][ T6266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.122373][ T6266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.125510][ T6266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.160988][   T54] Bluetooth: hci3: command tx timeout
[  542.285506][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.288434][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.395348][ T6350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.398182][ T6350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.238986][   T54] Bluetooth: hci3: command tx timeout
[  544.792374][T20972] netlink: 'syz.2.6278': attribute type 13 has an invalid length.
[  544.795420][T20972] netlink: 14532 bytes leftover after parsing attributes in process `syz.2.6278'.
[  545.732965][T21016] netlink: 26 bytes leftover after parsing attributes in process `syz.2.6290'.
[  546.816141][T21089] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6319'.
[  548.133941][T21150] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6346'.
[  548.137236][T21150] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6346'.
[  548.273530][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6349'.
[  549.172614][T21188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6363'.
[  552.543846][T21223] @0: renamed from bond_slave_1
[  555.066054][T21248] netlink: 763 bytes leftover after parsing attributes in process `syz.7.6389'.
[  555.299072][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6393'.
[  556.163966][T21287] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  556.392045][T21282] delete_channel: no stack
[  556.456106][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6405'.
[  556.459500][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6405'.
[  556.687428][T21311] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6414'.
[  556.918568][T21323] netlink: 'syz.7.6419': attribute type 21 has an invalid length.
[  557.073150][T21329] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.6422'.
[  559.820851][T21361] netlink: 'syz.7.6427': attribute type 19 has an invalid length.
[  559.823341][T21361] netlink: 14552 bytes leftover after parsing attributes in process `syz.7.6427'.
[  560.705190][T21369] netlink: 'syz.7.6430': attribute type 62 has an invalid length.
[  560.712389][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6430'.
[  560.779019][T21379] lo: entered allmulticast mode
[  560.784661][T21379] lo: entered promiscuous mode
[  560.788611][T21379] lo: left allmulticast mode
[  560.864153][T21382] openvswitch: netlink: Message has 16 unknown bytes.
[  560.906223][T21386] netlink: 'syz.7.6437': attribute type 33 has an invalid length.
[  560.908824][T21386] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6437'.
[  560.951253][T21389] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6438'.
[  561.045757][T21390] netlink: 'syz.7.6438': attribute type 10 has an invalid length.
[  561.823467][T21389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.828399][T21389] bond0 (unregistering): (slave 4@0): Releasing backup interface
[  561.846031][T21389] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  561.856768][T21389] bond0 (unregistering): Released all slaves
[  561.868111][T21390] team0: left allmulticast mode
[  561.870296][T21390] team_slave_0: left allmulticast mode
[  561.872509][T21390] team_slave_1: left allmulticast mode
[  561.874569][T21390] team0: left promiscuous mode
[  561.876323][T21390] team_slave_0: left promiscuous mode
[  561.878460][T21390] team_slave_1: left promiscuous mode
[  561.881245][T21390] bridge0: port 2(team0) entered disabled state
[  562.476938][T21440] netlink: 'syz.2.6459': attribute type 1 has an invalid length.
[  563.652784][T21512] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6493'.
[  563.681661][T21514] netlink: 'syz.9.6494': attribute type 16 has an invalid length.
[  563.684260][T21514] netlink: 'syz.9.6494': attribute type 17 has an invalid length.
[  564.234412][T21538] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6504'.
[  564.238199][T21538] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6504'.
[  564.471542][T21554] netlink: 140 bytes leftover after parsing attributes in process `syz.9.6511'.
[  564.631818][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6515'.
[  564.868462][T21567] netlink: 'syz.2.6517': attribute type 8 has an invalid length.
[  564.875625][T21567] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.6517'.
[  564.897541][T21565] delete_channel: no stack
[  565.016455][T21573] sctp: [Deprecated]: syz.2.6518 (pid 21573) Use of struct sctp_assoc_value in delayed_ack socket option.
[  565.016455][T21573] Use struct sctp_sack_info instead
[  565.142338][T21583] netlink: 'syz.2.6523': attribute type 10 has an invalid length.
[  565.145360][T21583] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.6523'.
[  565.536475][T21611] netlink: 'syz.7.6536': attribute type 6 has an invalid length.
[  566.067360][T21642] __nla_validate_parse: 2 callbacks suppressed
[  566.067371][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6549'.
[  566.176850][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6552'.
[  567.453020][T21670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6561'.
[  567.455653][T21670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6561'.
[  567.572145][T21668] netlink: 'syz.7.6560': attribute type 9 has an invalid length.
[  567.579065][T21668] netlink: 'syz.7.6560': attribute type 11 has an invalid length.
[  567.582308][T21668] netlink: 'syz.7.6560': attribute type 12 has an invalid length.
[  567.585337][T21668] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.6560'.
[  567.592143][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6560'.
[  567.724121][T21684] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6565'.
[  567.837627][T21688] netlink: 'syz.9.6569': attribute type 2 has an invalid length.
[  567.840368][T21688] netlink: 'syz.9.6569': attribute type 8 has an invalid length.
[  567.842877][T21688] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6569'.
[  568.361522][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  568.364222][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  569.066010][T21709] netlink: 'syz.9.6579': attribute type 3 has an invalid length.
[  569.147745][T21712] netlink: 'syz.7.6580': attribute type 1 has an invalid length.
[  570.362916][T21753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6599'.
[  573.103274][T21771] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6607'.
[  574.595890][T21864] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6651'.
[  575.376803][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6663'.
[  575.385294][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6663'.
[  575.388558][T21898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  575.485266][T21905] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6667'.
[  576.740290][T21954] netlink: 'syz.9.6688': attribute type 10 has an invalid length.
[  576.903825][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6693'.
[  578.155049][T21995] netlink: 62967 bytes leftover after parsing attributes in process `syz.7.6707'.
[  578.225394][T21998] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6708'.
[  579.808592][T22030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6721'.
[  579.921671][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6723'.
[  579.925363][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6723'.
[  579.986444][T22042] netlink: 'syz.7.6724': attribute type 1 has an invalid length.
[  579.998941][T22042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.332110][T22057] netlink: 'syz.2.6732': attribute type 1 has an invalid length.
[  580.374553][T22058] netlink: 'syz.9.6733': attribute type 19 has an invalid length.
[  580.693117][T22043] syz.7.6728 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  580.696366][T22043] CPU: 0 UID: 0 PID: 22043 Comm: syz.7.6728 Not tainted syzkaller #0 PREEMPT(full) 
[  580.696383][T22043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  580.696391][T22043] Call Trace:
[  580.696398][T22043]  <TASK>
[  580.696404][T22043]  dump_stack_lvl+0xe8/0x150
[  580.696426][T22043]  dump_header+0xd3/0x4c0
[  580.696441][T22043]  oom_kill_process+0x263/0x800
[  580.696465][T22043]  out_of_memory+0xe55/0x11f0
[  580.696487][T22043]  ? __pfx___mutex_lock+0x10/0x10
[  580.696507][T22043]  ? __pfx_out_of_memory+0x10/0x10
[  580.696534][T22043]  mem_cgroup_out_of_memory+0x158/0x270
[  580.696556][T22043]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  580.696581][T22043]  ? _raw_spin_unlock+0x28/0x50
[  580.696597][T22043]  ? memcg1_oom_prepare+0x37e/0x450
[  580.696610][T22043]  try_charge_memcg+0xdfb/0x12a0
[  580.696631][T22043]  ? __pfx_try_charge_memcg+0x10/0x10
[  580.696658][T22043]  charge_memcg+0x9f/0x180
[  580.696672][T22043]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  580.696685][T22043]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  580.696701][T22043]  __swap_cache_prepare_and_add+0x52a/0x700
[  580.696761][T22043]  swap_cache_alloc_folio+0xf1/0x240
[  580.696782][T22043]  swap_cluster_readahead+0x369/0x690
[  580.696804][T22043]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  580.696829][T22043]  ? get_vma_policy+0x27b/0x3c0
[  580.696849][T22043]  swapin_readahead+0x196/0xc50
[  580.696877][T22043]  ? __pfx_swapin_readahead+0x10/0x10
[  580.696899][T22043]  ? swap_table_get+0x1e/0x260
[  580.696916][T22043]  ? swap_table_get+0x1e/0x260
[  580.696933][T22043]  ? swap_table_get+0x1e/0x260
[  580.696951][T22043]  ? swap_table_get+0x216/0x260
[  580.696969][T22043]  ? swap_cache_get_folio+0x513/0x520
[  580.696993][T22043]  do_swap_page+0x49e/0x58a0
[  580.697027][T22043]  ? do_swap_page+0x12c/0x58a0
[  580.697045][T22043]  ? __pfx_do_swap_page+0x10/0x10
[  580.697061][T22043]  ? __pte_offset_map+0x1ae/0x240
[  580.697084][T22043]  ? pte_offset_map_rw_nolock+0xea/0x160
[  580.697106][T22043]  handle_mm_fault+0x12d2/0x32b0
[  580.697135][T22043]  ? handle_mm_fault+0xee/0x32b0
[  580.697159][T22043]  ? __pfx_handle_mm_fault+0x10/0x10
[  580.697177][T22043]  ? lock_vma_under_rcu+0x45a/0x500
[  580.697218][T22043]  do_user_addr_fault+0xa73/0x1340
[  580.697244][T22043]  ? rcu_is_watching+0x15/0xb0
[  580.697260][T22043]  ? trace_page_fault_user+0x84/0x210
[  580.697282][T22043]  exc_page_fault+0x6a/0xc0
[  580.697304][T22043]  asm_exc_page_fault+0x26/0x30
[  580.697318][T22043] RIP: 0033:0x7fe41b46877e
[  580.697333][T22043] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 f6 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 2d 8a fe ff 49 39 c4 73 88 48 8d 1d 11 d8 3a 00 83 3d 16 f6 3a
[  580.697346][T22043] RSP: 002b:00007ffc470a5620 EFLAGS: 00010202
[  580.697359][T22043] RAX: 0000000000000001 RBX: 00007fe41b817da0 RCX: 0000555578147808
[  580.697369][T22043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  580.697377][T22043] RBP: 00007fe41b817da0 R08: 0000000000000000 R09: 0000000000000000
[  580.697386][T22043] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008dca7
[  580.697395][T22043] R13: 00007fe41b815fac R14: 000000000008d999 R15: 00007ffc470a5720
[  580.697419][T22043]  </TASK>
[  580.697425][T22043] memory: usage 307200kB, limit 307200kB, failcnt 153
[  580.794358][T22043] memory+swap: usage 307316kB, limit 9007199254740988kB, failcnt 0
[  580.797082][T22043] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  580.800089][T22043] Memory cgroup stats for /syz7:
[  580.800154][T22043] cache 0
[  580.802424][T22043] rss 0
[  580.803237][T22043] rss_huge 0
[  580.804273][T22043] shmem 0
[  580.805222][T22043] mapped_file 0
[  580.808745][T22043] dirty 0
[  580.809651][T22043] writeback 0
[  580.811292][T22043] workingset_refault_anon 14
[  580.812687][T22043] workingset_refault_file 0
[  580.814024][T22043] swap 118784
[  580.815003][T22043] swapcached 126976
[  580.816114][T22043] pgpgin 33457
[  580.817165][T22043] pgpgout 33455
[  580.818192][T22043] pgfault 96966
[  580.819325][T22043] pgmajfault 7
[  580.821525][T22043] inactive_anon 8192
[  580.822889][T22043] active_anon 0
[  580.823922][T22043] inactive_file 0
[  580.824975][T22043] active_file 0
[  580.825980][T22043] unevictable 0
[  580.827231][T22043] hierarchical_memory_limit 314572800
[  580.829490][T22043] hierarchical_memsw_limit 9223372036854771712
[  580.831354][T22043] total_cache 0
[  580.832368][T22043] total_rss 0
[  580.833326][T22043] total_rss_huge 0
[  580.834402][T22043] total_shmem 0
[  580.835397][T22043] total_mapped_file 0
[  580.836643][T22043] total_dirty 0
[  580.837675][T22043] total_writeback 0
[  580.838878][T22043] total_workingset_refault_anon 14
[  580.840355][T22043] total_workingset_refault_file 0
[  580.841865][T22043] total_swap 118784
[  580.842986][T22043] total_swapcached 126976
[  580.844218][T22043] total_pgpgin 33457
[  580.845333][T22043] total_pgpgout 33455
[  580.846577][T22043] total_pgfault 96966
[  580.847764][T22043] total_pgmajfault 7
[  580.849246][T22043] total_inactive_anon 8192
[  580.850560][T22043] total_active_anon 0
[  580.851731][T22043] total_inactive_file 0
[  580.852917][T22043] total_active_file 0
[  580.854050][T22043] total_unevictable 0
[  580.855163][T22043] anon_cost 0
[  580.856109][T22043] file_cost 0
[  580.857091][T22043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.6728,pid=22043,uid=0
[  580.861991][T22043] Memory cgroup out of memory: Killed process 22043 (syz.7.6728) total-vm:104244kB, anon-rss:1216kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  582.894170][T22076] netlink: 'syz.7.6741': attribute type 4 has an invalid length.
[  582.943088][T22078] netlink: 216 bytes leftover after parsing attributes in process `syz.7.6742'.
[  582.946153][T22078] netlink: 216 bytes leftover after parsing attributes in process `syz.7.6742'.
[  582.970003][T22082] netlink: 'syz.9.6744': attribute type 21 has an invalid length.
[  582.972821][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6744'.
[  583.555429][T22103] syzkaller0: entered promiscuous mode
[  583.557701][T22103] syzkaller0: entered allmulticast mode
[  583.959207][   T54] Bluetooth: hci1: Malformed Event: 0x13
[  586.216371][T22121] netlink: 'syz.2.6757': attribute type 28 has an invalid length.
[  586.348460][T22128] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6761'.
[  586.356238][T22128] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6761'.
[  586.612205][T22148] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6770'.
[  586.650859][T22154] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  586.934532][T22178] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6784'.
[  587.935269][T22194] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  588.211721][T22211] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6797'.
[  589.296964][T22236] netlink: 'syz.7.6810': attribute type 11 has an invalid length.
[  589.980384][T22267] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6822'.
[  590.099655][T22278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.651739][T22288] bond0: entered promiscuous mode
[  590.653569][T22288] bond_slave_0: entered promiscuous mode
[  590.655457][T22288] bond_slave_1: entered promiscuous mode
[  590.657391][T22288] bond0: entered allmulticast mode
[  590.659113][T22288] bond_slave_0: entered allmulticast mode
[  590.660883][T22288] bond_slave_1: entered allmulticast mode
[  590.664322][T22288] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.185299][T22302] bpf: Bad value for 'uid'
[  591.318596][T22312] netlink: 'syz.7.6840': attribute type 32 has an invalid length.
[  591.606863][T22322] netlink: 332 bytes leftover after parsing attributes in process `syz.9.6846'.
[  591.628365][T22323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6845'.
[  591.816610][T22338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6853'.
[  591.956445][T22345] netlink: 'syz.2.6857': attribute type 1 has an invalid length.
[  591.962867][T22345] netlink: 'syz.2.6857': attribute type 2 has an invalid length.
[  591.966148][T22345] netlink: 'syz.2.6857': attribute type 1 has an invalid length.
[  591.991134][T22345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6857'.
[  592.023814][T22351] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  592.494919][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6868'.
[  593.010923][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6880'.
[  593.690106][T22414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.992102][T22438] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6897'.
[  593.999997][T22431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6893'.
[  594.003789][T22431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6893'.
[  594.091850][T22431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6893'.
[  594.351041][T22457] netlink: 'syz.9.6907': attribute type 10 has an invalid length.
[  594.383928][T22457] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  594.386916][T22457] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  595.021212][T22489] syzkaller0: entered promiscuous mode
[  595.030556][T22489] syzkaller0: entered allmulticast mode
[  596.573687][T22509] bridge_slave_1: default FDB implementation only supports local addresses
[  599.227974][T22559] netlink: 'syz.9.6948': attribute type 25 has an invalid length.
[  599.231156][T22559] netlink: 'syz.9.6948': attribute type 28 has an invalid length.
[  599.427221][T22578] netlink: 'syz.9.6957': attribute type 2 has an invalid length.
[  599.567959][T22586] netlink: 'syz.2.6960': attribute type 2 has an invalid length.
[  599.581188][T22586] !: entered promiscuous mode
[  599.589729][T22586] netlink: 'syz.2.6960': attribute type 2 has an invalid length.
[  599.592671][T22586] !: left promiscuous mode
[  599.834431][T22610] __nla_validate_parse: 3 callbacks suppressed
[  599.834451][T22610] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.6971'.
[  600.148465][T22619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.472327][   T54] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  602.716610][T22697] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7007'.
[  602.723493][T22697] hsr_slave_0: left promiscuous mode
[  602.736532][T22697] hsr_slave_1: left promiscuous mode
[  602.919029][T22705] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7011'.
[  602.925225][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7011'.
[  603.047361][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7018'.
[  603.308806][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7029'.
[  603.407334][T22750] netlink: 'syz.2.7033': attribute type 19 has an invalid length.
[  603.411779][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7033'.
[  603.423664][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7033'.
[  603.426785][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7033'.
[  603.433756][T22750] netlink: 'syz.2.7033': attribute type 4 has an invalid length.
[  603.446268][T22750] netlink: 'syz.2.7033': attribute type 1 has an invalid length.
[  603.450519][T22750] netlink: 'syz.2.7033': attribute type 2 has an invalid length.
[  606.243777][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  608.453212][T22792] delete_channel: no stack
[  608.728390][T22808] netlink: 'syz.2.7056': attribute type 2 has an invalid length.
[  611.931135][T22812] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7060'.
[  611.947540][T22812] infiniband: Added to hash: ib_dev=ffff8881acf74000 (0)() ndev=ffff8881063f2000 (32)(lo)
[  611.956385][T22812] lo speed is unknown, defaulting to 1000
[  611.984506][T22812] lo speed is unknown, defaulting to 1000
[  611.992331][T22812] lo speed is unknown, defaulting to 1000
[  612.264126][T22812] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  612.460325][T22812] lo speed is unknown, defaulting to 1000
[  612.516609][T22812] lo speed is unknown, defaulting to 1000
[  612.554334][T22812] lo speed is unknown, defaulting to 1000
[  613.510418][T22868] netlink: 'syz.7.7082': attribute type 1 has an invalid length.
[  613.513333][T22868] netlink: 'syz.7.7082': attribute type 1 has an invalid length.
[  613.888049][T22877] delete_channel: no stack
[  614.129610][T22897] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7091'.
[  614.898312][T22933] netlink: 'syz.2.7108': attribute type 10 has an invalid length.
[  616.460919][T22979] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.7131'.
[  616.859218][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7137'.
[  617.028205][T22997] netlink: 'syz.2.7142': attribute type 1 has an invalid length.
[  617.591692][T23037] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  617.659527][T23039] netlink: 'syz.9.7157': attribute type 10 has an invalid length.
[  617.662687][T23039] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7157'.
[  617.683593][T23039] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  618.020611][T23054] lo speed is unknown, defaulting to 1000
[  619.434165][T23082] syzkaller0: entered promiscuous mode
[  619.436102][T23082] syzkaller0: entered allmulticast mode
[  619.450484][T23094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  621.062220][T23098] : entered promiscuous mode
[  621.196997][T23113] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.7189'.
[  623.027316][T23171] netlink: 'syz.7.7209': attribute type 21 has an invalid length.
[  623.032909][T23171] netlink: 'syz.7.7209': attribute type 6 has an invalid length.
[  623.035822][T23171] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7209'.
[  623.147373][T23181] netlink: 'syz.7.7215': attribute type 1 has an invalid length.
[  623.207811][T23188] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.7218'.
[  623.358063][T23198] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7223'.
[  623.376093][T23199] netlink: 62967 bytes leftover after parsing attributes in process `syz.9.7221'.
[  623.442825][T23203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7225'.
[  623.459972][T23204] delete_channel: no stack
[  623.594796][T23211] netlink: 'syz.2.7229': attribute type 1 has an invalid length.
[  625.048157][T23270] netlink: 'syz.9.7256': attribute type 10 has an invalid length.
[  625.056901][T23270] veth0_vlan: left promiscuous mode
[  625.086863][T23270] veth0_vlan: entered promiscuous mode
[  625.158250][T23270] team0: Device veth0_vlan failed to register rx_handler
[  625.887695][T23270] syz.9.7256 (23270) used greatest stack depth: 16648 bytes left
[  625.901766][T23274] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7258'.
[  625.904456][T23274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  626.137636][T23290] netlink: 'syz.2.7263': attribute type 21 has an invalid length.
[  626.150158][T23290] IPv6: NLM_F_CREATE should be specified when creating new route
[  626.169004][T23290] netlink: 'syz.2.7263': attribute type 3 has an invalid length.
[  627.165920][T23349] netlink: 'syz.9.7278': attribute type 62 has an invalid length.
[  627.168435][T23349] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7278'.
[  627.238840][T23347] netdevsim netdevsim7 : renamed from netdevsim0
[  629.269519][T23407] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7300'.
[  629.273058][T23407] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7300'.
[  629.770334][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  629.772814][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  630.923937][T23447] netlink: 'syz.7.7320': attribute type 2 has an invalid length.
[  630.926213][T23447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7320'.
[  630.991287][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7319'.
[  630.994742][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7319'.
[  631.438146][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  631.450724][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  631.454406][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  631.461845][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  631.476517][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  631.523866][T23463] lo speed is unknown, defaulting to 1000
[  631.648547][T23474] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7331'.
[  631.676920][T23463] chnl_net:caif_netlink_parms(): no params data found
[  631.770437][T23463] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.776381][T23463] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.779123][T23463] bridge_slave_0: entered allmulticast mode
[  631.782532][T23463] bridge_slave_0: entered promiscuous mode
[  631.789322][T23463] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.791667][T23463] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.793949][T23463] bridge_slave_1: entered allmulticast mode
[  631.798419][T23463] bridge_slave_1: entered promiscuous mode
[  631.842799][T23463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.851650][T23463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.891634][T23463] team0: Port device team_slave_0 added
[  631.898015][T23463] team0: Port device team_slave_1 added
[  631.952111][T23484] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7334'.
[  632.073248][T23463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.075474][T23463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.098887][T23463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.105700][T23463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.108462][T23463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.124480][T23463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.229484][T23463] hsr_slave_0: entered promiscuous mode
[  632.234992][T23463] hsr_slave_1: entered promiscuous mode
[  632.238534][T23463] debugfs: 'hsr0' already exists in 'hsr'
[  632.240955][T23463] Cannot create hsr debugfs directory
[  632.254806][T23494] netlink: 'syz.9.7338': attribute type 10 has an invalid length.
[  632.286635][T23494] geneve0: entered promiscuous mode
[  632.352098][T23494] geneve0: entered allmulticast mode
[  632.367184][T23494] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  632.403948][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.432935][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.451202][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  632.470862][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  632.833408][T23526] netlink: 'syz.7.7349': attribute type 21 has an invalid length.
[  633.277615][T23463] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  633.518748][ T5808] Bluetooth: hci2: command tx timeout
[  635.287161][T23463] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  635.308551][T23463] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  635.326878][T23463] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  635.335538][T23563] netlink: 'syz.9.7359': attribute type 1 has an invalid length.
[  635.511302][T23463] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.548219][T23463] 8021q: adding VLAN 0 to HW filter on device team0
[  635.600725][T15365] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.603067][T15365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.608852][ T5808] Bluetooth: hci2: command tx timeout
[  635.671546][T15365] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.673905][T15365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.917703][T23463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.084007][T23463] veth0_vlan: entered promiscuous mode
[  636.140225][T23463] veth1_vlan: entered promiscuous mode
[  636.195629][T23463] veth0_macvtap: entered promiscuous mode
[  636.203204][T23463] veth1_macvtap: entered promiscuous mode
[  636.224894][T23463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.234529][T23463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.244819][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  637.678790][ T5808] Bluetooth: hci2: command tx timeout
[  638.346312][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.350023][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.352723][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.519624][ T6350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.521880][ T6350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.543549][  T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.545866][  T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.705858][T23614] netlink: 'syz.0.7325': attribute type 2 has an invalid length.
[  638.709292][T23614] netlink: 'syz.0.7325': attribute type 1 has an invalid length.
[  638.971665][T23635] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  638.975212][T23635] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  639.763144][ T5808] Bluetooth: hci2: command tx timeout
[  640.221159][T23700] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7395'.
[  640.226437][T23694] delete_channel: no stack
[  640.366950][T23710] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7398'.
[  640.491477][T23720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.600749][T23732] : entered promiscuous mode
[  641.635001][T23745] netlink: 180 bytes leftover after parsing attributes in process `syz.7.7413'.
[  641.795175][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.072885][T23774] netlink: 'syz.0.7427': attribute type 1 has an invalid length.
[  642.151747][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7428'.
[  642.262400][T23783] nbd: couldn't find a device at index 49663
[  642.654825][T23804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.794052][T23812] netlink: 'syz.0.7443': attribute type 2 has an invalid length.
[  642.796338][T23812] netlink: 'syz.0.7443': attribute type 8 has an invalid length.
[  642.798871][T23812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7443'.
[  642.916826][T23821] : renamed from bond_slave_0
[  644.357314][T23869] netlink: 'syz.9.7469': attribute type 1 has an invalid length.
[  644.368599][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7469'.
[  644.447932][T23872] netlink: 'syz.7.7468': attribute type 2 has an invalid length.
[  644.457242][T23872] netlink: 'syz.7.7468': attribute type 1 has an invalid length.
[  644.466524][T23872] netlink: 'syz.7.7468': attribute type 1 has an invalid length.
[  644.868261][T23902] netlink: 'syz.0.7485': attribute type 4 has an invalid length.
[  645.036522][T23919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  645.046125][T23919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  645.543034][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7499'.
[  645.568781][T23937] blkio.reset_stats is deprecated
[  646.033523][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7506'.
[  646.130919][T23963] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7511'.
[  646.703024][T23988] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7522'.
[  646.933648][T23994] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7525'.
[  647.297493][   T33] audit: type=1107 audit(1770143017.180:7): pid=24017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  648.862535][T24048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7549'.
[  648.865929][T24048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7549'.
[  649.001053][T24054] delete_channel: no stack
[  649.003383][T24054] delete_channel: no stack
[  649.397762][T24086] sysfs: Unknown parameter 'obj_type'
[  649.626974][T24088] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7567'.
[  650.655758][T24114] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.7577'.
[  650.718263][T24106] Set syz1 is full, maxelem 65536 reached
[  650.741815][T24116] netlink: 'syz.7.7578': attribute type 1 has an invalid length.
[  650.744276][T24116] netlink: 'syz.7.7578': attribute type 4 has an invalid length.
[  650.746565][T24116] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.7578'.
[  651.119708][T24126] netlink: 'syz.7.7583': attribute type 27 has an invalid length.
[  651.122433][T24126] netlink: 'syz.7.7583': attribute type 4 has an invalid length.
[  651.125426][T24126] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7583'.
[  651.420487][T24141] sctp: [Deprecated]: syz.0.7589 (pid 24141) Use of int in max_burst socket option deprecated.
[  651.420487][T24141] Use struct sctp_assoc_value instead
[  651.627292][T24147] netlink: 'syz.0.7592': attribute type 21 has an invalid length.
[  651.637641][T24147] IPv6: NLM_F_CREATE should be specified when creating new route
[  652.528271][T24171] nr0: port 1(hsr0) entered blocking state
[  652.538433][T24171] nr0: port 1(hsr0) entered disabled state
[  652.552979][T24171] hsr0: entered allmulticast mode
[  652.554843][T24171] hsr_slave_0: entered allmulticast mode
[  652.556759][T24171] hsr_slave_1: entered allmulticast mode
[  652.560320][T24171] hsr0: entered promiscuous mode
[  652.607996][T24178] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7605'.
[  652.652482][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7607'.
[  653.574066][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7621'.
[  654.200403][T24239] netlink: 1195 bytes leftover after parsing attributes in process `syz.7.7633'.
[  655.964088][T24317] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7672'.
[  656.432985][T24336] netlink: 'syz.7.7680': attribute type 9 has an invalid length.
[  656.435459][T24336] netlink: 'syz.7.7680': attribute type 11 has an invalid length.
[  656.438035][T24336] netlink: 'syz.7.7680': attribute type 12 has an invalid length.
[  656.445329][T24336] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.7680'.
[  656.449050][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7680'.
[  656.587317][T24342] netlink: 'syz.7.7683': attribute type 4 has an invalid length.
[  656.893696][T24354] netlink: 'syz.0.7687': attribute type 33 has an invalid length.
[  656.904230][T24354] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7687'.
[  657.526270][T24380] netlink: 'syz.0.7699': attribute type 13 has an invalid length.
[  657.671953][T24395] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7706'.
[  657.675458][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7706'.
[  657.678217][T24395] tc_dump_action: action bad kind
[  657.789827][T24402] mac80211_hwsim hwsim61 ..c: renamed from wlan1 (while UP)
[  658.382206][T24416] netlink: 'syz.0.7716': attribute type 9 has an invalid length.
[  658.516275][T24426] netlink: 'syz.0.7720': attribute type 1 has an invalid length.
[  658.528846][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7720'.
[  659.107445][T24432] : entered promiscuous mode
[  659.801959][T24459] netlink: 'syz.7.7735': attribute type 30 has an invalid length.
[  661.081700][T24488] syzkaller0: entered promiscuous mode
[  661.088861][T24488] syzkaller0: entered allmulticast mode
[  664.593735][T24533] xt_l2tp: missing protocol rule (udp|l2tpip)
[  665.009641][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  665.019476][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  665.025042][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  665.033689][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  665.039153][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  665.073202][T24537] lo speed is unknown, defaulting to 1000
[  665.208068][T24537] chnl_net:caif_netlink_parms(): no params data found
[  665.624986][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.668229][T24537] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.676670][T24537] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.689869][T24537] bridge_slave_0: entered allmulticast mode
[  665.694336][T24537] bridge_slave_0: entered promiscuous mode
[  665.736744][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.756954][T24537] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.766183][T24537] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.770650][T24537] bridge_slave_1: entered allmulticast mode
[  665.775646][T24537] bridge_slave_1: entered promiscuous mode
[  665.844573][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.857140][T24537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.860868][T24563] netlink: 'syz.0.7778': attribute type 4 has an invalid length.
[  665.869386][T24537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.934768][T24537] team0: Port device team_slave_0 added
[  665.959796][T24537] team0: Port device team_slave_1 added
[  665.977594][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.072268][T24537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.074836][T24537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.084203][T24537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.096017][T24537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.098528][T24537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.107109][T24537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.336251][T24537] hsr_slave_0: entered promiscuous mode
[  666.346408][T24537] hsr_slave_1: entered promiscuous mode
[  666.351653][T24537] debugfs: 'hsr0' already exists in 'hsr'
[  666.354477][T24537] Cannot create hsr debugfs directory
[  666.356629][   T12] bridge_slave_1: left allmulticast mode
[  666.361530][   T12] bridge_slave_1: left promiscuous mode
[  666.363872][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.378751][   T12] bridge_slave_0: left allmulticast mode
[  666.380857][   T12] bridge_slave_0: left promiscuous mode
[  666.387742][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.735035][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  666.738532][   T12] geneve0 (unregistering): left allmulticast mode
[  666.802169][   T12] bond0 (unregistering): (slave 5): Releasing backup interface
[  666.805441][   T12] : left promiscuous mode
[  666.807761][   T12] : left allmulticast mode
[  666.810806][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.814597][   T12] bond_slave_1: left promiscuous mode
[  666.817006][   T12] bond_slave_1: left allmulticast mode
[  666.819098][   T12] bond0 (unregistering): Released all slaves
[  666.883085][   T12] : left promiscuous mode
[  666.920622][   T12] : left promiscuous mode
[  666.926775][T24593] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7789'.
[  667.076715][T24599] netlink: 'syz.7.7791': attribute type 46 has an invalid length.
[  667.118887][   T54] Bluetooth: hci3: command tx timeout
[  667.311087][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7793'.
[  667.411932][   T12] hsr_slave_0: left promiscuous mode
[  667.414599][   T12] hsr_slave_1: left promiscuous mode
[  667.521439][T24624] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7797'.
[  667.815811][   T12] team0 (unregistering): Port device team_slave_1 removed
[  667.845973][   T12] team0 (unregistering): Port device team_slave_0 removed
[  668.106169][T24622] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7796'.
[  669.083277][T24653] netlink: 'syz.0.7804': attribute type 2 has an invalid length.
[  669.086022][T24653] netlink: 'syz.0.7804': attribute type 1 has an invalid length.
[  669.088616][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7804'.
[  669.200762][   T54] Bluetooth: hci3: command tx timeout
[  669.307261][T24663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7807'.
[  669.423831][T24537] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  669.435388][T24537] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  669.452159][T24537] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  669.463552][T24537] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  669.566624][T24685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7811'.
[  669.598591][T24537] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.624382][T24537] 8021q: adding VLAN 0 to HW filter on device team0
[  669.630979][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.633101][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.653104][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.655203][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.736758][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7812'.
[  669.891181][T24702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7813'.
[  669.893930][T24702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  669.916675][T24537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.192265][T24537] veth0_vlan: entered promiscuous mode
[  670.207316][T24537] veth1_vlan: entered promiscuous mode
[  670.247592][T24537] veth0_macvtap: entered promiscuous mode
[  670.256198][T24537] veth1_macvtap: entered promiscuous mode
[  670.276042][T24537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.286160][T24537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.295962][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.309177][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.314914][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.317810][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.458193][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.462990][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.495522][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.498579][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.666476][T24752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7826'.
[  670.776426][T24765] tipc: Enabling of bearer <!{:\> rejected, media not registered
[  671.278861][   T54] Bluetooth: hci3: command tx timeout
[  671.431134][T24825] : renamed from team_slave_1 (while UP)
[  672.016872][T24855] netlink: 'syz.0.7856': attribute type 2 has an invalid length.
[  672.023971][T24855] __nla_validate_parse: 2 callbacks suppressed
[  672.023987][T24855] netlink: 134 bytes leftover after parsing attributes in process `syz.0.7856'.
[  672.046525][T24855] netlink: 264 bytes leftover after parsing attributes in process `syz.0.7856'.
[  672.053925][T24855] netlink: 'syz.0.7856': attribute type 2 has an invalid length.
[  672.057632][T24855] netlink: 134 bytes leftover after parsing attributes in process `syz.0.7856'.
[  672.162939][T24869] netlink: 260 bytes leftover after parsing attributes in process `syz.7.7864'.
[  672.469851][T24883] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7867'.
[  672.482025][T24883] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7867'.
[  672.602836][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7865'.
[  672.969040][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7872'.
[  673.361736][   T54] Bluetooth: hci3: command tx timeout
[  674.053623][T24950] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.7900'.
[  674.056591][T24950] veth0_to_bond: default FDB implementation only supports local addresses
[  674.073890][T24952] netlink: 822 bytes leftover after parsing attributes in process `syz.4.7902'.
[  674.076668][T24952] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0
[  689.377295][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 7477707448 wd_nsec: 7477707460
[  689.531591][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  689.536117][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  689.540003][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  689.549417][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  689.553375][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  689.606059][T25012] lo speed is unknown, defaulting to 1000
[  689.782513][T25012] chnl_net:caif_netlink_parms(): no params data found
[  689.884110][T25012] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.887071][T25012] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.890438][T25012] bridge_slave_0: entered allmulticast mode
[  689.894698][T25012] bridge_slave_0: entered promiscuous mode
[  689.902371][T25012] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.905218][T25012] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.907644][T25012] bridge_slave_1: entered allmulticast mode
[  689.911446][T25012] bridge_slave_1: entered promiscuous mode
[  689.957697][T25012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.972137][T25012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.013646][T25012] team0: Port device team_slave_0 added
[  690.020682][T25012] team0: Port device team_slave_1 added
[  690.052345][T25012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.054956][T25012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.068263][T25012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.081671][T25012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.084257][T25012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.094352][T25012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.147064][T25012] hsr_slave_0: entered promiscuous mode
[  690.152168][T25012] hsr_slave_1: entered promiscuous mode
[  690.155661][T25012] debugfs: 'hsr0' already exists in 'hsr'
[  690.157785][T25012] Cannot create hsr debugfs directory
[  690.653917][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  690.657835][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  690.661107][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  690.664283][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  690.667045][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  690.702102][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  690.707015][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  690.710091][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  690.713271][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  690.716228][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  691.219997][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  691.222585][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  691.601742][ T5808] Bluetooth: hci1: command tx timeout
[  692.718989][ T5808] Bluetooth: hci4: command tx timeout
[  692.798982][ T5808] Bluetooth: hci5: command tx timeout
[  693.679081][ T5808] Bluetooth: hci1: command tx timeout
[  694.799230][ T5808] Bluetooth: hci4: command tx timeout
[  694.879012][ T5808] Bluetooth: hci5: command tx timeout
[  695.763619][ T5808] Bluetooth: hci1: command tx timeout
[  696.878992][ T5808] Bluetooth: hci4: command tx timeout
[  696.959629][ T5808] Bluetooth: hci5: command tx timeout
[  699.298880][ T5808] Bluetooth: hci1: command tx timeout
[  702.404866][ T5808] Bluetooth: hci4: command tx timeout
[  702.406981][ T5808] Bluetooth: hci5: command tx timeout
[  750.290024][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  750.295625][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  750.299229][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  750.302294][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  750.305218][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  751.142374][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  751.160740][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  751.165257][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  751.173447][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  751.178319][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  751.297498][ T5808] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  751.307180][ T5808] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  751.312185][ T5808] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  751.316583][ T5808] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  751.320918][ T5808] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  752.318805][ T5808] Bluetooth: hci6: command tx timeout
[  753.280956][ T5808] Bluetooth: hci7: command tx timeout
[  753.358855][ T5808] Bluetooth: hci8: command tx timeout
[  754.398900][ T5808] Bluetooth: hci6: command tx timeout
[  754.722989][ T5808] Bluetooth: hci2: command 0x0406 tx timeout
[  755.367026][ T5808] Bluetooth: hci7: command tx timeout
[  755.438827][ T5808] Bluetooth: hci8: command tx timeout
[  756.478795][ T5808] Bluetooth: hci6: command tx timeout
[  757.439160][ T5808] Bluetooth: hci7: command tx timeout
[  757.518776][ T5808] Bluetooth: hci8: command tx timeout
[  758.558888][ T5808] Bluetooth: hci6: command tx timeout
[  759.519460][ T5808] Bluetooth: hci7: command tx timeout
[  759.608200][ T5808] Bluetooth: hci8: command tx timeout
[  802.218655][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  802.221183][    C0] rcu: 	0-....: (9262 ticks this GP) idle=ca04/1/0x4000000000000000 softirq=108878/108878 fqs=4851
[  802.226897][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  802.229460][    C0] rcu: 	 number:  1193345          0            0
[  802.231933][    C0] rcu: 	cputime:    33864      18624           40   ==> 52490(ms)
[  802.234943][    C0] rcu: 	(t=10500 jiffies g=106005 q=1961 ncpus=2)
[  802.237466][    C0] CPU: 0 UID: 0 PID: 24975 Comm: syz.4.7911 Not tainted syzkaller #0 PREEMPT(full) 
[  802.237485][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  802.237497][    C0] RIP: 0010:memset_orig+0x7/0xb0
[  802.237527][    C0] Code: 89 d1 f3 aa 4c 89 c8 e9 57 bd 02 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce <48> b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75
[  802.237542][    C0] RSP: 0018:ffffc90000006dd0 EFLAGS: 00000202
[  802.237556][    C0] RAX: ffffc90000006f01 RBX: ffffc90000006f40 RCX: 0000000000000000
[  802.237563][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000006f58
[  802.237572][    C0] RBP: dffffc0000000000 R08: ffffc90000006f67 R09: 1ffff92000000dec
[  802.237581][    C0] R10: ffffc90000006f58 R11: fffff52000000ded R12: ffffc90000006f58
[  802.237588][    C0] R13: 1ffff92000000de3 R14: ffffc90000006f08 R15: ffffc90000006f50
[  802.237596][    C0] FS:  00007f73565ec6c0(0000) GS:ffff88818e0a4000(0000) knlGS:0000000000000000
[  802.237604][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  802.237611][    C0] CR2: 00007ffdb3f8c8b8 CR3: 000000011002e000 CR4: 00000000000006f0
[  802.237645][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  802.237653][    C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  802.237660][    C0] Call Trace:
[  802.237668][    C0]  <IRQ>
[  802.237673][    C0]  unwind_next_frame+0xeae/0x23c0
[  802.237698][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  802.237711][    C0]  ? __unwind_start+0xf7/0x760
[  802.237728][    C0]  __unwind_start+0x5b8/0x760
[  802.237746][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  802.237768][    C0]  arch_stack_walk+0xe3/0x150
[  802.237791][    C0]  ? arch_stack_walk+0xe3/0x150
[  802.237807][    C0]  stack_trace_save+0xa9/0x100
[  802.237824][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  802.237849][    C0]  kasan_save_track+0x3e/0x80
[  802.237900][    C0]  __kasan_kmalloc+0x93/0xb0
[  802.237915][    C0]  __kmalloc_noprof+0x35c/0x760
[  802.237927][    C0]  ? cfg80211_inform_single_bss_data+0x952/0x1b70
[  802.237947][    C0]  ? __kmalloc_noprof+0x1b8/0x760
[  802.237964][    C0]  cfg80211_inform_single_bss_data+0x952/0x1b70
[  802.237991][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  802.238005][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  802.238048][    C0]  ? cfg80211_inform_bss_data+0x23d/0x3be0
[  802.238072][    C0]  cfg80211_inform_bss_data+0x24d/0x3be0
[  802.238115][    C0]  ? ktime_get+0x45/0x200
[  802.238136][    C0]  ? ktime_get+0x45/0x200
[  802.238152][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  802.238170][    C0]  ? kvm_clock_get_cycles+0x47/0x60
[  802.238188][    C0]  ? ktime_get+0x1d2/0x200
[  802.238205][    C0]  ? lapic_next_event+0x11/0x20
[  802.238217][    C0]  ? clockevents_program_event+0x247/0x350
[  802.238232][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  802.238250][    C0]  ? sched_clock+0x3f/0x60
[  802.238310][    C0]  ? sched_clock_cpu+0x74/0x440
[  802.238326][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  802.238344][    C0]  ? irqentry_exit+0x59e/0x620
[  802.238356][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  802.238394][    C0]  cfg80211_inform_bss_frame_data+0x3c7/0x760
[  802.238419][    C0]  ? ieee80211_bss_info_update+0x316/0xa40
[  802.238438][    C0]  ieee80211_bss_info_update+0x794/0xa40
[  802.238458][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  802.238494][    C0]  ieee80211_scan_rx+0x552/0xa40
[  802.238518][    C0]  ieee80211_rx_list+0x29e5/0x3710
[  802.238541][    C0]  ? sched_clock_cpu+0x74/0x440
[  802.238568][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  802.238600][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  802.238622][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  802.238635][    C0]  ? ieee80211_rx_napi+0x118/0x3e0
[  802.238656][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  802.238672][    C0]  ieee80211_rx_napi+0x1b1/0x3e0
[  802.238691][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  802.238706][    C0]  ? _raw_spin_unlock_irqrestore+0x47/0x80
[  802.238733][    C0]  ? skb_dequeue+0x124/0x160
[  802.238754][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  802.238783][    C0]  tasklet_action_common+0x2da/0x4b0
[  802.238807][    C0]  handle_softirqs+0x22a/0x870
[  802.238834][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  802.238861][    C0]  __irq_exit_rcu+0x5f/0x150
[  802.238882][    C0]  irq_exit_rcu+0x9/0x30
[  802.238901][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  802.238925][    C0]  </IRQ>
[  802.238930][    C0]  <TASK>
[  802.238936][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  802.238955][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  802.238979][    C0] Code: f7 e8 9d 37 10 f6 f7 c3 00 02 00 00 74 05 e8 10 ba 3a f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 74 28 02 f6 65 8b 05 3d e4 66 07 85 c0 74 18 5b 41 5e c3 cc cc
[  802.238990][    C0] RSP: 0018:ffffc90004507588 EFLAGS: 00000206
[  802.239005][    C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001
[  802.239015][    C0] RDX: 0000000000000007 RSI: ffffffff8dcf1f4e RDI: 0000000000000001
[  802.239024][    C0] RBP: ffffc90004507628 R08: ffffffff8ff0e0b7 R09: 1ffffffff1fe1c16
[  802.239034][    C0] R10: dffffc0000000000 R11: fffffbfff1fe1c17 R12: ffff8881022dbb40
[  802.239062][    C0] R13: ffff888160416dc0 R14: ffff8881022dbb40 R15: 0000000000000000
[  802.239100][    C0]  __slab_free+0x211/0x2b0
[  802.239133][    C0]  qlist_free_all+0x97/0x100
[  802.239150][    C0]  ? vm_area_dup+0x2b/0x680
[  802.239167][    C0]  kasan_quarantine_reduce+0x148/0x160
[  802.239187][    C0]  __kasan_slab_alloc+0x22/0x80
[  802.239207][    C0]  kmem_cache_alloc_noprof+0x2bc/0x650
[  802.239230][    C0]  ? vm_area_dup+0x2b/0x680
[  802.239244][    C0]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  802.239298][    C0]  vm_area_dup+0x2b/0x680
[  802.239318][    C0]  dup_mmap+0x8b1/0x1d90
[  802.239355][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  802.239382][    C0]  ? get_user_ns+0x12/0x1f0
[  802.239419][    C0]  copy_mm+0x13b/0x4b0
[  802.239438][    C0]  copy_process+0x18b5/0x3cf0
[  802.239472][    C0]  ? copy_process+0x921/0x3cf0
[  802.239507][    C0]  ? __pfx_copy_process+0x10/0x10
[  802.239543][    C0]  kernel_clone+0x248/0x8e0
[  802.239564][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  802.239590][    C0]  ? do_futex+0x395/0x420
[  802.239611][    C0]  __x64_sys_clone+0x1b6/0x230
[  802.239631][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  802.239662][    C0]  ? rcu_is_watching+0x15/0xb0
[  802.239691][    C0]  do_syscall_64+0x14d/0xf80
[  802.239708][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.239728][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.239743][    C0] RIP: 0033:0x7f735579acb9
[  802.239761][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.239774][    C0] RSP: 002b:00007f73565ebfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  802.239788][    C0] RAX: ffffffffffffffda RBX: 00007f7355a15fa0 RCX: 00007f735579acb9
[  802.239798][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000000
[  802.239807][    C0] RBP: 00007f7355808bf7 R08: 0000200000001340 R09: 0000200000001340
[  802.239816][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  802.239825][    C0] R13: 00007f7355a16038 R14: 00007f7355a15fa0 R15: 00007ffdefa15ae8
[  802.239852][    C0]  </TASK>
[  803.485412][    C0] sched: DL replenish lagged too much
[  810.322621][T25015] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  810.327300][T25015] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  810.332098][T25015] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  810.334935][T25015] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  810.337387][T25015] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  811.408368][T25050] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  811.412491][T25050] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  811.415890][T25050] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  811.418605][T25050] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  811.421821][T25050] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  811.473014][T25055] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  811.478616][T25055] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  811.482682][T25055] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  811.486349][T25055] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  811.492552][T25055] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
