last executing test programs:

14m39.91163944s ago: executing program 32 (id=137):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300500000000b000100736f636b657400000800024000000001"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)

14m31.4808959s ago: executing program 33 (id=298):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}], 0x20}, 0xe900)
close(0x3)

13m38.48470747s ago: executing program 34 (id=1206):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2040)
ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0)

13m26.281988759s ago: executing program 35 (id=1152):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000061107f00000000009500000000000000b65565abac089e7255d5e421fde3804369c602de0c35949989408e828faeef555a10b972f701d52f2db04ed49dbcffa9cab510b9dca4fb7f0c83cb239db203bebd9c0d8f2781c1787eee75b871ba55fc785b"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2c, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f00000002c0)}], 0x3}, 0x12001)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x0)
socket$isdn(0x22, 0x2, 0x25)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7f)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0xb, 0x1, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8104)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
getpid()

13m16.907257761s ago: executing program 36 (id=1231):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x42, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x3, 0x2, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x4)

13m3.471280817s ago: executing program 37 (id=1540):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x6, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010)

12m52.054303332s ago: executing program 38 (id=1753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)

12m50.153908194s ago: executing program 39 (id=1779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d80)=ANY=[@ANYBLOB="d41200002c0007010000000000000000017c00000c0001800600060080d80000b41202"], 0x12d4}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

11m43.886299647s ago: executing program 40 (id=2891):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
gettid()
syz_clone(0x40320000, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440))
sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="6337998ee8ee2d9deb22", @ANYRES64=r0, @ANYBLOB, @ANYBLOB], 0x58, 0x24000010}, 0x20000000)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="013701371036"})

11m1.335097486s ago: executing program 41 (id=3369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x6}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)

10m44.659342302s ago: executing program 42 (id=3785):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$cgroup_subtree(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r5 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r5, 0x0, 0x8010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

9m51.608778511s ago: executing program 43 (id=4638):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0xf)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xaded, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9m35.251691498s ago: executing program 44 (id=4828):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m5.600746132s ago: executing program 45 (id=5114):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0xb, 0x100, 0xffffffffffffffff, 0xffffffff}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffef}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfdef)

8m26.086553141s ago: executing program 46 (id=5862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

6m26.428087212s ago: executing program 7 (id=8202):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000003a40)=ANY=[], 0x12)

6m26.378706185s ago: executing program 7 (id=8204):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90)

6m26.329161631s ago: executing program 7 (id=8206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x1, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x10)

6m26.260320941s ago: executing program 7 (id=8208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640202000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0)

6m26.185878787s ago: executing program 7 (id=8211):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
socket$nl_route(0x10, 0x3, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

6m26.047681127s ago: executing program 7 (id=8214):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/208, 0xd0}], 0x1}, 0x2002)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)

6m10.912110992s ago: executing program 47 (id=8214):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/208, 0xd0}], 0x1}, 0x2002)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)

6m8.866725049s ago: executing program 4 (id=8451):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80040000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

6m8.488940908s ago: executing program 4 (id=8453):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4)

6m8.238563487s ago: executing program 4 (id=8454):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

6m8.157804136s ago: executing program 4 (id=8455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x58, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbda, 0x0, @perf_bp={0x0, 0x1}, 0x8184, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x4d}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, 0x0, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1000000, 0x4}, 0x10}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x436, 0x3}, 0x0, 0x2, 0x1, 0x0, 0x2, 0x0, 0x54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xe4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)

6m7.92049617s ago: executing program 4 (id=8456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000)

6m7.868632997s ago: executing program 4 (id=8457):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911080230000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)

6m7.785149474s ago: executing program 48 (id=8457):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911080230000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)

5m10.726417185s ago: executing program 6 (id=9538):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0)

5m10.663884659s ago: executing program 6 (id=9539):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0x50}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x83d00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

5m10.663516864s ago: executing program 6 (id=9540):
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x101, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x4401, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x110000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0), 0x1}, 0x10140)

5m10.548804447s ago: executing program 6 (id=9541):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef)

5m10.547601364s ago: executing program 6 (id=9542):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa123, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

5m10.42716635s ago: executing program 6 (id=9544):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)

4m55.182188203s ago: executing program 49 (id=9544):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)

3m43.344462012s ago: executing program 9 (id=10937):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94)

3m43.344358376s ago: executing program 9 (id=10938):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041)
recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

3m43.212895382s ago: executing program 2 (id=10941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180001ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

3m43.157786592s ago: executing program 2 (id=10945):
perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0xfa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x4, 0xc8, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x1000b, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)

3m43.086397857s ago: executing program 2 (id=10947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x5, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41ba2b30}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

3m43.038231789s ago: executing program 2 (id=10948):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)

3m42.469668918s ago: executing program 2 (id=10953):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x3, 0x4000000, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x9}, 0x400, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

3m42.403657786s ago: executing program 9 (id=10954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18}, 0x8040)

3m42.35492917s ago: executing program 9 (id=10955):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x58f, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

3m42.15679098s ago: executing program 9 (id=10956):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0x9}, 0x92c, 0x2, 0x0, 0x1, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

3m42.078320254s ago: executing program 9 (id=10958):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10001}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x4, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x8)
close(r1)

3m41.573134397s ago: executing program 2 (id=10961):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x1946}, 0x590, 0x0, 0x0, 0x5, 0x80007fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a082, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000007c0)=0x1)
sendmsg$inet(r1, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @random="72df853896af"})
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x18}, 0x20)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x60, 0x1406, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x90)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000050000000000ee000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r8, 0xffffffffffffffff, 0x18, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @empty}, 0x80, 0x0}, 0x40844)

3m26.774404438s ago: executing program 50 (id=10958):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10001}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x4, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x8)
close(r1)

3m26.168127793s ago: executing program 51 (id=10961):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x1946}, 0x590, 0x0, 0x0, 0x5, 0x80007fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a082, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000007c0)=0x1)
sendmsg$inet(r1, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @random="72df853896af"})
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x18}, 0x20)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x60, 0x1406, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x90)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000050000000000ee000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r8, 0xffffffffffffffff, 0x18, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @empty}, 0x80, 0x0}, 0x40844)

2m2.115137037s ago: executing program 3 (id=12080):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x820d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000000000000000, 0x12)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2m1.515944806s ago: executing program 8 (id=12089):
socketpair(0x22, 0x2, 0x2, &(0x7f0000000200))

2m1.447278741s ago: executing program 8 (id=12091):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

2m1.447001195s ago: executing program 8 (id=12092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)

2m1.377243238s ago: executing program 8 (id=12094):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x105503, 0x4, 0xf, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000081, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844)

2m1.306414872s ago: executing program 8 (id=12096):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x27, 0x14, 0x0, &(0x7f0000000880)="f8c348cc51da29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m1.306152472s ago: executing program 3 (id=12097):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004080)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x725f3228, '\x00', 0x0, 0xffffffffffffffff, 0x2003, 0x1, 0x4}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r1, &(0x7f0000000500), 0x0, 0x4}, 0x20)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000440))
r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x11efa, 0x4, 0x98, 0x8, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x41, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000500000000000000000005000001140007800800080000000089080006400000012505000100060000000500050002000000050004000100000009000211000300686173683a6e65742c6e657400"/96], 0x60}}, 0x0)
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

2m1.306017347s ago: executing program 8 (id=12098):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x66}, 0xffffffffffffffff, 0x0, r1, 0x0)

1m56.405426548s ago: executing program 3 (id=12106):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000290000000b"], 0xf8}, 0x0)

1m56.325258112s ago: executing program 3 (id=12108):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

1m56.325163016s ago: executing program 3 (id=12109):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x2, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m46.076655105s ago: executing program 52 (id=12098):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x66}, 0xffffffffffffffff, 0x0, r1, 0x0)

1m43.780064945s ago: executing program 3 (id=12115):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0x3c}]}, 0x24}], 0x1}, 0x0)

1m43.625966143s ago: executing program 53 (id=12115):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0x3c}]}, 0x24}], 0x1}, 0x0)

34.061666077s ago: executing program 0 (id=12970):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x20000)

34.061230221s ago: executing program 0 (id=12972):
socket$nl_sock_diag(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2000, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0xa970, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000280)="1fc774", &(0x7f0000000400)=@tcp6=r5, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

33.900727322s ago: executing program 0 (id=12978):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xa}, 0x5101, 0x40000004, 0x0, 0x1, 0x0, 0xcc3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x8000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)

31.746731639s ago: executing program 0 (id=12980):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xf05d, 0xffffffffffffffff}, 0xa38, 0xfffff9, 0x0, 0x0, 0x100, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)

31.696920522s ago: executing program 0 (id=12982):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa123, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

31.625204756s ago: executing program 0 (id=12985):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x485, 0x0, 0x0)

25.796614127s ago: executing program 5 (id=13043):
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a00000e100000095"], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000600)=""/143, 0x0, 0x9}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x27, &(0x7f0000000040), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000680)={r2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x3}, 0x28)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$nl_generic(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x38, 0x7d41d458b8e68aa9, 0x70bd2b, 0x25dfdbfc, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r6, 0x1, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
socket$l2tp(0x2, 0x2, 0x73)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r11}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x9, 0x7, 0x7, 0x40, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000140)=""/152, 0x41100, 0x68, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r11], 0x0, 0x10, 0x8000}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

25.723679835s ago: executing program 5 (id=13044):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0)

25.675651565s ago: executing program 5 (id=13045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x8, 0xf}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)

25.615589618s ago: executing program 5 (id=13046):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x51ae, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)={0x18, 0x43, 0x107, 0x2, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0})
socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffc}, 0x8)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0})
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x2, 0x73)

25.496876327s ago: executing program 5 (id=13048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)

25.496503514s ago: executing program 5 (id=13049):
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6200, 0x3ffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
close(0xffffffffffffffff)

22.826728588s ago: executing program 1 (id=13059):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x40408c0)

22.496837953s ago: executing program 1 (id=13060):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140", 0x50}], 0x1}, 0x0)

19.101497812s ago: executing program 1 (id=13061):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadd913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x4, &(0x7f0000000080)=[@mark={{0x10, 0x1, 0x24, 0x80d}}], 0x18}, 0x4000081)

19.016792472s ago: executing program 1 (id=13062):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000020000000200000000030004"], 0x60}}, 0x0)

18.187795403s ago: executing program 1 (id=13063):
socket$kcm(0x21, 0x2, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x180, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x7f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f00000006c0)="e0270300040000000000762f86ddf931e86128db19ae1f5ffbc1e4bfea89fa4fc749e5d7f4130ab5e3064fff5f80cc30e7f50db99113", 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8)

16.007024357s ago: executing program 54 (id=12985):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x485, 0x0, 0x0)

15.026143686s ago: executing program 1 (id=13065):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x114905, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(r1)

10.008989282s ago: executing program 55 (id=13049):
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6200, 0x3ffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
close(0xffffffffffffffff)

0s ago: executing program 56 (id=13065):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x114905, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(r1)

kernel console output (not intermixed with test programs):

663.948748][T29404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  664.019559][T29407] netlink: 'syz.9.9641': attribute type 4 has an invalid length.
[  664.028717][T29407] netlink: 152 bytes leftover after parsing attributes in process `syz.9.9641'.
[  664.042840][T29407] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  665.698457][T29438] netlink: 'syz.9.9656': attribute type 6 has an invalid length.
[  665.721305][T29438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9656'.
[  665.804774][T29443] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9658'.
[  666.513141][T29490] netlink: 'syz.9.9680': attribute type 10 has an invalid length.
[  667.668388][T29524] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9696'.
[  668.253990][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9707'.
[  668.256854][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9707'.
[  668.259663][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9707'.
[  671.878334][T17951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  671.882691][T17951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  671.886423][T17951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  671.889859][T17951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  671.892840][T17951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  672.748472][T29561] wlan1 speed is unknown, defaulting to 1000
[  672.839326][T29573] netlink: 152 bytes leftover after parsing attributes in process `syz.8.9717'.
[  672.904836][T29561] chnl_net:caif_netlink_parms(): no params data found
[  673.024716][T29561] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.030686][T29561] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.037821][T29561] bridge_slave_0: entered allmulticast mode
[  673.043456][T29561] bridge_slave_0: entered promiscuous mode
[  673.047952][T29561] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.052246][T29561] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.054541][T29561] bridge_slave_1: entered allmulticast mode
[  673.057498][T29561] bridge_slave_1: entered promiscuous mode
[  673.083937][T29561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.088279][T29561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.126134][T29561] team0: Port device team_slave_0 added
[  673.131739][T29561] team0: Port device team_slave_1 added
[  673.187780][T29561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.191930][T29561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.199837][T29561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.205566][T29561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.208157][T29561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.218842][T29561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.256788][T29561] hsr_slave_0: entered promiscuous mode
[  673.263430][T29561] hsr_slave_1: entered promiscuous mode
[  673.266929][T29561] debugfs: 'hsr0' already exists in 'hsr'
[  673.268759][T29561] Cannot create hsr debugfs directory
[  673.304174][T29603] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9728'.
[  673.307374][T29603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9728'.
[  673.941943][T17951] Bluetooth: hci1: command tx timeout
[  674.060344][T29645] netlink: 'syz.9.9742': attribute type 29 has an invalid length.
[  674.065874][T29649] netlink: 'syz.9.9742': attribute type 29 has an invalid length.
[  674.076405][T29652] netlink: 'syz.9.9742': attribute type 29 has an invalid length.
[  674.087023][T29645] netlink: 'syz.9.9742': attribute type 29 has an invalid length.
[  674.105525][T29561] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  674.125350][T29561] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  674.148107][T29561] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  674.197890][T29561] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  674.246596][T29668] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9745'.
[  674.294015][T29561] 8021q: adding VLAN 0 to HW filter on device bond0
[  674.304955][T29561] 8021q: adding VLAN 0 to HW filter on device team0
[  674.310244][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.312763][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.328125][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.330514][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.648382][T29561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.734112][T29561] veth0_vlan: entered promiscuous mode
[  674.754515][T29561] veth1_vlan: entered promiscuous mode
[  674.805221][T29561] veth0_macvtap: entered promiscuous mode
[  674.823085][T29561] veth1_macvtap: entered promiscuous mode
[  674.858312][T29561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  674.881722][T29561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.902413][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.912140][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.918454][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.297946][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.457640][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.470259][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.559869][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.563872][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.891263][T29734] netlink: 'syz.2.9755': attribute type 322 has an invalid length.
[  676.030911][T17951] Bluetooth: hci1: command tx timeout
[  676.262606][   T33] audit: type=1107 audit(1775224907.435:6): pid=29767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  676.278860][T29770] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9768'.
[  676.309255][T29774] netlink: 'syz.8.9770': attribute type 1 has an invalid length.
[  676.524139][T29790] netlink: 'syz.8.9778': attribute type 9 has an invalid length.
[  676.527402][T29790] netlink: 'syz.8.9778': attribute type 11 has an invalid length.
[  676.532793][T29790] netlink: 'syz.8.9778': attribute type 12 has an invalid length.
[  676.536203][T29790] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.9778'.
[  676.539371][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9778'.
[  676.707782][T29805] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9785'.
[  676.783449][T29811] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9787'.
[  677.943204][T29845] netlink: 'syz.8.9803': attribute type 21 has an invalid length.
[  677.946471][T29845] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9803'.
[  678.103780][T17951] Bluetooth: hci1: command tx timeout
[  679.125655][T29884] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.129061][T29884] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.139958][T29884] bridge0: entered allmulticast mode
[  679.581702][T29906] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.9829'.
[  680.154283][T29930] pim6reg1: entered allmulticast mode
[  680.181906][T17951] Bluetooth: hci1: command tx timeout
[  680.384712][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9845'.
[  680.503361][T29949] delete_channel: no stack
[  680.674879][T29964] netlink: 4432 bytes leftover after parsing attributes in process `syz.9.9856'.
[  680.738851][T29973] netlink: 62619 bytes leftover after parsing attributes in process `syz.8.9860'.
[  680.862524][T29986] netlink: zone id is out of range
[  680.864170][T29986] netlink: zone id is out of range
[  680.865772][T29986] netlink: zone id is out of range
[  680.867454][T29986] netlink: zone id is out of range
[  680.869131][T29986] netlink: zone id is out of range
[  680.872659][T29986] netlink: zone id is out of range
[  680.874289][T29986] netlink: zone id is out of range
[  680.874295][T29986] netlink: zone id is out of range
[  680.874298][T29986] netlink: zone id is out of range
[  680.879088][T29986] netlink: zone id is out of range
[  680.922431][T29988] netlink: 144 bytes leftover after parsing attributes in process `syz.8.9866'.
[  680.938355][T29993] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9869'.
[  681.377670][T30037] netlink: 'syz.8.9891': attribute type 6 has an invalid length.
[  681.380104][T30037] netlink: 340 bytes leftover after parsing attributes in process `syz.8.9891'.
[  681.423408][T30041] mac80211_hwsim hwsim57 ..c: renamed from wlan1
[  681.958845][T30069] netlink: 'syz.2.9906': attribute type 1 has an invalid length.
[  681.972625][T30069] netlink: 'syz.2.9906': attribute type 2 has an invalid length.
[  681.975925][T30069] netlink: 'syz.2.9906': attribute type 1 has an invalid length.
[  682.611641][T30100] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9918'.
[  683.968320][T30156] infiniband syz1: set down
[  683.970828][T30156] infiniband syz1: added bond_slave_1
[  684.000703][T30156] RDS/IB: syz1: added
[  684.003541][T30156] smc: adding ib device syz1 with port count 1
[  684.005708][T30156] smc:    ib device syz1 port 1 has no pnetid
[  684.296061][T30184] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9945'.
[  684.397566][T30191] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9948'.
[  684.849288][T17951] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3
[  685.835742][T30245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9973'.
[  686.301682][T30267] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9983'.
[  686.355022][T30273] netlink: 1735 bytes leftover after parsing attributes in process `syz.2.9986'.
[  686.647167][T30282] netlink: 'syz.2.9988': attribute type 12 has an invalid length.
[  686.650741][T30282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9988'.
[  687.149830][T30310] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10003'.
[  687.197334][T30312] tun0: tun_chr_ioctl cmd 1074025677
[  687.199548][T30312] tun0: linktype set to 774
[  687.440052][T30329] netlink: 'syz.9.10011': attribute type 1 has an invalid length.
[  687.782419][T30338] net_ratelimit: 77 callbacks suppressed
[  687.782436][T30338] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  690.035417][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10029'.
[  690.219492][T30384] netlink: 'syz.8.10035': attribute type 2 has an invalid length.
[  690.222381][T30384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10035'.
[  690.693825][T30400] netlink: 16082 bytes leftover after parsing attributes in process `syz.2.10043'.
[  691.303315][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  691.305545][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  691.345368][T30408] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10047'.
[  691.602743][T30444] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  691.611720][T30444] syzkaller0: entered promiscuous mode
[  691.613771][T30444] syzkaller0: entered allmulticast mode
[  691.642901][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10065'.
[  691.661032][T30448] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10066'.
[  695.015969][T30481] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10081'.
[  695.055656][T30483] netlink: 'syz.2.10082': attribute type 10 has an invalid length.
[  695.985002][T30543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  697.001569][T30570] netlink: 'syz.9.10113': attribute type 10 has an invalid length.
[  697.212167][T30589] netlink: 104 bytes leftover after parsing attributes in process `syz.9.10122'.
[  697.268759][T30596] netlink: 'syz.2.10124': attribute type 4 has an invalid length.
[  697.306279][T30601] netlink: 'syz.8.10126': attribute type 2 has an invalid length.
[  697.576954][T30631] netlink: 'syz.2.10141': attribute type 21 has an invalid length.
[  697.857932][T17951] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  697.987434][T30644] team0: left allmulticast mode
[  697.989156][T30644] team_slave_0: left allmulticast mode
[  697.997751][T30644] team_slave_1: left allmulticast mode
[  697.999595][T30644] geneve1: left allmulticast mode
[  698.001857][T30644] team0: left promiscuous mode
[  698.003680][T30644] team_slave_0: left promiscuous mode
[  698.006470][T30644] team_slave_1: left promiscuous mode
[  698.009253][T30644] geneve1: left promiscuous mode
[  698.015169][T30644] bridge0: port 3(team0) entered disabled state
[  698.055241][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10151'.
[  698.063353][T30654] openvswitch: netlink: Invalid VLAN frame
[  698.138352][T30644] bridge_slave_1: left allmulticast mode
[  698.158511][T30644] bridge_slave_1: left promiscuous mode
[  698.167297][T30644] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.193014][T30644] bridge_slave_0: left allmulticast mode
[  698.197848][T30644] bridge_slave_0: left promiscuous mode
[  698.207283][T30644] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.311156][T30662] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10155'.
[  698.376553][T30666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10156'.
[  698.380113][T30666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10156'.
[  698.579259][T30660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10154'.
[  698.586664][T30660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10154'.
[  698.712792][T30678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10162'.
[  698.715770][T30678] tc_dump_action: action bad kind
[  699.079220][T30702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  699.143135][T30704] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10174'.
[  699.877957][T30741] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10190'.
[  699.998913][T30751] netlink: 'syz.9.10195': attribute type 39 has an invalid length.
[  700.049021][T30751] hsr_slave_1 (unregistering): left promiscuous mode
[  700.286105][T30762] netlink: 'syz.2.10200': attribute type 21 has an invalid length.
[  702.439374][T30919] sch_fq: defrate 9 ignored.
[  702.776118][T30938] __nla_validate_parse: 4 callbacks suppressed
[  702.776129][T30938] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10267'.
[  702.791766][T30938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10267'.
[  702.956794][T30944] netlink: 'syz.9.10270': attribute type 2 has an invalid length.
[  702.988226][T30943] syz.8.10269: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  702.994226][T30943] CPU: 1 UID: 0 PID: 30943 Comm: syz.8.10269 Not tainted syzkaller #0 PREEMPT(full) 
[  702.994245][T30943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  702.994253][T30943] Call Trace:
[  702.994262][T30943]  <TASK>
[  702.994269][T30943]  dump_stack_lvl+0xe8/0x150
[  702.994303][T30943]  warn_alloc+0x249/0x340
[  702.994329][T30943]  ? stack_trace_save+0xa9/0x100
[  702.994358][T30943]  ? __pfx_warn_alloc+0x10/0x10
[  702.994401][T30943]  ? kasan_save_track+0x4f/0x80
[  702.994418][T30943]  ? kasan_save_track+0x3e/0x80
[  702.994431][T30943]  ? __kasan_kmalloc+0x93/0xb0
[  702.994448][T30943]  ? __kmalloc_cache_noprof+0x31c/0x660
[  702.994462][T30943]  ? xskq_create+0x56/0x170
[  702.994480][T30943]  ? xsk_setsockopt+0x603/0x990
[  702.994492][T30943]  ? do_sock_setsockopt+0x17c/0x1b0
[  702.994508][T30943]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  702.994523][T30943]  ? do_syscall_64+0x14d/0xf80
[  702.994554][T30943]  __vmalloc_node_range_noprof+0x132/0x1730
[  702.994669][T30943]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  702.994710][T30943]  ? __kasan_kmalloc+0x93/0xb0
[  702.994750][T30943]  vmalloc_user_noprof+0xad/0xe0
[  702.994771][T30943]  ? xskq_create+0xbf/0x170
[  702.994803][T30943]  xskq_create+0xbf/0x170
[  702.994832][T30943]  xsk_init_queue+0x8a/0xe0
[  702.994890][T30943]  xsk_setsockopt+0x603/0x990
[  702.994921][T30943]  ? __pfx_xsk_setsockopt+0x10/0x10
[  702.994942][T30943]  ? __pfx_aa_sk_perm+0x10/0x10
[  702.994978][T30943]  ? __fget_files+0x2a/0x420
[  702.994993][T30943]  ? aa_sock_opt_perm+0xff/0x1a0
[  702.995032][T30943]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  702.995047][T30943]  ? __pfx_xsk_setsockopt+0x10/0x10
[  702.995073][T30943]  do_sock_setsockopt+0x17c/0x1b0
[  702.995109][T30943]  __x64_sys_setsockopt+0x13d/0x1b0
[  702.995147][T30943]  do_syscall_64+0x14d/0xf80
[  702.995185][T30943]  ? trace_irq_disable+0x3b/0x150
[  702.995205][T30943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.995238][T30943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.995256][T30943] RIP: 0033:0x7ff69a19c819
[  702.995274][T30943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.995285][T30943] RSP: 002b:00007ff69b05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  702.995297][T30943] RAX: ffffffffffffffda RBX: 00007ff69a415fa0 RCX: 00007ff69a19c819
[  702.995305][T30943] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  702.995314][T30943] RBP: 00007ff69a232c91 R08: 0000000000000004 R09: 0000000000000000
[  702.995321][T30943] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  702.995328][T30943] R13: 00007ff69a416038 R14: 00007ff69a415fa0 R15: 00007ffe4c28c558
[  702.995390][T30943]  </TASK>
[  702.995528][T30943] Mem-Info:
[  703.059938][T30947] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10271'.
[  703.060963][T30943] active_anon:17090 inactive_anon:0 isolated_anon:0
[  703.060963][T30943]  active_file:20982 inactive_file:38609 isolated_file:0
[  703.060963][T30943]  unevictable:1768 dirty:92 writeback:0
[  703.060963][T30943]  slab_reclaimable:6776 slab_unreclaimable:92541
[  703.060963][T30943]  mapped:18124 shmem:2437 pagetables:1712
[  703.060963][T30943]  sec_pagetables:0 bounce:0
[  703.060963][T30943]  kernel_misc_reclaimable:0
[  703.060963][T30943]  free:1098302 free_pcp:19305 free_cma:0
[  703.112299][T30943] Node 0 active_anon:39984kB inactive_anon:0kB active_file:48336kB inactive_file:129648kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:13748kB dirty:136kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3280kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  703.123350][T30943] Node 1 active_anon:28292kB inactive_anon:0kB active_file:35592kB inactive_file:24788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:58748kB dirty:232kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10124kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  703.134926][T30943] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  703.156762][T30943] lowmem_reserve[]: 0 1587 2117 2117 2117
[  703.161333][T30943] Node 0 DMA32 free:1482596kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25912kB inactive_anon:0kB active_file:41824kB inactive_file:36kB unevictable:0kB writepending:136kB zspages:0kB present:2080636kB managed:1625384kB mlocked:0kB bounce:0kB free_pcp:24476kB local_pcp:12916kB free_cma:0kB
[  703.178805][T30943] lowmem_reserve[]: 0 0 530 530 530
[  703.180656][T30943] Node 0 Normal free:24252kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14124kB inactive_anon:0kB active_file:6512kB inactive_file:129612kB unevictable:3536kB writepending:0kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:3604kB local_pcp:112kB free_cma:0kB
[  703.191489][T30943] lowmem_reserve[]: 0 0 0 0 0
[  703.193119][T30943] Node 1 Normal free:2869944kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28192kB inactive_anon:0kB active_file:35592kB inactive_file:24788kB unevictable:3536kB writepending:232kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:50864kB local_pcp:22384kB free_cma:0kB
[  703.204421][T30943] lowmem_reserve[]: 0 0 0 0 0
[  703.206424][T30943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  703.213617][T30943] Node 0 DMA32: 97*4kB (UM) 96*8kB (UME) 121*16kB (UME) 236*32kB (UME) 210*64kB (UME) 177*128kB (UME) 99*256kB (UM) 47*512kB (UME) 12*1024kB (UME) 13*2048kB (UME) 329*4096kB (UM) = 1482644kB
[  703.221562][T30943] Node 0 Normal: 773*4kB (UME) 472*8kB (UME) 447*16kB (UME) 22*32kB (E) 15*64kB (E) 24*128kB (E) 7*256kB (E) 5*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 24132kB
[  703.227460][T30943] Node 1 Normal: 5*4kB (E) 394*8kB (UME) 1238*16kB (UME) 513*32kB (UME) 639*64kB (UME) 396*128kB (UME) 177*256kB (UME) 73*512kB (UME) 60*1024kB (UME) 31*2048kB (UME) 618*4096kB (UM) = 2869924kB
[  703.233801][T30943] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  703.236836][T30943] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  703.239755][T30943] 62028 total pagecache pages
[  703.241514][T30943] 0 pages in swap cache
[  703.242992][T30943] Free swap  = 124996kB
[  703.244414][T30943] Total swap = 124996kB
[  703.245901][T30943] 1834877 pages RAM
[  703.247208][T30943] 0 pages HighMem/MovableOnly
[  703.248801][T30943] 390178 pages reserved
[  703.250458][T30943] 0 pages cma reserved
[  703.688766][T30976] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10285'.
[  704.293032][T30994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10293'.
[  704.296429][T30994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10293'.
[  704.303095][T30994] netlink: 'syz.2.10293': attribute type 1 has an invalid length.
[  704.305878][T30996] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10294'.
[  704.374126][T26589] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  704.386544][T26589] CPU: 1 UID: 0 PID: 26589 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  704.386565][T26589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  704.386573][T26589] Call Trace:
[  704.386579][T26589]  <TASK>
[  704.386585][T26589]  dump_stack_lvl+0xe8/0x150
[  704.386608][T26589]  dump_header+0xd3/0x4c0
[  704.386626][T26589]  oom_kill_process+0x3ab/0x970
[  704.386644][T26589]  out_of_memory+0x106c/0x1410
[  704.386658][T26589]  ? percpu_ref_put+0x19/0x180
[  704.386676][T26589]  ? __pfx___mutex_lock+0x10/0x10
[  704.386697][T26589]  ? __pfx_out_of_memory+0x10/0x10
[  704.386709][T26589]  ? do_raw_spin_unlock+0x4d/0x210
[  704.386730][T26589]  try_charge_memcg+0xc53/0x1560
[  704.386748][T26589]  ? __lock_acquire+0x6b5/0x2cf0
[  704.386778][T26589]  ? __pfx_try_charge_memcg+0x10/0x10
[  704.386792][T26589]  ? xa_load+0x60/0x210
[  704.386815][T26589]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  704.386858][T26589]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  704.386878][T26589]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  704.386896][T26589]  __swap_cache_prepare_and_add+0x52a/0x700
[  704.386922][T26589]  swap_cache_alloc_folio+0xf1/0x240
[  704.386937][T26589]  swap_cluster_readahead+0x369/0x690
[  704.386955][T26589]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  704.386976][T26589]  ? get_vma_policy+0x27b/0x3c0
[  704.386995][T26589]  swapin_readahead+0x196/0xc50
[  704.387016][T26589]  ? __pfx_swapin_readahead+0x10/0x10
[  704.387030][T26589]  ? swap_table_get+0x1e/0x260
[  704.387047][T26589]  ? swap_table_get+0x1e/0x260
[  704.387062][T26589]  ? swap_table_get+0x1e/0x260
[  704.387080][T26589]  ? swap_table_get+0x216/0x260
[  704.387097][T26589]  ? swap_cache_get_folio+0x513/0x520
[  704.387118][T26589]  do_swap_page+0x56f/0x5a20
[  704.387149][T26589]  ? do_swap_page+0x127/0x5a20
[  704.387164][T26589]  ? __pfx_do_swap_page+0x10/0x10
[  704.387179][T26589]  ? __pte_offset_map+0x1ae/0x240
[  704.387193][T26589]  ? pte_offset_map_rw_nolock+0xea/0x160
[  704.387207][T26589]  handle_mm_fault+0x12d2/0x3310
[  704.387229][T26589]  ? handle_mm_fault+0xee/0x3310
[  704.387247][T26589]  ? __pfx_handle_mm_fault+0x10/0x10
[  704.387257][T26589]  ? lock_vma_under_rcu+0x45a/0x500
[  704.387288][T26589]  do_user_addr_fault+0xa73/0x1340
[  704.387310][T26589]  ? rcu_is_watching+0x15/0xb0
[  704.387326][T26589]  ? trace_page_fault_user+0x84/0x210
[  704.387343][T26589]  exc_page_fault+0x6a/0xc0
[  704.387358][T26589]  asm_exc_page_fault+0x26/0x30
[  704.387370][T26589] RIP: 0033:0x7f373bf5d04e
[  704.387383][T26589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  704.387393][T26589] RSP: 002b:00007fffb4217b18 EFLAGS: 00010246
[  704.387405][T26589] RAX: 0000000000000000 RBX: 000055557e53f500 RCX: 00007f373bf5d04e
[  704.387414][T26589] RDX: 00007fffb4217b70 RSI: 0000000000000000 RDI: 0000000000000000
[  704.387422][T26589] RBP: 00007fffb4217bdc R08: 0000000000000000 R09: 0000000000000000
[  704.387429][T26589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  704.387437][T26589] R13: 00000000000927c0 R14: 00000000000abd4c R15: 00007fffb4217c30
[  704.387457][T26589]  </TASK>
[  704.387462][T26589] memory: usage 307200kB, limit 307200kB, failcnt 202
[  704.676321][T26589] memory+swap: usage 271688kB, limit 9007199254740988kB, failcnt 0
[  704.679319][T26589] kmem: usage 271384kB, limit 9007199254740988kB, failcnt 0
[  704.690623][T26589] Memory cgroup stats for /syz9:
[  704.690686][T26589] cache 0
[  704.700284][T26589] rss 0
[  704.701261][T26589] rss_huge 0
[  704.702251][T26589] shmem 0
[  704.703183][T26589] mapped_file 0
[  704.704269][T26589] dirty 0
[  704.705312][T26589] writeback 0
[  704.706664][T26589] workingset_refault_anon 15
[  704.708602][T26589] workingset_refault_file 0
[  704.722504][T26589] swap 110592
[  704.723932][T26589] swapcached 122880
[  704.725490][T26589] pgpgin 42469
[  704.726853][T26589] pgpgout 42466
[  704.728237][T26589] pgfault 129695
[  704.729674][T26589] pgmajfault 12
[  704.752951][T26589] inactive_anon 0
[  704.754474][T26589] active_anon 12288
[  704.756033][T26589] inactive_file 0
[  704.757561][T26589] active_file 0
[  704.759021][T26589] unevictable 0
[  704.771028][T26589] hierarchical_memory_limit 314572800
[  704.773061][T26589] hierarchical_memsw_limit 9223372036854771712
[  704.780126][T26589] total_cache 0
[  704.790293][T26589] total_rss 0
[  704.791688][T26589] total_rss_huge 0
[  704.793324][T26589] total_shmem 0
[  704.794754][T26589] total_mapped_file 0
[  704.804205][T26589] total_dirty 0
[  704.805689][T26589] total_writeback 0
[  704.813471][T26589] total_workingset_refault_anon 15
[  704.815550][T26589] total_workingset_refault_file 0
[  704.827896][T26589] total_swap 110592
[  704.840133][T26589] total_swapcached 122880
[  704.842283][T26589] total_pgpgin 42469
[  704.843872][T26589] total_pgpgout 42466
[  704.845466][T26589] total_pgfault 129695
[  704.847138][T26589] total_pgmajfault 12
[  704.859008][T26589] total_inactive_anon 0
[  704.864485][T26589] total_active_anon 12288
[  704.866283][T26589] total_inactive_file 0
[  704.867969][T26589] total_active_file 0
[  704.869584][T26589] total_unevictable 0
[  704.871968][T31016] netlink: 830 bytes leftover after parsing attributes in process `syz.8.10304'.
[  704.880565][T26589] anon_cost 0
[  704.882124][T26589] file_cost 0
[  704.883451][T26589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.10291,pid=30989,uid=0
[  704.889224][T26589] Memory cgroup out of memory: Killed process 30989 (syz.9.10291) total-vm:102228kB, anon-rss:1240kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  705.624747][T31035] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.10312'.
[  705.713636][T31040] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10315'.
[  705.716471][T31040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  707.685996][T31086] netlink: 'syz.2.10333': attribute type 10 has an invalid length.
[  707.971257][T17951] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  708.453566][T31124] netlink: 'syz.8.10350': attribute type 39 has an invalid length.
[  708.731868][T31131] __nla_validate_parse: 5 callbacks suppressed
[  708.731888][T31131] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.10353'.
[  709.074056][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10361'.
[  709.448853][T31189] syzkaller0: entered promiscuous mode
[  709.450961][T31189] syzkaller0: entered allmulticast mode
[  709.458291][T31187] netem: incorrect ge model size
[  709.469839][T31187] netem: change failed
[  709.720786][T31201] netlink: 'syz.8.10386': attribute type 2 has an invalid length.
[  709.845305][T31210] netlink: 'syz.9.10390': attribute type 29 has an invalid length.
[  709.924435][T31214] netlink: 'syz.9.10391': attribute type 9 has an invalid length.
[  709.927515][T31214] netlink: 'syz.9.10391': attribute type 11 has an invalid length.
[  709.931554][T31214] netlink: 'syz.9.10391': attribute type 12 has an invalid length.
[  709.935583][T31214] netlink: 210020 bytes leftover after parsing attributes in process `syz.9.10391'.
[  709.939211][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10391'.
[  709.997586][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10394'.
[  710.072177][T31222] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10396'.
[  710.245495][T31222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  710.254620][T31222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  710.263617][T31222] bond0 (unregistering): Released all slaves
[  711.048436][T31266] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  711.058422][T31264] netlink: 'syz.2.10413': attribute type 2 has an invalid length.
[  711.069445][T31264] netlink: 'syz.2.10413': attribute type 1 has an invalid length.
[  711.072188][T31264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10413'.
[  715.248026][T31313] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10434'.
[  715.385026][T17951] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  715.722555][T31341] netlink: 'syz.2.10448': attribute type 1 has an invalid length.
[  715.827916][T31345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10450'.
[  715.892791][T31351] netlink: 'syz.8.10453': attribute type 4 has an invalid length.
[  715.895801][T31351] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  715.959431][T31359] delete_channel: no stack
[  716.091067][T31375] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10465'.
[  716.302954][ T5873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.377088][ T5873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.448590][ T5873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.475558][T31393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10475'.
[  716.478950][T31393] netlink: 109 bytes leftover after parsing attributes in process `syz.8.10475'.
[  716.531088][ T5873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.554181][T19193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  716.557955][T19193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  716.561109][T19193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  716.565328][T19193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  716.572423][T19193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  716.591115][T31398] ..c speed is unknown, defaulting to 1000
[  716.726945][ T5873] bridge_slave_1: left allmulticast mode
[  716.729522][ T5873] bridge_slave_1: left promiscuous mode
[  716.751224][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.757561][T31406] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.10480'.
[  716.764362][ T5873] bridge_slave_0: left allmulticast mode
[  716.766671][ T5873] bridge_slave_0: left promiscuous mode
[  716.769122][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.780516][T31408] netlink: 'syz.8.10481': attribute type 21 has an invalid length.
[  716.824116][T31410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10482'.
[  717.664832][T31398] chnl_net:caif_netlink_parms(): no params data found
[  718.670387][T19193] Bluetooth: hci1: command tx timeout
[  720.685567][ T5873] hsr_slave_0: left promiscuous mode
[  720.688872][ T5873] hsr_slave_1: left promiscuous mode
[  720.693172][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  720.695639][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.698599][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  720.704923][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.740511][T19193] Bluetooth: hci1: command tx timeout
[  721.077729][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  721.570340][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  721.753401][T31398] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.757175][T31398] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.760576][T31398] bridge_slave_0: entered allmulticast mode
[  721.763585][T31398] bridge_slave_0: entered promiscuous mode
[  721.779999][T31398] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.783682][T31398] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.786235][T31398] bridge_slave_1: entered allmulticast mode
[  721.789001][T31398] bridge_slave_1: entered promiscuous mode
[  721.824179][T31398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.829090][T31398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  721.895085][T31398] team0: Port device team_slave_0 added
[  721.898391][T31398] team0: Port device team_slave_1 added
[  722.064579][T31398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.070305][T31398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.089436][T31398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.095032][T31398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.099378][T31398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.107420][T31398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.130131][T31398] hsr_slave_0: entered promiscuous mode
[  722.132543][T31398] hsr_slave_1: entered promiscuous mode
[  722.134610][T31398] debugfs: 'hsr0' already exists in 'hsr'
[  722.136464][T31398] Cannot create hsr debugfs directory
[  722.333802][T31489] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10503'.
[  722.822995][T19193] Bluetooth: hci1: command tx timeout
[  724.103754][T19193] Bluetooth: hci0: command 0x0406 tx timeout
[  724.424340][T31527] netlink: 'syz.8.10508': attribute type 8 has an invalid length.
[  724.606402][T31398] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  724.636899][T31398] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  724.656380][T31398] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  724.669091][T31398] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  724.750123][T31564] netlink: 'syz.9.10517': attribute type 62 has an invalid length.
[  724.764883][T31398] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.791215][T31398] 8021q: adding VLAN 0 to HW filter on device team0
[  724.810966][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.813195][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.826947][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.829167][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.901643][T17951] Bluetooth: hci1: command tx timeout
[  724.997207][T31398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  725.019751][T31398] veth0_vlan: entered promiscuous mode
[  725.025464][T31398] veth1_vlan: entered promiscuous mode
[  725.042474][T31398] veth0_macvtap: entered promiscuous mode
[  725.046775][T31398] veth1_macvtap: entered promiscuous mode
[  725.056022][T31398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.063408][T31398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  725.069523][T19302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  725.075224][T19302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  725.145955][T19302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  725.151021][T19302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.245785][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.248160][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.265753][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.268721][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.311796][T31600] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10473'.
[  725.355040][T31602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10532'.
[  725.607166][T31615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10539'.
[  725.688428][T31627] netlink: 'syz.9.10542': attribute type 9 has an invalid length.
[  725.691936][T31627] netlink: 'syz.9.10542': attribute type 6 has an invalid length.
[  726.539697][T31651] netlink: 1047 bytes leftover after parsing attributes in process `syz.9.10552'.
[  726.545166][T31651] bridge_slave_1: default FDB implementation only supports local addresses
[  727.003241][T31686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10568'.
[  727.083993][T31697] netlink: 'syz.9.10573': attribute type 2 has an invalid length.
[  727.087632][T31697] tipc: Started in network mode
[  727.089206][T31697] tipc: Node identity 1340008, cluster identity 4711
[  727.095178][T31697] tipc: Node number set to 20185096
[  727.384138][T31707] netlink: 'syz.9.10577': attribute type 2 has an invalid length.
[  728.230147][T31762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10604'.
[  728.277084][T31768] netlink: 'syz.2.10606': attribute type 10 has an invalid length.
[  728.283445][T31768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10606'.
[  728.308349][T17951] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  728.376064][T31776] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.10611'.
[  728.479472][T31787] IPv6: NLM_F_CREATE should be specified when creating new route
[  728.544909][T31794] netlink: 'syz.8.10619': attribute type 2 has an invalid length.
[  728.547356][T31794] netlink: 'syz.8.10619': attribute type 8 has an invalid length.
[  728.559064][T31794] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10619'.
[  728.874666][T31824] netlink: 'syz.2.10634': attribute type 10 has an invalid length.
[  729.055953][T31826] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.10631'.
[  729.064219][T31826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10631'.
[  729.515186][T31824] team0: Port device dummy0 added
[  730.340786][T19193] Bluetooth: hci2: command 0x0406 tx timeout
[  731.226297][T31904] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10668'.
[  731.282398][T31907] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10670'.
[  731.374533][T31916] validate_nla: 3 callbacks suppressed
[  731.374543][T31916] netlink: 'syz.9.10674': attribute type 33 has an invalid length.
[  731.385861][T31916] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10674'.
[  732.058190][T31957] netlink: 1 bytes leftover after parsing attributes in process `syz.9.10693'.
[  732.537823][T31984] netlink: 'syz.8.10705': attribute type 11 has an invalid length.
[  732.887153][T31998] vcan0: entered allmulticast mode
[  734.246244][T32019] netlink: 'syz.8.10719': attribute type 8 has an invalid length.
[  735.025042][T32051] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10734'.
[  735.258202][T32068] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10741'.
[  735.384328][T32074] syzkaller0: entered promiscuous mode
[  735.393856][T32074] syzkaller0: entered allmulticast mode
[  735.423025][T32075] netlink: 'syz.2.10740': attribute type 10 has an invalid length.
[  736.775535][T32075] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.778832][T32075] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.792513][T32075] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.795485][T32075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.798920][T32075] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.801937][T32075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.811652][T32075] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  737.049459][T32105] netlink: 'syz.2.10759': attribute type 3 has an invalid length.
[  737.052061][T32105] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.10759'.
[  737.091856][T32107] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.10758'.
[  737.193142][T32117] netlink: 'syz.8.10764': attribute type 1 has an invalid length.
[  737.195654][T32117] netlink: 'syz.8.10764': attribute type 1 has an invalid length.
[  737.602785][T32152] netlink: 'syz.9.10781': attribute type 14 has an invalid length.
[  737.606321][T32152] netlink: 164 bytes leftover after parsing attributes in process `syz.9.10781'.
[  737.815810][T32165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10787'.
[  737.913629][T32179] netlink: 10 bytes leftover after parsing attributes in process `syz.9.10794'.
[  738.083174][T32192] netlink: 68 bytes leftover after parsing attributes in process `syz.8.10799'.
[  738.704022][T32241] block nbd0: not configured, cannot reconfigure
[  739.687939][T32260] netlink: 'syz.2.10831': attribute type 10 has an invalid length.
[  740.434978][T32305] openvswitch: netlink: IP tunnel TTL not specified.
[  741.213933][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10865'.
[  741.318740][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10870'.
[  741.585445][T32355] netlink: 'syz.9.10875': attribute type 2 has an invalid length.
[  742.122593][T32394] mac80211_hwsim hwsim81 wlan1: entered allmulticast mode
[  742.434976][T32418] netlink: 1735 bytes leftover after parsing attributes in process `syz.9.10903'.
[  742.445035][T32420] netlink: 10 bytes leftover after parsing attributes in process `syz.8.10906'.
[  742.484074][T32425] netlink: 'syz.8.10907': attribute type 2 has an invalid length.
[  742.486532][T32425] netlink: 1696 bytes leftover after parsing attributes in process `syz.8.10907'.
[  742.685500][T32441] netlink: 'syz.9.10916': attribute type 1 has an invalid length.
[  742.892794][T32451] netlink: 'syz.9.10920': attribute type 62 has an invalid length.
[  742.944669][T32455] netlink: 'syz.9.10922': attribute type 1 has an invalid length.
[  743.444641][T32479] netlink: 'syz.2.10931': attribute type 3 has an invalid length.
[  743.520744][T32485] sctp: [Deprecated]: syz.2.10934 (pid 32485) Use of struct sctp_assoc_value in delayed_ack socket option.
[  743.520744][T32485] Use struct sctp_sack_info instead
[  743.527951][T32485] netlink: 'syz.2.10934': attribute type 21 has an invalid length.
[  743.541291][T32485] IPv6: NLM_F_CREATE should be specified when creating new route
[  743.544825][T32485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  743.547216][T32485] IPv6: NLM_F_CREATE should be set when creating new route
[  743.841821][T32511] netlink: 'syz.2.10947': attribute type 2 has an invalid length.
[  744.472796][T32526] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  744.477907][T32526] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  744.581045][T17951] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  744.794935][T32533] netlink: 'syz.9.10956': attribute type 21 has an invalid length.
[  744.955210][T32542] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10960'.
[  744.959133][T32542] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10960'.
[  745.445083][T32548] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.10963'.
[  745.472132][T32550] netlink: 'syz.8.10964': attribute type 2 has an invalid length.
[  748.698134][T32565] netlink: 'syz.8.10970': attribute type 39 has an invalid length.
[  748.701468][T32565] netlink: 'syz.8.10970': attribute type 27 has an invalid length.
[  748.704798][T32565] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  750.784175][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2273589508 wd_nsec: 2273589286
[  752.746990][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  752.749630][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  760.328233][T19193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  760.332931][T19193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  760.336293][T19193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  760.340734][T19193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  760.343927][T19193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  760.406666][T32578] ..c speed is unknown, defaulting to 1000
[  760.658701][T32578] chnl_net:caif_netlink_parms(): no params data found
[  760.731865][T32578] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.734868][T32578] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.737834][T32578] bridge_slave_0: entered allmulticast mode
[  760.752058][T32578] bridge_slave_0: entered promiscuous mode
[  760.761888][T32578] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.764842][T32578] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.768197][T32578] bridge_slave_1: entered allmulticast mode
[  760.792454][T32578] bridge_slave_1: entered promiscuous mode
[  760.850837][T32578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.870939][T32578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.938588][T32578] team0: Port device team_slave_0 added
[  760.952495][T32578] team0: Port device team_slave_1 added
[  760.987538][T32578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.990792][T32578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.001562][T32578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.007273][T32578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.010085][T32578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.020881][T32578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.066171][T32578] hsr_slave_0: entered promiscuous mode
[  761.070005][T32578] hsr_slave_1: entered promiscuous mode
[  761.074203][T32578] debugfs: 'hsr0' already exists in 'hsr'
[  761.076535][T32578] Cannot create hsr debugfs directory
[  761.211511][T17951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  761.216425][T17951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  761.219767][T17951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  761.223168][T17951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  761.225585][T17951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  762.420509][T17951] Bluetooth: hci3: command tx timeout
[  763.030410][    C0] sched: DL replenish lagged too much
[  763.300467][T17951] Bluetooth: hci4: command tx timeout
[  764.600356][T17951] Bluetooth: hci3: command tx timeout
[  765.461955][T17951] Bluetooth: hci4: command tx timeout
[  766.710311][T17951] Bluetooth: hci3: command tx timeout
[  767.540477][T17951] Bluetooth: hci4: command tx timeout
[  768.740713][T17951] Bluetooth: hci3: command tx timeout
[  769.621457][T17951] Bluetooth: hci4: command tx timeout
[  770.584734][ T5873] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.625860][T32590] ..c speed is unknown, defaulting to 1000
[  771.210734][T32642] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.10989'.
[  771.213722][T32642] bridge_slave_1: default FDB implementation only supports local addresses
[  771.608877][ T5873] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.762010][ T5873] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.875759][ T5873] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.204077][T32590] chnl_net:caif_netlink_parms(): no params data found
[  772.217728][T32578] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  772.240442][ T5873] bridge0: port 3(dummy0) entered disabled state
[  772.248172][ T5873] bridge_slave_1: left allmulticast mode
[  772.251822][ T5873] bridge_slave_1: left promiscuous mode
[  772.257706][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.265483][ T5873] bridge_slave_0: left allmulticast mode
[  772.267916][ T5873] bridge_slave_0: left promiscuous mode
[  772.272527][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.453491][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  772.457719][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  772.461616][ T5873] bond0 (unregistering): Released all slaves
[  772.471885][T32578] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  772.480597][T32671] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10993'.
[  772.527937][T32578] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  772.539344][T32578] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  772.614621][T32680] netlink: 84 bytes leftover after parsing attributes in process `syz.8.10995'.
[  772.751182][T32590] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.753423][T32590] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.755987][T32590] bridge_slave_0: entered allmulticast mode
[  772.794298][T32590] bridge_slave_0: entered promiscuous mode
[  772.811817][T32590] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.822285][T32590] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.824641][T32590] bridge_slave_1: entered allmulticast mode
[  772.846712][T32590] bridge_slave_1: entered promiscuous mode
[  772.935712][T32590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  772.962907][ T5873] hsr_slave_0: left promiscuous mode
[  772.965809][ T5873] hsr_slave_1: left promiscuous mode
[  772.968432][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  772.973778][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  772.978638][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  772.982170][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  772.991244][ T5873] veth1_macvtap: left promiscuous mode
[  772.993494][ T5873] veth0_macvtap: left promiscuous mode
[  772.995733][ T5873] veth1_vlan: left promiscuous mode
[  772.997865][ T5873] veth0_vlan: left promiscuous mode
[  773.226369][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  773.233439][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  773.328867][T32590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  773.388542][T32590] team0: Port device team_slave_0 added
[  773.393881][T32590] team0: Port device team_slave_1 added
[  773.431482][T32578] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.454717][T32578] 8021q: adding VLAN 0 to HW filter on device team0
[  773.468525][T32590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  773.476939][T32590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.489812][T32590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.506122][T32590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.508949][T32590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.526653][T32590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  773.551361][T32727] netlink: 'syz.8.11005': attribute type 64 has an invalid length.
[  773.555497][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.558345][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.622204][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.625074][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.698789][T32590] hsr_slave_0: entered promiscuous mode
[  773.714442][T32590] hsr_slave_1: entered promiscuous mode
[  774.045283][ T5873] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.122164][T32753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11009'.
[  774.132837][ T5873] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.278364][T32578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  774.305610][ T5873] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.396324][ T5873] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.538761][T32578] veth0_vlan: entered promiscuous mode
[  774.569485][T32578] veth1_vlan: entered promiscuous mode
[  774.633087][T32578] veth0_macvtap: entered promiscuous mode
[  774.659946][ T5873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.680374][T32578] veth1_macvtap: entered promiscuous mode
[  774.730671][ T5873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.738925][T32578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.746446][T32590] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  774.756348][T32578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  774.776200][ T5873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.785585][T32590] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  774.791789][T32590] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  774.798026][T19302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  774.804758][T19302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.814408][T32590] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  774.821101][T32679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.834279][ T5873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.847540][T32679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.002672][ T5873] bridge_slave_1: left allmulticast mode
[  775.004707][ T5873] bridge_slave_1: left promiscuous mode
[  775.006951][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  775.010798][ T5873] bridge_slave_0: left allmulticast mode
[  775.012983][ T5873] bridge_slave_0: left promiscuous mode
[  775.015210][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.021178][ T5873] bridge_slave_1: left allmulticast mode
[  775.023396][ T5873] bridge_slave_1: left promiscuous mode
[  775.025634][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  775.029658][ T5873] bridge_slave_0: left allmulticast mode
[  775.033160][ T5873] bridge_slave_0: left promiscuous mode
[  775.035159][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.217925][ T5873] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  775.246347][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  775.250922][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  775.255084][ T5873] bond0 (unregistering): Released all slaves
[  775.263890][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.272429][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.323432][T32590] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.325628][ T5873] hmac(sha224): left promiscuous mode
[  775.347514][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.353204][T32590] 8021q: adding VLAN 0 to HW filter on device team0
[  775.357906][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.364697][ T5873] : left promiscuous mode
[  775.377874][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.380121][ T4813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.424902][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.427639][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.454913][ T5873] tipc: Left network mode
[  775.509921][T32590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  775.705588][T32590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.706787][  T345] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11021'.
[  775.764038][T32590] veth0_vlan: entered promiscuous mode
[  775.770990][T32590] veth1_vlan: entered promiscuous mode
[  775.818598][T32590] veth0_macvtap: entered promiscuous mode
[  775.823574][T32590] veth1_macvtap: entered promiscuous mode
[  775.853442][T32590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.868198][T32590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.927969][T32679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.932627][T32679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  775.937366][T19382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  775.990870][T19382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.013753][  T366] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11027'.
[  776.295767][  T374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11031'.
[  776.299592][  T374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11031'.
[  776.319505][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.332732][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.372893][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.384119][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.419757][  T381] netlink: 'syz.0.11033': attribute type 1 has an invalid length.
[  776.430414][  T381] netlink: 'syz.0.11033': attribute type 4 has an invalid length.
[  776.437659][  T381] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11033'.
[  777.699378][ T5873] hsr_slave_0: left promiscuous mode
[  777.708728][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.712357][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  777.720530][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  777.723555][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  777.831097][ T5873] hsr_slave_0: left promiscuous mode
[  777.838968][ T5873] hsr_slave_1: left promiscuous mode
[  777.853116][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.855858][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  777.867386][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  777.869596][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  777.927186][ T5873] veth1_macvtap: left promiscuous mode
[  777.929462][ T5873] veth0_macvtap: left promiscuous mode
[  777.939193][ T5873] veth1_vlan: left promiscuous mode
[  777.942736][ T5873] veth0_vlan: left promiscuous mode
[  777.947621][ T5873] veth1_macvtap: left promiscuous mode
[  777.949925][ T5873] veth0_macvtap: left promiscuous mode
[  777.968737][ T5873] veth1_vlan: left promiscuous mode
[  777.970886][ T5873] veth0_vlan: left promiscuous mode
[  778.051886][T17951] Bluetooth: hci3: unexpected subevent 0x18 length: 150 > 19
[  778.055797][T17951] Bluetooth: hci3: Unable to find connection for dst 00:00:95:6d:00:00 sid 0x00
[  779.596396][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  779.605516][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  780.398514][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  780.429456][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  780.502660][ T5873] team0 (unregistering): Port device dummy0 removed
[  780.661281][  T484] netlink: 'syz.8.11073': attribute type 10 has an invalid length.
[  780.664222][  T484] netlink: 56823 bytes leftover after parsing attributes in process `syz.8.11073'.
[  781.747040][T17951] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3
[  781.852768][  T550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11087'.
[  781.857498][  T550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11087'.
[  783.555674][  T653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11107'.
[  783.977492][  T686] netlink: 'syz.3.11117': attribute type 2 has an invalid length.
[  783.984017][  T686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11117'.
[  784.444499][  T719] netlink: 'syz.8.11127': attribute type 13 has an invalid length.
[  784.447768][  T719] netlink: 172 bytes leftover after parsing attributes in process `syz.8.11127'.
[  784.456892][  T719] erspan0: refused to change device tx_queue_len
[  784.898969][  T761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11139'.
[  786.223988][  T811] cgroup: Unknown subsys name 'hash'
[  786.545368][  T839] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.11165'.
[  786.846358][  T859] netlink: 'syz.8.11174': attribute type 6 has an invalid length.
[  786.849305][  T859] netlink: 3936 bytes leftover after parsing attributes in process `syz.8.11174'.
[  786.852954][  T859] netlink: 'syz.8.11174': attribute type 1 has an invalid length.
[  787.102047][  T874] netlink: 'syz.0.11179': attribute type 6 has an invalid length.
[  787.105265][  T874] netlink: 232 bytes leftover after parsing attributes in process `syz.0.11179'.
[  787.288887][  T885] netlink: 'syz.8.11182': attribute type 1 has an invalid length.
[  787.578005][  T912] netlink: 277 bytes leftover after parsing attributes in process `syz.3.11194'.
[  787.578750][  T913] netlink: 'syz.0.11193': attribute type 29 has an invalid length.
[  788.477360][  T969] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11214'.
[  791.154367][ T1070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11253'.
[  791.161317][ T1070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11253'.
[  791.268743][ T1093] netlink: 'syz.0.11260': attribute type 9 has an invalid length.
[  791.322056][ T1101] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11262'.
[  791.623345][ T1123] netlink: 'syz.0.11271': attribute type 39 has an invalid length.
[  792.953429][ T1162] netlink: 'syz.8.11282': attribute type 1 has an invalid length.
[  793.089744][ T1169] netlink: 'syz.0.11287': attribute type 2 has an invalid length.
[  793.269091][ T1174] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11289'.
[  793.286280][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11289'.
[  793.624823][ T1200] netlink: 'syz.8.11301': attribute type 23 has an invalid length.
[  793.627420][ T1200] netlink: 'syz.8.11301': attribute type 6 has an invalid length.
[  793.629791][ T1200] IPv6: NLM_F_CREATE should be specified when creating new route
[  794.785127][ T1245] netlink: 'syz.3.11320': attribute type 6 has an invalid length.
[  794.791107][ T1245] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.11320'.
[  794.793932][ T1245] netlink: 'syz.3.11320': attribute type 1 has an invalid length.
[  794.861064][ T1245] nbd0: detected capacity change from 0 to 339754496
[  794.868265][   T56] block nbd0: Receive control failed (result -32)
[  794.876250][ T1253] block nbd0: Dead connection, failed to find a fallback
[  794.878622][ T1253] block nbd0: shutting down sockets
[  794.881431][ T1253] blk_print_req_error: 24 callbacks suppressed
[  794.881552][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.887348][ T1253] buffer_io_error: 23 callbacks suppressed
[  794.887357][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.892421][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.896957][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.900836][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.904485][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.908170][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.912238][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.915223][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.919033][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.923218][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.926532][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.937777][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.941582][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.944678][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.947901][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.950895][ T1253] ldm_validate_partition_table(): Disk read failed.
[  794.953035][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.956296][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.967092][ T1253] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.970044][ T1253] Buffer I/O error on dev nbd0, logical block 0, async page read
[  794.982359][ T1253] Dev nbd0: unable to read RDB block 0
[  794.990793][ T1253]  nbd0: unable to read partition table
[  794.992938][ T1261] netlink: 'syz.8.11326': attribute type 1 has an invalid length.
[  795.002692][ T1253] ldm_validate_partition_table(): Disk read failed.
[  795.004948][ T1253] Dev nbd0: unable to read RDB block 0
[  795.006942][ T1253]  nbd0: unable to read partition table
[  796.543016][ T1293] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11340'.
[  796.582691][ T1302] netlink: 112 bytes leftover after parsing attributes in process `syz.8.11343'.
[  798.178565][ T1391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11361'.
[  798.271074][ T1400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11364'.
[  800.114482][ T1457] IPv6: NLM_F_CREATE should be specified when creating new route
[  800.139674][ T1457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  800.142510][ T1457] IPv6: NLM_F_CREATE should be set when creating new route
[  800.144853][ T1457] IPv6: NLM_F_CREATE should be set when creating new route
[  800.147171][ T1457] IPv6: NLM_F_CREATE should be set when creating new route
[  800.176754][ T1457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  800.252485][ T1464] netlink: 'syz.8.11384': attribute type 1 has an invalid length.
[  800.695674][ T1483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11392'.
[  801.161882][ T1500] netlink: 'syz.8.11399': attribute type 2 has an invalid length.
[  801.164362][ T1500] netlink: 'syz.8.11399': attribute type 1 has an invalid length.
[  801.167146][ T1500] netlink: 116 bytes leftover after parsing attributes in process `syz.8.11399'.
[  801.245899][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11406'.
[  801.654978][ T1537] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11417'.
[  802.642232][ T1559] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11428'.
[  802.650338][ T1559] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11428'.
[  802.711400][ T1562] syzkaller0: entered promiscuous mode
[  802.713202][ T1562] syzkaller0: entered allmulticast mode
[  802.744531][ T1562] syzkaller0: left promiscuous mode
[  802.754197][ T1562] syzkaller0: entered promiscuous mode
[  803.139246][ T1589] netlink: 260 bytes leftover after parsing attributes in process `syz.8.11440'.
[  803.239177][ T1595] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11443'.
[  803.429317][ T1599] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11445'.
[  803.479880][ T1601] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11445'.
[  804.466029][ T1605] netlink: 'syz.8.11447': attribute type 29 has an invalid length.
[  804.469297][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11447'.
[  805.640582][ T1637] netlink: 'syz.8.11460': attribute type 1 has an invalid length.
[  805.694412][ T1641] netlink: 'syz.3.11463': attribute type 10 has an invalid length.
[  805.707641][ T1641] team0: Port device dummy0 added
[  805.744550][ T1641] netlink: 'syz.3.11463': attribute type 10 has an invalid length.
[  805.764554][ T1641] team0: Port device dummy0 removed
[  805.779348][ T1641] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  805.849474][ T1653] rdma_rxe: rxe_newlink: failed to add hsr0
[  806.004327][ T1664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11470'.
[  807.692395][ T1693] netlink: 'syz.0.11485': attribute type 1 has an invalid length.
[  807.695225][ T1693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  810.792383][ T1779] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  810.796294][ T1779] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  810.830504][ T1781] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11523'.
[  810.923234][ T1787] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check.
[  811.204260][ T1805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11534'.
[  811.409385][ T1824] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.11543'.
[  811.492346][ T1829] netlink: 'syz.8.11545': attribute type 7 has an invalid length.
[  812.765608][ T1860] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.803593][ T1860] bridge_slave_0 (unregistering): left allmulticast mode
[  812.805792][ T1860] bridge_slave_0 (unregistering): left promiscuous mode
[  812.807964][ T1860] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.904060][ T1871] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11564'.
[  813.032481][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11570'.
[  813.057166][ T1887] netlink: 196 bytes leftover after parsing attributes in process `syz.3.11572'.
[  813.215532][ T1905] netlink: 'syz.3.11580': attribute type 1 has an invalid length.
[  813.309884][T17951] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5
[  813.341296][ T1914] netlink: 596 bytes leftover after parsing attributes in process `syz.8.11584'.
[  814.138041][ T1934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11593'.
[  814.186026][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  814.190423][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  814.354407][ T1949] netlink: 'syz.3.11599': attribute type 4 has an invalid length.
[  814.392441][ T1954] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.11603'.
[  814.396199][ T1954] bridge_slave_1: default FDB implementation only supports local addresses
[  814.444044][ T1956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11604'.
[  816.155798][ T2101] delete_channel: no stack
[  816.199517][ T2106] __nla_validate_parse: 4 callbacks suppressed
[  816.199528][ T2106] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11663'.
[  816.204777][ T2106] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11663'.
[  816.384658][ T2103] sctp: [Deprecated]: syz.8.11660 (pid 2103) Use of struct sctp_assoc_value in delayed_ack socket option.
[  816.384658][ T2103] Use struct sctp_sack_info instead
[  816.645873][ T2129] netlink: 'syz.0.11673': attribute type 2 has an invalid length.
[  816.749716][ T2134] netlink: 408 bytes leftover after parsing attributes in process `syz.8.11674'.
[  817.444698][T17951] Bluetooth: hci3: ISO packet too small
[  817.519315][ T2149] netlink: 'syz.8.11681': attribute type 8 has an invalid length.
[  817.523696][ T2149] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11681'.
[  817.527373][ T2149] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11681'.
[  817.774850][ T2174] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11692'.
[  817.778263][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11692'.
[  818.173743][ T2189] openvswitch: netlink: Key 25 has unexpected len 0 expected 16
[  818.641985][ T2193] delete_channel: no stack
[  818.985045][ T2217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11713'.
[  819.178727][ T2231] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11720'.
[  819.183360][ T2231] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11720'.
[  819.186445][ T2231] netlink: 'syz.8.11720': attribute type 4 has an invalid length.
[  819.751446][ T2275] netlink: 'syz.8.11742': attribute type 4 has an invalid length.
[  820.359574][ T2282] syzkaller0: entered promiscuous mode
[  820.368388][ T2282] syzkaller0: entered allmulticast mode
[  822.433767][ T2307] netlink: 'syz.8.11754': attribute type 1 has an invalid length.
[  822.436961][ T2307] netlink: 'syz.8.11754': attribute type 2 has an invalid length.
[  822.540912][ T2310] caif0: entered promiscuous mode
[  822.552546][ T2310] caif0: entered allmulticast mode
[  822.605169][ T2318] netlink: 'syz.8.11758': attribute type 10 has an invalid length.
[  822.611435][ T2318] team0: Device wg1 is of different type
[  822.688793][ T2323] netlink: 'syz.0.11761': attribute type 62 has an invalid length.
[  827.352947][ T2365] netlink: 'syz.8.11780': attribute type 2 has an invalid length.
[  827.358012][ T2365] netlink: 'syz.8.11780': attribute type 8 has an invalid length.
[  827.371218][ T2365] __nla_validate_parse: 2 callbacks suppressed
[  827.371275][ T2365] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11780'.
[  827.374987][ T2369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11782'.
[  827.483697][ T2375] netlink: 165240 bytes leftover after parsing attributes in process `syz.3.11785'.
[  828.514634][ T2392] netlink: 56 bytes leftover after parsing attributes in process `syz.8.11792'.
[  829.688410][ T2406] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11799'.
[  829.698403][ T2406] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11799'.
[  829.785811][ T2412] netlink: 'syz.3.11801': attribute type 10 has an invalid length.
[  830.682332][ T2462] netlink: 1735 bytes leftover after parsing attributes in process `syz.0.11822'.
[  832.126562][ T2565] netlink: 180 bytes leftover after parsing attributes in process `syz.8.11846'.
[  832.149712][ T2566] netlink: 'syz.3.11845': attribute type 21 has an invalid length.
[  832.155049][ T2566] netlink: 'syz.3.11845': attribute type 20 has an invalid length.
[  832.367745][ T2589] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11856'.
[  832.544254][  T360] tipc: Subscription rejected, illegal request
[  832.708115][ T2614] netlink: 'syz.3.11863': attribute type 10 has an invalid length.
[  832.715374][ T2614] team0: Device ipvlan1 failed to register rx_handler
[  832.764162][ T2617] netlink: 'syz.3.11864': attribute type 2 has an invalid length.
[  832.767322][ T2617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11864'.
[  833.386137][ T2671] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11885'.
[  833.431429][ T2678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11887'.
[  834.041569][ T2683] netlink: 'syz.3.11889': attribute type 13 has an invalid length.
[  835.569865][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11919'.
[  835.573708][ T2764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11919'.
[  835.577517][ T2764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11919'.
[  835.625699][ T2767] netlink: 'syz.8.11922': attribute type 21 has an invalid length.
[  835.629970][ T2767] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11922'.
[  835.637207][ T2767] netlink: 'syz.8.11922': attribute type 1 has an invalid length.
[  836.079336][ T2803] netlink: 'syz.3.11933': attribute type 10 has an invalid length.
[  836.923986][T17951] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  837.183112][ T2803] team0: Device wg1 is of different type
[  838.784937][ T2877] dvmrp1: tun_chr_ioctl cmd 1074025677
[  838.786823][ T2877] dvmrp1: linktype set to 769
[  839.720082][ T2902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11972'.
[  839.874452][ T2926] netlink: 'syz.0.11979': attribute type 10 has an invalid length.
[  839.892343][ T2926] team0 (unregistering): Port device team_slave_0 removed
[  840.004694][ T2926] team0 (unregistering): Port device team_slave_1 removed
[  840.056586][ T2928] netlink: 'syz.8.11980': attribute type 2 has an invalid length.
[  840.066143][ T2928] #{6c: entered promiscuous mode
[  840.125744][ T2930] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11981'.
[  840.713279][ T2955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11992'.
[  840.716186][ T2955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11992'.
[  840.832019][ T2967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11998'.
[  840.920177][ T2975] netlink: 'syz.0.12003': attribute type 19 has an invalid length.
[  840.923569][ T2975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12003'.
[  841.169113][ T3002] netlink: 'syz.8.12015': attribute type 13 has an invalid length.
[  841.193358][ T3002] gretap0: refused to change device tx_queue_len
[  841.196374][ T3002] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  841.865346][ T3024] netlink: 830 bytes leftover after parsing attributes in process `syz.8.12025'.
[  842.004043][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.006229][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  842.181694][ T3048] netlink: 'syz.8.12036': attribute type 39 has an invalid length.
[  842.278606][ T3053] netlink: 'syz.3.12038': attribute type 2 has an invalid length.
[  842.284038][ T3053] netlink: 'syz.3.12038': attribute type 2 has an invalid length.
[  842.887140][ T3039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  842.945294][ T3063] netlink: ct family unspecified
[  842.947426][ T3063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.745572][ T3100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12058'.
[  843.907492][ T3108] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12062'.
[  844.082221][ T3121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12068'.
[  844.889820][ T3147] netlink: 'syz.0.12081': attribute type 39 has an invalid length.
[  845.170830][ T3158] netlink: 'syz.8.12086': attribute type 29 has an invalid length.
[  845.174471][ T3158] netlink: 'syz.8.12086': attribute type 29 has an invalid length.
[  845.177986][ T3158] netlink: 'syz.8.12086': attribute type 29 has an invalid length.
[  845.614218][ T3177] netlink: 'syz.0.12095': attribute type 2 has an invalid length.
[  845.722124][ T3188] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12097'.
[  848.383302][ T3198] netlink: 'syz.0.12104': attribute type 41 has an invalid length.
[  850.634241][ T3208] netlink: 'syz.0.12107': attribute type 12 has an invalid length.
[  850.636888][ T3208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12107'.
[  850.691854][ T3212] netlink: 'syz.0.12111': attribute type 10 has an invalid length.
[  850.815851][ T3217] netlink: 'syz.0.12113': attribute type 66 has an invalid length.
[  860.981550][T19193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  860.984988][T19193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  860.988363][T19193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  860.991981][T19193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  860.995804][T19193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  863.060386][T19193] Bluetooth: hci0: command tx timeout
[  863.156121][ T3220] ..c speed is unknown, defaulting to 1000
[  863.321594][ T3185] syz_tun (unregistering): left allmulticast mode
[  863.324067][ T3185] syz_tun (unregistering): left promiscuous mode
[  863.326368][ T3185] GPL: port 1(syz_tun) entered disabled state
[  863.356035][ T3226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12117'.
[  863.402720][ T5873] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.431671][T17951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  863.434871][T17951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  863.439433][T17951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  863.444303][T17951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  863.446711][T17951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  863.479362][ T5873] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.658499][ T3220] chnl_net:caif_netlink_parms(): no params data found
[  863.685272][ T5873] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.726244][ T3220] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.728977][ T3220] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.733668][ T3220] bridge_slave_0: entered allmulticast mode
[  863.736870][ T3220] bridge_slave_0: entered promiscuous mode
[  863.747814][ T5873] batman_adv: batadv0: Removing interface: 
[  863.751098][ T5873] netdevsim netdevsim8  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.759269][ T3220] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.762510][ T3220] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.765297][ T3220] bridge_slave_1: entered allmulticast mode
[  863.768497][ T3220] bridge_slave_1: entered promiscuous mode
[  863.801742][ T3230] ..c speed is unknown, defaulting to 1000
[  863.816142][ T3220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.836431][ T3220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.870819][ T3220] team0: Port device team_slave_0 added
[  863.909991][ T3220] team0: Port device team_slave_1 added
[  863.937436][ T3220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.939858][ T3220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.949339][ T3248] netlink: 5240 bytes leftover after parsing attributes in process `syz.0.12122'.
[  863.954372][ T3220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.972752][ T3220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.975471][ T3220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.985738][ T3220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.056894][ T5873] macsec0: left allmulticast mode
[  864.058932][ T5873] macsec0: left promiscuous mode
[  864.069926][ T5873] : port 1(macsec0) entered disabled state
[  864.149927][ T3257] netlink: 'syz.0.12126': attribute type 2 has an invalid length.
[  864.169135][ T5873] team0: Port device geneve1 removed
[  864.174289][ T5873] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  864.285297][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  864.292111][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  864.292163][ T3262] netlink: 'syz.0.12128': attribute type 39 has an invalid length.
[  864.298888][ T5873] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  864.302457][ T5873] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  864.306057][ T5873] bond0 (unregistering): Released all slaves
[  864.315179][ T3220] hsr_slave_0: entered promiscuous mode
[  864.317345][ T3220] hsr_slave_1: entered promiscuous mode
[  864.319381][ T3220] debugfs: 'hsr0' already exists in 'hsr'
[  864.328337][ T3220] Cannot create hsr debugfs directory
[  864.374194][ T5873] : left promiscuous mode
[  864.455189][ T5873] #{6c: left promiscuous mode
[  864.472898][ T3230] chnl_net:caif_netlink_parms(): no params data found
[  864.598114][ T3230] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.600807][ T3230] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.603351][ T3230] bridge_slave_0: entered allmulticast mode
[  864.606146][ T3230] bridge_slave_0: entered promiscuous mode
[  864.609154][ T3230] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.614324][ T3230] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.616695][ T3230] bridge_slave_1: entered allmulticast mode
[  864.619653][ T3230] bridge_slave_1: entered promiscuous mode
[  864.653957][ T3230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  864.658132][ T3230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  864.682885][ T3230] team0: Port device team_slave_0 added
[  864.685910][ T3230] team0: Port device team_slave_1 added
[  864.708558][ T3230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.712890][ T3230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.720990][ T3230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  864.729337][ T3230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  864.736428][ T3230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.761129][ T3230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.817360][ T3230] hsr_slave_0: entered promiscuous mode
[  864.829947][ T3230] hsr_slave_1: entered promiscuous mode
[  864.837037][ T3230] debugfs: 'hsr0' already exists in 'hsr'
[  864.843475][ T3230] Cannot create hsr debugfs directory
[  864.955951][ T3286] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12132'.
[  865.140321][T19193] Bluetooth: hci0: command tx timeout
[  865.460354][T19193] Bluetooth: hci1: command tx timeout
[  865.519775][ T5873] hsr_slave_0: left promiscuous mode
[  865.522642][ T5873] hsr_slave_1: left promiscuous mode
[  865.525366][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.528127][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.536223][ T5873] batman_adv: batadv0: Removing interface: vlan1
[  865.604328][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  865.611784][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  865.619323][  T191] smc: removing ib device syz1
[  866.718114][ T3220] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  866.778883][ T3220] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  866.789508][ T3220] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  866.804982][ T3220] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  866.873195][ T3348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12136'.
[  867.154723][ T3220] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.176660][ T3220] 8021q: adding VLAN 0 to HW filter on device team0
[  867.220931][T19193] Bluetooth: hci0: command tx timeout
[  867.249951][  T191] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.252868][  T191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.294705][  T191] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.297412][  T191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.312915][ T3230] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  867.330704][ T3230] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  867.352599][ T3230] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  867.367006][ T3230] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  867.451247][ T3230] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.463360][ T3230] 8021q: adding VLAN 0 to HW filter on device team0
[  867.485072][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.487435][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.515619][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.518002][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.548951][T19193] Bluetooth: hci1: command tx timeout
[  867.642954][ T3220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.663228][ T3220] veth0_vlan: entered promiscuous mode
[  867.667671][ T3220] veth1_vlan: entered promiscuous mode
[  867.679677][ T3220] veth0_macvtap: entered promiscuous mode
[  867.700848][ T3220] veth1_macvtap: entered promiscuous mode
[  867.734037][ T3220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  867.738085][ T3220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  867.767337][T19382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  867.806828][T19382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  867.824379][T19382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  867.828628][ T3230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.862225][T19382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  867.924501][  T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.927323][  T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.969325][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.976963][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.988657][ T3414] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.12146'.
[  868.172166][ T3230] veth0_vlan: entered promiscuous mode
[  868.195461][ T3230] veth1_vlan: entered promiscuous mode
[  868.208295][ T3230] veth0_macvtap: entered promiscuous mode
[  868.213836][ T3230] veth1_macvtap: entered promiscuous mode
[  868.222005][ T3230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.235692][ T3230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.255949][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.259046][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.270122][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.276050][ T5873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.403725][  T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.413895][  T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.538108][  T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.546141][  T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.608749][ T3465] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12116'.
[  868.629280][ T3465] D`$: renamed from caif0
[  868.713155][ T3455] delete_channel: no stack
[  868.767776][ T3465] A link change request failed with some changes committed already. Interface D`$ may have been left with an inconsistent configuration, please check.
[  868.968193][ T3485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12163'.
[  869.301506][T19193] Bluetooth: hci0: command tx timeout
[  869.620983][T19193] Bluetooth: hci1: command tx timeout
[  870.232438][ T3519] netlink: 'syz.1.12175': attribute type 23 has an invalid length.
[  870.408947][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12181'.
[  870.574823][ T3554] netlink: 'syz.5.12188': attribute type 16 has an invalid length.
[  870.578051][ T3554] netlink: 'syz.5.12188': attribute type 17 has an invalid length.
[  871.750871][T19193] Bluetooth: hci1: command tx timeout
[  872.205759][ T3631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12213'.
[  872.211775][ T3631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12213'.
[  872.522287][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12221'.
[  872.820849][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.825183][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.540705][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.567274][ T3708] netlink: 'syz.5.12235': attribute type 1 has an invalid length.
[  873.572056][ T3708] netlink: 'syz.5.12235': attribute type 1 has an invalid length.
[  873.847288][ T3717] netlink: 'syz.1.12240': attribute type 3 has an invalid length.
[  873.850669][ T3717] netlink: 'syz.1.12240': attribute type 1 has an invalid length.
[  873.853822][ T3717] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12240'.
[  874.007671][ T3732] netlink: 'syz.5.12246': attribute type 5 has an invalid length.
[  874.014421][ T3732] netlink: 'syz.5.12246': attribute type 5 has an invalid length.
[  874.644102][ T3757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12258'.
[  874.647722][ T3757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12258'.
[  874.668915][ T3760] netlink: 'syz.0.12259': attribute type 4 has an invalid length.
[  875.070717][ T3789] : renamed from vlan0 (while UP)
[  875.632031][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  875.634759][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  877.010831][ T3799] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12277'.
[  877.014622][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12277'.
[  877.018280][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12277'.
[  878.140053][ T3815] sctp: [Deprecated]: syz.1.12280 (pid 3815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  878.140053][ T3815] Use struct sctp_sack_info instead
[  878.350300][ T3832] netlink: 'syz.1.12286': attribute type 1 has an invalid length.
[  878.353475][ T3832] netlink: 'syz.1.12286': attribute type 2 has an invalid length.
[  878.369737][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12286'.
[  878.538543][ T3845] netlink: 'syz.5.12289': attribute type 10 has an invalid length.
[  878.614045][ T3845] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  878.740713][ T3853] netlink: 5240 bytes leftover after parsing attributes in process `syz.1.12294'.
[  879.043170][ T3877] netlink: 'syz.1.12306': attribute type 4 has an invalid length.
[  879.045781][ T3877] netlink: 'syz.1.12306': attribute type 17 has an invalid length.
[  879.079346][ T3880] netlink: 'syz.1.12307': attribute type 2 has an invalid length.
[  879.082594][ T3880] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12307'.
[  880.002638][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12312'.
[  880.005500][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12312'.
[  880.008293][ T3892] A link change request failed with some changes committed already. Interface D`$ may have been left with an inconsistent configuration, please check.
[  880.104568][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.741188][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.088205][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.882700][T17951] Bluetooth: hci3: command 0x0406 tx timeout
[  883.083767][ T4015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  883.242163][ T4031] netlink: 'syz.1.12371': attribute type 1 has an invalid length.
[  883.455073][ T4052] netlink: 3084 bytes leftover after parsing attributes in process `syz.5.12381'.
[  883.458405][ T4052] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.12381'.
[  883.535028][ T4057] netlink: 'syz.5.12384': attribute type 10 has an invalid length.
[  883.537718][ T4057] netlink: 55 bytes leftover after parsing attributes in process `syz.5.12384'.
[  884.306371][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12388'.
[  884.883843][ T4071] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  884.887102][ T4071] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  885.200926][ T4103] netlink: 'syz.1.12403': attribute type 21 has an invalid length.
[  885.203603][ T4103] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12403'.
[  885.206629][ T4103] netlink: 'syz.1.12403': attribute type 4 has an invalid length.
[  885.472697][ T4120] netlink: 'syz.1.12410': attribute type 2 has an invalid length.
[  885.771280][ T4128] netlink: 4348 bytes leftover after parsing attributes in process `syz.0.12413'.
[  885.774315][ T4128] netlink: 4348 bytes leftover after parsing attributes in process `syz.0.12413'.
[  885.835367][ T4134] netlink: 288 bytes leftover after parsing attributes in process `syz.1.12417'.
[  885.917588][ T4140] netlink: 380 bytes leftover after parsing attributes in process `syz.1.12419'.
[  886.015045][ T4149] netlink: 'syz.0.12423': attribute type 1 has an invalid length.
[  886.017695][ T4149] netlink: 'syz.0.12423': attribute type 2 has an invalid length.
[  886.847903][T19193] Bluetooth: hci0: unexpected subevent 0x10 length: 150 > 2
[  887.454310][ T4213] netlink: 236 bytes leftover after parsing attributes in process `syz.5.12453'.
[  890.304246][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12455'.
[  890.355133][ T4226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  890.761898][ T4244] netlink: 'syz.5.12466': attribute type 19 has an invalid length.
[  890.765001][ T4244] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12466'.
[  891.304127][ T4262] netlink: 'syz.0.12474': attribute type 3 has an invalid length.
[  891.310472][ T4262] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.12474'.
[  891.348506][ T4268] option changes via remount are deprecated (pid=4267 comm=syz.1.12477)
[  891.433517][ T4274] netlink: 'syz.1.12480': attribute type 5 has an invalid length.
[  891.486779][ T4280] netlink: 'syz.1.12483': attribute type 29 has an invalid length.
[  891.491707][ T4280] netlink: 'syz.1.12483': attribute type 29 has an invalid length.
[  891.529192][ T4283] netlink: 'syz.0.12484': attribute type 12 has an invalid length.
[  891.533971][ T4283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12484'.
[  891.624044][ T4294] delete_channel: no stack
[  891.630373][ T4295] netlink: 'syz.0.12490': attribute type 6 has an invalid length.
[  891.700049][ T4305] bridge0: port 3(veth1_to_hsr) entered blocking state
[  891.702465][ T4305] bridge0: port 3(veth1_to_hsr) entered disabled state
[  891.704684][ T4305] veth1_to_hsr: entered allmulticast mode
[  891.707246][ T4305] veth1_to_hsr: entered promiscuous mode
[  891.709626][ T4305] bridge0: port 3(veth1_to_hsr) entered blocking state
[  891.711900][ T4305] bridge0: port 3(veth1_to_hsr) entered forwarding state
[  891.781998][ T4312] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.12498'.
[  892.010957][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12508'.
[  892.014630][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12508'.
[  892.467876][ T4357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  893.106875][ T4374] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12526'.
[  894.509440][ T4429] netlink: 'syz.0.12546': attribute type 6 has an invalid length.
[  894.520469][ T4429] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12546'.
[  894.614848][ T4437] netlink: 'syz.0.12554': attribute type 1 has an invalid length.
[  894.825922][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.007905][ T4444] netlink: 'syz.1.12557': attribute type 10 has an invalid length.
[  895.084290][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12561'.
[  895.312195][ T4444] team0: Port device syz_tun added
[  896.741112][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.173974][ T4486] __nla_validate_parse: 1 callbacks suppressed
[  897.173991][ T4486] netlink: 740 bytes leftover after parsing attributes in process `syz.1.12576'.
[  898.020380][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.239254][ T4500] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12583'.
[  898.270007][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12583'.
[  898.285455][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12584'.
[  899.289724][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12590'.
[  899.301756][ T4515] netlink: 145 bytes leftover after parsing attributes in process `syz.5.12590'.
[  899.480483][ T4533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  899.591924][ T4543] openvswitch: netlink: Message has 496 unknown bytes.
[  899.594775][ T4543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  899.704013][ T4549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12607'.
[  900.255473][T19193] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11
[  900.298865][ T4570] validate_nla: 1 callbacks suppressed
[  900.298878][ T4570] netlink: 'syz.5.12616': attribute type 1 has an invalid length.
[  900.305391][ T4570] netlink: 10084 bytes leftover after parsing attributes in process `syz.5.12616'.
[  900.358279][ T4576] nbd: couldn't find a device at index -987530419
[  900.720422][T19193] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8
[  902.413629][ T4636] netlink: 'syz.5.12645': attribute type 21 has an invalid length.
[  902.419909][ T4636] netlink: 'syz.5.12645': attribute type 27 has an invalid length.
[  902.473718][ T4642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12648'.
[  902.550025][ T4645] netlink: 'syz.5.12649': attribute type 2 has an invalid length.
[  902.553186][ T4645] netlink: 'syz.5.12649': attribute type 2 has an invalid length.
[  902.791216][ T4669] netlink: 'syz.0.12660': attribute type 2 has an invalid length.
[  903.032713][ T4678] netlink: 'syz.0.12663': attribute type 21 has an invalid length.
[  903.036072][ T4678] IPv6: NLM_F_CREATE should be specified when creating new route
[  903.299503][ T4683] netlink: 'syz.5.12664': attribute type 4 has an invalid length.
[  903.458810][ T4695] : renamed from sit0 (while UP)
[  903.581071][ T4704] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12676'.
[  903.596731][ T4709] openvswitch: netlink: Missing key (keys=40, expected=80)
[  903.629776][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12680'.
[  904.799152][ T4763] netlink: 'syz.0.12702': attribute type 2 has an invalid length.
[  904.810530][ T4763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12702'.
[  904.829707][T19193] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  904.897889][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12704'.
[  905.006231][ T4771] netlink: 'syz.5.12706': attribute type 28 has an invalid length.
[  905.009481][ T4771] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12706'.
[  911.217986][ T4779] Dead loop on virtual device ip6_vti0, fix it urgently!
[  914.679944][ T4795] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12714'.
[  914.684193][ T4795] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12714'.
[  917.246380][ T4814] validate_nla: 1 callbacks suppressed
[  917.246392][ T4814] netlink: 'syz.0.12723': attribute type 4 has an invalid length.
[  917.254569][ T4816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12721'.
[  917.287876][ T4821] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12725'.
[  917.403759][ T4829] lo speed is unknown, defaulting to 1000
[  917.408948][ T4829] lo speed is unknown, defaulting to 1000
[  917.423535][ T4829] lo speed is unknown, defaulting to 1000
[  918.198069][ T4829] infiniband syz2: set active
[  918.200870][   T24] lo speed is unknown, defaulting to 1000
[  918.203436][ T4829] infiniband syz2: added lo
[  918.293556][ T4829] RDS/IB: syz2: added
[  918.295259][ T4829] smc: adding ib device syz2 with port count 1
[  918.315039][ T4829] smc:    ib device syz2 port 1 has no pnetid
[  918.317592][   T31] lo speed is unknown, defaulting to 1000
[  918.342647][ T4829] lo speed is unknown, defaulting to 1000
[  918.385129][ T4855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  918.388113][ T4855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  918.394377][ T4855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  918.397479][ T4855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  918.531464][ T4829] lo speed is unknown, defaulting to 1000
[  918.639677][ T4829] lo speed is unknown, defaulting to 1000
[  918.764767][ T4829] lo speed is unknown, defaulting to 1000
[  918.967340][T19193] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  918.967571][T19193] Bluetooth: hci0: connection err: -111
[  919.054696][   T33] audit: type=1107 audit(1775225150.225:7): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  919.157723][ T4906] netlink: 763 bytes leftover after parsing attributes in process `syz.5.12764'.
[  920.058874][ T4936] netlink: 'syz.1.12777': attribute type 3 has an invalid length.
[  920.067506][ T4936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12777'.
[  920.252492][ T4961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  920.872047][ T5004] netlink: 'syz.5.12808': attribute type 9 has an invalid length.
[  921.708217][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12809'.
[  921.758957][ T5014] tap0: tun_chr_ioctl cmd 1074025684
[  922.340989][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.793887][ T5097] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12847'.
[  925.867775][ T5107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12852'.
[  925.924180][ T5113] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12855'.
[  926.147695][ T5134] tap0: tun_chr_ioctl cmd 2148553947
[  927.252072][ T5206] netlink: zone id is out of range
[  927.253833][ T5206] netlink: zone id is out of range
[  927.339933][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12902'.
[  927.574462][ T5206] netlink: set zone limit has 4 unknown bytes
[  928.044241][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12916'.
[  928.178456][ T5267] netlink: 'syz.1.12920': attribute type 4 has an invalid length.
[  928.182518][ T5267] netlink: 140 bytes leftover after parsing attributes in process `syz.1.12920'.
[  928.747048][ T5280] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.12925'.
[  929.333222][ T5306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12937'.
[  929.336329][ T5307] C: renamed from team_slave_0 (while UP)
[  929.345995][ T5307] netlink: 'syz.5.12935': attribute type 1 has an invalid length.
[  929.348527][ T5307] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12935'.
[  929.359612][ T5307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  929.380373][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.383240][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.839842][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12957'.
[  930.026559][ T5369] netlink: 'syz.1.12964': attribute type 6 has an invalid length.
[  932.907946][ T5389] netlink: 'syz.1.12974': attribute type 3 has an invalid length.
[  932.969437][ T5392] netlink: 'syz.1.12975': attribute type 4 has an invalid length.
[  932.976553][ T5392] __nla_validate_parse: 1 callbacks suppressed
[  932.976565][ T5392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12975'.
[  933.434517][ T5400] syzkaller0: entered promiscuous mode
[  933.437142][ T5400] syzkaller0: entered allmulticast mode
[  933.440658][ T5404] netlink: 'syz.0.12978': attribute type 10 has an invalid length.
[  935.138393][ T5404] geneve0: entered promiscuous mode
[  935.143809][ T5404] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  937.074124][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  937.076728][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  938.172731][ T5435] lo speed is unknown, defaulting to 1000
[  938.259848][ T5441] option changes via remount are deprecated (pid=5440 comm=syz.1.12996)
[  938.549533][ T5446] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.12997'.
[  938.654718][ T5450] netlink: 'syz.5.12999': attribute type 6 has an invalid length.
[  938.657451][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12999'.
[  939.319443][ T5487] netlink: 'syz.1.13017': attribute type 10 has an invalid length.
[  939.366678][ T5487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13017'.
[  939.372144][ T5487] veth0_vlan: entered allmulticast mode
[  939.382904][ T5487] bridge0: port 3(veth0_vlan) entered blocking state
[  939.386397][ T5487] bridge0: port 3(veth0_vlan) entered disabled state
[  939.418824][ T5487] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  940.135954][ T5490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  941.150773][ T5563] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.13043'.
[  944.080315][T19193] Bluetooth: hci0: ISO packet too small
[  944.101842][ T5607] netlink: 'syz.1.13058': attribute type 1 has an invalid length.
[  951.004531][T17951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  951.008126][T17951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  951.012426][T17951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  951.015474][T17951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  951.018554][T17951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  951.054353][ T5620] lo speed is unknown, defaulting to 1000
[  951.205439][ T5620] chnl_net:caif_netlink_parms(): no params data found
[  951.254479][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.257473][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[  951.261428][ T5620] bridge_slave_0: entered allmulticast mode
[  951.265059][ T5620] bridge_slave_0: entered promiscuous mode
[  951.269526][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.272911][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.275889][ T5620] bridge_slave_1: entered allmulticast mode
[  951.279662][ T5620] bridge_slave_1: entered promiscuous mode
[  951.306540][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  951.312749][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  951.339052][ T5620] team0: Port device team_slave_0 added
[  951.345293][ T5620] team0: Port device team_slave_1 added
[  951.364845][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  951.367268][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  951.378313][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  951.382871][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.385566][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  951.393986][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  951.416579][ T5620] hsr_slave_0: entered promiscuous mode
[  951.419181][ T5620] hsr_slave_1: entered promiscuous mode
[  951.421908][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[  951.424064][ T5620] Cannot create hsr debugfs directory
[  953.060406][T17951] Bluetooth: hci2: command tx timeout
[  955.140621][T17951] Bluetooth: hci2: command tx timeout
[  957.040608][T19193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  957.048471][T19193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  957.052039][T19193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  957.055547][T19193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  957.058783][T19193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  957.220327][T19193] Bluetooth: hci2: command tx timeout
[  959.300439][T19193] Bluetooth: hci2: command tx timeout
[  961.260381][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 9190121521 wd_nsec: 9190121701
[  963.300858][T17951] Bluetooth: hci4: command tx timeout
[  967.102573][T19193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  967.107330][T19193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  967.112678][T19193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  967.116141][T19193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  967.119338][T19193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  968.451491][T19193] Bluetooth: hci4: command tx timeout
[  969.142097][T19193] Bluetooth: hci3: command tx timeout
[  970.500413][T19193] Bluetooth: hci4: command tx timeout
[  971.220476][T19193] Bluetooth: hci3: command tx timeout
[  972.580347][T19193] Bluetooth: hci4: command tx timeout
[  973.310294][T19193] Bluetooth: hci3: command tx timeout
[  975.380361][T19193] Bluetooth: hci3: command tx timeout
[  978.020568][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.220600][T17951] Bluetooth: hci0: command 0x0406 tx timeout
[  990.340645][ T5198] Bluetooth: hci1: command 0x0406 tx timeout
[ 1001.543623][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.271361][ T5656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1012.275954][ T5656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1012.279300][ T5656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1012.284052][ T5656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1012.287498][ T5656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1013.061396][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1013.063996][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1018.143258][ T5653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1018.147394][ T5653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1018.151380][ T5653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1018.154791][ T5653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1018.157990][ T5653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1019.781584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.189027][ T5669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1028.194005][ T5669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1028.197660][ T5669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1028.201313][ T5669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1028.204851][ T5669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1059.300407][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 62330121191 wd_nsec: 62330122654
[ 1070.185962][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1070.188576][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1073.346184][ T5674] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1073.350314][ T5674] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1073.353893][ T5674] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1073.356842][ T5674] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1073.359302][ T5674] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1075.225097][ T5669] Bluetooth: hci5: command tx timeout
[ 1075.380459][ T5669] Bluetooth: hci8: command tx timeout
[ 1077.220595][ T5198] Bluetooth: hci7: command tx timeout
[ 1077.300340][ T5198] Bluetooth: hci5: command tx timeout
[ 1077.460435][ T5198] Bluetooth: hci8: command tx timeout
[ 1077.620379][ T5198] Bluetooth: hci2: command 0x0406 tx timeout
[ 1078.363914][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1078.367663][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1078.370733][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1078.373538][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1078.376264][ T5656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1079.050472][ T5198] Bluetooth: hci6: command tx timeout
[ 1079.300420][ T5198] Bluetooth: hci7: command tx timeout
[ 1079.380398][ T5198] Bluetooth: hci5: command tx timeout
[ 1079.540434][ T5198] Bluetooth: hci8: command tx timeout
[ 1081.060359][ T5198] Bluetooth: hci6: command tx timeout
[ 1081.380393][ T5198] Bluetooth: hci7: command tx timeout
[ 1081.471167][ T5198] Bluetooth: hci5: command tx timeout
[ 1081.620425][ T5198] Bluetooth: hci8: command tx timeout
[ 1083.140342][ T5198] Bluetooth: hci6: command tx timeout
[ 1083.460376][ T5198] Bluetooth: hci7: command tx timeout
[ 1085.220625][ T5198] Bluetooth: hci6: command tx timeout
[ 1089.043994][ T5198] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1089.048722][ T5198] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1089.052297][ T5198] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1089.057516][ T5198] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1089.062294][ T5198] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1091.140436][ T5198] Bluetooth: hci9: command tx timeout
[ 1093.054963][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1093.058697][ T5198] Bluetooth: hci0: command tx timeout
[ 1093.224186][ T5669] Bluetooth: hci9: command tx timeout
[ 1095.140727][ T5669] Bluetooth: hci3: command 0x0406 tx timeout
[ 1095.143248][ T5669] Bluetooth: hci0: command tx timeout
[ 1095.300614][ T5656] Bluetooth: hci9: command tx timeout
[ 1097.220691][ T5656] Bluetooth: hci0: command tx timeout
[ 1097.380452][ T5656] Bluetooth: hci9: command tx timeout
[ 1099.300697][ T5656] Bluetooth: hci0: command tx timeout
[ 1104.928833][ T5873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.623780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1131.642412][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1131.644937][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1133.851980][ T5656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1133.856680][ T5656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1133.860255][ T5656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1133.864355][ T5656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1133.867498][ T5656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1135.940447][ T5656] Bluetooth: hci3: command tx timeout
[ 1138.020535][ T5198] Bluetooth: hci3: command tx timeout
[ 1138.740007][ T5198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1138.756671][ T5198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1138.760567][ T5198] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1138.764125][ T5198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1138.767353][ T5198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1140.100493][ T5656] Bluetooth: hci3: command tx timeout
[ 1140.820392][ T5656] Bluetooth: hci4: command tx timeout
[ 1142.180488][ T5656] Bluetooth: hci3: command tx timeout
[ 1142.900338][ T5656] Bluetooth: hci4: command tx timeout
[ 1144.980685][ T5656] Bluetooth: hci4: command tx timeout
[ 1147.060381][ T5656] Bluetooth: hci4: command tx timeout
[ 1149.822770][ T5198] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1149.828578][ T5198] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1149.832329][ T5198] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1149.836068][ T5198] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1149.839358][ T5198] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1151.870470][ T5656] Bluetooth: hci10: command tx timeout
[ 1153.940503][ T5656] Bluetooth: hci10: command tx timeout
[ 1156.020425][ T5656] Bluetooth: hci10: command tx timeout
[ 1157.220525][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1158.110377][ T5656] Bluetooth: hci10: command tx timeout
[ 1165.540475][   T34] INFO: task syz-executor:5655 blocked for more than 144 seconds.
[ 1165.543752][   T34]       Not tainted syzkaller #0
[ 1165.545873][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1165.549430][   T34] task:syz-executor    state:D stack:27304 pid:5655  tgid:5655  ppid:1      task_flags:0x400140 flags:0x00080002
[ 1165.557898][   T34] Call Trace:
[ 1165.559345][   T34]  <TASK>
[ 1165.576519][   T34]  __schedule+0x15dd/0x52d0
[ 1165.578521][   T34]  ? __pfx___schedule+0x10/0x10
[ 1165.590338][   T34]  ? schedule+0x90/0x360
[ 1165.592173][   T34]  schedule+0x164/0x360
[ 1165.593913][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1165.596120][   T34]  __mutex_lock+0x7fe/0x1300
[ 1165.597932][   T34]  ? __mutex_lock+0x5ac/0x1300
[ 1165.599834][   T34]  ? inet_rtm_newaddr+0x404/0x1ad0
[ 1165.610529][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1165.612670][   T34]  ? __nla_parse+0x40/0x60
[ 1165.614529][   T34]  inet_rtm_newaddr+0x404/0x1ad0
[ 1165.616598][   T34]  ? __kernel_text_address+0xd/0x30
[ 1165.618779][   T34]  ? unwind_get_return_address+0x4d/0x90
[ 1165.632767][   T34]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1165.635370][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1165.637619][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1165.639857][   T34]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1165.651990][   T34]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1165.654169][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1165.663006][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1165.665153][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1165.667145][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1165.669403][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1165.675004][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1165.677087][   T34]  netlink_unicast+0x80f/0x9b0
[ 1165.679050][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1165.687171][   T34]  ? netlink_sendmsg+0x650/0xb40
[ 1165.689286][   T34]  ? skb_put+0x11b/0x210
[ 1165.692689][   T34]  netlink_sendmsg+0x813/0xb40
[ 1165.694609][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1165.696809][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1165.698848][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1165.701701][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1165.703901][   T34]  __sys_sendto+0x672/0x710
[ 1165.705808][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1165.707920][   T34]  ? exc_page_fault+0x6a/0xc0
[ 1165.709851][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[ 1165.712720][   T34]  __x64_sys_sendto+0xde/0x100
[ 1165.714725][   T34]  do_syscall_64+0x14d/0xf80
[ 1165.716637][   T34]  ? trace_irq_disable+0x3b/0x150
[ 1165.718740][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.721926][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.724402][   T34] RIP: 0033:0x7f6e9655d04e
[ 1165.726284][   T34] RSP: 002b:00007fff90060b08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1165.729721][   T34] RAX: ffffffffffffffda RBX: 000055558b925500 RCX: 00007f6e9655d04e
[ 1165.733570][   T34] RDX: 0000000000000028 RSI: 00007f6e97344670 RDI: 0000000000000003
[ 1165.736713][   T34] RBP: 0000000000000001 R08: 00007fff90060b84 R09: 000000000000000c
[ 1165.739828][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1165.743575][   T34] R13: 0000000000000000 R14: 00007f6e97344670 R15: 0000000000000000
[ 1165.746850][   T34]  </TASK>
[ 1165.748163][   T34] INFO: task syz-executor:5660 blocked for more than 144 seconds.
[ 1165.751802][   T34]       Not tainted syzkaller #0
[ 1165.753872][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1165.758498][   T34] task:syz-executor    state:D stack:27304 pid:5660  tgid:5660  ppid:1      task_flags:0x400140 flags:0x00080002
[ 1165.763908][   T34] Call Trace:
[ 1165.765286][   T34]  <TASK>
[ 1165.766525][   T34]  __schedule+0x15dd/0x52d0
[ 1165.768449][   T34]  ? __pfx___schedule+0x10/0x10
[ 1165.770900][   T34]  ? schedule+0x90/0x360
[ 1165.772690][   T34]  schedule+0x164/0x360
[ 1165.774432][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1165.776584][   T34]  __mutex_lock+0x7fe/0x1300
[ 1165.778509][   T34]  ? __mutex_lock+0x5ac/0x1300
[ 1165.781232][   T34]  ? inet_rtm_newaddr+0x404/0x1ad0
[ 1165.783393][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1165.785510][   T34]  ? __nla_parse+0x40/0x60
[ 1165.787370][   T34]  inet_rtm_newaddr+0x404/0x1ad0
[ 1165.789430][   T34]  ? __kernel_text_address+0xd/0x30
[ 1165.797370][   T34]  ? unwind_get_return_address+0x4d/0x90
[ 1165.799730][   T34]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1165.804175][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1165.806441][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1165.808658][   T34]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1165.811186][   T34]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1165.813338][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1165.815494][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1165.817599][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1165.819594][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1165.822721][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1165.824947][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1165.827108][   T34]  netlink_unicast+0x80f/0x9b0
[ 1165.829163][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[ 1165.831861][   T34]  ? netlink_sendmsg+0x650/0xb40
[ 1165.833828][   T34]  ? skb_put+0x11b/0x210
[ 1165.835414][   T34]  netlink_sendmsg+0x813/0xb40
[ 1165.837374][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1165.839160][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1165.841367][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1165.843113][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1165.844862][   T34]  __sys_sendto+0x672/0x710
[ 1165.846479][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1165.848413][   T34]  ? exc_page_fault+0x6a/0xc0
[ 1165.850713][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[ 1165.852632][   T34]  __x64_sys_sendto+0xde/0x100
[ 1165.854524][   T34]  do_syscall_64+0x14d/0xf80
[ 1165.856287][   T34]  ? trace_irq_disable+0x3b/0x150
[ 1165.857867][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.861004][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.862969][   T34] RIP: 0033:0x7fe2b155d04e
[ 1165.864579][   T34] RSP: 002b:00007fff2d42e8d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1165.867249][   T34] RAX: ffffffffffffffda RBX: 000055556ed02500 RCX: 00007fe2b155d04e
[ 1165.869801][   T34] RDX: 0000000000000028 RSI: 00007fe2b2344670 RDI: 0000000000000003
[ 1165.873205][   T34] RBP: 0000000000000001 R08: 00007fff2d42e954 R09: 000000000000000c
[ 1165.875705][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1165.878152][   T34] R13: 0000000000000000 R14: 00007fe2b2344670 R15: 0000000000000000
[ 1165.880973][   T34]  </TASK>
[ 1165.881963][   T34] 
[ 1165.881963][   T34] Showing all locks held in the system:
[ 1165.884737][   T34] 1 lock held by khungtaskd/34:
[ 1165.886333][   T34]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1165.889355][   T34] 3 locks held by kworker/u10:3/63:
[ 1165.891829][   T34]  #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1165.895419][   T34]  #1: ffffc9000175fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1165.898846][   T34]  #2: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1165.905388][   T34] 1 lock held by dhcpcd/5553:
[ 1165.906849][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x130/0x330
[ 1165.909700][   T34] 2 locks held by getty/5634:
[ 1165.912325][   T34]  #0: ffff888178a3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1165.915347][   T34]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1165.918736][   T34] 3 locks held by kworker/0:3/5859:
[ 1165.921311][   T34]  #0: ffff88810006b148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1165.924692][   T34]  #1: ffffc900067ffc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1165.928121][   T34]  #2: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 1165.931908][   T34] 7 locks held by kworker/u8:4/5873:
[ 1165.933689][   T34]  #0: ffff8881012ae148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1165.937163][   T34]  #1: ffffc9000681fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1165.942882][   T34]  #2: ffffffff8fbc03d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1165.945815][   T34]  #3: ffff888110ba9130 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x11b/0x3f0
[ 1165.948945][   T34]  #4: ffff888110bad250 (&devlink->lock_key#29){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x3f0
[ 1165.953077][   T34]  #5: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680
[ 1165.956707][   T34]  #6: ffffffff8e764878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1165.961488][   T34] 3 locks held by kworker/1:7/9762:
[ 1165.964757][   T34]  #0: ffff888100069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1165.969718][   T34]  #1: ffffc90005b07c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1165.974735][   T34]  #2: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xfe0
[ 1165.978588][   T34] 3 locks held by kworker/u8:5/19382:
[ 1165.981148][   T34]  #0: ffff888175e8b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1165.985859][   T34]  #1: ffffc900065efc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1165.991930][   T34]  #2: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1165.995602][   T34] 1 lock held by syz-executor/3220:
[ 1165.997245][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1166.000054][   T34] 5 locks held by syz.5.13049/5585:
[ 1166.002077][   T34] 7 locks held by syz-executor/5620:
[ 1166.004094][   T34]  #0: ffff8881722f6420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[ 1166.007134][   T34]  #1: ffff888112d64c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[ 1166.010079][   T34]  #2: ffff88816e579b48 (kn->active#48){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
[ 1166.016603][   T34]  #3: ffffffff8f443108 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1166.019825][   T34]  #4: ffff88811837b130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[ 1166.025126][   T34]  #5: ffff88811837c250 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[ 1166.028243][   T34]  #6: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[ 1166.031962][   T34] 1 lock held by syz-executor/5655:
[ 1166.033646][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.036467][   T34] 1 lock held by syz-executor/5660:
[ 1166.038302][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.041701][   T34] 1 lock held by syz-executor/5666:
[ 1166.043379][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.046283][   T34] 1 lock held by syz-executor/5671:
[ 1166.048074][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.051863][   T34] 1 lock held by syz-executor/5679:
[ 1166.053491][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.056522][   T34] 1 lock held by syz-executor/5684:
[ 1166.058119][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.061500][   T34] 1 lock held by syz-executor/5693:
[ 1166.063389][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.067664][   T34] 1 lock held by syz-executor/5700:
[ 1166.069667][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.073962][   T34] 1 lock held by syz-executor/5706:
[ 1166.075839][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1166.079195][   T34] 
[ 1166.080005][   T34] =============================================
[ 1166.080005][   T34] 
[ 1166.083463][   T34] NMI backtrace for cpu 1
[ 1166.083472][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1166.083481][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1166.083486][   T34] Call Trace:
[ 1166.083489][   T34]  <TASK>
[ 1166.083492][   T34]  dump_stack_lvl+0xe8/0x150
[ 1166.083507][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[ 1166.083520][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1166.083531][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1166.083543][   T34]  sys_info+0x135/0x170
[ 1166.083553][   T34]  watchdog+0xfd9/0x1030
[ 1166.083566][   T34]  ? watchdog+0x21a/0x1030
[ 1166.083578][   T34]  kthread+0x388/0x470
[ 1166.083587][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1166.083597][   T34]  ? __pfx_kthread+0x10/0x10
[ 1166.083604][   T34]  ret_from_fork+0x51e/0xb90
[ 1166.083615][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1166.083624][   T34]  ? __switch_to+0xc7d/0x1450
[ 1166.083634][   T34]  ? __pfx_kthread+0x10/0x10
[ 1166.083642][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1166.083656][   T34]  </TASK>
[ 1166.083659][   T34] Sending NMI from CPU 1 to CPUs 0:
[ 1166.119806][    C0] NMI backtrace for cpu 0
[ 1166.119818][    C0] CPU: 0 UID: 0 PID: 5585 Comm: syz.5.13049 Not tainted syzkaller #0 PREEMPT(full) 
[ 1166.119826][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1166.119831][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[ 1166.119843][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 86 61 77 03 66 0f 1f 44 00
[ 1166.119850][    C0] RSP: 0018:ffffc90000006c08 EFLAGS: 00000046
[ 1166.119857][    C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
[ 1166.119862][    C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[ 1166.119866][    C0] RBP: ffffc90000006ce0 R08: ffffc90000006c67 R09: 1ffff92000000d8c
[ 1166.119871][    C0] R10: dffffc0000000000 R11: fffff52000000d8d R12: ffff888121031e01
[ 1166.119876][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888121031ef0
[ 1166.119880][    C0] FS:  00007f2b18a446c0(0000) GS:ffff88818de5a000(0000) knlGS:0000000000000000
[ 1166.119886][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1166.119891][    C0] CR2: 00007f3137913b53 CR3: 0000000186ff2000 CR4: 00000000000006f0
[ 1166.119919][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1166.119924][    C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1166.119929][    C0] Call Trace:
[ 1166.119932][    C0]  <IRQ>
[ 1166.119935][    C0]  arch_irq_work_raise+0x6d/0x80
[ 1166.119944][    C0]  __irq_work_queue_local+0x1eb/0x590
[ 1166.119956][    C0]  ? __pfx___irq_work_queue_local+0x10/0x10
[ 1166.119971][    C0]  ? perf_callchain+0x2df/0x390
[ 1166.119979][    C0]  irq_work_queue+0x99/0x140
[ 1166.119989][    C0]  bpf_send_signal_common+0x3ae/0x540
[ 1166.119997][    C0]  ? __pfx_bpf_send_signal_common+0x10/0x10
[ 1166.120003][    C0]  ? perf_prepare_sample+0x1350/0x22d0
[ 1166.120011][    C0]  ? __pfx_perf_prepare_sample+0x10/0x10
[ 1166.120018][    C0]  bpf_send_signal_thread+0x1a/0x30
[ 1166.120027][    C0]  bpf_prog_73355fbfa35b0bca+0x49/0x51
[ 1166.120034][    C0]  __perf_event_overflow+0x3b7/0xec0
[ 1166.120042][    C0]  ? __perf_event_overflow+0x273/0xec0
[ 1166.120049][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[ 1166.120059][    C0]  perf_swevent_hrtimer+0x481/0x650
[ 1166.120069][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[ 1166.120085][    C0]  ? do_raw_spin_unlock+0x4d/0x210
[ 1166.120092][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[ 1166.120101][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[ 1166.120110][    C0]  __hrtimer_run_queues+0x4e7/0xcc0
[ 1166.120123][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1166.120134][    C0]  hrtimer_interrupt+0x42b/0x1010
[ 1166.120146][    C0]  ? do_bpf_send_signal+0x127/0x1c0
[ 1166.120154][    C0]  __sysvec_apic_timer_interrupt+0x102/0x460
[ 1166.120165][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[ 1166.120173][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1166.120180][    C0] RIP: 0010:skb_network_protocol+0x1e7/0x3f0
[ 1166.120190][    C0] Code: dc 0f 85 1d 01 00 00 41 8b 5e 70 4d 8d 6e 74 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 1b 01 00 00 41 89 dc 45 2b 65 00 <44> 89 ff 44 89 e6 e8 de bd 48 f8 45 89 fd 45 29 e5 77 59 e8 11 bc
[ 1166.120195][    C0] RSP: 0018:ffffc90000007568 EFLAGS: 00000202
[ 1166.120201][    C0] RAX: 0000000000000000 RBX: 0000000000000046 RCX: 0000000000000100
[ 1166.120206][    C0] RDX: ffff88816bc69d40 RSI: 000000000000dd86 RDI: ffff888113116670
[ 1166.120211][    C0] RBP: 000000000000dd86 R08: ffff88816bc69d40 R09: 0000000000000002
[ 1166.120217][    C0] R10: 000000000000a888 R11: 0000000000000100 R12: 0000000000000046
[ 1166.120221][    C0] R13: ffff888113116674 R14: ffff888113116600 R15: 0000000000000000
[ 1166.120229][    C0]  ? skb_network_protocol+0x19c/0x3f0
[ 1166.120237][    C0]  ? __pfx_passthru_features_check+0x10/0x10
[ 1166.120245][    C0]  netif_skb_features+0x8ce/0xe40
[ 1166.120291][    C0]  validate_xmit_skb+0xa0/0x14a0
[ 1166.120305][    C0]  ? netdev_pick_tx+0x624/0xf30
[ 1166.120317][    C0]  __dev_queue_xmit+0x126d/0x3890
[ 1166.120327][    C0]  ? __dev_queue_xmit+0x277/0x3890
[ 1166.120335][    C0]  ? ___neigh_create+0x1c5f/0x2280
[ 1166.120345][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[ 1166.120354][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1166.120362][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1166.120371][    C0]  ? neigh_resolve_output+0x438/0x750
[ 1166.120377][    C0]  ? eth_header+0x11b/0x200
[ 1166.120385][    C0]  ? __asan_memcpy+0x40/0x70
[ 1166.120392][    C0]  ? eth_header+0x11b/0x200
[ 1166.120400][    C0]  ? __pfx_eth_header+0x10/0x10
[ 1166.120406][    C0]  ? neigh_resolve_output+0x624/0x750
[ 1166.120415][    C0]  ? ip6_output+0x126/0x550
[ 1166.120422][    C0]  ip6_output+0x340/0x550
[ 1166.120429][    C0]  ? __pfx_ip6_output+0x10/0x10
[ 1166.120435][    C0]  ndisc_send_skb+0xd0b/0x1670
[ 1166.120444][    C0]  ? ndisc_send_skb+0x215/0x1670
[ 1166.120453][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[ 1166.120462][    C0]  ? __pfx_dst_output+0x10/0x10
[ 1166.120475][    C0]  addrconf_rs_timer+0x395/0x6d0
[ 1166.120484][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1166.120493][    C0]  call_timer_fn+0x192/0x640
[ 1166.120501][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1166.120508][    C0]  ? call_timer_fn+0xd4/0x640
[ 1166.120516][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1166.120526][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1166.120533][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1166.120541][    C0]  __run_timer_base+0x652/0x8b0
[ 1166.120547][    C0]  ? do_bpf_send_signal+0x127/0x1c0
[ 1166.120557][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1166.120567][    C0]  run_timer_softirq+0xb7/0x170
[ 1166.120574][    C0]  handle_softirqs+0x22a/0x870
[ 1166.120583][    C0]  ? __irq_exit_rcu+0x5f/0x150
[ 1166.120593][    C0]  __irq_exit_rcu+0x5f/0x150
[ 1166.120601][    C0]  irq_exit_rcu+0x9/0x30
[ 1166.120608][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1166.120616][    C0]  </IRQ>
[ 1166.120618][    C0]  <TASK>
[ 1166.120621][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1166.120628][    C0] RIP: 0010:smp_call_function_single+0x0/0x580
[ 1166.120635][    C0] Code: fb 0b 00 48 c7 c7 40 65 79 8e 48 89 de e8 a8 03 32 03 e9 a5 fe ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[ 1166.120641][    C0] RSP: 0018:ffffc9000754f918 EFLAGS: 00000246
[ 1166.120647][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001
[ 1166.120651][    C0] RDX: ffffc9000754f9c0 RSI: ffffffff81fa5930 RDI: 0000000000000001
[ 1166.120656][    C0] RBP: ffffc9000754fac8 R08: ffff88816bc69d40 R09: 0000000000000002
[ 1166.120660][    C0] R10: ffffffffffffffff R11: 0000000000000002 R12: ffffc9000754f9c0
[ 1166.120665][    C0] R13: ffff88816bc69d54 R14: 1ffff1102d78d3aa R15: dffffc0000000000
[ 1166.120671][    C0]  ? __pfx_remote_function+0x10/0x10
[ 1166.120681][    C0]  event_function_call+0x35e/0x9a0
[ 1166.120691][    C0]  ? __pfx___perf_remove_from_context+0x10/0x10
[ 1166.120702][    C0]  ? __pfx_event_function_call+0x10/0x10
[ 1166.120710][    C0]  ? __pfx_event_function+0x10/0x10
[ 1166.120721][    C0]  ? __pfx___perf_remove_from_context+0x10/0x10
[ 1166.120730][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1166.120737][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1166.120744][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1166.120751][    C0]  ? perf_remove_from_context+0xdb/0x1d0
[ 1166.120760][    C0]  ? __pfx_perf_release+0x10/0x10
[ 1166.120768][    C0]  perf_event_release_kernel+0x15d/0x510
[ 1166.120777][    C0]  ? evm_file_release+0x107/0x1e0
[ 1166.120785][    C0]  ? __pfx_perf_release+0x10/0x10
[ 1166.120793][    C0]  perf_release+0x38/0x50
[ 1166.120800][    C0]  __fput+0x44f/0xa70
[ 1166.120812][    C0]  task_work_run+0x1d9/0x270
[ 1166.120820][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 1166.120829][    C0]  get_signal+0x11eb/0x1330
[ 1166.120840][    C0]  arch_do_signal_or_restart+0xbc/0x830
[ 1166.120849][    C0]  ? __pfx_task_work_add+0x10/0x10
[ 1166.120856][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1166.120863][    C0]  ? __pfx_perf_ioctl+0x10/0x10
[ 1166.120872][    C0]  ? __fput_deferred+0x216/0x380
[ 1166.120883][    C0]  exit_to_user_mode_loop+0x86/0x480
[ 1166.120891][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1166.120900][    C0]  do_syscall_64+0x32d/0xf80
[ 1166.120909][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.120916][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.120923][    C0] RIP: 0033:0x7f2b17b9c819
[ 1166.120929][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.120935][    C0] RSP: 002b:00007f2b18a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1166.120941][    C0] RAX: 0000000000000000 RBX: 00007f2b17e15fa0 RCX: 00007f2b17b9c819
[ 1166.120946][    C0] RDX: 0000000000000008 RSI: 0000000040042408 RDI: 0000000000000009
[ 1166.120950][    C0] RBP: 00007f2b17c32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1166.120954][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1166.120958][    C0] R13: 00007f2b17e16038 R14: 00007f2b17e15fa0 R15: 00007fffa4d56628
[ 1166.120971][    C0]  </TASK>
[ 1166.406352][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1166.408544][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1166.411389][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1166.414527][   T34] Call Trace:
[ 1166.415604][   T34]  <TASK>
[ 1166.416552][   T34]  vpanic+0x56c/0xa60
[ 1166.417827][   T34]  ? __pfx___schedule+0x10/0x10
[ 1166.419367][   T34]  ? __pfx_vpanic+0x10/0x10
[ 1166.420800][   T34]  panic+0xc5/0xd0
[ 1166.421990][   T34]  ? __pfx_panic+0x10/0x10
[ 1166.423437][   T34]  ? preempt_schedule_thunk+0x16/0x30
[ 1166.425121][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1166.427046][   T34]  watchdog+0x1023/0x1030
[ 1166.428418][   T34]  ? watchdog+0x21a/0x1030
[ 1166.429821][   T34]  kthread+0x388/0x470
[ 1166.431101][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1166.432601][   T34]  ? __pfx_kthread+0x10/0x10
[ 1166.434063][   T34]  ret_from_fork+0x51e/0xb90
[ 1166.435613][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1166.437287][   T34]  ? __switch_to+0xc7d/0x1450
[ 1166.438797][   T34]  ? __pfx_kthread+0x10/0x10
[ 1166.440285][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1166.441805][   T34]  </TASK>
[ 1166.443463][   T34] Kernel Offset: disabled
[ 1166.444831][   T34] Rebooting in 86400 seconds..
