last executing test programs:

34.043004332s ago: executing program 1 (id=48):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0)

33.924839111s ago: executing program 1 (id=49):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x300, 0x2, 0x0, 0x2, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4a12d482}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = syz_clone(0xa00200, &(0x7f00000008c0)="efedd94536b10c86ec4e4cba06cb93c310c5e41112e631869a14a3759181d390f1e46b2401e204c0", 0x28, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="68e8a210b193efbda9")
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0xd8, 0xe, 0x8, 0x8, 0x0, 0x8, 0x50184, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000800), 0x3}, 0x100400, 0x9, 0x29e, 0x5, 0x7fff, 0x5, 0x0, 0x0, 0x400, 0x0, 0xfff}, r2, 0x3, 0xffffffffffffffff, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="68030000070a01010000000000000000020000074c030480100001800b00010074756e6e656c00002800018008000100666962001c00028008000140000000160800014000000017080002400000000054000180090001006d657461000000004400028008000140000000040800034000000008080002400000001a08000140000000100800034000000000080001400000000e08000340000000030800014000000013bc02018008000100636d7000b0020280fc0103807e78041a000100fb063a8ad4e0dacb5a114a65f584b64175f48d5b5761eefc793d7c3624ac6033bb90a19ef902dda446fd0e507eca9e72bba26effe2feaee7e542b9af41e7344893bb4ea830ee6da915bf0b6bf544061d208633ff238e470dd7a92e79a5179faa4f4bd99e402a5b7136b31bb0a1bce4e215aaecce2f2139b339ac00003400028008000180fffffffd08000340000000030800034000000002080003400000000108000180fffffff908000340000000042c00028008000180fffffffd08000340000000010900020073797a31000000000900020073797a31000000000c00028008000180fffffffb1c000280080003400000000108000180fffffffe080001800000000034000280080003400000000408000180fffffffb0900020073797a300000000008000180fffffffd0900020073797a300000000091000100542b7cb6aa2f825cb1e5902d714635432f68d1aa12d586878dee2a185354ceebab3606ce2d11a0b358ef4d528b4332771088f0a9a07a6025b18484fceec1455a26f25131a87b8a05449036637cd7525bcfe5e9c9a8951622d848246b6d7a068e647a9c71bc88ead7a6b55914e4912ec43fb7cff66a39b25814ec668dc7b535976166225ae81ec4432f1386d60f000000280002800900020073797a310000000008000180fffffffb08000180fffffffc0800034000000001080002400000000308000240000000000800014000000008900003801c00028008000180fffffffd080003400000000408000340000000041c0002800900020073797a30000000000900020073797a3000000000540002800900020073797a30000000000900020073797a31000000000900020073797a300000000008000180fffffffe08000180fffffffe08000340000000040900020073797a300000000008000180f89ce71808000240000000030800094000"], 0x368}, 0x1, 0x0, 0x0, 0x40040}, 0x40010)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4044194)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="2d6e6574202d6465766963657320006e65745f7072696f20cd62f663d8f8250ea3998bfc0cf9bf3911bdf4b8229825182aab04c91340b02254d695930996a7ada571da6b5e73d7294e27576dd3810cb7bd1f6b74a215f185cd9d0f41d7a097f12147a4bff68de5612a11f895b14446b2e493dd598783efeab550f718"], 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)

33.687861039s ago: executing program 1 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x231, 0x0, &(0x7f00000020c0)="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", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

33.059181695s ago: executing program 1 (id=56):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000090}, 0x40800)

32.713590042s ago: executing program 1 (id=58):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

32.603897936s ago: executing program 1 (id=60):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r1 = socket$kcm(0x23, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20)
syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0)

17.613562751s ago: executing program 32 (id=60):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r1 = socket$kcm(0x23, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20)
syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0)

2.103225775s ago: executing program 0 (id=413):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
ioctl$TUNSETIFF(r0, 0xb702, 0x0)

2.014218025s ago: executing program 0 (id=415):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1.013414471s ago: executing program 3 (id=428):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000001240)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x941aca29b1132872}, 0xc, &(0x7f0000001200)={&(0x7f0000000f40)={0x104, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc851}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x890)

1.012919818s ago: executing program 0 (id=429):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000880), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000380), 0x12)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20008840)
recvmsg(r4, 0x0, 0x10140)
recvmsg$kcm(r4, &(0x7f0000001100)={&(0x7f0000000ac0)=@hci, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)=""/122, 0x7a}, {0x0}, {&(0x7f0000000e40)=""/145, 0x91}], 0x3, &(0x7f00000010c0)=""/2, 0x2}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002b000701feffffff00000000060000000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x1a, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x0, 0x6, 0xa6, &(0x7f0000000200)=""/166, 0x32e2ad9aff57648e, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=[{0x1, 0x1, 0x3, 0x7}], 0x10, 0x91}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001140)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB], 0x20)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={0x1, &(0x7f0000000740)="3289d12236de127747f977395c4fb408a4dcec32792c60969ac466e2dfcd0459a5bb2754bb4de921ed963976eaa96e9aca2ae01ee02601ab7eafd2cb53a425f7f5d64fa2601f166e99ff3bda6889eb56ffd6ca54fd8ee36ba7e4b161ad95412436ef46ba7ed0467b8cf3b2bd07842fd55c03313c05fde77652fd8c2b050538703c8de815df1786a2453d0e2d8aa9ec70c97f02d46e82b6f5e1d0751a41900fe4c5d0c9b0503a88c9384fdf1cf6254680899d25e6b99f1ba7", 0x0, 0x4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

729.560397ms ago: executing program 3 (id=430):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000006f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

644.654329ms ago: executing program 3 (id=431):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x3, 0x9, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x9}, 0x20a, 0x4, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

534.443288ms ago: executing program 3 (id=432):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

406.076732ms ago: executing program 2 (id=433):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d080081007c05e8fe55a10a000400110000000a600e41b0000900ac00e1060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e0036de350dd8550db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a", 0xd9}], 0x1}, 0x0)

291.075124ms ago: executing program 2 (id=434):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4008054)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000080))

244.462201ms ago: executing program 2 (id=435):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20)

235.342025ms ago: executing program 0 (id=436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)

221.604375ms ago: executing program 2 (id=437):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmsg$AUDIT_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3e8, 0x300, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20000070)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x8, 0x12)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x8000000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x2, r2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

150.076998ms ago: executing program 3 (id=438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

149.870242ms ago: executing program 0 (id=439):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e000000013000107"], 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800)
recvmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2)

22.242209ms ago: executing program 0 (id=440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38)

21.694861ms ago: executing program 3 (id=441):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x430, 0x3f3, 0x200, 0x70bd29, 0x25dfdbfc, {0x10, 0x1, 0x11, [0x4, 0x2, 0xd1c3, 0x7ff, 0x42, 0x4129f664, 0x6, 0x2, 0x4, 0x7, 0x9, 0x1c, 0x5, 0xecc, 0x1191, 0x400, 0x9, 0x6, 0x7f, 0x6, 0x21, 0xb8, 0x8, 0x4, 0x3c2, 0x80, 0x4, 0x7ff, 0xf, 0x40, 0x17b, 0x9, 0x7, 0x8a2, 0x5, 0x7, 0x2, 0x6, 0x1, 0x7ff, 0x2, 0x9, 0x1, 0x8, 0x1, 0x8, 0xfffffc01, 0xfc19, 0xfffffffc, 0x10001, 0x6, 0x7fff, 0x9d, 0x0, 0x7, 0x7ff, 0x0, 0x101, 0x5fc, 0xa9b, 0x7, 0x81, 0xf, 0x4], [0x1, 0x9b, 0x50000000, 0x8, 0x4, 0xfffffbff, 0x401, 0x8000, 0x6841, 0x7, 0x72c, 0x9, 0x1, 0x5, 0x52d8, 0x0, 0x8, 0x200, 0x66386297, 0x3, 0x4, 0x6, 0x9, 0xf79, 0xfae, 0xc4, 0x7, 0x0, 0x10001, 0x3, 0x1ca7c, 0x84a, 0x8, 0x2, 0x1, 0xff, 0x2000, 0x1000, 0x6, 0x3, 0x10000, 0x5, 0x2, 0x1, 0x1, 0x5, 0x3, 0x6, 0x400, 0xa6f, 0xdfd, 0x7, 0x917, 0xfffffff2, 0x5, 0x6, 0x3, 0x0, 0x0, 0x4, 0x7, 0x1, 0x6, 0x976b], [0xfbe, 0x6, 0x9, 0x9e, 0x1, 0x7fffffff, 0x1, 0x0, 0xffff7fff, 0x1, 0x0, 0x4, 0x8, 0x9, 0x5, 0x2, 0x1d36b627, 0xfff, 0x40, 0x9, 0x800, 0x9, 0x7fffffff, 0xff, 0x2, 0x6, 0x8, 0x1, 0x2, 0x2, 0x5, 0xfffffffc, 0x4, 0x7ff, 0x800000, 0x7f, 0x2, 0xda, 0x4, 0x2, 0x9, 0x1e, 0x3, 0x10, 0xd, 0x7f, 0x6, 0x8000, 0x32e, 0x9, 0x1, 0x0, 0x9, 0x6, 0x5, 0x9, 0xffffffff, 0x5, 0x101, 0x4, 0xee, 0x7, 0x5, 0x8], [0x1800000, 0x800, 0xdb, 0x4, 0x0, 0x3ff, 0x5, 0x10001, 0x8, 0x80000000, 0x9, 0xe, 0x6090, 0x1, 0x82b, 0x40, 0x8, 0xf2, 0x1, 0x7, 0x4, 0x401, 0x3, 0xfffff406, 0x4fe, 0x9, 0x3, 0x86b, 0x3, 0x5, 0x800, 0xe767, 0x4, 0xffffffff, 0x9, 0x5, 0x7, 0x400, 0x7, 0x2, 0xfffffff9, 0x100, 0xf5, 0xeeec, 0x6, 0x1, 0xc0, 0x6, 0x6, 0x0, 0x3, 0x7, 0x0, 0x776, 0x6, 0x9, 0x2, 0xd, 0x10001, 0x401, 0x6, 0x22f, 0x537, 0x7fffffff], 0x10, ['].!\x00', '\x9f\x00', ']\x00', '\x00', ',*\xb2!\x00', '*\x00']}, ["", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, 0x0, 0x20040894)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2400c000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3400c085)
r3 = socket$kcm(0x15, 0x5, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0))
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000040), 0x4)
setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x4, {0xa, 0x4e22, 0x1, @private2, 0x400}}}, 0x80, 0x0, 0x0, &(0x7f00000015c0)=[{0x28, 0x110, 0x0, "992dd2ac721c943846b222949602d8b91379c0"}], 0x28}, 0x40)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

582.695µs ago: executing program 2 (id=442):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')

0s ago: executing program 2 (id=443):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37614' (ED25519) to the list of known hosts.
syzkaller login: [   49.551582][ T5773] cgroup: Unknown subsys name 'net'
[   49.707383][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.712545][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.572181][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.659310][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.662907][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.667319][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.670545][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.673477][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.690608][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.694351][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.697211][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.702279][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.706620][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.746368][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.752663][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.757562][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.761825][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.766096][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.001837][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   57.086811][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   57.152660][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.156914][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.160477][ T5845] bridge_slave_0: entered allmulticast mode
[   57.165369][ T5845] bridge_slave_0: entered promiscuous mode
[   57.185864][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   57.201434][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.204784][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.207916][ T5845] bridge_slave_1: entered allmulticast mode
[   57.212101][ T5845] bridge_slave_1: entered promiscuous mode
[   57.280489][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.310890][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.315365][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.317862][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.320615][ T5841] bridge_slave_0: entered allmulticast mode
[   57.324780][ T5841] bridge_slave_0: entered promiscuous mode
[   57.328157][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.330882][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.333979][ T5841] bridge_slave_1: entered allmulticast mode
[   57.336949][ T5841] bridge_slave_1: entered promiscuous mode
[   57.392429][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.396149][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.398775][ T5848] bridge_slave_0: entered allmulticast mode
[   57.401983][ T5848] bridge_slave_0: entered promiscuous mode
[   57.405842][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.408306][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.411048][ T5848] bridge_slave_1: entered allmulticast mode
[   57.415002][ T5848] bridge_slave_1: entered promiscuous mode
[   57.419388][ T5845] team0: Port device team_slave_0 added
[   57.434142][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.440830][ T5845] team0: Port device team_slave_1 added
[   57.455662][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.461159][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.504183][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.523099][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.526901][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.538206][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.544739][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.547262][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.557238][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.582182][ T5841] team0: Port device team_slave_0 added
[   57.592304][ T5848] team0: Port device team_slave_0 added
[   57.606665][ T5841] team0: Port device team_slave_1 added
[   57.610090][ T5848] team0: Port device team_slave_1 added
[   57.634117][ T5845] hsr_slave_0: entered promiscuous mode
[   57.637532][ T5845] hsr_slave_1: entered promiscuous mode
[   57.666650][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.669677][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.679363][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.684086][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.686726][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.696104][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.700615][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.703309][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.712986][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.727092][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.729228][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.739111][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.796072][ T5841] hsr_slave_0: entered promiscuous mode
[   57.798682][ T5841] hsr_slave_1: entered promiscuous mode
[   57.801575][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   57.804330][ T5841] Cannot create hsr debugfs directory
[   57.827901][ T5848] hsr_slave_0: entered promiscuous mode
[   57.830602][ T5848] hsr_slave_1: entered promiscuous mode
[   57.833996][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.836501][ T5848] Cannot create hsr debugfs directory
[   58.058258][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.065715][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.075782][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.086437][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.116532][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.133935][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.147139][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.175890][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.212490][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.225977][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.238757][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.247667][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.302945][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.323088][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   58.343306][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.346068][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.355947][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.359794][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.362658][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.398107][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.405169][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.412779][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.415289][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.432030][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.434555][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.451006][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.459927][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.463089][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.486160][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.488510][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.513299][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.517427][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.579833][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.626301][ T5845] veth0_vlan: entered promiscuous mode
[   58.636407][ T5845] veth1_vlan: entered promiscuous mode
[   58.663133][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.689327][ T5845] veth0_macvtap: entered promiscuous mode
[   58.715798][ T5845] veth1_macvtap: entered promiscuous mode
[   58.745105][ T5847] Bluetooth: hci1: command tx timeout
[   58.750666][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.757585][ T5841] veth0_vlan: entered promiscuous mode
[   58.760167][ T5847] Bluetooth: hci0: command tx timeout
[   58.770869][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.778447][ T5841] veth1_vlan: entered promiscuous mode
[   58.784770][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.791154][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.809006][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.818327][ T5891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.822909][ T5891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.833733][ T5847] Bluetooth: hci2: command tx timeout
[   58.858870][ T5841] veth0_macvtap: entered promiscuous mode
[   58.867008][ T5841] veth1_macvtap: entered promiscuous mode
[   58.879524][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.882243][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.906677][ T5848] veth0_vlan: entered promiscuous mode
[   58.918257][ T5848] veth1_vlan: entered promiscuous mode
[   58.930822][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.939399][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.941726][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.945778][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.957025][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.961652][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.986925][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.990764][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.027453][ T5848] veth0_macvtap: entered promiscuous mode
[   59.032216][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.049600][ T5848] veth1_macvtap: entered promiscuous mode
[   59.094872][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.110310][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.120903][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.132691][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.171183][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.184425][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.188364][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.202850][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.215517][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.219443][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.258677][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.271978][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.277222][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.361029][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.373898][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.484150][ T5927] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.590156][ T5936] netlink: 'syz.1.12': attribute type 39 has an invalid length.
[   59.787525][ T5941] netlink: 'syz.0.11': attribute type 8 has an invalid length.
[   60.779442][ T5980] netlink: 'syz.1.29': attribute type 10 has an invalid length.
[   60.810526][ T5978] netlink: 'syz.0.30': attribute type 11 has an invalid length.
[   60.834001][ T5847] Bluetooth: hci0: command tx timeout
[   60.835889][ T5847] Bluetooth: hci1: command tx timeout
[   60.903693][   T54] Bluetooth: hci2: command tx timeout
[   61.017083][ T5981] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.29'.
[   61.065031][ T5980] team0 (unregistering): Port device team_slave_0 removed
[   61.069677][ T5980] team0 (unregistering): Port device team_slave_1 removed
[   62.074644][ T5993] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.371721][ T6003] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   62.376586][ T6003] netlink: 'syz.1.40': attribute type 2 has an invalid length.
[   62.508235][ T6011] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.44'.
[   62.831989][ T5965] Set syz1 is full, maxelem 65536 reached
[   62.857057][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   62.870705][ T6022] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   62.914400][   T54] Bluetooth: hci1: command tx timeout
[   62.916811][ T5847] Bluetooth: hci0: command tx timeout
[   62.984028][   T54] Bluetooth: hci2: command tx timeout
[   63.034579][ T6028] Zero length message leads to an empty skb
[   63.060591][    C1] hrtimer: interrupt took 51434 ns
[   63.353399][ T6037] bridge_slave_1: left allmulticast mode
[   63.602619][ T6037] bridge_slave_1: left promiscuous mode
[   63.614532][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.809809][ T6037] bridge_slave_0: left allmulticast mode
[   63.812411][ T6037] bridge_slave_0: left promiscuous mode
[   63.847990][ T6041] netlink: 'syz.1.56': attribute type 2 has an invalid length.
[   63.851355][ T6041] netlink: 'syz.1.56': attribute type 1 has an invalid length.
[   63.856570][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.968081][ T6045] =======================================================
[   63.968081][ T6045] WARNING: The mand mount option has been deprecated and
[   63.968081][ T6045]          and is ignored by this kernel. Remove the mand
[   63.968081][ T6045]          option from the mount to silence this warning.
[   63.968081][ T6045] =======================================================
[   64.011976][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'.
[   64.015739][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'.
[   64.257318][ T6053] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'.
[   64.270518][ T6053] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'.
[   64.280951][ T6051] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'.
[   64.289493][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.63'.
[   64.521436][ T6060] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.66'.
[   64.551625][ T6060] netlink: 'syz.0.66': attribute type 10 has an invalid length.
[   64.627454][ T6063] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[   64.983603][ T5847] Bluetooth: hci0: command tx timeout
[   64.986332][   T54] Bluetooth: hci1: command tx timeout
[   65.064340][   T54] Bluetooth: hci2: command tx timeout
[   66.244903][ T6080] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.72'.
[   66.250052][ T6079] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.72'.
[   66.261161][ T6080] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.72'.
[   66.546652][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'.
[   66.565006][ T6089] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   66.646220][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'.
[   67.468169][ T6096] netlink: 'syz.0.77': attribute type 29 has an invalid length.
[   67.483628][ T6096] netlink: 'syz.0.77': attribute type 29 has an invalid length.
[   67.699917][ T6109] netlink: 22 bytes leftover after parsing attributes in process `syz.0.84'.
[   67.775614][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'.
[   67.779498][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'.
[   67.936419][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   68.587578][ T6134] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   68.854465][ T6146] netlink: 'syz.2.101': attribute type 11 has an invalid length.
[   68.937219][ T6148] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP)
[   69.688955][ T6167] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.874613][ T6167] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   70.300754][ T6185] __nla_validate_parse: 5 callbacks suppressed
[   70.300765][ T6185] netlink: 9292 bytes leftover after parsing attributes in process `syz.2.117'.
[   70.969123][ T6200] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[   71.069673][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.072423][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.445251][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'.
[   71.472082][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'.
[   71.478406][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'.
[   71.519809][ T6215] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   71.972476][ T6224] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   71.975203][ T6224] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   72.276725][   T54] Bluetooth: hci2: adv larger than maximum supported
[   72.359388][ T6241] netlink: 'syz.0.142': attribute type 21 has an invalid length.
[   72.364974][ T6241] netlink: 144 bytes leftover after parsing attributes in process `syz.0.142'.
[   72.886486][ T6257] netlink: 'syz.0.149': attribute type 29 has an invalid length.
[   72.910585][ T6257] netlink: 'syz.0.149': attribute type 29 has an invalid length.
[   72.915951][ T6257] netlink: 500 bytes leftover after parsing attributes in process `syz.0.149'.
[   73.179289][ T6267] netlink: 'syz.0.154': attribute type 10 has an invalid length.
[   73.182916][ T6267] netlink: 2 bytes leftover after parsing attributes in process `syz.0.154'.
[   73.203841][ T6267] bond0: entered promiscuous mode
[   73.217590][ T6267] bond_slave_0: entered promiscuous mode
[   73.220146][ T6267] bond_slave_1: entered promiscuous mode
[   73.237930][ T6267] bridge0: port 3(bond0) entered blocking state
[   73.243908][ T6267] bridge0: port 3(bond0) entered disabled state
[   73.247542][ T6267] bond0: entered allmulticast mode
[   73.249595][ T6267] bond_slave_0: entered allmulticast mode
[   73.252101][ T6267] bond_slave_1: entered allmulticast mode
[   74.035362][ T6267] bridge0: port 3(bond0) entered blocking state
[   74.039208][ T6267] bridge0: port 3(bond0) entered forwarding state
[   74.257592][ T6280] netlink: 'syz.2.158': attribute type 25 has an invalid length.
[   74.260736][ T6280] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.158'.
[   74.378783][ T6286] netlink: 'syz.2.161': attribute type 1 has an invalid length.
[   74.697830][ T6298] netlink: 'syz.2.167': attribute type 29 has an invalid length.
[   74.703134][ T6298] netlink: 'syz.2.167': attribute type 10 has an invalid length.
[   74.943761][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.065338][ T6298] team0: Port device bond0 added
[   75.152559][ T6298] syz.2.167 (6298) used greatest stack depth: 18744 bytes left
[   76.143286][ T6325] Driver unsupported XDP return value 0 on prog  (id 48) dev N/A, expect packet loss!
[   76.288716][ T6331] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.183'.
[   76.359709][ T6338] netlink: 376 bytes leftover after parsing attributes in process `syz.0.186'.
[   76.364063][ T6338] netlink: 376 bytes leftover after parsing attributes in process `syz.0.186'.
[   76.410165][ T6340] cgroup2: Unknown parameter 'u'
[   77.006325][ T6361] netlink: 'syz.2.196': attribute type 3 has an invalid length.
[   77.009519][ T6361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.196'.
[   77.012958][ T6361] netlink: 'syz.2.196': attribute type 3 has an invalid length.
[   77.028189][ T6361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.196'.
[   77.452289][ T6372] netlink: 'syz.2.201': attribute type 21 has an invalid length.
[   77.456737][ T6372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.201'.
[   77.461101][ T6372] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.468087][ T6372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.471749][ T6372] IPv6: NLM_F_CREATE should be set when creating new route
[   77.474808][ T6372] IPv6: NLM_F_CREATE should be set when creating new route
[   77.477358][ T6372] IPv6: NLM_F_CREATE should be set when creating new route
[   77.645333][ T6380] netlink: 128 bytes leftover after parsing attributes in process `syz.2.205'.
[   77.888100][ T6390] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.209'.
[   77.911614][ T6388] netlink: 26 bytes leftover after parsing attributes in process `syz.0.210'.
[   78.177255][ T6399] validate_nla: 4 callbacks suppressed
[   78.177270][ T6399] netlink: 'syz.0.214': attribute type 19 has an invalid length.
[   78.183024][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'.
[   78.818020][ T6410] netlink: 'syz.2.218': attribute type 5 has an invalid length.
[   78.825672][ T6410] netlink: 'syz.2.218': attribute type 5 has an invalid length.
[   78.828506][ T6408] netlink: 'syz.0.217': attribute type 46 has an invalid length.
[   79.374449][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.383063][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.387182][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.390309][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.395929][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.531028][ T6432] chnl_net:caif_netlink_parms(): no params data found
[   79.581024][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.588665][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.591788][ T6432] bridge_slave_0: entered allmulticast mode
[   79.595358][ T6432] bridge_slave_0: entered promiscuous mode
[   79.601447][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.604264][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.607504][ T6432] bridge_slave_1: entered allmulticast mode
[   79.610614][ T6432] bridge_slave_1: entered promiscuous mode
[   79.629589][ T5909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.655467][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.661815][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.691066][ T6432] team0: Port device team_slave_0 added
[   79.706108][ T5909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.715012][ T6432] team0: Port device team_slave_1 added
[   79.738673][ T6444] netlink: 'syz.0.231': attribute type 4 has an invalid length.
[   79.765799][ T6444] .`: renamed from bond0 (while UP)
[   79.773339][ T6444] bridge0: port 3(.`) entered disabled state
[   79.815327][ T5909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.832819][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.841647][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.862962][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.905822][ T5909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.927106][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.932613][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.948204][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.095892][ T6432] hsr_slave_0: entered promiscuous mode
[   80.098797][ T6432] hsr_slave_1: entered promiscuous mode
[   80.101702][ T6432] debugfs: 'hsr0' already exists in 'hsr'
[   80.104919][ T6432] Cannot create hsr debugfs directory
[   80.351773][ T5909] bridge_slave_1: left allmulticast mode
[   80.375716][ T5909] bridge_slave_1: left promiscuous mode
[   80.381842][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.412645][ T5909] bridge_slave_0: left allmulticast mode
[   80.415451][ T5909] bridge_slave_0: left promiscuous mode
[   80.417464][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.565318][ T6471] raw_sendmsg: syz.2.241 forgot to set AF_INET. Fix it!
[   80.751098][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.756283][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.760224][ T5909] bond0 (unregistering): Released all slaves
[   81.108076][ T5909] hsr_slave_0: left promiscuous mode
[   81.147479][ T5909] hsr_slave_1: left promiscuous mode
[   81.153349][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.175484][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.181365][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.187579][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.226475][ T5909] veth1_macvtap: left promiscuous mode
[   81.229322][ T5909] veth0_macvtap: left promiscuous mode
[   81.231866][ T5909] veth1_vlan: left promiscuous mode
[   81.237681][ T5909] veth0_vlan: left promiscuous mode
[   81.464572][ T5850] Bluetooth: hci3: command tx timeout
[   81.940160][ T6432] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.969524][ T6432] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.993198][ T6432] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.002715][ T6432] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.054508][ T6484] __nla_validate_parse: 4 callbacks suppressed
[   82.054523][ T6484] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.244'.
[   82.225481][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.252973][ T6432] 8021q: adding VLAN 0 to HW filter on device team0
[   82.274083][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.277211][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.298754][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.301891][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.553289][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.558943][ T6513] netlink: 'syz.2.250': attribute type 2 has an invalid length.
[   82.562150][ T6513] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.250'.
[   82.672230][ T6432] veth0_vlan: entered promiscuous mode
[   82.684925][ T6432] veth1_vlan: entered promiscuous mode
[   82.800491][ T6432] veth0_macvtap: entered promiscuous mode
[   82.805328][ T6432] veth1_macvtap: entered promiscuous mode
[   82.810912][ T6525] netlink: 'syz.0.254': attribute type 10 has an invalid length.
[   82.814135][ T6525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.254'.
[   82.819876][ T6525] ipvlan1: entered promiscuous mode
[   82.821644][ T6525] ipvlan1: entered allmulticast mode
[   82.824777][ T6525] veth0_vlan: entered allmulticast mode
[   82.828871][ T6525] bridge0: port 4(ipvlan1) entered blocking state
[   82.831792][ T6525] bridge0: port 4(ipvlan1) entered disabled state
[   82.838245][ T6525] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   82.864102][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.886337][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.894438][ T5909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.898853][ T5909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.904426][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.908474][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.234359][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.237089][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.262353][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.266807][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.552041][ T5850] Bluetooth: hci3: command tx timeout
[   83.808128][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.848896][ T6575] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.271'.
[   83.852881][ T6575] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   83.857697][ T6575] openvswitch: netlink: Duplicate key (type 0).
[   84.940755][ T6600] netlink: 'syz.0.279': attribute type 2 has an invalid length.
[   84.964521][ T6600] netlink: 'syz.0.279': attribute type 3 has an invalid length.
[   84.967847][ T6600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.279'.
[   84.992570][ T5850] Bluetooth: hci3: Dropping invalid advertising data
[   84.995722][ T5850] Bluetooth: hci3: Malformed LE Event: 0x02
[   85.326300][ T6618] netlink: 'syz.3.287': attribute type 1 has an invalid length.
[   85.630219][ T5850] Bluetooth: hci3: command tx timeout
[   86.426536][  T793] cfg80211: failed to load regulatory.db
[   86.610489][ T6659] netlink: 'syz.0.305': attribute type 21 has an invalid length.
[   86.615622][ T6659] netlink: 'syz.0.305': attribute type 15 has an invalid length.
[   86.619007][ T6659] netlink: 156 bytes leftover after parsing attributes in process `syz.0.305'.
[   86.628402][ T6659] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.632233][ T6659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.635708][ T6659] IPv6: NLM_F_CREATE should be set when creating new route
[   86.639254][ T6659] IPv6: NLM_F_CREATE should be set when creating new route
[   86.642638][ T6659] IPv6: NLM_F_CREATE should be set when creating new route
[   87.050048][ T6682] netlink: 'syz.3.315': attribute type 4 has an invalid length.
[   87.056196][ T6682] netlink: 112 bytes leftover after parsing attributes in process `syz.3.315'.
[   87.187090][ T6694] netlink: 'syz.3.321': attribute type 1 has an invalid length.
[   87.189881][ T6694] netlink: 17 bytes leftover after parsing attributes in process `syz.3.321'.
[   87.312255][ T6702] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.325'.
[   87.397887][ T6707] netlink: 'syz.2.327': attribute type 6 has an invalid length.
[   87.427865][ T6709] netlink: 'syz.2.328': attribute type 13 has an invalid length.
[   87.430632][ T6709] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.328'.
[   87.705389][ T5850] Bluetooth: hci3: command tx timeout
[   87.770677][ T6726] syzkaller0: entered promiscuous mode
[   87.772565][ T6726] syzkaller0: entered allmulticast mode
[   88.359438][ T5850] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[   89.007632][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'.
[   89.117430][ T6749] syz.3.345 uses obsolete (PF_INET,SOCK_PACKET)
[   90.157395][ T5850] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[   90.262790][ T6766] netlink: 'syz.0.349': attribute type 6 has an invalid length.
[   90.274542][ T6766] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.350264][ T6771] netlink: 56 bytes leftover after parsing attributes in process `syz.2.351'.
[   91.585139][ T6806] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.363'.
[   91.644732][ T6808] netlink: 'syz.3.364': attribute type 9 has an invalid length.
[   91.648333][ T6808] netlink: 211924 bytes leftover after parsing attributes in process `syz.3.364'.
[   92.333299][ T6822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.605306][ T6834] netlink: 'syz.3.376': attribute type 22 has an invalid length.
[   93.024827][ T6856] netlink: 148 bytes leftover after parsing attributes in process `syz.0.386'.
[   93.309340][ T6860] netlink: 'syz.0.387': attribute type 21 has an invalid length.
[   93.313141][ T6860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.387'.
[   93.327203][ T6861] xt_time: unknown flags 0xf4
[   93.396806][ T6865] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   94.602706][ T5850] Bluetooth: hci3: unexpected event 0x12 length: 151 > 8
[   94.855829][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'.
[   95.297032][ T6949] netlink: 'syz.3.423': attribute type 4 has an invalid length.
[   95.300394][ T6949] netlink: 116 bytes leftover after parsing attributes in process `syz.3.423'.
[   95.431864][ T6957] netlink: 'syz.3.427': attribute type 28 has an invalid length.
[   95.446473][ T6957] netlink: 'syz.3.427': attribute type 29 has an invalid length.
[   95.482674][ T6957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.427'.
[   95.987026][ T6977] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[   95.989868][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'.
[   96.299156][ T6984] netlink: 'syz.2.433': attribute type 4 has an invalid length.
[   96.648740][ T7004] ------------[ cut here ]------------
[   96.650691][ T7004] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[   96.675563][ T7004] WARNING: CPU: 0 PID: 7004 at kernel/bpf/verifier.c:2748 reg_bounds_sanity_check+0x6e6/0xc20
[   96.680229][ T7004] Modules linked in:
[   96.682304][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT(full) 
[   96.686460][ T7004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.690519][ T7004] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   96.693654][ T7004] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 ef 28 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   96.700980][ T7004] RSP: 0018:ffffc90006e46f08 EFLAGS: 00010282
[   96.703663][ T7004] RAX: c2044a361affe300 RBX: 00000000ffffdfcc RCX: 0000000000080000
[   96.706569][ T7004] RDX: ffffc90003af2000 RSI: 0000000000030461 RDI: 0000000000030462
[   96.709326][ T7004] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
[   96.712036][ T7004] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: ffff88801fd96258
[   96.714894][ T7004] R13: ffff88801fd96278 R14: ffff88801fd96290 R15: 00000000ffffdfcc
[   96.717653][ T7004] FS:  00007fa3820e76c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[   96.720982][ T7004] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.723412][ T7004] CR2: 00007f643040ef1b CR3: 000000003a7b4000 CR4: 00000000000006f0
[   96.726225][ T7004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   96.729231][ T7004] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   96.732456][ T7004] Call Trace:
[   96.733829][ T7004]  <TASK>
[   96.734930][ T7004]  reg_set_min_max+0x214/0x300
[   96.737072][ T7004]  check_cond_jmp_op+0x1625/0x2910
[   96.739101][ T7004]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   96.741417][ T7004]  do_check+0x66a7/0xe430
[   96.743296][ T7004]  ? __pfx_do_check+0x10/0x10
[   96.745137][ T7004]  ? init_func_state+0x1ddf/0x2d20
[   96.747084][ T7004]  do_check_common+0x1949/0x24f0
[   96.749273][ T7004]  bpf_check+0x12c60/0x1d4c0
[   96.751269][ T7004]  ? is_bpf_text_address+0x26/0x2b0
[   96.753193][ T7004]  ? is_bpf_text_address+0x292/0x2b0
[   96.755240][ T7004]  ? kernel_text_address+0xa5/0xe0
[   96.757095][ T7004]  ? __kernel_text_address+0xd/0x40
[   96.758886][ T7004]  ? __lock_acquire+0xab9/0xd20
[   96.760528][ T7004]  ? __mutex_trylock_common+0x153/0x260
[   96.762438][ T7004]  ? __pfx___mutex_trylock_common+0x10/0x10
[   96.764802][ T7004]  ? css_rstat_updated+0x23a/0x4f0
[   96.766807][ T7004]  ? __lock_acquire+0xab9/0xd20
[   96.768999][ T7004]  ? __pfx_bpf_check+0x10/0x10
[   96.770895][ T7004]  ? ktime_get_with_offset+0x8c/0x2a0
[   96.773200][ T7004]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   96.776414][ T7004]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.778777][ T7004]  ? ktime_get_with_offset+0x8c/0x2a0
[   96.782509][ T7004]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   96.786314][ T7004]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   96.789146][ T7004]  ? __asan_memset+0x22/0x50
[   96.791096][ T7004]  ? bpf_obj_name_cpy+0x194/0x1e0
[   96.793134][ T7004]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   96.795784][ T7004]  ? security_bpf_prog_load+0x7f/0x310
[   96.798148][ T7004]  bpf_prog_load+0x1318/0x1930
[   96.800246][ T7004]  ? __pfx_bpf_prog_load+0x10/0x10
[   96.802355][ T7004]  ? bpf_lsm_bpf+0x9/0x20
[   96.805686][ T7004]  ? security_bpf+0x7e/0x300
[   96.807861][ T7004]  __sys_bpf+0x528/0x870
[   96.809781][ T7004]  ? __pfx___sys_bpf+0x10/0x10
[   96.811786][ T7004]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   96.814990][ T7004]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   96.817817][ T7004]  __x64_sys_bpf+0x7c/0x90
[   96.819772][ T7004]  do_syscall_64+0xfa/0x3b0
[   96.821753][ T7004]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.824440][ T7004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.827267][ T7004]  ? exc_page_fault+0x9f/0xf0
[   96.829463][ T7004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.832119][ T7004] RIP: 0033:0x7fa38118eba9
[   96.834393][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.842452][ T7004] RSP: 002b:00007fa3820e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   96.846258][ T7004] RAX: ffffffffffffffda RBX: 00007fa3813d5fa0 RCX: 00007fa38118eba9
[   96.849644][ T7004] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   96.852971][ T7004] RBP: 00007fa381211e19 R08: 0000000000000000 R09: 0000000000000000
[   96.856691][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.859988][ T7004] R13: 00007fa3813d6038 R14: 00007fa3813d5fa0 R15: 00007ffc8d178108
[   96.863260][ T7004]  </TASK>
[   96.864957][ T7004] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   96.868057][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT(full) 
[   96.871753][ T7004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.875829][ T7004] Call Trace:
[   96.877320][ T7004]  <TASK>
[   96.878623][ T7004]  dump_stack_lvl+0x99/0x250
[   96.880568][ T7004]  ? __asan_memcpy+0x40/0x70
[   96.882570][ T7004]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.884802][ T7004]  ? __pfx__printk+0x10/0x10
[   96.886782][ T7004]  vpanic+0x281/0x750
[   96.888498][ T7004]  ? __pfx__printk+0x10/0x10
[   96.890388][ T7004]  ? __pfx_vpanic+0x10/0x10
[   96.892352][ T7004]  ? is_bpf_text_address+0x26/0x2b0
[   96.894557][ T7004]  panic+0xb9/0xc0
[   96.896175][ T7004]  ? __pfx_panic+0x10/0x10
[   96.898110][ T7004]  __warn+0x31b/0x4b0
[   96.899832][ T7004]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   96.902198][ T7004]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   96.904570][ T7004]  report_bug+0x2be/0x4f0
[   96.906432][ T7004]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   96.908773][ T7004]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   96.911115][ T7004]  ? reg_bounds_sanity_check+0x6e8/0xc20
[   96.913454][ T7004]  handle_bug+0x84/0x160
[   96.915311][ T7004]  exc_invalid_op+0x1a/0x50
[   96.917212][ T7004]  asm_exc_invalid_op+0x1a/0x20
[   96.919304][ T7004] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   96.921927][ T7004] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 ef 28 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   96.930311][ T7004] RSP: 0018:ffffc90006e46f08 EFLAGS: 00010282
[   96.932923][ T7004] RAX: c2044a361affe300 RBX: 00000000ffffdfcc RCX: 0000000000080000
[   96.936283][ T7004] RDX: ffffc90003af2000 RSI: 0000000000030461 RDI: 0000000000030462
[   96.939682][ T7004] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
SYZFAIL: failed to recv rpc
[   96.943125][ T7004] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: ffff88801fd96258
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   96.946775][ T7004] R13: ffff88801fd96278 R14: ffff88801fd96290 R15: 00000000ffffdfcc
[   96.950340][ T7004]  reg_set_min_max+0x214/0x300
[   96.952443][ T7004]  check_cond_jmp_op+0x1625/0x2910
[   96.954592][ T7004]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   96.956754][ T7004]  do_check+0x66a7/0xe430
[   96.958631][ T7004]  ? __pfx_do_check+0x10/0x10
[   96.960627][ T7004]  ? init_func_state+0x1ddf/0x2d20
[   96.962821][ T7004]  do_check_common+0x1949/0x24f0
[   96.965159][ T7004]  bpf_check+0x12c60/0x1d4c0
[   96.967247][ T7004]  ? is_bpf_text_address+0x26/0x2b0
[   96.969617][ T7004]  ? is_bpf_text_address+0x292/0x2b0
[   96.971778][ T7004]  ? kernel_text_address+0xa5/0xe0
[   96.973990][ T7004]  ? __kernel_text_address+0xd/0x40
[   96.976186][ T7004]  ? __lock_acquire+0xab9/0xd20
[   96.978213][ T7004]  ? __mutex_trylock_common+0x153/0x260
[   96.980479][ T7004]  ? __pfx___mutex_trylock_common+0x10/0x10
[   96.983006][ T7004]  ? css_rstat_updated+0x23a/0x4f0
[   96.985055][ T7004]  ? __lock_acquire+0xab9/0xd20
[   96.987109][ T7004]  ? __pfx_bpf_check+0x10/0x10
[   96.989208][ T7004]  ? ktime_get_with_offset+0x8c/0x2a0
[   96.991509][ T7004]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   96.994237][ T7004]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.996487][ T7004]  ? ktime_get_with_offset+0x8c/0x2a0
[   96.998667][ T7004]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   97.001323][ T7004]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   97.004138][ T7004]  ? __asan_memset+0x22/0x50
[   97.006082][ T7004]  ? bpf_obj_name_cpy+0x194/0x1e0
[   97.008189][ T7004]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   97.010459][ T7004]  ? security_bpf_prog_load+0x7f/0x310
[   97.012750][ T7004]  bpf_prog_load+0x1318/0x1930
[   97.014776][ T7004]  ? __pfx_bpf_prog_load+0x10/0x10
[   97.016996][ T7004]  ? bpf_lsm_bpf+0x9/0x20
[   97.018880][ T7004]  ? security_bpf+0x7e/0x300
[   97.020918][ T7004]  __sys_bpf+0x528/0x870
[   97.022837][ T7004]  ? __pfx___sys_bpf+0x10/0x10
[   97.025002][ T7004]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   97.027811][ T7004]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   97.030589][ T7004]  __x64_sys_bpf+0x7c/0x90
[   97.032486][ T7004]  do_syscall_64+0xfa/0x3b0
[   97.034452][ T7004]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.036634][ T7004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.039155][ T7004]  ? exc_page_fault+0x9f/0xf0
[   97.041184][ T7004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.043707][ T7004] RIP: 0033:0x7fa38118eba9
[   97.045658][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.054218][ T7004] RSP: 002b:00007fa3820e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   97.058321][ T7004] RAX: ffffffffffffffda RBX: 00007fa3813d5fa0 RCX: 00007fa38118eba9
[   97.061798][ T7004] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   97.065174][ T7004] RBP: 00007fa381211e19 R08: 0000000000000000 R09: 0000000000000000
[   97.068476][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.072185][ T7004] R13: 00007fa3813d6038 R14: 00007fa3813d5fa0 R15: 00007ffc8d178108
[   97.076338][ T7004]  </TASK>
[   97.078476][ T7004] Kernel Offset: disabled
[   97.080362][ T7004] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:19:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000032a51 RDI=0000000000032a52 RBP=00000000000003f8 RSP=ffffc90006e46650
R8 =ffff8881079e0237 R9 =1ffff11020f3c046 R10=dffffc0000000000 R11=ffffffff854fa440
R12=dffffc0000000000 R13=ffffffff99b028e4 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa4bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa3820e76c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f643040ef1b CR3=000000003a7b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa381212e53
XMM06=0000000000000000 00007fa381212e4d XMM07=0000000000000000 00007fa381212e61
XMM08=0000000000000000 00007fa381212ee7 XMM09=0000000000000000 00007fa381212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000018e RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000018e RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e00e8
R8 =0000000000000000 R9 =ffffffff81ae170e R10=0000000000000003 R11=ffffffff81704490
R12=000000000fff74bf R13=dffffc0000000000 R14=000000000000018e R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f218a64a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=000000010b51c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f21899a7498 00007f21899a7470 XMM03=00007f21899a74a8 00007f21899a74a0
XMM04=00007f218a50d100 00007f21899a7460 XMM05=00007f21899a7478 00007f21899a74c0
XMM06=00007f21899a74b8 00007f21899a74b0 XMM07=00007f21899a74a8 00007f21899a74a0
XMM08=0000000000000000 00007f2189812ee7 XMM09=0000000000000000 00007f2189812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
