last executing test programs:

3m20.700480538s ago: executing program 1 (id=109):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d08001000fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43370e0001000000000000", 0xd8}], 0x1}, 0x20040010)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000002340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002300)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x94}, 0x20000000)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x214, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7fff}]}, @NFQA_EXP={0xa0, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc1240f23ac0946ab}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}]}, @NFQA_CT={0xc0, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x101}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, @NFQA_EXP={0x94, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_clone(0x2002d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)

3m20.460617333s ago: executing program 1 (id=110):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000080000000000000000000000fdffffff"], 0xfc}}, 0x0) (async, rerun: 64)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r0, 0x0, 0x71, 0xc1, &(0x7f0000000340)="23789eb16c21b1bbbf90b60ca9c1f9e28ed142dfd9b99b38bafc643c55f0bf7d45e92d5c07242d46d0c06508bf2673b5895e1c981b63aeab13ac999b5de0bb59436e173c63fd0a41f1baf4e1a6e7c5fd379e67bce888430852cb5aefb078894e8c78d3171e94e11f941d07c37658d15ed2", &(0x7f00000005c0)=""/193, 0x5, 0x0, 0xcb, 0xb8, &(0x7f00000006c0)="28af7b1860b080b14a31e9a20b77ae27c768d8675de11c7f24ffe2fba4357cfbebcefeffe1f4900d5854ebf83c7a74a3da118beca01531af0e0b0fa0324085abbeb4358570fdb6dcd4403cb407fcd8a97b3c5bb1890db3f574614bfcbd68ad489a2f26d79fe1a1a57c5224c07043ba6d8d80d3d992ae2091240fc7353cf08c73eb44bebea16b252a251416fae6a452843f5f5500e3ca62af87b5242ecb69e4a1c3cc2021a5e03212c6b882c366a2fafa967a4fd7b9f952a2d1781d39dfd8038e56f4ff91ea37b6d53d69b8", &(0x7f00000008c0)="9185416b5042c47b3d3454ddd487c8a1a2d6512fe5ced6e0790d179c72da552c5160b8097358e679347a93c1a3df35c55aa423c2bcb2dae98d1e690ed8ecf7ba001d929ae1138c18b459acbd2bf0cff525fb4c6ce914f3f0010ef892cdb05b1caf7a7906c62339aed68a3109ceb101f1ac5231aff90fffbe736b372baa1299beb7d107a55c959cabdf058498ad865d166128c25c1cb6e8925ce352d848e32a947c7502252c38fcb63917f03b7cb6e4a4aebc70706788772a", 0x2, 0x0, 0x800}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910200000000000710033000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x3e) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x1d800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x1, 0x6, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x1a)
close(0xffffffffffffffff) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64)
socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000001200000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d6974ff00000c0002800800012e00000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

3m19.32969305s ago: executing program 1 (id=114):
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = syz_clone(0x849000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000002a00), 0x0, 0x2141}, 0x38, 0x2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12120) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
close(r5) (async)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xffc0) (async)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp, 0x214527, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

3m15.184198169s ago: executing program 1 (id=114):
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = syz_clone(0x849000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000002a00), 0x0, 0x2141}, 0x38, 0x2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12120) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
close(r5) (async)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xffc0) (async)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp, 0x214527, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

3m15.111898622s ago: executing program 1 (id=137):
r0 = syz_clone(0x140000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x6, 0x11, &(0x7f0000000240), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c000180060076e0140a0600800adeff10000280090017800400198029000000"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc040)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000c80)=ANY=[@ANYBLOB="6f620000747970653d2f2f7379730000000000008000340000732f92796e635f9396ff005365f4342e002c00ef879fc79b754ae9ce7f1ccb283a04ee8b719a7cf0cc63d4df836fa55369e3907bfbff22e56121235c0e31cf2971f148ae91a11d353493c2cd4c417231c738c95f2d964de2cc7caa13c9dc7622bd3d3701876a571de47d16f59e6309b82f130ec22d0954ab2a27476e573d0d6b019b62cc86d6d21cc7900aeb02a772d927685edb1eadbe7eed034945a35f29f02e"])
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4d, 0xb, 0x3, 0x4, 0x0, 0x0, 0x10, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x585c, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0x9, 0x4, 0x8, 0x0, 0x80000000, 0xfffb, 0x0, 0x400, 0x0, 0xff}, 0x0, 0xf, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xbd, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xf}, 0x100108, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, r5, 0x2)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x428}}, 0x8000000)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x5, 0x0, 0x100000000000, 0x4010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0)
syz_clone(0x88046000, 0x0, 0x0, 0x0, 0x0, 0x0)
fstat(r7, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180), 0xa1000, &(0x7f0000000280)=ANY=[@ANYBLOB='mode=00000000000000000004000,gid=', @ANYRESHEX=r10, @ANYBLOB=',mode=01777777777777777777777,hash,subj_type=--\\.&-,uid>', @ANYRESDEC=r11, @ANYBLOB="2c8269643e", @ANYRESDEC=r12, @ANYRES32=r3])
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1c00a, &(0x7f00000004c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=r8, @ANYBLOB=',gid=', @ANYRESHEX=r9, @ANYBLOB=',mode=\x00\x00\x00\x0000R0000000000000007,gid=', @ANYRESHEX=r10, @ANYBLOB=',obj_user=-)%{#,\x00'])

3m14.210545524s ago: executing program 1 (id=141):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180085054e81f783db4cb9040a1d080006007c02e8fc55a10a00150006b6142603600ef10700010000000101a8000500fec0ffff05000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb01000100000000009e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffff46f5098754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x12000000}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4014)
socket(0x10, 0x80002, 0x0)

3m2.166222568s ago: executing program 2 (id=165):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0) (async)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe8, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000004}, 0x8010) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x2000}) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x400000000000, 0x1, 0xfffc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x140) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') (async)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x41000}, 0x94) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r8], 0x12)

3m1.96243123s ago: executing program 2 (id=167):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000010000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000186300000d000000000000000900000018410000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="050000003000000017fc8add", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000dfff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000600), 0x0}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010025bd7000fcffffef100000000800030047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[], 0xf0}}, 0x40040f0)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
sendmsg(r8, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x40000000)
mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2000000, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f00000001c0)=0x1)

3m1.177473354s ago: executing program 2 (id=168):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) (async)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x41, 0x0, 0x0) (async)
r2 = socket(0x1f, 0x1, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xc00007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (rerun: 64)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x1d, 0x0, 0x9, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40) (async)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r9, r6, 0x36, 0x8, r7, @void, @value, @void, @void, r8}, 0x20) (async)
r10 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r10, 0x84, 0x6, &(0x7f0000000000), 0x84) (async)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0xb, 0x6, 0x101, 0x0, 0x0, {0xb, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

3m1.038574408s ago: executing program 2 (id=170):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000700))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0x5, 0x84, 0x7, 0x0, 0x7fffffff, 0x28280, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x1, 0x88be, 0x9, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2)
syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

3m0.548122757s ago: executing program 2 (id=173):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2050061, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3})
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x76, 0x2001ef7}, 0x117fa, 0x4, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0xe0ffff}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0007000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e0800000700", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, 0x40000100)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, 0x0)
socket$kcm(0xa, 0x2, 0x73)

2m59.045485533s ago: executing program 32 (id=141):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180085054e81f783db4cb9040a1d080006007c02e8fc55a10a00150006b6142603600ef10700010000000101a8000500fec0ffff05000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb01000100000000009e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffff46f5098754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x12000000}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4014)
socket(0x10, 0x80002, 0x0)

2m58.185169862s ago: executing program 2 (id=183):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106) (async)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$phonet(0x23, 0x2, 0x1) (async)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0) (async)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1002090, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)

2m43.149478475s ago: executing program 33 (id=183):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106) (async)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$phonet(0x23, 0x2, 0x1) (async)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0) (async)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1002090, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)

1m14.771185858s ago: executing program 4 (id=560):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x1, 0x4, 0x3, 0x3, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
gettid()
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x1, &(0x7f00000000c0)}, 0x0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x20, 0x4008000}, 0x28008841)
sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x300, 0x70bd28, 0x25dfdbfc, {{'drbg_nopr_ctr_aes192\x00'}, '\x00', '\x00', 0x2000, 0x400}, ["", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x24020480)
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x5, 0x100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0xd}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r2, &(0x7f00000003c0)}, 0x20)
syz_clone(0x88046000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m14.586226183s ago: executing program 4 (id=561):
socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

1m14.313193022s ago: executing program 4 (id=564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffba, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108000000000000000001000000090001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530"], 0x110}}, 0x0) (async)
r4 = openat$cgroup_int(r2, &(0x7f0000000400)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB='-', @ANYRESDEC=r4], 0x27) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff95, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x370, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xd, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x340, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2e}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x1, 0x47f, 0x6, 0x1a, 0x18, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffb, 0x1, 0x10000, 0xd, 0xf, 0xf, 0x1}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000000500010000000000000000000000000a5c000000060a0b0400000000000000000200000030000480110001800b00010065787468647200001c000280080001400000001305"], 0x84}}, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000280)=r8)
syz_clone(0x8091000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m14.198785619s ago: executing program 4 (id=565):
socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
r0 = socket$kcm(0x1e, 0x2, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r3, 0x0, 0x40002000) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(r2, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {&(0x7f0000000480)=""/121, 0x79}, {0x0}, {&(0x7f0000001040)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003a80)=""/4096, 0x1000}], 0x8, &(0x7f0000004b40)=""/152, 0x98}, 0x40012100) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) (async, rerun: 32)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1010, 0x1ff, 0x3, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000)
r6 = socket$kcm(0x18, 0x0, 0x2)
recvmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002c0007f8ffffffff000000000a7c00000c060180000006"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002500090122bd7008f9fffdff0200000008402600", @ANYRES32, @ANYBLOB="0800030047000000"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x3a)
r9 = socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_subtree(r9, 0x0, 0xfdef) (async)
recvmsg(r0, 0x0, 0x10021)

1m14.060997911s ago: executing program 4 (id=567):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000037000100fffffffd95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x4, 0x0, 0x0, 0x5, 0x4454, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xcf3, 0x8000}, 0x2800, 0x5, 0x9, 0x7, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000010400000000000000c60001002700000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000003600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu&\t\t')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
r9 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xaf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x92340, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000580)}, 0x402, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r9, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002500010324bd7006fddbdf251500000008004e00", @ANYRES32=r11, @ANYBLOB="d8e011cab45fd45d864d0e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008002)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="030000452f54ac00040000000000000000000000adabaa44f58da4ba96c225b8dd057601f4b53af42cd83ca2ebef4303d49783b90c167908b2242a580ad0d92afa6c1b4214e2e4b889b2c1b91c37c7e971a3b0c8f5268ad0d1e241c88da9022f39a8c81992c4e7948c2cefabca8374a77cb9d9e14da1c9", @ANYRES32=0x1, @ANYBLOB="f20400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x20, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x1, 0x0, 0x7, 0x7, 0x30, 0xfffffffffffffff0}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @exit, @generic={0x4, 0x8, 0x0, 0x8, 0x3ff}, @map_fd={0x18, 0x6}, @map_fd={0x18, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0xe7, 0x9f, &(0x7f0000000d40)=""/159, 0x41100, 0xafcf61f349688bb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x9, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x10, 0x3}, 0x94)
fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r14=>0x0, <r15=>0x0})
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x60041, &(0x7f00000009c0)=ANY=[@ANYBLOB='mode=00000000000000000000001,gid=', @ANYRESHEX, @ANYBLOB="4be779643d", @ANYRESHEX=r8, @ANYBLOB=',gid=', @ANYRESHEX=r15, @ANYBLOB=',uid=', @ANYRESHEX=r12, @ANYBLOB=',mode=00000000000000000000006,gid=', @ANYRESHEX=r13, @ANYBLOB=',pcr=00000000000000000029,rootcontext=sysadm_u,euid=', @ANYRESDEC=r14, @ANYBLOB=',subj_type=GPL\x00,dont_hash,seclabel,\x00'])
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]})
r16 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r16, &(0x7f0000000540)=ANY=[@ANYRESDEC=r7], 0x9)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

1m13.760570977s ago: executing program 4 (id=570):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0xfffffff7, 0xaf3f, 0x0, 0x101, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4014)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)

58.689261851s ago: executing program 34 (id=570):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0xfffffff7, 0xaf3f, 0x0, 0x101, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4014)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)

23.174598337s ago: executing program 3 (id=728):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5e52fb11885172c2a61f6b240e1e64dfdf486b520b4ebfca1d8c2fbd47875c85801622faac2f5426ad2ccdd2fb831a3f409a9cbf2619c2e8e896d4dceba70d2ec7cd97926cc00c296c134f329f649af298285e3dbd7984114c1147a24fee9d96f33851b40d4669bf2a0cb39054830abd5694c06426751abb66f4c878759b12337620418893c6f0dba04f154bf60e6bfc418384f254fbebf33d0e13b38b3f", 0x9e}], 0x1, &(0x7f00000004c0)=[{0xd8, 0x10b, 0xffff, "e9f17fbfcf6b0591457d0746bd35d95c57ac0c10597a62c0dfa9c9df8cfc24bfaeedc9ee77e9c34d427b88a4ca2ceda4735e7be5639e5bd95686ae84165f965569d26e75926dbadc36327b9d437f90c670ba219d61618f7c61af79ee5f6d1d15b98a5b75fc9b4ca3bd26c95e093e071ce2030cb33c2cf58622ce4127c7c63b265f60ad65d750ebaff7a658b58a992d34a410c63462ec8da6759bdfd32f7ebc9535e2d47cc190477df22669515bdcd65c00897b1f3688784b763503488861723b65b299a29f"}, {0xc8, 0x102, 0x1, "27c8ecfef09ae2759f028f5ed7a73e95b3b65f123292e040678ee6e25a45e27fc1ebbcb54d9a2f76a1d664688036a7f6ef721f1d9e237debda4d9f068dffe485e082431381220ed7e342484dc231323c8fed992e66dc289c81f45f81bd3795db5b9778d8ec4b79dd0f79a903f75ab2e5b0279d08e6c423018e0ff2533bfc8d660dc3db5d9599468d65205e1e957180ad262b04af0e603b6173ca88718e8251748d0d092b97d8f63f7c354725192c2c10299bdacd00f5"}, {0x88, 0x115, 0x5, "8460bb9c7ad0fc16739e9ff00a1d2ad36e6954b48d56263e34e2d58ebcdf58a2d3402677d21899f0b5cd89bd7feaf4c0df69c38b8994c70a4152907845a8f997ea32afc59a17a2de8db1d82c6b6cf697f6676389be17b4a55e8898633bc24f4cc47b83f6a59f53ec69d3a23515faa97d725a13"}], 0x228}, 0x400c895)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014)

22.809724047s ago: executing program 3 (id=729):
socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

21.656542475s ago: executing program 0 (id=733):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x80000000, 0x69}, 0x0, 0x0, 0x0, 0x2, 0x3fd, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000004000000000000070000e65656e0f760ef1b9622732b00851000000500000085100000faffffff1834000005000000000000000000000085100000ffffffff18240000", @ANYRES32, @ANYBLOB="000000000800000018470000070000000000000000000000183000000500000000000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0x31, &(0x7f0000000340)=""/49, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xa, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x10, 0x6}, 0x94)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x4, 0xffff}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x715, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x9cb046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b00)=""/257, 0x101}], 0x1, &(0x7f0000000380)=""/27, 0x1b}, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x121)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4014)

21.497725378s ago: executing program 3 (id=734):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x4000005)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={0xffffffffffffffff, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x87, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x6, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x2b, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

21.474336918s ago: executing program 5 (id=725):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xd, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff)

21.418065668s ago: executing program 5 (id=735):
syz_clone(0xa3941011, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0xa3941011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x3f, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x3f, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11) (async)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
gettid() (async)
r4 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x8, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaed, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x114905, 0x8, 0xfffffffd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, r4, 0x1, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x8, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaed, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x114905, 0x8, 0xfffffffd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, r4, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1], 0x0, 0xff37, 0x0, 0x8, 0x4}, 0x28)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000000008000000911163000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

21.305008653s ago: executing program 0 (id=736):
socket$kcm(0x11, 0x3, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x80000000}, 0x0, 0x400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x10, 0x70bd35, 0x0, {0x0, 0x0, 0x12, 0x0, {0x5}, {0xfff1, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004810}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'virt_wifi0\x00', 0x4000}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}]}}]}, 0x40}}, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x88801, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0x1}, &(0x7f0000000cc0), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000010000000800000009000000002000000eacd4e457f47c77ba88a2e2d62056302f8f586733f32d99026b16890641cb3050e46e67c003616e7f96452187564d9d08897bab0d6c1b3da890e0c75baecd1f51b31f6fc7296d1e69b4fafbf225fcaaff5a68d7044ef1cf0a0fb34dc4a80d76848e0ca78b41f49bd3c2bd225667df264d5f80b79a6ef2bb50e44944828668ff9f9e9f1c0775ee21e96c3d98e6c7cb2340369da1769f5546", @ANYRES32=0x1, @ANYBLOB='e\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000010000000e00"/28], 0x50)

21.220514356s ago: executing program 0 (id=737):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x6}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x6}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x849000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000002a00), 0x0, 0x2141}, 0x38, 0x2000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x9, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x101, 0x3, 0x3, 0x0, 0x1, 0x1ff, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x5}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x101, 0x3, 0x3, 0x0, 0x1, 0x1ff, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x5}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x214527, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000009}, 0x0, 0x3, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040)
socket$kcm(0x10, 0x2, 0x0)

21.145965665s ago: executing program 5 (id=738):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x2e, 0x34}, 0x20)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0xb00000000000018, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, 0x0}, 0x20)
r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r1, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000240))
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, r3, 0xbf39b50785c55e8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

21.10107804s ago: executing program 3 (id=739):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x849000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000002a00), 0x0, 0x2141}, 0x38, 0x2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x21446f, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040)
socket$kcm(0x10, 0x2, 0x0)

21.099953245s ago: executing program 0 (id=740):
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socket$phonet(0x23, 0x2, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))

20.904951204s ago: executing program 3 (id=741):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r0}, 0x5)
write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x7}, 0xa38, 0x0, 0x0, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
ioctl$SIOCSIFHWADDR(r6, 0x541b, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0046a02020800020014000100046add000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="2cfc38ebe5d8e40ee878f1626e07e339b6026dbb44b19f5827868c3df2", @ANYRES64=r5], 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd107, 0x0, @perf_config_ext={0x401, 0x6d}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff, 0x8000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x8042, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB])
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1000, 0x0)

20.794823095s ago: executing program 0 (id=742):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
write$cgroup_pressure(r0, 0x0, 0xfffffc6a)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)="427b856738018f223eac6179c8ecbfd3b9130c26eba617ff310bffe91d5c4e5bd58a6c532694d6f84e4dad8a132b2e58be4cbeda8ada4c84ff13c754deea338fb7e7cb8f23b0a5bd940840bf4cfefadebb9461ffef3a85445dbd132f334825eb7b6f085d8ea637fc866b8316f9a8011d3a3f")
socket$kcm(0x10, 0x400000002, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x71, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x40082c, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

19.683366846s ago: executing program 0 (id=743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000880)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0000000200fffe0900010073797a30000000000900020073797af0a7a7c6bf94cf64029876320000000018000480140001800a0001006c696d6974000000040002800500074069000000140000001100010000000000000000000700000a"], 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0fb6b2aa74152dfa9067f4884b9c007b6596e5e899a59175702f8e6fb0f1a556604c2537e5b4a4d41a4c428bff3edb2d64c071fcd4ecd69915c71eef3274925b74fbcf180f2b1d864e812e27d01ace", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x105002, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xa)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3ff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0xb00000000000018, &(0x7f0000000740)=ANY=[@ANYBLOB="08000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000100000000000000000043b3e9d500000000"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, 0x0}, 0x20)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008", @ANYRESHEX=r5, @ANYRES32=r0, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}, 0x2000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
fstat(r2, &(0x7f0000000880))
r9 = syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x6, 0x5cb9}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0xffffffff}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x80000000830d}, 0x820, 0x2, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40)

19.572211173s ago: executing program 3 (id=744):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000c, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x117fa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = gettid()
fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$kcm(0xa, 0x1, 0x106)
fstat(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x200000000000013f, &(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = perf_event_open$cgroup(&(0x7f0000000580)={0x5, 0x80, 0x7f, 0x6, 0x1, 0xdf, 0x0, 0x6, 0x1209e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x6}, 0x1224a, 0x10, 0x7, 0x8, 0x80, 0x9, 0x4, 0x0, 0x8b23, 0x0, 0xcc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xe)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xae, 0x1, 0x8, 0x5, 0x0, 0x399, 0x5000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000400), 0xa}, 0x5000, 0xe, 0x5, 0x4, 0x3ff, 0x94, 0x0, 0x0, 0xf5, 0x0, 0x9}, r9, 0x8000000000000, r10, 0x9)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x17, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstat(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000540)=ANY=[@ANYBLOB='mode=00000000000000000130731,uid=', @ANYRESHEX=r12, @ANYBLOB="2c00de9c5d1773"])
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
fstat(r13, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
ioctl$TUNSETGROUP(r13, 0x400454ce, r14)
sendmsg$netlink(r1, &(0x7f0000000900)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000180)={0x40, 0x20, 0x8, 0x70bd2c, 0x25dfdbff, "", [@typed={0x4, 0x60}, @generic="1def017f2d947a4674d64470d021af68d77e6c1fb93da2ecb8a8291b04", @typed={0x9, 0x102, 0x0, 0x0, @str='syz1\x00'}]}, 0x40}, {&(0x7f0000000300)={0x34, 0x2f, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x131, 0x0, 0x0, @uid}, @generic="566add2d51bad3fdc70aba17dbc1902d768a524f5febf18d26d8e9"]}, 0x34}, {&(0x7f0000000340)={0xac, 0x17, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@generic="89b182c40bd4ace2c73e9b271c", @generic="136d5238ab5e77d99955ad9123168b99e8a34e2d280e97ba00924cbf5926bd91eb9427020a5b876f1cc9c77b166ec9915d900511a5676fc2adb39743dea8803ac0f93ff9d8eb60dfcf81e156474a02b3a3eba0b678f3606429b222dda7e9a7878c1a8e4e6a29b48a6722b7577c7ffcdae17a0e3c39436f8ba9a444bf6858fe7a1a717d8698b919fb189455d830eedb"]}, 0xac}, {&(0x7f0000000400)={0x74, 0x25, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@generic="e12fd9fe20e12902cc33d7ee1d629faf09f28390151e1d98e2b171a12d1b1a557f7efabdf503a3db61da6f4531ac1617d6216326222ebade6374e77ffdeaf515367a1cc430faf912c87b3bffbaee0f6f0dafb3e9fc11eaba06ba76cf138c2b6a658db4"]}, 0x74}, {&(0x7f0000000480)={0x20, 0x21, 0x400, 0x70bd29, 0x25dfdbfc, "", [@generic="3c65af21f4767f3f6f7d3012b42be1"]}, 0x20}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r14}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r2, r2, r0, r1, r1]}}], 0xa8, 0x4000010}, 0x4800)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x9, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x8000)

19.084630434s ago: executing program 5 (id=745):
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="f703535e9ed9a4bda5d9009ad2f12075fe21946079482957cc56c7de2f7da8bb5bc91a1136fe44c50f0e763f9232", 0x2e}, {&(0x7f00000000c0)="2d222de630ffa7a59bde1b327af49a0c23c629d71e2c3e70e4fdfbc42aadf6f29cb6e1ffb9ae6d36278695aa60c54b954d34b3500c0e34f0f12ca55bf78038871d85bedc134447967def0461f1093f78982cdce2a088ba141ad568d81354ce879e1abffefa3b119aecf4a03e", 0x6c}, {&(0x7f0000000200)="5e7d6db6148f5d00bc69e97650d9e8dca0e2ae52fbffa8cce8f7a940af9b4b85f89150e69b6174ed4fa793e818a2d0f3ebb9ad1cf97ee0f1517bafe717f4b0aadb4d3177fb449f9acd967066625f5020528a9b399bd98308d5c55b83e83edfdf385af153f39a0e6dca84152d820f77", 0x6f}, {&(0x7f0000000440)="efef6aa58f3024cea43191db84687ce0c36dc6f2b0ecdd0ce627a98db71253c9c3174d75b6e68c4594cb386b8de2eb97aa54625330274f3d1577f57083f2644343e600b17c5a657820e5371e8eccd0114de472fd751fea15601f5543a8625b557abb46c7cc94cb05257db9ff019c79f9218810f999afeaa266daffebbbeac7ce824e7c04ae52a1d8d19f76e5d1ebcc78788ada8b11a806852e26eda3a5c9310f772802396f2166c2a730dcb73ee3f06c1f9d89db3111c6487311df27382c96274d6aefb034370204befb122a", 0xcc}], 0x4, &(0x7f0000000580)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@end, @cipso={0x86, 0xb, 0x0, [{0x5, 0x5, "0dd126"}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x3, [0x9]}, @rr={0x7, 0xf, 0x99, [@multicast1, @broadcast, @remote]}, @cipso={0x86, 0x47, 0x3, [{0x2, 0xe, "5c74198018c6ddd9cdb4e24e"}, {0x7, 0x7, "1e18b342d1"}, {0x7, 0x2}, {0x6, 0xb, "09e01cbcc00ec4a52a"}, {0x2, 0x9, "90fc9f7bf6b8a2"}, {0x6, 0xc, "12f3d758938ded6472c6"}, {0x2, 0x6, "8f9cfdff"}, {0x6, 0x4, "8ddb"}]}]}}}], 0x80}, 0x800) (async)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="f703535e9ed9a4bda5d9009ad2f12075fe21946079482957cc56c7de2f7da8bb5bc91a1136fe44c50f0e763f9232", 0x2e}, {&(0x7f00000000c0)="2d222de630ffa7a59bde1b327af49a0c23c629d71e2c3e70e4fdfbc42aadf6f29cb6e1ffb9ae6d36278695aa60c54b954d34b3500c0e34f0f12ca55bf78038871d85bedc134447967def0461f1093f78982cdce2a088ba141ad568d81354ce879e1abffefa3b119aecf4a03e", 0x6c}, {&(0x7f0000000200)="5e7d6db6148f5d00bc69e97650d9e8dca0e2ae52fbffa8cce8f7a940af9b4b85f89150e69b6174ed4fa793e818a2d0f3ebb9ad1cf97ee0f1517bafe717f4b0aadb4d3177fb449f9acd967066625f5020528a9b399bd98308d5c55b83e83edfdf385af153f39a0e6dca84152d820f77", 0x6f}, {&(0x7f0000000440)="efef6aa58f3024cea43191db84687ce0c36dc6f2b0ecdd0ce627a98db71253c9c3174d75b6e68c4594cb386b8de2eb97aa54625330274f3d1577f57083f2644343e600b17c5a657820e5371e8eccd0114de472fd751fea15601f5543a8625b557abb46c7cc94cb05257db9ff019c79f9218810f999afeaa266daffebbbeac7ce824e7c04ae52a1d8d19f76e5d1ebcc78788ada8b11a806852e26eda3a5c9310f772802396f2166c2a730dcb73ee3f06c1f9d89db3111c6487311df27382c96274d6aefb034370204befb122a", 0xcc}], 0x4, &(0x7f0000000580)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@end, @cipso={0x86, 0xb, 0x0, [{0x5, 0x5, "0dd126"}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x3, [0x9]}, @rr={0x7, 0xf, 0x99, [@multicast1, @broadcast, @remote]}, @cipso={0x86, 0x47, 0x3, [{0x2, 0xe, "5c74198018c6ddd9cdb4e24e"}, {0x7, 0x7, "1e18b342d1"}, {0x7, 0x2}, {0x6, 0xb, "09e01cbcc00ec4a52a"}, {0x2, 0x9, "90fc9f7bf6b8a2"}, {0x6, 0xc, "12f3d758938ded6472c6"}, {0x2, 0x6, "8f9cfdff"}, {0x6, 0x4, "8ddb"}]}]}}}], 0x80}, 0x800)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r1) (async)
close(r1)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4092, 0xffc}], 0x1}, 0x100)
socketpair(0x2c, 0x2, 0x80004, &(0x7f00000013c0)) (async)
socketpair(0x2c, 0x2, 0x80004, &(0x7f00000013c0))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x1, 0x4, 0x3, 0x5, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0xa41a4180, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000080)

17.204265377s ago: executing program 5 (id=746):
r0 = getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x5}, 0x1104, 0x20000000000000, 0xfffffffd, 0x3, 0x1000, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xb}, r0, 0x0, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

16.487419622s ago: executing program 5 (id=747):
socket$kcm(0xa, 0x1, 0x106)
mount$bpf(0x0, 0x0, 0x0, 0x40028, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1aef00a, 0x0)
syz_clone(0xa49a4080, 0x0, 0x700, 0x0, 0x0, 0xfffffffffffffffc)
socket$kcm(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$kcm(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808)
close(r4)
sendmsg$kcm(r3, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)

119.798475ms ago: executing program 35 (id=743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000880)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0000000200fffe0900010073797a30000000000900020073797af0a7a7c6bf94cf64029876320000000018000480140001800a0001006c696d6974000000040002800500074069000000140000001100010000000000000000000700000a"], 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0fb6b2aa74152dfa9067f4884b9c007b6596e5e899a59175702f8e6fb0f1a556604c2537e5b4a4d41a4c428bff3edb2d64c071fcd4ecd69915c71eef3274925b74fbcf180f2b1d864e812e27d01ace", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x105002, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xa)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3ff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0xb00000000000018, &(0x7f0000000740)=ANY=[@ANYBLOB="08000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000100000000000000000043b3e9d500000000"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, 0x0}, 0x20)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008", @ANYRESHEX=r5, @ANYRES32=r0, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}, 0x2000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
fstat(r2, &(0x7f0000000880))
r9 = syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x6, 0x5cb9}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0xffffffff}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x80000000830d}, 0x820, 0x2, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40)

179.391µs ago: executing program 36 (id=744):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000c, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x117fa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = gettid()
fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$kcm(0xa, 0x1, 0x106)
fstat(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x200000000000013f, &(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = perf_event_open$cgroup(&(0x7f0000000580)={0x5, 0x80, 0x7f, 0x6, 0x1, 0xdf, 0x0, 0x6, 0x1209e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x6}, 0x1224a, 0x10, 0x7, 0x8, 0x80, 0x9, 0x4, 0x0, 0x8b23, 0x0, 0xcc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xe)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xae, 0x1, 0x8, 0x5, 0x0, 0x399, 0x5000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000400), 0xa}, 0x5000, 0xe, 0x5, 0x4, 0x3ff, 0x94, 0x0, 0x0, 0xf5, 0x0, 0x9}, r9, 0x8000000000000, r10, 0x9)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x17, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstat(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000540)=ANY=[@ANYBLOB='mode=00000000000000000130731,uid=', @ANYRESHEX=r12, @ANYBLOB="2c00de9c5d1773"])
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
fstat(r13, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
ioctl$TUNSETGROUP(r13, 0x400454ce, r14)
sendmsg$netlink(r1, &(0x7f0000000900)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000180)={0x40, 0x20, 0x8, 0x70bd2c, 0x25dfdbff, "", [@typed={0x4, 0x60}, @generic="1def017f2d947a4674d64470d021af68d77e6c1fb93da2ecb8a8291b04", @typed={0x9, 0x102, 0x0, 0x0, @str='syz1\x00'}]}, 0x40}, {&(0x7f0000000300)={0x34, 0x2f, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x131, 0x0, 0x0, @uid}, @generic="566add2d51bad3fdc70aba17dbc1902d768a524f5febf18d26d8e9"]}, 0x34}, {&(0x7f0000000340)={0xac, 0x17, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@generic="89b182c40bd4ace2c73e9b271c", @generic="136d5238ab5e77d99955ad9123168b99e8a34e2d280e97ba00924cbf5926bd91eb9427020a5b876f1cc9c77b166ec9915d900511a5676fc2adb39743dea8803ac0f93ff9d8eb60dfcf81e156474a02b3a3eba0b678f3606429b222dda7e9a7878c1a8e4e6a29b48a6722b7577c7ffcdae17a0e3c39436f8ba9a444bf6858fe7a1a717d8698b919fb189455d830eedb"]}, 0xac}, {&(0x7f0000000400)={0x74, 0x25, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@generic="e12fd9fe20e12902cc33d7ee1d629faf09f28390151e1d98e2b171a12d1b1a557f7efabdf503a3db61da6f4531ac1617d6216326222ebade6374e77ffdeaf515367a1cc430faf912c87b3bffbaee0f6f0dafb3e9fc11eaba06ba76cf138c2b6a658db4"]}, 0x74}, {&(0x7f0000000480)={0x20, 0x21, 0x400, 0x70bd29, 0x25dfdbfc, "", [@generic="3c65af21f4767f3f6f7d3012b42be1"]}, 0x20}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r14}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r2, r2, r0, r1, r1]}}], 0xa8, 0x4000010}, 0x4800)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x9, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x8000)

0s ago: executing program 37 (id=747):
socket$kcm(0xa, 0x1, 0x106)
mount$bpf(0x0, 0x0, 0x0, 0x40028, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1aef00a, 0x0)
syz_clone(0xa49a4080, 0x0, 0x700, 0x0, 0x0, 0xfffffffffffffffc)
socket$kcm(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$kcm(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808)
close(r4)
sendmsg$kcm(r3, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 entered disabled state
[  174.144697][ T6212] bridge_slave_0: left allmulticast mode
[  174.149756][ T6212] bridge_slave_0: left promiscuous mode
[  174.156446][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.480021][ T8651] netlink: 'syz.0.357': attribute type 39 has an invalid length.
[  175.447849][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.481313][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.488301][ T6212] bond0 (unregistering): Released all slaves
[  176.050266][ T8674] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  176.113406][   T54] Bluetooth: hci2: command tx timeout
[  176.362098][ T8676] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  176.377180][ T8677] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  176.434826][ T6212] hsr_slave_0: left promiscuous mode
[  176.448559][ T6212] hsr_slave_1: left promiscuous mode
[  176.452477][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.460803][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.471046][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.480650][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.500972][ T6212] veth0_macvtap: left promiscuous mode
[  176.518133][ T6212] veth1_vlan: left promiscuous mode
[  176.524815][ T6212] veth0_vlan: left promiscuous mode
[  177.015059][ T6212] team0 (unregistering): Port device team_slave_1 removed
[  177.029147][ T6212] team0 (unregistering): Port device team_slave_0 removed
[  177.305844][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.308078][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.310668][ T8634] bridge_slave_0: entered allmulticast mode
[  177.315017][ T8634] bridge_slave_0: entered promiscuous mode
[  177.318748][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.321136][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.323834][ T8634] bridge_slave_1: entered allmulticast mode
[  177.329607][ T8634] bridge_slave_1: entered promiscuous mode
[  177.363653][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.368812][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.416449][ T8634] team0: Port device team_slave_0 added
[  177.420182][ T8634] team0: Port device team_slave_1 added
[  177.471752][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.476548][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.488692][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.499197][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.504451][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.516569][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.579068][ T8634] hsr_slave_0: entered promiscuous mode
[  177.581358][ T8634] hsr_slave_1: entered promiscuous mode
[  177.594591][ T8634] debugfs: 'hsr0' already exists in 'hsr'
[  177.596881][ T8634] Cannot create hsr debugfs directory
[  177.623097][ T8728] netlink: 'syz.0.371': attribute type 8 has an invalid length.
[  177.802918][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.805975][ T8634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.808961][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.811778][ T8634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.874303][ T8634] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.886276][ T1754] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.890080][ T1754] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.902992][ T8634] 8021q: adding VLAN 0 to HW filter on device team0
[  177.912151][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.914498][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.927024][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.929422][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.184839][   T54] Bluetooth: hci2: command tx timeout
[  178.309899][ T8634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.568382][ T8634] veth0_vlan: entered promiscuous mode
[  178.588133][ T8634] veth1_vlan: entered promiscuous mode
[  178.646360][ T6212] bridge_slave_1: left allmulticast mode
[  178.650671][ T6212] bridge_slave_1: left promiscuous mode
[  178.654637][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.667157][ T6212] bridge_slave_0: left allmulticast mode
[  178.671642][ T6212] bridge_slave_0: left promiscuous mode
[  178.675100][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.934835][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.957196][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.965142][ T6212] bond0 (unregistering): Released all slaves
[  178.990614][ T8634] veth0_macvtap: entered promiscuous mode
[  179.001368][ T8634] veth1_macvtap: entered promiscuous mode
[  179.026829][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.050053][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  179.051714][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.058907][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  179.064387][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  179.069961][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  179.075995][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  179.395075][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.400381][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.590783][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.596730][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.627736][ T6212] hsr_slave_0: left promiscuous mode
[  179.631900][ T6212] hsr_slave_1: left promiscuous mode
[  179.636425][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.639328][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.651947][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.659965][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.670743][ T6212] veth0_macvtap: left promiscuous mode
[  179.672629][ T6212] veth1_vlan: left promiscuous mode
[  179.674507][ T6212] veth0_vlan: left promiscuous mode
[  179.917481][ T6212] team0 (unregistering): Port device team_slave_1 removed
[  179.937054][ T6212] team0 (unregistering): Port device team_slave_0 removed
[  180.265452][ T4999] Bluetooth: hci2: command tx timeout
[  180.765251][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.774055][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.787699][ T8867] bridge_slave_0: entered allmulticast mode
[  180.796027][ T8867] bridge_slave_0: entered promiscuous mode
[  180.810027][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.818120][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.825413][ T8867] bridge_slave_1: entered allmulticast mode
[  180.842261][ T8867] bridge_slave_1: entered promiscuous mode
[  180.917246][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.927674][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.947549][ T8902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'.
[  180.971964][ T4999] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12
[  180.986954][ T8867] team0: Port device team_slave_0 added
[  180.992217][ T8867] team0: Port device team_slave_1 added
[  181.030128][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.032827][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.048297][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.055365][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.059060][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.070040][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.136306][ T8867] hsr_slave_0: entered promiscuous mode
[  181.138733][ T8867] hsr_slave_1: entered promiscuous mode
[  181.141021][ T8867] debugfs: 'hsr0' already exists in 'hsr'
[  181.143023][ T8867] Cannot create hsr debugfs directory
[  181.143814][ T4999] Bluetooth: hci1: command tx timeout
[  181.287432][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.289575][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.291721][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.293770][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.304171][   T87] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.307081][   T87] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.382868][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.408467][ T8867] 8021q: adding VLAN 0 to HW filter on device team0
[  181.419250][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.421658][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.432611][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.434958][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.892710][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.002016][ T8936] netlink: 'syz.4.385': attribute type 9 has an invalid length.
[  182.039948][ T8867] veth0_vlan: entered promiscuous mode
[  182.055211][ T8867] veth1_vlan: entered promiscuous mode
[  182.086544][ T8867] veth0_macvtap: entered promiscuous mode
[  182.096997][ T8867] veth1_macvtap: entered promiscuous mode
[  182.122289][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.130550][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.218866][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.222067][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.264379][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.270428][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.353696][ T4999] Bluetooth: hci2: command tx timeout
[  183.014668][ T4999] Bluetooth: hci0: command tx timeout
[  183.234027][ T4999] Bluetooth: hci1: command tx timeout
[  185.303457][ T4999] Bluetooth: hci1: command tx timeout
[  187.387102][ T4999] Bluetooth: hci1: command tx timeout
[  190.286590][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[  191.300615][ T9105] netlink: 'syz.4.423': attribute type 1 has an invalid length.
[  191.304619][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'.
[  191.308215][ T9105] netlink: 658 bytes leftover after parsing attributes in process `syz.4.423'.
[  191.311559][ T9105] netlink: 'syz.4.423': attribute type 1 has an invalid length.
[  191.380726][ T9107] xt_NFQUEUE: number of total queues is 0
[  191.638902][ T9112] netlink: 'syz.3.424': attribute type 39 has an invalid length.
[  191.655302][ T9112] veth1_macvtap: left promiscuous mode
[  191.668528][ T9033] Set syz1 is full, maxelem 65536 reached
[  192.497385][ T9125] netlink: 'syz.4.428': attribute type 39 has an invalid length.
[  193.027052][ T5665] bridge_slave_1: left allmulticast mode
[  193.033250][ T5665] bridge_slave_1: left promiscuous mode
[  193.041859][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.062171][ T5665] bridge_slave_0: left allmulticast mode
[  193.071652][ T5665] bridge_slave_0: left promiscuous mode
[  193.080740][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.369622][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.387851][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.398513][ T5665] bond0 (unregistering): Released all slaves
[  193.430055][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.441001][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.446487][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.450463][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.456274][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.596497][ T9151] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[  193.942191][ T5665] hsr_slave_0: left promiscuous mode
[  193.959911][ T5665] hsr_slave_1: left promiscuous mode
[  193.971313][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.977593][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.994887][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.998002][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.030029][ T5665] veth0_macvtap: left promiscuous mode
[  194.032386][ T5665] veth1_vlan: left promiscuous mode
[  194.035293][ T5665] veth0_vlan: left promiscuous mode
[  194.411133][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  194.430488][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  195.104800][ T9195] netlink: 160 bytes leftover after parsing attributes in process `syz.4.443'.
[  195.109299][ T9196] netlink: 160 bytes leftover after parsing attributes in process `syz.4.443'.
[  195.266139][ T9146] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.268602][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.271657][ T9146] bridge_slave_0: entered allmulticast mode
[  195.275655][ T9146] bridge_slave_0: entered promiscuous mode
[  195.279649][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.284511][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.287193][ T9146] bridge_slave_1: entered allmulticast mode
[  195.291570][ T9146] bridge_slave_1: entered promiscuous mode
[  195.328803][ T9146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.352822][ T9146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.416414][ T9146] team0: Port device team_slave_0 added
[  195.421802][ T9146] team0: Port device team_slave_1 added
[  195.457128][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.460214][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.470085][ T9146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.477076][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.479793][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.489756][ T9146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.543769][ T4999] Bluetooth: hci2: command tx timeout
[  195.615182][ T9146] hsr_slave_0: entered promiscuous mode
[  195.623838][ T9146] hsr_slave_1: entered promiscuous mode
[  195.630207][ T9146] debugfs: 'hsr0' already exists in 'hsr'
[  195.634209][ T9146] Cannot create hsr debugfs directory
[  196.049602][ T9146] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.071983][ T9146] 8021q: adding VLAN 0 to HW filter on device team0
[  196.085168][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.087553][ T9305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.106969][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.109321][ T9305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.188941][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.196029][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.199906][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.206269][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.209507][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.473670][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.906927][ T9146] veth0_vlan: entered promiscuous mode
[  196.928915][ T9146] veth1_vlan: entered promiscuous mode
[  197.071804][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.076040][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.080785][ T9333] bridge_slave_0: entered allmulticast mode
[  197.088370][ T9333] bridge_slave_0: entered promiscuous mode
[  197.098623][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.103619][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.107782][ T9333] bridge_slave_1: entered allmulticast mode
[  197.115089][ T9333] bridge_slave_1: entered promiscuous mode
[  197.184095][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.190620][ T9146] veth0_macvtap: entered promiscuous mode
[  197.197512][ T9146] veth1_macvtap: entered promiscuous mode
[  197.205952][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.272874][ T9333] team0: Port device team_slave_0 added
[  197.281968][ T9333] team0: Port device team_slave_1 added
[  197.289191][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.342849][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.348521][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.351424][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.359993][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.381990][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.386554][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.396858][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.476914][ T9333] hsr_slave_0: entered promiscuous mode
[  197.479333][ T9333] hsr_slave_1: entered promiscuous mode
[  197.481939][ T9333] debugfs: 'hsr0' already exists in 'hsr'
[  197.488492][ T9333] Cannot create hsr debugfs directory
[  197.624270][   T54] Bluetooth: hci2: command tx timeout
[  197.634245][ T9300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.642528][ T9300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.726356][ T9300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.731864][ T9300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.914139][ T9377] netlink: 56 bytes leftover after parsing attributes in process `syz.0.450'.
[  197.932597][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'.
[  197.949319][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.970248][ T9333] 8021q: adding VLAN 0 to HW filter on device team0
[  197.989945][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.992310][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.011281][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.013733][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.046603][ T9387] netlink: 'syz.3.452': attribute type 39 has an invalid length.
[  198.056518][ T9387] veth1_macvtap: left promiscuous mode
[  198.263849][   T54] Bluetooth: hci0: command tx timeout
[  198.469487][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.571997][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[  198.831893][ T9333] veth0_vlan: entered promiscuous mode
[  198.851408][ T9333] veth1_vlan: entered promiscuous mode
[  198.919172][ T9333] veth0_macvtap: entered promiscuous mode
[  198.939587][ T9333] veth1_macvtap: entered promiscuous mode
[  198.974565][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.010100][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.199732][ T9308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.212860][ T9308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.241053][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'.
[  199.253968][ T9290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.257464][ T9290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.458576][ T9447] netlink: 'syz.4.448': attribute type 39 has an invalid length.
[  199.459307][ T9450] netlink: 'syz.4.448': attribute type 39 has an invalid length.
[  199.475985][ T9447] veth1_macvtap: left promiscuous mode
[  199.556414][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  199.558824][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  199.716998][   T54] Bluetooth: hci2: command tx timeout
[  200.384166][   T54] Bluetooth: hci0: command tx timeout
[  201.363717][ T9472] netlink: 'syz.3.465': attribute type 14 has an invalid length.
[  201.617072][ T9480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.467'.
[  201.643931][ T9479] netlink: 'syz.4.466': attribute type 8 has an invalid length.
[  201.783814][   T54] Bluetooth: hci2: command tx timeout
[  202.036771][ T9489] netlink: 'syz.0.468': attribute type 8 has an invalid length.
[  202.423860][   T54] Bluetooth: hci0: command tx timeout
[  202.957445][ T9506] netlink: 'syz.0.472': attribute type 39 has an invalid length.
[  202.993848][ T9506] veth1_macvtap: left promiscuous mode
[  204.506429][   T54] Bluetooth: hci0: command tx timeout
[  206.586246][   T12] bridge_slave_1: left allmulticast mode
[  206.588896][   T12] bridge_slave_1: left promiscuous mode
[  206.592384][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.608299][   T12] bridge_slave_0: left allmulticast mode
[  206.613288][   T12] bridge_slave_0: left promiscuous mode
[  206.617313][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.910391][ T4999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.917331][ T4999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.920169][ T4999] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.925536][ T4999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.928571][ T4999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.946741][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.959796][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.964649][   T12] bond0 (unregistering): Released all slaves
[  207.037526][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.046038][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.048927][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.052322][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.056500][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.392171][   T12] hsr_slave_0: left promiscuous mode
[  208.400269][   T12] hsr_slave_1: left promiscuous mode
[  208.405259][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.408244][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.412158][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.415645][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.428288][   T12] veth0_macvtap: left promiscuous mode
[  208.430618][   T12] veth1_vlan: left promiscuous mode
[  208.432738][   T12] veth0_vlan: left promiscuous mode
[  208.695994][   T12] team0 (unregistering): Port device team_slave_1 removed
[  208.705378][   T12] team0 (unregistering): Port device team_slave_0 removed
[  208.993548][ T4999] Bluetooth: hci1: command tx timeout
[  209.147328][ T4999] Bluetooth: hci2: command tx timeout
[  209.220988][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.224035][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.226999][ T9535] bridge_slave_0: entered allmulticast mode
[  209.230808][ T9535] bridge_slave_0: entered promiscuous mode
[  209.238179][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.241167][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.246201][ T9535] bridge_slave_1: entered allmulticast mode
[  209.250104][ T9535] bridge_slave_1: entered promiscuous mode
[  209.282493][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.296809][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.334816][ T9535] team0: Port device team_slave_0 added
[  209.352894][ T9535] team0: Port device team_slave_1 added
[  209.464263][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.467089][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.479177][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.497624][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.500475][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.508794][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.544645][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.547666][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.550663][ T9539] bridge_slave_0: entered allmulticast mode
[  209.556676][ T9539] bridge_slave_0: entered promiscuous mode
[  209.566741][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.571496][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.575043][ T9539] bridge_slave_1: entered allmulticast mode
[  209.579243][ T9539] bridge_slave_1: entered promiscuous mode
[  209.639089][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.646251][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.657030][   T12] bridge_slave_1: left allmulticast mode
[  209.659368][   T12] bridge_slave_1: left promiscuous mode
[  209.661673][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.669060][   T12] bridge_slave_0: left allmulticast mode
[  209.671022][   T12] bridge_slave_0: left promiscuous mode
[  209.673278][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.762459][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'.
[  209.867008][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.880712][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.887813][   T12] bond0 (unregistering): Released all slaves
[  209.950531][ T9539] team0: Port device team_slave_0 added
[  209.974455][ T9535] hsr_slave_0: entered promiscuous mode
[  209.978711][ T9535] hsr_slave_1: entered promiscuous mode
[  209.981976][ T9535] debugfs: 'hsr0' already exists in 'hsr'
[  209.995499][ T9535] Cannot create hsr debugfs directory
[  210.043631][ T9539] team0: Port device team_slave_1 added
[  210.122005][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.124940][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.135835][ T9539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.179596][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.182462][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.199545][ T9539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.320533][ T9539] hsr_slave_0: entered promiscuous mode
[  210.323811][ T9539] hsr_slave_1: entered promiscuous mode
[  210.326771][ T9539] debugfs: 'hsr0' already exists in 'hsr'
[  210.329086][ T9539] Cannot create hsr debugfs directory
[  210.469214][   T12] hsr_slave_0: left promiscuous mode
[  210.471819][   T12] hsr_slave_1: left promiscuous mode
[  210.479511][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.482573][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.508784][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.511703][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.529390][   T12] veth0_macvtap: left promiscuous mode
[  210.536424][   T12] veth1_vlan: left promiscuous mode
[  210.545870][   T12] veth0_vlan: left promiscuous mode
[  210.806250][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'.
[  211.052344][   T12] team0 (unregistering): Port device team_slave_1 removed
[  211.064160][ T4999] Bluetooth: hci1: command tx timeout
[  211.077245][   T12] team0 (unregistering): Port device team_slave_0 removed
[  211.223471][ T4999] Bluetooth: hci2: command tx timeout
[  211.559472][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.586139][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.592732][ T9535] 8021q: adding VLAN 0 to HW filter on device team0
[  211.620408][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.623415][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.630407][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.633508][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.712290][ T9539] 8021q: adding VLAN 0 to HW filter on device team0
[  211.784624][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.787450][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.830997][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.833922][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.047204][ T6212] bridge_slave_1: left allmulticast mode
[  212.054083][ T6212] bridge_slave_1: left promiscuous mode
[  212.058208][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.070157][ T6212] bridge_slave_0: left allmulticast mode
[  212.082801][ T6212] bridge_slave_0: left promiscuous mode
[  212.093493][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.322178][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.330371][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.339656][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.350573][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.354122][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.368089][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.380682][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.385938][ T6212] bond0 (unregistering): Released all slaves
[  212.733845][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.789817][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.804581][ T6212] hsr_slave_0: left promiscuous mode
[  212.807575][ T6212] hsr_slave_1: left promiscuous mode
[  212.810322][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.813065][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.819578][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.822538][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.835847][ T6212] veth0_macvtap: left promiscuous mode
[  212.838015][ T6212] veth1_vlan: left promiscuous mode
[  212.840056][ T6212] veth0_vlan: left promiscuous mode
[  213.008898][ T6212] team0 (unregistering): Port device team_slave_1 removed
[  213.022344][ T6212] team0 (unregistering): Port device team_slave_0 removed
[  213.143527][   T54] Bluetooth: hci1: command tx timeout
[  213.313780][   T54] Bluetooth: hci2: command tx timeout
[  213.603748][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.606582][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.609519][ T9614] bridge_slave_0: entered allmulticast mode
[  213.613028][ T9614] bridge_slave_0: entered promiscuous mode
[  213.625789][ T9535] veth0_vlan: entered promiscuous mode
[  213.629479][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.632364][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.636017][ T9614] bridge_slave_1: entered allmulticast mode
[  213.638855][ T9614] bridge_slave_1: entered promiscuous mode
[  213.654322][ T9539] veth0_vlan: entered promiscuous mode
[  213.667254][ T9614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.670166][ T9535] veth1_vlan: entered promiscuous mode
[  213.680877][ T9614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.701219][ T9614] team0: Port device team_slave_0 added
[  213.714376][ T9614] team0: Port device team_slave_1 added
[  213.727600][ T9539] veth1_vlan: entered promiscuous mode
[  213.742297][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.744541][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.754704][ T9614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.769487][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.771668][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.779512][ T9614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.816628][ T9614] hsr_slave_0: entered promiscuous mode
[  213.819482][ T9614] hsr_slave_1: entered promiscuous mode
[  213.821849][ T9614] debugfs: 'hsr0' already exists in 'hsr'
[  213.824690][ T9614] Cannot create hsr debugfs directory
[  213.871480][ T9535] veth0_macvtap: entered promiscuous mode
[  213.904616][ T9539] veth0_macvtap: entered promiscuous mode
[  213.921872][ T9535] veth1_macvtap: entered promiscuous mode
[  213.958912][ T9539] veth1_macvtap: entered promiscuous mode
[  213.997893][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.020695][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.028236][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.046107][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.207864][ T9290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.222248][ T9290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.268599][ T1754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.275473][ T1754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.302756][ T9290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.310536][ T9290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.314209][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.317026][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.321206][ T9614] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.355111][ T9614] 8021q: adding VLAN 0 to HW filter on device team0
[  214.380571][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.383501][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.403137][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.406040][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.423521][   T54] Bluetooth: hci0: command tx timeout
[  215.223727][   T54] Bluetooth: hci1: command tx timeout
[  215.389532][   T54] Bluetooth: hci2: command tx timeout
[  215.455368][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.677117][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'.
[  215.855473][ T9614] veth0_vlan: entered promiscuous mode
[  215.873013][ T9614] veth1_vlan: entered promiscuous mode
[  215.941640][ T9614] veth0_macvtap: entered promiscuous mode
[  215.970414][ T9614] veth1_macvtap: entered promiscuous mode
[  216.011284][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.027463][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.372755][ T9290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.378964][ T9290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.433817][ T9300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.441413][ T9300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.503760][   T54] Bluetooth: hci0: command tx timeout
[  216.775756][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.489'.
[  216.820296][ T9733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.500'.
[  217.563569][ T9754] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.504'.
[  218.422982][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.510'.
[  218.545636][ T9796] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.511'.
[  218.583787][   T54] Bluetooth: hci0: command tx timeout
[  219.907781][ T9830] netlink: 'syz.0.521': attribute type 39 has an invalid length.
[  219.915218][ T9830] veth1_macvtap: left promiscuous mode
[  220.664087][   T54] Bluetooth: hci0: command tx timeout
[  220.838170][ T9861] netlink: 'syz.0.526': attribute type 39 has an invalid length.
[  222.417337][T10033] netlink: 14 bytes leftover after parsing attributes in process `syz.3.534'.
[  223.032340][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.037813][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.045147][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.050800][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.055290][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.582093][T10043] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.584969][T10043] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.587844][T10043] bridge_slave_0: entered allmulticast mode
[  223.590638][T10043] bridge_slave_0: entered promiscuous mode
[  223.594803][T10043] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.597094][T10043] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.599286][T10043] bridge_slave_1: entered allmulticast mode
[  223.602677][T10043] bridge_slave_1: entered promiscuous mode
[  223.624622][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.628941][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.648863][T10043] team0: Port device team_slave_0 added
[  223.653055][T10043] team0: Port device team_slave_1 added
[  223.675553][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.677628][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.686468][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.690858][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.692895][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.704035][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.735005][T10043] hsr_slave_0: entered promiscuous mode
[  223.737243][T10043] hsr_slave_1: entered promiscuous mode
[  223.739416][T10043] debugfs: 'hsr0' already exists in 'hsr'
[  223.741135][T10043] Cannot create hsr debugfs directory
[  223.863744][T10043] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.866650][T10043] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.869643][T10043] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.872338][T10043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.915914][T10079] netlink: 'syz.4.542': attribute type 39 has an invalid length.
[  223.928005][T10079] veth1_macvtap: left promiscuous mode
[  223.975408][T10043] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.986850][ T1754] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.015062][ T1754] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.040993][T10043] 8021q: adding VLAN 0 to HW filter on device team0
[  224.054994][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.057604][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.066975][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.069750][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.522180][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.776431][T10043] veth0_vlan: entered promiscuous mode
[  224.786890][T10043] veth1_vlan: entered promiscuous mode
[  224.923131][T10043] veth0_macvtap: entered promiscuous mode
[  224.949051][T10043] veth1_macvtap: entered promiscuous mode
[  224.985614][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.989883][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'.
[  225.000949][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.090486][T10116] netlink: 'syz.3.544': attribute type 8 has an invalid length.
[  225.274193][   T54] Bluetooth: hci2: command tx timeout
[  225.376443][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.385482][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.394860][T10116] netlink: 'syz.3.544': attribute type 16 has an invalid length.
[  225.407847][T10116] netlink: 'syz.3.544': attribute type 17 has an invalid length.
[  225.415171][ T1754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.417730][T10116] netlink: 'syz.3.544': attribute type 27 has an invalid length.
[  225.419141][ T1754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.791960][ T5665] bridge_slave_1: left allmulticast mode
[  225.797529][ T5665] bridge_slave_1: left promiscuous mode
[  225.805035][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.815773][ T5665] bridge_slave_0: left allmulticast mode
[  225.818001][ T5665] bridge_slave_0: left promiscuous mode
[  225.821469][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.025499][ T4999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  226.031538][ T4999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  226.035533][ T4999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  226.041473][ T4999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  226.046314][ T4999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  226.120070][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.125554][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.129122][ T5665] bond0 (unregistering): Released all slaves
[  226.492903][ T5665] hsr_slave_0: left promiscuous mode
[  226.496626][ T5665] hsr_slave_1: left promiscuous mode
[  226.506113][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.517150][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.526909][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.539819][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.580050][ T5665] veth0_macvtap: left promiscuous mode
[  226.589387][ T5665] veth1_vlan: left promiscuous mode
[  226.600844][ T5665] veth0_vlan: left promiscuous mode
[  226.905904][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.912979][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.916526][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.920189][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  226.926657][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  226.991544][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  227.007292][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  227.614042][ T5665] bridge_slave_1: left allmulticast mode
[  227.623321][ T5665] bridge_slave_1: left promiscuous mode
[  227.625143][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.629146][ T5665] bridge_slave_0: left allmulticast mode
[  227.631946][ T5665] bridge_slave_0: left promiscuous mode
[  227.636250][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.652876][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  227.658762][ T5665] bridge_slave_1: left allmulticast mode
[  227.659028][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  227.660859][ T5665] bridge_slave_1: left promiscuous mode
[  227.666749][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.669710][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  227.675504][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  227.675693][ T5665] bridge_slave_0: left allmulticast mode
[  227.681425][ T5665] bridge_slave_0: left promiscuous mode
[  227.682066][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  227.683652][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.879698][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.888120][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.893414][ T5665] bond0 (unregistering): Released all slaves
[  228.055088][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.060850][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.066610][ T5665] bond0 (unregistering): Released all slaves
[  228.078611][T10136] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.081754][T10136] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.085486][T10136] bridge_slave_0: entered allmulticast mode
[  228.090924][T10136] bridge_slave_0: entered promiscuous mode
[  228.103558][ T4999] Bluetooth: hci0: command tx timeout
[  228.116947][T10136] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.123389][T10136] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.128887][T10136] bridge_slave_1: entered allmulticast mode
[  228.137396][T10136] bridge_slave_1: entered promiscuous mode
[  228.219252][T10136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.284999][T10136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.346551][T10136] team0: Port device team_slave_0 added
[  228.373410][T10136] team0: Port device team_slave_1 added
[  228.470866][T10136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.474093][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.483972][T10136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.510431][T10136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.515742][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.523099][T10136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.605739][T10136] hsr_slave_0: entered promiscuous mode
[  228.608832][T10136] hsr_slave_1: entered promiscuous mode
[  228.611525][T10136] debugfs: 'hsr0' already exists in 'hsr'
[  228.614882][T10136] Cannot create hsr debugfs directory
[  228.653487][ T5665] hsr_slave_0: left promiscuous mode
[  228.656109][ T5665] hsr_slave_1: left promiscuous mode
[  228.658748][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.661490][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.666415][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.669320][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.676528][ T5665] hsr_slave_0: left promiscuous mode
[  228.679135][ T5665] hsr_slave_1: left promiscuous mode
[  228.681736][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.685697][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.689070][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.691851][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.705116][ T5665] veth1_macvtap: left promiscuous mode
[  228.707258][ T5665] veth0_macvtap: left promiscuous mode
[  228.709386][ T5665] veth1_vlan: left promiscuous mode
[  228.711365][ T5665] veth0_vlan: left promiscuous mode
[  228.714020][ T5665] veth1_macvtap: left promiscuous mode
[  228.715694][ T5665] veth0_macvtap: left promiscuous mode
[  228.717356][ T5665] veth1_vlan: left promiscuous mode
[  228.718874][ T5665] veth0_vlan: left promiscuous mode
[  228.984467][ T4999] Bluetooth: hci1: command tx timeout
[  229.027341][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  229.040035][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  229.331340][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  229.354139][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  229.596113][T10172] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.598964][T10172] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.601963][T10172] bridge_slave_0: entered allmulticast mode
[  229.607188][T10172] bridge_slave_0: entered promiscuous mode
[  229.639834][T10172] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.653081][T10172] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.660983][T10172] bridge_slave_1: entered allmulticast mode
[  229.668352][T10172] bridge_slave_1: entered promiscuous mode
[  229.727133][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.785051][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.794585][ T4999] Bluetooth: hci2: command tx timeout
[  229.820750][T10172] team0: Port device team_slave_0 added
[  229.845880][T10172] team0: Port device team_slave_1 added
[  229.910515][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.920244][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.928822][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.942272][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.945799][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.955391][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.080375][T10195] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.094291][T10195] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.101258][T10195] bridge_slave_0: entered allmulticast mode
[  230.105578][T10195] bridge_slave_0: entered promiscuous mode
[  230.112671][T10172] hsr_slave_0: entered promiscuous mode
[  230.115318][T10172] hsr_slave_1: entered promiscuous mode
[  230.117540][T10172] debugfs: 'hsr0' already exists in 'hsr'
[  230.119331][T10172] Cannot create hsr debugfs directory
[  230.122448][T10195] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.131412][T10195] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.137697][T10195] bridge_slave_1: entered allmulticast mode
[  230.140375][T10195] bridge_slave_1: entered promiscuous mode
[  230.183390][ T4999] Bluetooth: hci0: command tx timeout
[  230.190139][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.202347][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.248505][T10195] team0: Port device team_slave_0 added
[  230.252207][T10195] team0: Port device team_slave_1 added
[  230.305136][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.308236][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.317581][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.331512][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.334162][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.342092][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.347161][ T5665] bridge_slave_1: left allmulticast mode
[  230.350220][ T5665] bridge_slave_1: left promiscuous mode
[  230.356308][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.360100][ T5665] bridge_slave_0: left allmulticast mode
[  230.362243][ T5665] bridge_slave_0: left promiscuous mode
[  230.364393][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.490855][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.495063][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.498591][ T5665] bond0 (unregistering): Released all slaves
[  230.510581][T10136] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.606729][T10195] hsr_slave_0: entered promiscuous mode
[  230.609784][T10195] hsr_slave_1: entered promiscuous mode
[  230.612542][T10195] debugfs: 'hsr0' already exists in 'hsr'
[  230.615584][T10195] Cannot create hsr debugfs directory
[  230.646196][T10136] 8021q: adding VLAN 0 to HW filter on device team0
[  230.682694][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.684882][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.705888][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.708136][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.746535][ T5665] hsr_slave_0: left promiscuous mode
[  230.750452][ T5665] hsr_slave_1: left promiscuous mode
[  230.752922][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.756402][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.759404][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.761807][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.769348][ T5665] veth1_macvtap: left promiscuous mode
[  230.771315][ T5665] veth0_macvtap: left promiscuous mode
[  230.773345][ T5665] veth1_vlan: left promiscuous mode
[  230.775029][ T5665] veth0_vlan: left promiscuous mode
[  230.940495][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  230.949706][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  231.063596][ T4999] Bluetooth: hci1: command tx timeout
[  231.240221][T10172] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.279731][T10172] 8021q: adding VLAN 0 to HW filter on device team0
[  231.287279][T10195] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.296064][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.298372][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.310707][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.313192][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.345046][T10195] 8021q: adding VLAN 0 to HW filter on device team0
[  231.359353][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.362179][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.380996][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.383894][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.515889][T10136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.705503][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.721891][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.724339][T10136] veth0_vlan: entered promiscuous mode
[  231.738200][T10136] veth1_vlan: entered promiscuous mode
[  231.774181][T10136] veth0_macvtap: entered promiscuous mode
[  231.783481][T10136] veth1_macvtap: entered promiscuous mode
[  231.797150][T10136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.804496][T10136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.873442][ T4999] Bluetooth: hci2: command tx timeout
[  231.887023][ T1754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.896656][ T1754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.914269][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.917035][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.987603][T10195] veth0_vlan: entered promiscuous mode
[  232.002753][T10195] veth1_vlan: entered promiscuous mode
[  232.047882][T10172] veth0_vlan: entered promiscuous mode
[  232.052727][T10195] veth0_macvtap: entered promiscuous mode
[  232.064874][T10195] veth1_macvtap: entered promiscuous mode
[  232.081023][T10172] veth1_vlan: entered promiscuous mode
[  232.096401][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.116565][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.176476][T10172] veth0_macvtap: entered promiscuous mode
[  232.204122][T10172] veth1_macvtap: entered promiscuous mode
[  232.264775][ T4999] Bluetooth: hci0: command tx timeout
[  232.279390][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.284041][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.295463][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.299021][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.354727][ T1754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.357844][ T1754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.440669][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.449143][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.506851][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.511065][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.989760][T10361] netlink: 'syz.3.554': attribute type 39 has an invalid length.
[  233.021250][T10361] veth1_macvtap: left promiscuous mode
[  233.045877][T10451] sysfs: Unknown parameter 'obj_type'
[  233.081466][   T12] bridge_slave_1: left allmulticast mode
[  233.087344][   T12] bridge_slave_1: left promiscuous mode
[  233.090920][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.124552][   T12] bridge_slave_0: left allmulticast mode
[  233.130464][   T12] bridge_slave_0: left promiscuous mode
[  233.132650][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.153653][ T4999] Bluetooth: hci1: command tx timeout
[  233.399350][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  233.405046][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  233.408716][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  233.413426][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  233.416472][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  233.618614][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.641769][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.665120][   T12] bond0 (unregistering): Released all slaves
[  233.932945][T10471] netlink: 'syz.3.571': attribute type 1 has an invalid length.
[  234.165375][   T12] hsr_slave_0: left promiscuous mode
[  234.174808][   T12] hsr_slave_1: left promiscuous mode
[  234.178533][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.181346][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.194881][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.198568][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.233739][   T12] veth1_macvtap: left promiscuous mode
[  234.237636][   T12] veth0_macvtap: left promiscuous mode
[  234.241563][   T12] veth1_vlan: left promiscuous mode
[  234.246299][   T12] veth0_vlan: left promiscuous mode
[  234.347231][ T4999] Bluetooth: hci0: command tx timeout
[  235.080260][   T12] team0 (unregistering): Port device team_slave_1 removed
[  235.117335][   T12] team0 (unregistering): Port device team_slave_0 removed
[  235.223272][ T4999] Bluetooth: hci1: command tx timeout
[  235.464871][ T4999] Bluetooth: hci2: command tx timeout
[  235.699053][T10485] netlink: 88 bytes leftover after parsing attributes in process `syz.3.573'.
[  236.074305][T10493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.574'.
[  236.133372][T10494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.574'.
[  236.347400][T10461] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.364245][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.368911][T10461] bridge_slave_0: entered allmulticast mode
[  236.375063][T10461] bridge_slave_0: entered promiscuous mode
[  236.385991][T10461] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.392614][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.399630][T10461] bridge_slave_1: entered allmulticast mode
[  236.407151][T10461] bridge_slave_1: entered promiscuous mode
[  236.480704][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.510898][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.571204][T10461] team0: Port device team_slave_0 added
[  236.588822][T10461] team0: Port device team_slave_1 added
[  236.639661][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.642528][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.673283][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.679036][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.688395][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.708393][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.802918][T10461] hsr_slave_0: entered promiscuous mode
[  236.810236][T10461] hsr_slave_1: entered promiscuous mode
[  236.827740][T10461] debugfs: 'hsr0' already exists in 'hsr'
[  236.829982][T10461] Cannot create hsr debugfs directory
[  237.212810][T10461] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.256866][T10461] 8021q: adding VLAN 0 to HW filter on device team0
[  237.277228][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.280232][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.301066][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.304166][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.553418][ T4999] Bluetooth: hci2: command tx timeout
[  237.854278][T10461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.197986][T10461] veth0_vlan: entered promiscuous mode
[  238.220069][T10461] veth1_vlan: entered promiscuous mode
[  238.256486][T10461] veth0_macvtap: entered promiscuous mode
[  238.268152][T10461] veth1_macvtap: entered promiscuous mode
[  238.296497][T10461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.306397][T10461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.409694][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.412107][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.617523][ T9925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.620008][ T9925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.695336][T10658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.568'.
[  238.829012][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'.
[  238.841813][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[  238.854564][T10667] netlink: 56 bytes leftover after parsing attributes in process `syz.3.583'.
[  238.989099][T10672] netlink: 'syz.3.585': attribute type 13 has an invalid length.
[  238.991525][T10672] netlink: 168 bytes leftover after parsing attributes in process `syz.3.585'.
[  239.631041][ T4999] Bluetooth: hci2: command tx timeout
[  239.802070][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[  241.001265][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.595'.
[  241.002033][T11198] netlink: 'syz.0.594': attribute type 39 has an invalid length.
[  241.037344][T11198] veth1_macvtap: left promiscuous mode
[  241.149216][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'.
[  241.515751][ T5665] bridge_slave_1: left allmulticast mode
[  241.518920][ T5665] bridge_slave_1: left promiscuous mode
[  241.524846][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.536379][ T5665] bridge_slave_0: left allmulticast mode
[  241.541150][ T5665] bridge_slave_0: left promiscuous mode
[  241.544026][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.599753][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'.
[  241.703319][ T4999] Bluetooth: hci2: command tx timeout
[  241.908634][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.920913][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.930409][ T5665] bond0 (unregistering): Released all slaves
[  242.078653][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.085639][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.088906][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.094359][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.101287][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  242.215468][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'.
[  242.336644][ T5665] hsr_slave_0: left promiscuous mode
[  242.343071][ T5665] hsr_slave_1: left promiscuous mode
[  242.357149][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.360083][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.379733][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.393278][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.406255][ T5665] veth0_macvtap: left promiscuous mode
[  242.413398][ T5665] veth1_vlan: left promiscuous mode
[  242.416181][ T5665] veth0_vlan: left promiscuous mode
[  242.709364][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  242.730152][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  243.198327][T11360] netlink: 136 bytes leftover after parsing attributes in process `syz.0.604'.
[  243.675308][T11338] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.683399][T11338] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.686518][T11338] bridge_slave_0: entered allmulticast mode
[  243.697511][T11338] bridge_slave_0: entered promiscuous mode
[  243.709096][T11338] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.713891][T11338] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.722762][T11338] bridge_slave_1: entered allmulticast mode
[  243.729658][T11338] bridge_slave_1: entered promiscuous mode
[  243.800631][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.817489][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.881184][T11338] team0: Port device team_slave_0 added
[  243.896718][T11338] team0: Port device team_slave_1 added
[  243.956778][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.971839][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.991681][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.999817][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.006213][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.028031][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.176428][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  244.183439][   T54] Bluetooth: hci1: command tx timeout
[  244.190646][T11338] hsr_slave_0: entered promiscuous mode
[  244.204496][T11338] hsr_slave_1: entered promiscuous mode
[  244.208887][T11338] debugfs: 'hsr0' already exists in 'hsr'
[  244.211242][T11338] Cannot create hsr debugfs directory
[  244.679294][T11338] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.712711][T11338] 8021q: adding VLAN 0 to HW filter on device team0
[  244.730402][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.733384][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.757265][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.760155][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.808174][T11380] syz.0.606 uses obsolete (PF_INET,SOCK_PACKET)
[  245.166468][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.489754][T11338] veth0_vlan: entered promiscuous mode
[  245.515639][T11338] veth1_vlan: entered promiscuous mode
[  245.555892][T11338] veth0_macvtap: entered promiscuous mode
[  245.565471][T11338] veth1_macvtap: entered promiscuous mode
[  245.585659][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.598793][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.714745][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.719917][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.753633][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.758400][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.268340][   T54] Bluetooth: hci1: command tx timeout
[  246.763129][T11415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.596369][T11455] netlink: 5056 bytes leftover after parsing attributes in process `syz.0.619'.
[  247.599438][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'.
[  248.093533][ T5665] bridge_slave_1: left allmulticast mode
[  248.098945][ T5665] bridge_slave_1: left promiscuous mode
[  248.104173][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.117597][ T5665] bridge_slave_0: left allmulticast mode
[  248.123937][ T5665] bridge_slave_0: left promiscuous mode
[  248.129792][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.439499][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.467939][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.475024][ T5665] bond0 (unregistering): Released all slaves
[  248.577929][ T4999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  248.583125][ T4999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.588749][ T4999] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.592240][ T4999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.597209][ T4999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  248.623059][ T4999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  248.631755][ T4999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  248.638815][T11478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  248.661867][T11478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  248.666786][T11478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  248.987680][ T5665] hsr_slave_0: left promiscuous mode
[  248.990163][ T5665] hsr_slave_1: left promiscuous mode
[  248.992616][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.995933][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.999827][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.002799][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.010250][ T5665] veth1_macvtap: left promiscuous mode
[  249.012288][ T5665] veth0_macvtap: left promiscuous mode
[  249.017342][ T5665] veth1_vlan: left promiscuous mode
[  249.019448][ T5665] veth0_vlan: left promiscuous mode
[  249.195983][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  249.212008][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  249.300675][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.307705][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.313556][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.317434][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.320100][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.824100][ T5665] bridge_slave_1: left allmulticast mode
[  249.826343][ T5665] bridge_slave_1: left promiscuous mode
[  249.828212][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.832392][ T5665] bridge_slave_0: left allmulticast mode
[  249.837611][ T5665] bridge_slave_0: left promiscuous mode
[  249.839410][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.848618][ T5665] bridge_slave_1: left allmulticast mode
[  249.850696][ T5665] bridge_slave_1: left promiscuous mode
[  249.852765][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.860511][ T5665] bridge_slave_0: left allmulticast mode
[  249.862588][ T5665] bridge_slave_0: left promiscuous mode
[  249.865217][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.101582][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.109509][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.115983][ T5665] bond0 (unregistering): Released all slaves
[  250.297446][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.303671][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.309784][ T5665] bond0 (unregistering): Released all slaves
[  250.317527][T11474] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.320558][T11474] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.323714][T11474] bridge_slave_0: entered allmulticast mode
[  250.327817][T11474] bridge_slave_0: entered promiscuous mode
[  250.400245][T11474] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.402866][T11474] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.405946][T11474] bridge_slave_1: entered allmulticast mode
[  250.412201][T11474] bridge_slave_1: entered promiscuous mode
[  250.479792][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.558476][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.655619][T11476] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.658552][T11476] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.661325][T11476] bridge_slave_0: entered allmulticast mode
[  250.664152][   T54] Bluetooth: hci1: command tx timeout
[  250.668598][T11476] bridge_slave_0: entered promiscuous mode
[  250.687368][T11474] team0: Port device team_slave_0 added
[  250.704160][T11476] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.707126][T11476] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.710002][T11476] bridge_slave_1: entered allmulticast mode
[  250.714062][T11476] bridge_slave_1: entered promiscuous mode
[  250.737342][T11474] team0: Port device team_slave_1 added
[  250.754795][   T54] Bluetooth: hci3: command tx timeout
[  250.829019][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.831826][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.844077][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.850228][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.853061][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.863113][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.896666][T11476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.911043][T11495] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.914106][T11495] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.917171][T11495] bridge_slave_0: entered allmulticast mode
[  250.921545][T11495] bridge_slave_0: entered promiscuous mode
[  250.928362][T11476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.946426][T11495] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.949232][T11495] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.951944][T11495] bridge_slave_1: entered allmulticast mode
[  250.956082][T11495] bridge_slave_1: entered promiscuous mode
[  251.025790][T11495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.045081][T11474] hsr_slave_0: entered promiscuous mode
[  251.048057][T11474] hsr_slave_1: entered promiscuous mode
[  251.050746][T11474] debugfs: 'hsr0' already exists in 'hsr'
[  251.052851][T11474] Cannot create hsr debugfs directory
[  251.057254][T11476] team0: Port device team_slave_0 added
[  251.061532][T11495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.090109][T11476] team0: Port device team_slave_1 added
[  251.108623][T11495] team0: Port device team_slave_0 added
[  251.113100][T11495] team0: Port device team_slave_1 added
[  251.169868][ T5665] hsr_slave_0: left promiscuous mode
[  251.172805][ T5665] hsr_slave_1: left promiscuous mode
[  251.176453][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.179497][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.183094][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.186567][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.196863][ T5665] hsr_slave_0: left promiscuous mode
[  251.199758][ T5665] hsr_slave_1: left promiscuous mode
[  251.202900][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.206749][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.210318][ T5665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.213285][ T5665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.226772][ T5665] veth0_macvtap: left promiscuous mode
[  251.229638][ T5665] veth1_vlan: left promiscuous mode
[  251.231954][ T5665] veth0_vlan: left promiscuous mode
[  251.235429][ T5665] veth1_macvtap: left promiscuous mode
[  251.237577][ T5665] veth0_macvtap: left promiscuous mode
[  251.240047][ T5665] veth1_vlan: left promiscuous mode
[  251.242235][ T5665] veth0_vlan: left promiscuous mode
[  251.383507][   T54] Bluetooth: hci0: command tx timeout
[  251.586650][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  251.598927][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  251.895284][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  251.903660][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  252.060713][T11495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.064347][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.076330][T11495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.081745][T11476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.085871][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.096369][T11476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.118865][T11495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.122022][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.132615][T11495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.151766][T11476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.154768][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.166423][T11476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.290810][T11495] hsr_slave_0: entered promiscuous mode
[  252.294296][T11495] hsr_slave_1: entered promiscuous mode
[  252.296984][T11495] debugfs: 'hsr0' already exists in 'hsr'
[  252.299223][T11495] Cannot create hsr debugfs directory
[  252.331350][T11476] hsr_slave_0: entered promiscuous mode
[  252.335004][T11476] hsr_slave_1: entered promiscuous mode
[  252.337703][T11476] debugfs: 'hsr0' already exists in 'hsr'
[  252.340013][T11476] Cannot create hsr debugfs directory
[  252.743369][   T54] Bluetooth: hci1: command tx timeout
[  252.755373][T11474] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.782992][T11474] 8021q: adding VLAN 0 to HW filter on device team0
[  252.809672][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.812528][ T9920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.823596][   T54] Bluetooth: hci3: command tx timeout
[  252.840570][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.843436][ T9920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.866508][T11495] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.898119][T11495] 8021q: adding VLAN 0 to HW filter on device team0
[  252.908480][T11476] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.915562][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.917771][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.935688][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.938396][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.963573][T11476] 8021q: adding VLAN 0 to HW filter on device team0
[  252.979955][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.982128][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.998774][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.000877][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.300121][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.323079][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.463447][   T54] Bluetooth: hci0: command tx timeout
[  253.471130][T11495] veth0_vlan: entered promiscuous mode
[  253.476154][T11476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.486087][T11495] veth1_vlan: entered promiscuous mode
[  253.517947][T11474] veth0_vlan: entered promiscuous mode
[  253.530653][T11474] veth1_vlan: entered promiscuous mode
[  253.541341][T11495] veth0_macvtap: entered promiscuous mode
[  253.546647][T11495] veth1_macvtap: entered promiscuous mode
[  253.574900][T11474] veth0_macvtap: entered promiscuous mode
[  253.579305][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.587481][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.591548][T11474] veth1_macvtap: entered promiscuous mode
[  253.626235][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.640720][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.713564][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.720700][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.782687][T11476] veth0_vlan: entered promiscuous mode
[  253.800149][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.803019][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.822876][T11476] veth1_vlan: entered promiscuous mode
[  253.831812][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.842665][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.895766][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.903411][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.928664][T11476] veth0_macvtap: entered promiscuous mode
[  253.938993][T11476] veth1_macvtap: entered promiscuous mode
[  253.965447][T11476] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.979645][T11476] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.109407][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.117934][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.160532][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.169246][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.326472][T11613] netlink: 'syz.3.630': attribute type 39 has an invalid length.
[  254.836931][   T54] Bluetooth: hci1: command tx timeout
[  254.914172][   T54] Bluetooth: hci3: command tx timeout
[  254.920600][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.631'.
[  254.992440][T11623] netlink: 'syz.5.631': attribute type 2 has an invalid length.
[  255.548792][   T54] Bluetooth: hci0: command tx timeout
[  256.634826][T11613] veth1_macvtap: left promiscuous mode
[  256.856725][T11629] netlink: 'syz.3.632': attribute type 39 has an invalid length.
[  256.937969][   T54] Bluetooth: hci1: command tx timeout
[  257.009556][   T54] Bluetooth: hci3: command tx timeout
[  257.170047][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'.
[  257.496756][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'.
[  257.624322][   T54] Bluetooth: hci0: command tx timeout
[  258.030064][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'.
[  258.033889][T11654] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  259.844893][T11685] netlink: 'syz.5.644': attribute type 2 has an invalid length.
[  259.856005][T11685] netlink: 'syz.5.644': attribute type 2 has an invalid length.
[  260.112004][T11716] netlink: 'syz.0.650': attribute type 6 has an invalid length.
[  260.116598][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[  261.007926][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  261.010119][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  261.256485][T11748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.067566][T11783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.664'.
[  263.125056][T11788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.664'.
[  264.010986][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.669'.
[  264.020891][T11804] netlink: 109 bytes leftover after parsing attributes in process `syz.5.669'.
[  264.370772][T11812] netlink: 'syz.0.671': attribute type 21 has an invalid length.
[  264.370847][T11812] netlink: 144 bytes leftover after parsing attributes in process `syz.0.671'.
[  264.880687][T11818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.673'.
[  264.963115][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'.
[  265.624990][T11837] netlink: 'syz.0.676': attribute type 39 has an invalid length.
[  265.640063][T11837] veth1_macvtap: left promiscuous mode
[  267.081489][T11868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.677'.
[  267.267726][T11873] cgroup: fork rejected by pids controller in /syz5
[  268.281145][ T6212] bridge_slave_1: left allmulticast mode
[  268.286283][ T6212] bridge_slave_1: left promiscuous mode
[  268.290456][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.300374][ T6212] bridge_slave_0: left allmulticast mode
[  268.414825][ T6212] bridge_slave_0: left promiscuous mode
[  268.418335][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.493626][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'.
[  268.698497][T11478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.703851][T11478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  268.707622][T11478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  268.714084][T11478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  268.717237][T11478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  268.735701][T12000] netlink: 'syz.3.690': attribute type 4 has an invalid length.
[  268.843362][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.849527][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.856326][ T6212] bond0 (unregistering): Released all slaves
[  269.220046][ T6212] hsr_slave_0: left promiscuous mode
[  269.222798][ T6212] hsr_slave_1: left promiscuous mode
[  269.230483][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.233887][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.238116][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.241329][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.255777][ T6212] veth1_macvtap: left promiscuous mode
[  269.259106][ T6212] veth0_macvtap: left promiscuous mode
[  269.262416][ T6212] veth1_vlan: left promiscuous mode
[  269.267853][ T6212] veth0_vlan: left promiscuous mode
[  269.429155][T11478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.436197][T11478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.439099][T11478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.441909][T11478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.444868][T11478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.588841][ T6212] team0 (unregistering): Port device team_slave_1 removed
[  269.598327][ T6212] team0 (unregistering): Port device team_slave_0 removed
[  269.993540][T11997] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.996596][T11997] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.999385][T11997] bridge_slave_0: entered allmulticast mode
[  270.002455][T11997] bridge_slave_0: entered promiscuous mode
[  270.008642][T11997] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.011352][T11997] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.013634][T11997] bridge_slave_1: entered allmulticast mode
[  270.016363][T11997] bridge_slave_1: entered promiscuous mode
[  270.047681][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.054119][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.140823][T11997] team0: Port device team_slave_0 added
[  270.165518][T11997] team0: Port device team_slave_1 added
[  270.191225][T11997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.201662][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.222613][T11997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.230174][T11997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.236111][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.252989][T11997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.321018][T11997] hsr_slave_0: entered promiscuous mode
[  270.324351][T11997] hsr_slave_1: entered promiscuous mode
[  270.326818][T11997] debugfs: 'hsr0' already exists in 'hsr'
[  270.328643][T11997] Cannot create hsr debugfs directory
[  270.439545][ T6212] bridge_slave_1: left allmulticast mode
[  270.441987][ T6212] bridge_slave_1: left promiscuous mode
[  270.444850][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.454370][ T6212] bridge_slave_0: left allmulticast mode
[  270.456620][ T6212] bridge_slave_0: left promiscuous mode
[  270.458787][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.743524][   T54] Bluetooth: hci0: command tx timeout
[  271.418717][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.429546][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.435635][ T6212] bond0 (unregistering): Released all slaves
[  271.463360][   T54] Bluetooth: hci2: command tx timeout
[  271.659160][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'.
[  272.066145][ T6212] hsr_slave_0: left promiscuous mode
[  272.073871][ T6212] hsr_slave_1: left promiscuous mode
[  272.095528][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.098415][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.106655][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.109576][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.147018][ T6212] veth0_macvtap: left promiscuous mode
[  272.149191][ T6212] veth1_vlan: left promiscuous mode
[  272.151147][ T6212] veth0_vlan: left promiscuous mode
[  272.475542][ T6212] team0 (unregistering): Port device team_slave_1 removed
[  272.501695][ T6212] team0 (unregistering): Port device team_slave_0 removed
[  272.655104][T12062] netlink: 'syz.3.697': attribute type 39 has an invalid length.
[  272.797821][T12017] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.800943][T12017] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.805356][T12017] bridge_slave_0: entered allmulticast mode
[  272.815753][T12017] bridge_slave_0: entered promiscuous mode
[  272.823028][T12017] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.825643][   T54] Bluetooth: hci0: command tx timeout
[  272.831337][T12017] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.836958][T12017] bridge_slave_1: entered allmulticast mode
[  272.841802][T12017] bridge_slave_1: entered promiscuous mode
[  272.856257][T11997] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.900673][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.910125][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.931649][T11997] 8021q: adding VLAN 0 to HW filter on device team0
[  272.951672][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.953955][ T9922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.977344][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.980190][ T9922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.998010][T12017] team0: Port device team_slave_0 added
[  273.010701][T12017] team0: Port device team_slave_1 added
[  273.058366][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.064594][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.081386][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.088630][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.104938][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.125828][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.194665][T12017] hsr_slave_0: entered promiscuous mode
[  273.198324][T12017] hsr_slave_1: entered promiscuous mode
[  273.202123][T12017] debugfs: 'hsr0' already exists in 'hsr'
[  273.205475][T12017] Cannot create hsr debugfs directory
[  273.491634][T12017] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.511296][T12017] 8021q: adding VLAN 0 to HW filter on device team0
[  273.520648][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.523603][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.531851][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.534448][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.545069][   T54] Bluetooth: hci2: command tx timeout
[  273.592417][T11997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.816529][T11997] veth0_vlan: entered promiscuous mode
[  273.827619][T11997] veth1_vlan: entered promiscuous mode
[  273.924569][T11997] veth0_macvtap: entered promiscuous mode
[  273.935360][T11997] veth1_macvtap: entered promiscuous mode
[  273.949099][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.969745][T11997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.982317][T11997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.136895][ T9308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.142434][ T9308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.179853][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.182463][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.239593][T12017] veth0_vlan: entered promiscuous mode
[  274.270114][T12017] veth1_vlan: entered promiscuous mode
[  274.313809][T12017] veth0_macvtap: entered promiscuous mode
[  274.334980][T12017] veth1_macvtap: entered promiscuous mode
[  274.366935][T12017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.415537][T12017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.630616][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.637921][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.699036][ T3330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.707553][ T3330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.861310][ T6478] tipc: Subscription rejected, illegal request
[  274.901682][T12128] netlink: del zone limit has 4 unknown bytes
[  274.903446][   T54] Bluetooth: hci0: command tx timeout
[  275.049907][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  275.077953][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  275.117104][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  275.486775][T12139] infiniband syz0: set active
[  275.490645][T12139] infiniband syz0: added ip6gretap0
[  275.533022][T12139] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  275.540318][  T810] ip6gretap0 speed is unknown, defaulting to 1000
[  275.543597][T12139] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  275.545211][T12139] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  275.574578][T12157] netlink: 'syz.3.707': attribute type 39 has an invalid length.
[  275.623753][   T54] Bluetooth: hci2: command tx timeout
[  275.647433][T12139] RDS/IB: syz0: added
[  275.650930][T12139] smc: adding ib device syz0 with port count 1
[  275.656572][T12139] smc:    ib device syz0 port 1 has no pnetid
[  275.670100][ T5680] ip6gretap0 speed is unknown, defaulting to 1000
[  275.675829][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  275.810271][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'.
[  275.861964][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  276.020667][ T6478] bridge_slave_1: left allmulticast mode
[  276.027311][ T6478] bridge_slave_1: left promiscuous mode
[  276.030742][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.050695][ T6478] bridge_slave_0: left allmulticast mode
[  276.058269][ T6478] bridge_slave_0: left promiscuous mode
[  276.063133][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.264892][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.278864][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.288348][ T6478] bond0 (unregistering): Released all slaves
[  276.308693][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  276.366017][T11478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  276.370938][T11478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  276.386366][T11478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  276.401402][T11478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  276.404650][T11478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.724066][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  276.825618][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  276.911102][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  276.916689][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  276.921012][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  276.924603][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  276.927087][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  276.962607][T12139] ip6gretap0 speed is unknown, defaulting to 1000
[  276.983844][   T54] Bluetooth: hci0: command tx timeout
[  277.214956][T12194] ip6gretap0 speed is unknown, defaulting to 1000
[  277.446743][ T6478] hsr_slave_0: left promiscuous mode
[  277.449868][ T6478] hsr_slave_1: left promiscuous mode
[  277.452958][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.457218][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.461016][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.466455][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.477946][ T6478] veth0_macvtap: left promiscuous mode
[  277.480549][ T6478] veth1_vlan: left promiscuous mode
[  277.482813][ T6478] veth0_vlan: left promiscuous mode
[  277.795598][ T6478] team0 (unregistering): Port device team_slave_1 removed
[  277.804939][ T6478] team0 (unregistering): Port device team_slave_0 removed
[  278.283091][T12183] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.287266][T12183] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.290143][T12183] bridge_slave_0: entered allmulticast mode
[  278.294327][T12183] bridge_slave_0: entered promiscuous mode
[  278.298502][T12183] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.301287][T12183] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.305502][T12183] bridge_slave_1: entered allmulticast mode
[  278.309049][T12183] bridge_slave_1: entered promiscuous mode
[  278.341335][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.352277][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.385041][T12183] team0: Port device team_slave_0 added
[  278.388587][T12183] team0: Port device team_slave_1 added
[  278.426198][ T6478] bridge_slave_1: left allmulticast mode
[  278.431709][ T6478] bridge_slave_1: left promiscuous mode
[  278.433758][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.439590][ T6478] bridge_slave_0: left allmulticast mode
[  278.441340][ T6478] bridge_slave_0: left promiscuous mode
[  278.444088][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.503944][   T54] Bluetooth: hci1: command tx timeout
[  278.680263][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.692906][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.699930][ T6478] bond0 (unregistering): Released all slaves
[  278.728471][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.733087][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.799511][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.804801][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.807070][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.815572][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.966239][T12194] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.969661][T12194] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.971999][T12194] bridge_slave_0: entered allmulticast mode
[  278.975167][T12194] bridge_slave_0: entered promiscuous mode
[  278.980875][T12194] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.984514][   T54] Bluetooth: hci2: command tx timeout
[  278.996934][T12194] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.999840][T12194] bridge_slave_1: entered allmulticast mode
[  279.002467][T12194] bridge_slave_1: entered promiscuous mode
[  279.021438][T12183] hsr_slave_0: entered promiscuous mode
[  279.024121][T12183] hsr_slave_1: entered promiscuous mode
[  279.026745][T12183] debugfs: 'hsr0' already exists in 'hsr'
[  279.028527][T12183] Cannot create hsr debugfs directory
[  279.065926][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.092276][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.210237][T12194] team0: Port device team_slave_0 added
[  279.229260][T12194] team0: Port device team_slave_1 added
[  279.356342][ T6478] hsr_slave_0: left promiscuous mode
[  279.359585][ T6478] hsr_slave_1: left promiscuous mode
[  279.362544][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.369072][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.378848][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.381821][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.398024][ T6478] veth1_macvtap: left promiscuous mode
[  279.401978][ T6478] veth0_macvtap: left promiscuous mode
[  279.404837][ T6478] veth1_vlan: left promiscuous mode
[  279.407040][ T6478] veth0_vlan: left promiscuous mode
[  279.676125][ T6478] team0 (unregistering): Port device team_slave_1 removed
[  279.689233][ T6478] team0 (unregistering): Port device team_slave_0 removed
[  279.869482][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.872154][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.880049][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.902558][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.905555][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.918317][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.022720][T12194] hsr_slave_0: entered promiscuous mode
[  280.034339][T12194] hsr_slave_1: entered promiscuous mode
[  280.036637][T12194] debugfs: 'hsr0' already exists in 'hsr'
[  280.038694][T12194] Cannot create hsr debugfs directory
[  280.332015][T12183] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.341854][T12194] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.357282][T12183] 8021q: adding VLAN 0 to HW filter on device team0
[  280.376538][   T12] bridge_slave_1: left allmulticast mode
[  280.378575][   T12] bridge_slave_1: left promiscuous mode
[  280.380834][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.385914][   T12] bridge_slave_0: left allmulticast mode
[  280.388136][   T12] bridge_slave_0: left promiscuous mode
[  280.390148][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.479028][ T3330] smc: removing ib device syz0
[  280.583659][   T54] Bluetooth: hci1: command tx timeout
[  280.592470][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.601282][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.611933][   T12] bond0 (unregistering): Released all slaves
[  280.629541][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.629718][ T5082] ip6gretap0 speed is unknown, defaulting to 1000
[  280.632356][ T9925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.641791][ T5082] syz0: Port: 1 Link DOWN
[  280.646643][T12194] 8021q: adding VLAN 0 to HW filter on device team0
[  280.657924][T11478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  280.670382][T11478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  280.679656][ T5687] ip6gretap0 speed is unknown, defaulting to 1000
[  280.684480][T11478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  280.689433][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.692459][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.710737][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.713830][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.719257][T11478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  280.726208][T11478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  280.730526][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.733517][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.775697][ T3330] smbdirect: ib_dev[syz0] removed
[  281.063583][   T54] Bluetooth: hci2: command tx timeout
[  281.332891][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.416171][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.853686][T12260] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.856876][T12260] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.860017][T12260] bridge_slave_0: entered allmulticast mode
[  281.866977][T12260] bridge_slave_0: entered promiscuous mode
[  281.896602][T12260] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.899820][T12260] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.904519][T12260] bridge_slave_1: entered allmulticast mode
[  281.911164][T12260] bridge_slave_1: entered promiscuous mode
[  282.010116][T12183] veth0_vlan: entered promiscuous mode
[  282.020024][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.049399][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.084484][T12260] team0: Port device team_slave_0 added
[  282.089678][T12260] team0: Port device team_slave_1 added
[  282.094289][T12183] veth1_vlan: entered promiscuous mode
[  282.144484][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.147108][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.158814][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.165542][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.168374][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.179678][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.242417][T12194] veth0_vlan: entered promiscuous mode
[  282.267417][   T12] hsr_slave_0: left promiscuous mode
[  282.270115][   T12] hsr_slave_1: left promiscuous mode
[  282.272732][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.276670][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.280270][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.282992][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.294873][   T12] veth1_macvtap: left promiscuous mode
[  282.296721][   T12] veth0_macvtap: left promiscuous mode
[  282.298598][   T12] veth1_vlan: left promiscuous mode
[  282.300115][   T12] veth0_vlan: left promiscuous mode
[  282.470140][   T12] team0 (unregistering): Port device team_slave_1 removed
[  282.477922][   T12] team0 (unregistering): Port device team_slave_0 removed
[  282.597903][T12260] hsr_slave_0: entered promiscuous mode
[  282.600376][T12260] hsr_slave_1: entered promiscuous mode
[  282.602702][T12260] debugfs: 'hsr0' already exists in 'hsr'
[  282.605481][T12260] Cannot create hsr debugfs directory
[  282.630713][T12194] veth1_vlan: entered promiscuous mode
[  282.663618][   T54] Bluetooth: hci1: command tx timeout
[  282.717668][T12183] veth0_macvtap: entered promiscuous mode
[  282.759558][T12183] veth1_macvtap: entered promiscuous mode
[  282.836674][T12194] veth0_macvtap: entered promiscuous mode
[  282.839436][   T54] Bluetooth: hci0: command tx timeout
[  282.894956][T12183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.902618][T12194] veth1_macvtap: entered promiscuous mode
[  282.927984][T12183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.969252][T12194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.985575][T12194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.097980][ T9308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.104157][ T9308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.144861][   T54] Bluetooth: hci2: command tx timeout
[  283.217735][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.217778][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.224763][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.232354][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.266586][ T3330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.270376][ T3330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.325072][T12260] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.362371][T12260] 8021q: adding VLAN 0 to HW filter on device team0
[  283.375337][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.377874][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.400659][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.402840][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.645377][T12324] netlink: 'syz.3.726': attribute type 4 has an invalid length.
[  283.648517][T12324] netlink: 112 bytes leftover after parsing attributes in process `syz.3.726'.
[  284.433007][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.743621][   T54] Bluetooth: hci1: command tx timeout
[  284.765730][T12260] veth0_vlan: entered promiscuous mode
[  284.779672][T12260] veth1_vlan: entered promiscuous mode
[  284.868927][T12260] veth0_macvtap: entered promiscuous mode
[  284.886984][T12260] veth1_macvtap: entered promiscuous mode
[  284.909821][T12260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.922731][T12260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.923469][   T54] Bluetooth: hci0: command tx timeout
[  285.234650][   T54] Bluetooth: hci2: command tx timeout
[  285.269055][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.282063][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.516625][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.522220][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.756400][T12379] netlink: 128 bytes leftover after parsing attributes in process `syz.0.736'.
[  285.781689][T12379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  286.028251][T12392] netlink: 'syz.5.738': attribute type 39 has an invalid length.
[  286.032997][T12392] veth1_macvtap: left promiscuous mode
[  286.229318][T12401] netlink: 'syz.5.738': attribute type 12 has an invalid length.
[  286.252482][T12401] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.738'.
[  287.233492][   T54] Bluetooth: hci0: command tx timeout
[  287.567093][T12417] netlink: 'syz.0.743': attribute type 39 has an invalid length.
[  287.577007][T12417] veth1_macvtap: left promiscuous mode
[  289.815943][   T54] Bluetooth: hci0: command tx timeout
[  291.319170][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.747'.
[  307.158109][T11478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.165865][T11478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.168562][T11478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.173227][T11478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.177299][T11478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.303437][T11478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.309639][T11478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.314532][T11478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.319831][T11478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.322536][T11478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.396423][T11478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.406774][T11478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.409787][T11478] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.412743][T11478] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.416074][T11478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.223510][   T54] Bluetooth: hci3: command tx timeout
[  309.383539][   T54] Bluetooth: hci4: command tx timeout
[  309.463801][   T54] Bluetooth: hci5: command tx timeout
[  311.303413][   T54] Bluetooth: hci3: command tx timeout
[  311.463509][   T54] Bluetooth: hci4: command tx timeout
[  311.545142][   T54] Bluetooth: hci5: command tx timeout
[  313.383475][   T54] Bluetooth: hci3: command tx timeout
[  313.543419][   T54] Bluetooth: hci4: command tx timeout
[  313.623476][   T54] Bluetooth: hci5: command tx timeout
[  315.463473][   T54] Bluetooth: hci3: command tx timeout
[  315.623514][   T54] Bluetooth: hci4: command tx timeout
[  315.703451][   T54] Bluetooth: hci5: command tx timeout
[  367.543840][T11478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  367.574535][T11478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  367.593343][T11478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.613770][T11478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.618922][T11478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.236723][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.269809][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.293361][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.313708][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.318876][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  370.514032][T11478] Bluetooth: hci6: command tx timeout
[  370.700394][T11478] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  370.903409][T11478] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  371.024004][T11478] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  371.193300][T11478] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  371.233306][T11478] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  371.384191][T11478] Bluetooth: hci7: command tx timeout
[  372.623582][T11478] Bluetooth: hci6: command tx timeout
[  373.793382][T11478] Bluetooth: hci8: command tx timeout
[  373.796091][T11478] Bluetooth: hci7: command tx timeout
[  374.726723][   T54] Bluetooth: hci6: command tx timeout
[  376.400843][T11478] Bluetooth: hci7: command tx timeout
[  376.402605][T11478] Bluetooth: hci8: command tx timeout
[  376.813611][   T54] Bluetooth: hci6: command tx timeout
[  378.424135][   T54] Bluetooth: hci8: command tx timeout
[  378.426424][T11478] Bluetooth: hci7: command tx timeout
[  380.503467][   T54] Bluetooth: hci8: command tx timeout
[  396.333153][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  396.335233][    C0] rcu: 	0-....: (10496 ticks this GP) idle=dc34/1/0x4000000000000000 softirq=64358/64359 fqs=3842
[  396.339248][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  396.341091][    C0] rcu: 	 number:  1195694          0            0
[  396.342922][    C0] rcu: 	cputime:     7416      44784           39   ==> 52210(ms)
[  396.345174][    C0] rcu: 	(t=10502 jiffies g=59973 q=4854 ncpus=2)
[  396.347296][    C0] CPU: 0 UID: 0 PID: 12414 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(full) 
[  396.347308][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.347315][    C0] RIP: 0010:queue_work_on+0x0/0x1d0
[  396.347332][    C0] Code: e8 05 be a3 00 48 8b 03 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 d3 49
[  396.347340][    C0] RSP: 0018:ffffc90000007590 EFLAGS: 00000296
[  396.347348][    C0] RAX: 1ffffffff1c4c1df RBX: ffff888117654000 RCX: 0000000000000300
[  396.347354][    C0] RDX: ffff888114930678 RSI: ffff8881000ac000 RDI: 0000000000000008
[  396.347359][    C0] RBP: dffffc0000000000 R08: ffffffff903096f7 R09: 1ffffffff20612de
[  396.347365][    C0] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffff888114930f68
[  396.347370][    C0] R13: ffff8881165756d5 R14: 00000000ffffffff R15: ffff88811b869ac8
[  396.347375][    C0] FS:  00007fd4c0d886c0(0000) GS:ffff88818dc93000(0000) knlGS:0000000000000000
[  396.347382][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.347386][    C0] CR2: 00007fea187ea4c0 CR3: 000000019c348000 CR4: 00000000000006f0
[  396.347411][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  396.347416][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  396.347421][    C0] Call Trace:
[  396.347426][    C0]  <IRQ>
[  396.347429][    C0]  __ieee80211_queue_skb_to_iface+0xf1/0x280
[  396.347450][    C0]  ieee80211_rx_h_mgmt+0x490/0x630
[  396.347461][    C0]  ? ieee80211_rx_h_ext+0x153/0x1f0
[  396.347472][    C0]  ieee80211_rx_handlers+0x6ffe/0xc8e0
[  396.347495][    C0]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  396.347507][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  396.347517][    C0]  ? irqentry_exit+0x218/0x730
[  396.347535][    C0]  ieee80211_prepare_and_rx_handle+0x2c27/0x7460
[  396.347554][    C0]  ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10
[  396.347561][    C0]  ? irqentry_exit+0x218/0x730
[  396.347575][    C0]  ? ieee80211_rx_for_interface+0x545/0x630
[  396.347585][    C0]  ieee80211_rx_list+0x2b59/0x3730
[  396.347596][    C0]  ? perf_trace_preemptirq_template+0x26f/0x350
[  396.347610][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  396.347621][    C0]  ? __pfx_clockevents_program_event+0x10/0x10
[  396.347635][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  396.347657][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  396.347668][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  396.347715][    C0]  ? lock_acquire+0x221/0x350
[  396.347729][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  396.347739][    C0]  ieee80211_rx_napi+0x1b1/0x3e0
[  396.347751][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  396.347766][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  396.347779][    C0]  tasklet_action_common+0x2da/0x4b0
[  396.347793][    C0]  handle_softirqs+0x22a/0x840
[  396.347802][    C0]  ? __irq_exit_rcu+0xca/0x220
[  396.347813][    C0]  __irq_exit_rcu+0xca/0x220
[  396.347821][    C0]  irq_exit_rcu+0x9/0x30
[  396.347828][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  396.347837][    C0]  </IRQ>
[  396.347839][    C0]  <TASK>
[  396.347843][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  396.347852][    C0] RIP: 0010:__schedule+0x180d/0x5680
[  396.347862][    C0] Code: 36 e0 45 4a c7 04 30 00 00 00 00 4a c7 44 30 08 00 00 00 00 65 48 8b 05 f1 2b 90 07 48 3b 84 24 c0 01 00 00 0f 85 98 07 00 00 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 03 02 00 cc 49 8d
[  396.347868][    C0] RSP: 0018:ffffc9000356f760 EFLAGS: 00000246
[  396.347874][    C0] RAX: 07b23575ea381100 RBX: ffff88812103ae98 RCX: 0000000080000002
[  396.347880][    C0] RDX: 0000000000000000 RSI: ffffffff8c2883c0 RDI: ffffffff8c288380
[  396.347885][    C0] RBP: ffffc9000356f980 R08: ffffffff903096f7 R09: 1ffffffff20612de
[  396.347890][    C0] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffff888102af1d80
[  396.347896][    C0] R13: ffff88810d903b00 R14: dffffc0000000000 R15: 1ffff1102420773c
[  396.347910][    C0]  ? perf_trace_preemptirq_template+0x26f/0x350
[  396.347922][    C0]  ? irqentry_exit+0x218/0x730
[  396.347937][    C0]  ? irqentry_exit+0x218/0x730
[  396.347945][    C0]  ? irqentry_exit+0x218/0x730
[  396.347953][    C0]  ? trace_irq_disable+0x3b/0x140
[  396.347963][    C0]  ? __pfx___schedule+0x10/0x10
[  396.347978][    C0]  preempt_schedule_irq+0x4d/0xa0
[  396.347986][    C0]  irqentry_exit+0x14f/0x730
[  396.347994][    C0]  ? trace_irq_disable+0x3b/0x140
[  396.348006][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  396.348014][    C0] RIP: 0010:exit_signals+0x19c/0x7a0
[  396.348022][    C0] Code: 4a fd 1e 0a eb 05 e8 03 0d 3b 00 4d 8d b4 24 d8 05 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 7a 05 00 00 41 8b 2e <bf> ff ff ff ff 89 ee e8 18 11 3b 00 85 ed 78 53 4d 8d b4 24 e8 06
[  396.348028][    C0] RSP: 0018:ffffc9000356fab0 EFLAGS: 00000246
[  396.348034][    C0] RAX: 0000000000000000 RBX: ffff88810d903b00 RCX: ffff88810d903b00
[  396.348039][    C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  396.348043][    C0] RBP: 00000000ffffffff R08: ffffffff81871878 R09: ffffffff8e99c6d0
[  396.348048][    C0] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffff88810d903b00
[  396.348053][    C0] R13: dffffc0000000000 R14: ffff88810d9040d8 R15: ffff88816d0bd32c
[  396.348061][    C0]  ? do_exit+0x3a8/0x22c0
[  396.348077][    C0]  do_exit+0x3a8/0x22c0
[  396.348086][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  396.348094][    C0]  ? trace_irq_disable+0x3b/0x140
[  396.348106][    C0]  ? __pfx_do_exit+0x10/0x10
[  396.348122][    C0]  do_group_exit+0x21b/0x2d0
[  396.348134][    C0]  get_signal+0x1284/0x1330
[  396.348150][    C0]  arch_do_signal_or_restart+0xbc/0x830
[  396.348163][    C0]  ? irqentry_exit+0x218/0x730
[  396.348171][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  396.348188][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.348196][    C0]  exit_to_user_mode_loop+0x86/0x480
[  396.348205][    C0]  ? rcu_is_watching+0x15/0xb0
[  396.348215][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.348222][    C0]  do_syscall_64+0x33e/0xf80
[  396.348231][    C0]  ? trace_irq_disable+0x3b/0x140
[  396.348244][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.348251][    C0] RIP: 0033:0x7fd4bff9cdd9
[  396.348262][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.348268][    C0] RSP: 002b:00007fd4c0d88028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  396.348275][    C0] RAX: 0000000000000005 RBX: 00007fd4c0215fa0 RCX: 00007fd4bff9cdd9
[  396.348280][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000003c0
[  396.348285][    C0] RBP: 00007fd4c0032d69 R08: 0000000000000000 R09: 0000000000000000
[  396.348290][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  396.348294][    C0] R13: 00007fd4c0216038 R14: 00007fd4c0215fa0 R15: 00007ffe91bf0338
[  396.348307][    C0]  </TASK>
[  397.585128][    C0] sched: DL replenish lagged too much
[  401.315129][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  401.317589][   T54] Bluetooth: hci1: command 0x0406 tx timeout
