last executing test programs:

10m44.503257273s ago: executing program 32 (id=407):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c018"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a000000050001000200000077732eeae215e64e44ac63e5f8b6f92d9419a97e053ce773a028dc622813b2f1e80d82db215968f5d9e0b66d212f929d5b9db7fc802c4008f4e0af5270eb1a380056bb7f589c2fc5328558993ed7a0e15431c5afd24e773e8d7d207113c221f64e80dd757deebe6e5a32e16ed9ddf8fa0e1d8b2770a1ab3c0f506ef99495a4f30811ef8f18d9ced640b7e041fbf4f0d661f25d80eab6e7f5646a15e5d4fe6372aa2c216cb38c0ef15b9ff406ec"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)

10m4.743468758s ago: executing program 33 (id=582):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"})

9m36.336606035s ago: executing program 34 (id=1053):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x5, 0x0, 0x0)

9m36.237861361s ago: executing program 35 (id=1055):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d000a008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

8m45.279244154s ago: executing program 36 (id=1601):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x13}, 0x4008804)

8m44.813841889s ago: executing program 37 (id=1604):
r0 = socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x2, 0x3, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94)
close(0x3)
r1 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

7m8.858490648s ago: executing program 38 (id=2677):
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))

6m2.202363503s ago: executing program 9 (id=3991):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

6m1.882582754s ago: executing program 9 (id=3995):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6m1.781681148s ago: executing program 9 (id=3998):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)

6m1.781387112s ago: executing program 9 (id=3999):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0)
close(r0)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

6m1.448389813s ago: executing program 9 (id=4003):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

6m1.332735823s ago: executing program 9 (id=4005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

5m56.003124088s ago: executing program 6 (id=4070):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = getpid()
r2 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x7ffffffff000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r5, 0x0, 0x4800)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2107a3ccde727f78, 0x0, 0x0, 0x8, 0x43fe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000000000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x3e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

5m55.734806471s ago: executing program 6 (id=4074):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x4008, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="2c6d6f64653d30303030303030303030303030303030303030303030352c7569643d6213"])

5m55.643292165s ago: executing program 6 (id=4075):
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r0 = syz_clone(0x0, 0x0, 0x1c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)

5m55.511627231s ago: executing program 6 (id=4077):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
fstat(r0, &(0x7f0000000500))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x2}, 0xc028, 0xc8, 0x0, 0x7, 0x4, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfda8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2)
write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa"], 0xfdef)

5m55.412084028s ago: executing program 6 (id=4079):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x28)

5m55.153289238s ago: executing program 6 (id=4080):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x420, 0x3f3, 0x400, 0x70bd2a, 0x25dfdbff, {0x6, 0x1, 0x22, [0x3, 0x9, 0x7fffffff, 0x7, 0x8, 0x9, 0x400, 0x5, 0x2, 0x5, 0x5, 0x1000, 0x8, 0x9, 0x4, 0x0, 0x10, 0x1, 0x1d2, 0xfff, 0x4, 0x7, 0x5, 0x6, 0x2, 0x81, 0x0, 0xffff, 0x8000, 0x9, 0x6, 0xb79, 0xffffff22, 0x3, 0x0, 0xad, 0x7fffffff, 0x6, 0x6, 0x80, 0x0, 0xffffffff, 0x4, 0xfffffff9, 0xf, 0x3, 0x5, 0x2, 0x80, 0x8, 0x100, 0x2, 0x3af2, 0x1, 0x9, 0x3, 0xfffffffc, 0x1fffe00, 0x4, 0x5d9aa796, 0x2, 0x400, 0xff], [0x8fb3765f, 0x3, 0x1, 0x9, 0x9, 0x1, 0x80, 0x800, 0xe3d, 0xb36, 0x3, 0x2, 0x56, 0x6, 0x6, 0x5, 0x200, 0x9, 0x3, 0xdfa, 0x2, 0x5d, 0x0, 0x58, 0x6, 0x9, 0x1, 0x4e, 0x200, 0x5, 0x1, 0x7fffffff, 0x7ff, 0x7, 0x8, 0x3, 0x7, 0x101, 0x9e7, 0x10000, 0x1400, 0x2, 0x3, 0x7, 0xfffffffd, 0x1, 0xfffffff9, 0x42, 0x9, 0x31b, 0x0, 0x6, 0x4, 0x4, 0x8, 0x2, 0x8000, 0x0, 0x7, 0x7, 0x0, 0xae7, 0x0, 0x8], [0x0, 0x2, 0xa50f, 0x1, 0x2, 0x8, 0x6, 0x8001, 0x3ff, 0x6, 0x6, 0x7ff, 0x2, 0x8, 0x9, 0x8, 0xc, 0x5c6e, 0x80000001, 0x101, 0x4, 0x7, 0x3, 0x6, 0x9, 0x40, 0x7, 0x7, 0x4, 0x8, 0x52e5, 0x8245, 0x9, 0x3, 0x0, 0x100, 0x4, 0xfffffff7, 0x1, 0x4, 0x1, 0x7, 0x7, 0x7, 0x400, 0x2, 0x4, 0x6, 0x7, 0x8, 0x4, 0x5, 0x6, 0x3, 0xc, 0x7, 0x4d, 0x3, 0x4, 0x34, 0x8000000, 0xa, 0x3, 0x2], [0x6, 0x0, 0x800, 0x4, 0x3, 0xffffffff, 0x731f, 0x4, 0x6, 0x2, 0x205, 0x3, 0x5, 0x9, 0x5, 0x7, 0x100, 0xf, 0x0, 0x94, 0x9, 0x6, 0x100b, 0xd64c, 0x7, 0x6, 0x3, 0xfffffffb, 0x0, 0x7ff, 0x8, 0x1, 0x1ff, 0x1e24, 0xe773, 0xfffffffa, 0x0, 0x2, 0xa, 0x7, 0x9, 0x7, 0x9, 0xfffffffb, 0x0, 0x7, 0xc5, 0x1a55b000, 0xb, 0x2, 0x5, 0x1, 0x10, 0xd, 0x2c, 0xa, 0x10000, 0xe035, 0xad2, 0x6, 0x5c, 0xf4, 0x9, 0x4]}}, 0x420}, 0x1, 0x0, 0x0, 0x24008800}, 0x80)

5m55.051212982s ago: executing program 39 (id=4080):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x420, 0x3f3, 0x400, 0x70bd2a, 0x25dfdbff, {0x6, 0x1, 0x22, [0x3, 0x9, 0x7fffffff, 0x7, 0x8, 0x9, 0x400, 0x5, 0x2, 0x5, 0x5, 0x1000, 0x8, 0x9, 0x4, 0x0, 0x10, 0x1, 0x1d2, 0xfff, 0x4, 0x7, 0x5, 0x6, 0x2, 0x81, 0x0, 0xffff, 0x8000, 0x9, 0x6, 0xb79, 0xffffff22, 0x3, 0x0, 0xad, 0x7fffffff, 0x6, 0x6, 0x80, 0x0, 0xffffffff, 0x4, 0xfffffff9, 0xf, 0x3, 0x5, 0x2, 0x80, 0x8, 0x100, 0x2, 0x3af2, 0x1, 0x9, 0x3, 0xfffffffc, 0x1fffe00, 0x4, 0x5d9aa796, 0x2, 0x400, 0xff], [0x8fb3765f, 0x3, 0x1, 0x9, 0x9, 0x1, 0x80, 0x800, 0xe3d, 0xb36, 0x3, 0x2, 0x56, 0x6, 0x6, 0x5, 0x200, 0x9, 0x3, 0xdfa, 0x2, 0x5d, 0x0, 0x58, 0x6, 0x9, 0x1, 0x4e, 0x200, 0x5, 0x1, 0x7fffffff, 0x7ff, 0x7, 0x8, 0x3, 0x7, 0x101, 0x9e7, 0x10000, 0x1400, 0x2, 0x3, 0x7, 0xfffffffd, 0x1, 0xfffffff9, 0x42, 0x9, 0x31b, 0x0, 0x6, 0x4, 0x4, 0x8, 0x2, 0x8000, 0x0, 0x7, 0x7, 0x0, 0xae7, 0x0, 0x8], [0x0, 0x2, 0xa50f, 0x1, 0x2, 0x8, 0x6, 0x8001, 0x3ff, 0x6, 0x6, 0x7ff, 0x2, 0x8, 0x9, 0x8, 0xc, 0x5c6e, 0x80000001, 0x101, 0x4, 0x7, 0x3, 0x6, 0x9, 0x40, 0x7, 0x7, 0x4, 0x8, 0x52e5, 0x8245, 0x9, 0x3, 0x0, 0x100, 0x4, 0xfffffff7, 0x1, 0x4, 0x1, 0x7, 0x7, 0x7, 0x400, 0x2, 0x4, 0x6, 0x7, 0x8, 0x4, 0x5, 0x6, 0x3, 0xc, 0x7, 0x4d, 0x3, 0x4, 0x34, 0x8000000, 0xa, 0x3, 0x2], [0x6, 0x0, 0x800, 0x4, 0x3, 0xffffffff, 0x731f, 0x4, 0x6, 0x2, 0x205, 0x3, 0x5, 0x9, 0x5, 0x7, 0x100, 0xf, 0x0, 0x94, 0x9, 0x6, 0x100b, 0xd64c, 0x7, 0x6, 0x3, 0xfffffffb, 0x0, 0x7ff, 0x8, 0x1, 0x1ff, 0x1e24, 0xe773, 0xfffffffa, 0x0, 0x2, 0xa, 0x7, 0x9, 0x7, 0x9, 0xfffffffb, 0x0, 0x7, 0xc5, 0x1a55b000, 0xb, 0x2, 0x5, 0x1, 0x10, 0xd, 0x2c, 0xa, 0x10000, 0xe035, 0xad2, 0x6, 0x5c, 0xf4, 0x9, 0x4]}}, 0x420}, 0x1, 0x0, 0x0, 0x24008800}, 0x80)

5m46.286046778s ago: executing program 40 (id=4005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

4m0.410655306s ago: executing program 3 (id=6110):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1f3}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c03e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fd6a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x2, &(0x7f0000000000)=r5, 0x8)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x10002, 0x182, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8002}, 0x0, 0x2e, 0xfffffbfc, 0x2, 0x4, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES8=r5, @ANYBLOB="a29e"], 0x20)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0xc0189436, &(0x7f0000000000)={'ip6tnl0\x00', @local})
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1d, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "76ec617613e9a74dcba4d16825e915b1"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x10000080)

4m0.243228698s ago: executing program 3 (id=6116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x6, 0x2, 0x4, 0x6}, 0xffffffff, 0x0, 0x8, 0x6, 0x2, 0x15, 0x20, 0x18, 0x4, 0x4, {0x1, 0xfffffffe, 0x6, 0x7, 0x571d, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004011}, 0x0)

4m0.160105538s ago: executing program 3 (id=6117):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="18000000011401d8"], 0x18}, 0x1, 0x0, 0x0, 0xd8}, 0x40010)

4m0.110916198s ago: executing program 3 (id=6118):
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600731227bd700000000000047c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40051}, 0x20048010)

4m0.11063504s ago: executing program 3 (id=6119):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)

4m0.051547118s ago: executing program 3 (id=6120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000580)="629377324c4e889db3651c28e0367542086307f733249e58959b4db73ebc66686c306f683416c9df783600bd9b75d0de20d84916ae1d50585acf1762b1c3f77e36f096d919d102328881a827a0afd0ffe7167de9f8beb2e26cf5d8d7d0799c2e3a9e8993d082352f1277343c426e53c4aa95dd0b13272947830e441a6c01010b52242ab3fb4b63b67a71f8abcedaa8a0653af109ad669eb49c7cb38cb809be6bbb0fe1148a5b3b330b92161821c495e85943c7aa8da24cb23fbb1bf4d4d24aa889576ca1561bac1081e6a8394d0e5994e6caebb5900933983d2afc42ed0974a4584a7dd99a0049770486c19a50c0ef98", 0x0}, 0x8b)

3m45.049021729s ago: executing program 41 (id=6120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000580)="629377324c4e889db3651c28e0367542086307f733249e58959b4db73ebc66686c306f683416c9df783600bd9b75d0de20d84916ae1d50585acf1762b1c3f77e36f096d919d102328881a827a0afd0ffe7167de9f8beb2e26cf5d8d7d0799c2e3a9e8993d082352f1277343c426e53c4aa95dd0b13272947830e441a6c01010b52242ab3fb4b63b67a71f8abcedaa8a0653af109ad669eb49c7cb38cb809be6bbb0fe1148a5b3b330b92161821c495e85943c7aa8da24cb23fbb1bf4d4d24aa889576ca1561bac1081e6a8394d0e5994e6caebb5900933983d2afc42ed0974a4584a7dd99a0049770486c19a50c0ef98", 0x0}, 0x8b)

3m3.687038072s ago: executing program 7 (id=6678):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b63707520"], 0x5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$isdn(0x22, 0x3, 0x22)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x40000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f220000035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000003780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x12b4}, 0x1, 0x0, 0x0, 0x4008005}, 0xc810)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000038c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000840}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff)

3m3.530556648s ago: executing program 7 (id=6682):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b282f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4de517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1bdb58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000041dcc4cabfc4a21604f0b80da4ec5500000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae6e5c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace201020875c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2f95b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f65918192fb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435477faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b8085b0ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e07f9581b40470a7c2fa89cc3ef72a19760b89ded2e546f4966b51c2985101f2248f60ad8119e4db4ade09ebd23fdb750ffccba20bc0e0f52c3316767bb9f67f7e714df5e462bcfc35f3a79147f62f9227441cb3ffb35f4e4c69b04b1399efbeb4b682d6facea9fe1c456a1fb9173833107a38991abac8b0e616f11a2c3e265c484fbc6522e9894dc3b5989b7d585c56778c77c6595b7482dfa90bb818ebd3b0b352d3f48ab947a1240842d592fd9c2f13df205e8974919162421548357a8823bd322e6562fa3e7fb7c56ee00e246a98710b9a710103b3df69655b38dcc196156a16fcc14d8ddb4acf3506adc95c742919b83fd57c8b52956e93104cddd1226ca85a29542b9ea606c72d5339a7d30f23ffcd665b85e4c90d526b33ed854543c2a1d189cd6f319644146c5fe91639d50f2083d46fd82e41bc7d528f18be618904d683726e3eee93388cc78d0df624361bb80afc96b823971fcbbb859d4c2de31f03f884ea774e4abe011389557b2429c85cf795e0a82c94ffc11616d7c8b6939eed3f0e8df5dcc75984430b2a497d78824e539e8f7944b459ae45e7ce803495686984aa91745b8cfb1f80c07c194c4a4327e02cea5fd2ef6041cf053ee5f9829410d150"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff1}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x54, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c6ce6b18987f7c57ee0050081", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m3.450721631s ago: executing program 7 (id=6683):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
recvmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x103)

3m3.380763887s ago: executing program 7 (id=6684):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3m3.380130503s ago: executing program 7 (id=6685):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x7ffc, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0x0, 0x0}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x44000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
close(r0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x6, 0x7ff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000a00), 0x10, 0x6}, 0x94)
recvmsg$can_j1939(r4, &(0x7f0000000380)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000440)=0x1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/194, 0xc2}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m3.229775443s ago: executing program 7 (id=6689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000da000000000000004ece00009500000000000000039721f4d9a432bcbe8b73f040be697cfe359e6ac37a28da4180733f2065f382ae19885d799efdd51a4eca9132c2fb7682cebefc26ea8b981521e594c605897b2654d591efe0383063268edd1d4de2227dd4c3139fa5ce7e667d7c23b6a8c985ea17c23d09e483aaff69d3fe2b8d52ab81f017e3c98010ae3e19453841e60fce723d9596a52b88c12ffeb3589ff90c42574b6a3f9a21071f0048421d81cab4f1297ef9918a47f798f268dee29a0822b60f61df2eb7146ebff36d43382dfaff313a03b1d7d35b7059ed2e644da198d92aa496690465e1869c6ee0c3fdccca7327558eec23443db1cbee223ee16b3d0a9d83d9c301b893a4011ae83969ba0f4c9d77fccae7397fa21ae1471a84cc240c604b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x2000)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x18, &(0x7f0000000d80)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xc3}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @ldst={0x1, 0x0, 0x2, 0x1, 0xa, 0xfffffffffffffff6, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m48.191670411s ago: executing program 42 (id=6689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x2000)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x18, &(0x7f0000000d80)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xc3}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @ldst={0x1, 0x0, 0x2, 0x1, 0xa, 0xfffffffffffffff6, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m1.719358994s ago: executing program 1 (id=7619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94)

2m1.67002033s ago: executing program 1 (id=7621):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000e80)='syzkaller\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000006c0)={0x0, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000680), 0x8}, 0xc0, 0x3, 0x7, 0x0, 0xffffffffffffffd6, 0x1, 0x9, 0x0, 0x800, 0x0, 0xf4b})
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "72a2e87af0cdd866aa17c3baabe033f831"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x90)
recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x80)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x7}, 0x142)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r3}, 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="1800dcfb1334c49f7d0000ff0700000000000508", @ANYRES32=r1, @ANYBLOB="0000000000000000b717000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c100000018520000070000000000000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x5a, 0xaf, &(0x7f00000005c0)=""/175, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xd, 0x40, 0x2dc}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='block_rq_requeue\x00', r8, 0x0, 0x4}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'wg2\x00'})
socket$igmp(0x2, 0x3, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

2m1.357944477s ago: executing program 1 (id=7629):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x906c, 0x4, @perf_config_ext={0x6, 0x1}, 0x0, 0x6, 0x0, 0x4, 0xbac010d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x8, 0xb4, &(0x7f00000003c0)=""/180, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

2m1.00972688s ago: executing program 1 (id=7635):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x140, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)

2m1.009493548s ago: executing program 1 (id=7636):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2002000, 0x0)

2m0.960111469s ago: executing program 1 (id=7638):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000002c0)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r3, 0x58, &(0x7f00000000c0)}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_freezer_state(r1, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)

1m45.596876776s ago: executing program 43 (id=7638):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000002c0)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r3, 0x58, &(0x7f00000000c0)}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_freezer_state(r1, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)

1m29.069589144s ago: executing program 4 (id=7963):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x14\x96)]\xa3\xcdB!\xf7\xe5\fc\xe9\x00\x9c\x00\x00\x00\x00\x00\x00')
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24000800)

1m28.987295688s ago: executing program 4 (id=7965):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20)

1m28.78954053s ago: executing program 4 (id=7966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0xfffffffffffffef7, 0x2, @multicast2}]}]}, 0x78}}, 0x0)

1m28.789004192s ago: executing program 4 (id=7967):
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(0x3)

1m28.303470835s ago: executing program 4 (id=7968):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21e802, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x940860, 0x0)

1m26.22683176s ago: executing program 4 (id=7986):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

1m18.038030529s ago: executing program 2 (id=8127):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
close(0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000058000000060a0104000000000000000001000000300004802c0001800b000100736f636b657400001c00028008000240000000010500000000000003080001400000000208000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m17.967377541s ago: executing program 2 (id=8129):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)

1m17.777221639s ago: executing program 2 (id=8132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r0}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4)

1m17.648591214s ago: executing program 2 (id=8135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)

1m17.555518822s ago: executing program 2 (id=8137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe25, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xabf, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7ea, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x5, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x1ff, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x3, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1fb, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x9}, {0x5, 0xc, 0x3, 0x80, 0x5, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0xb, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x800, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x1, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)

1m17.366545704s ago: executing program 2 (id=8138):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x10}, 0x28)

1m17.31492229s ago: executing program 44 (id=8138):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x10}, 0x28)

1m11.241101138s ago: executing program 45 (id=7986):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

27.068674011s ago: executing program 8 (id=8795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0)

27.068410486s ago: executing program 8 (id=8796):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

26.80021713s ago: executing program 8 (id=8797):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

26.799892653s ago: executing program 8 (id=8798):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={{0x14, 0x3e8, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

26.125910036s ago: executing program 8 (id=8802):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)

25.856538106s ago: executing program 8 (id=8809):
openat$tun(0xffffffffffffff9c, 0x0, 0x101c01, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

24.694958625s ago: executing program 0 (id=8816):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x3, {{{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x33}, @in6=@remote, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0xffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

24.694114172s ago: executing program 0 (id=8819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdfbc04c8e600080001800400dd8008000380040001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

24.619028863s ago: executing program 5 (id=8820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000)

24.618706492s ago: executing program 5 (id=8821):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0x4, [@private, @private=0xa010101]}]}}}], 0x20}, 0x8000)

24.618603272s ago: executing program 5 (id=8822):
r0 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80184947, 0x0)

24.61851251s ago: executing program 0 (id=8823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x44, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}]}]}, 0x44}}, 0x0)

24.580076167s ago: executing program 5 (id=8824):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105"], 0x0, 0x53}, 0x28)
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

24.464275795s ago: executing program 5 (id=8825):
getpid()
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$AUDIT_SET(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800)
recvmsg(r1, 0x0, 0x10020)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x29, 0x48, &(0x7f0000000100)=r3, 0x120)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

24.308731259s ago: executing program 5 (id=8826):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c000000000000000000000202000000000000000400000d000000000600"/78], &(0x7f0000000640)=""/204, 0x5c, 0xcc, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t(|')

24.000588062s ago: executing program 0 (id=8827):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

23.870532976s ago: executing program 0 (id=8828):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x7fff, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x29, 0x4}], 0x20}, 0x0)

23.87007815s ago: executing program 0 (id=8829):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100044}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.476993907s ago: executing program 46 (id=8809):
openat$tun(0xffffffffffffff9c, 0x0, 0x101c01, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

6.476941787s ago: executing program 47 (id=8829):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100044}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 48 (id=8826):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c000000000000000000000202000000000000000400000d000000000600"/78], &(0x7f0000000640)=""/204, 0x5c, 0xcc, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t(|')

kernel console output (not intermixed with test programs):

 485.511425][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.522401][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.529568][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.595309][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.597850][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.638571][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.641378][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.729633][T19414] syzkaller0: entered promiscuous mode
[  485.731354][T19414] syzkaller0: entered allmulticast mode
[  485.865986][T19421] netlink: 'syz.2.5508': attribute type 10 has an invalid length.
[  485.890759][   T57] Bluetooth: hci1: command tx timeout
[  487.555242][T19444] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5514'.
[  488.048366][   T57] Bluetooth: hci1: command tx timeout
[  488.722864][T19478] nbd: illegal input index 895345970
[  489.184113][T19493] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  489.840322][T19518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5546'.
[  489.900366][T19519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.134399][   T57] Bluetooth: hci1: command tx timeout
[  490.497135][T19538] netlink: 'syz.2.5552': attribute type 10 has an invalid length.
[  490.501386][T19538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5552'.
[  490.506517][T19538] ipvlan1: entered promiscuous mode
[  490.508212][T19538] ipvlan1: entered allmulticast mode
[  490.509875][T19538] veth0_vlan: entered allmulticast mode
[  490.520866][T19538] bridge0: port 3(ipvlan1) entered blocking state
[  490.523574][T19538] bridge0: port 3(ipvlan1) entered disabled state
[  490.531742][T19538] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  490.625216][T19549] netlink: 'syz.3.5558': attribute type 1 has an invalid length.
[  490.628100][T19549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.717901][T19551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5560'.
[  490.865497][T19568] netlink: 'syz.2.5568': attribute type 6 has an invalid length.
[  490.867909][T19568] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5568'.
[  491.149725][T19595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5582'.
[  491.247950][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5585'.
[  491.302618][T19608] netlink: 'syz.2.5587': attribute type 9 has an invalid length.
[  491.333714][T19608] netlink: 'syz.2.5587': attribute type 11 has an invalid length.
[  491.339261][T19608] netlink: 'syz.2.5587': attribute type 12 has an invalid length.
[  491.343102][T19608] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5587'.
[  491.346249][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5587'.
[  491.352531][   T57] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  491.495507][T19626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5596'.
[  491.817485][T19647] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.5606'.
[  491.926953][T19657] netlink: 'syz.2.5611': attribute type 3 has an invalid length.
[  491.935542][T19657] netlink: 'syz.2.5611': attribute type 1 has an invalid length.
[  492.038858][T19668] openvswitch: netlink: Message has 4 unknown bytes.
[  492.305912][T19685] netlink: 'syz.7.5624': attribute type 9 has an invalid length.
[  492.308579][T19685] netlink: 'syz.7.5624': attribute type 11 has an invalid length.
[  493.409365][ T5856] Bluetooth: hci2: command 0x2016 tx timeout
[  493.618664][T19748] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  493.621661][T19748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.195959][T19790] __nla_validate_parse: 4 callbacks suppressed
[  495.195971][T19790] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5671'.
[  495.200983][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5671'.
[  495.585559][   T57] Bluetooth: hci2: command 0x2016 tx timeout
[  495.939493][T19799] validate_nla: 5 callbacks suppressed
[  495.939504][T19799] netlink: 'syz.2.5675': attribute type 37 has an invalid length.
[  496.110399][T19817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.134347][T19820] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5685'.
[  496.401814][T19837] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5692'.
[  496.516822][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.575114][T19843] netlink: 'syz.3.5693': attribute type 39 has an invalid length.
[  496.593911][T19843] veth0_macvtap: left promiscuous mode
[  496.941876][T19851] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5698'.
[  496.977448][T19851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  497.134344][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5702'.
[  497.238865][T19871] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5707'.
[  498.456198][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5726'.
[  498.566223][T19918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.986487][T19920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5730'.
[  498.990179][T19920] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5730'.
[  500.108639][T19973] netlink: 'syz.7.5753': attribute type 1 has an invalid length.
[  500.111881][T19973] netlink: 'syz.7.5753': attribute type 4 has an invalid length.
[  502.848755][T20009] netlink: 'syz.7.5770': attribute type 10 has an invalid length.
[  502.852164][T20009] bond0: (slave ): Releasing backup interface
[  502.857700][T20009] netdevsim netdevsim7 : entered promiscuous mode
[  502.860287][T20009] netdevsim netdevsim7 : entered allmulticast mode
[  502.863175][T20009] team0: Port device  added
[  503.000496][T20023] netlink: 'syz.3.5776': attribute type 10 has an invalid length.
[  505.307814][T20034] netlink: 'syz.2.5781': attribute type 15 has an invalid length.
[  505.707706][T20053] __nla_validate_parse: 2 callbacks suppressed
[  505.707762][T20053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5790'.
[  505.830202][T20066] team0: left allmulticast mode
[  505.832024][T20066] C: left allmulticast mode
[  505.833908][T20066] team_slave_1: left allmulticast mode
[  505.835748][T20066] netdevsim netdevsim7 : left allmulticast mode
[  505.838189][T20066] bridge0: port 2(team0) entered disabled state
[  505.885078][T20066] bridge0: port 3(dummy0) entered disabled state
[  506.674976][T20066] bridge_slave_0: left allmulticast mode
[  506.676810][T20066] bridge_slave_0: left promiscuous mode
[  506.679687][T20066] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.710991][T20066] bond0: (slave bridge0): Releasing backup interface
[  506.766743][T20092] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5805'.
[  506.833843][   T57] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  506.951824][T20105] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5810'.
[  507.086313][T20112] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[  507.089383][T20112] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  507.144820][T20113] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5813'.
[  507.225666][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  507.227766][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  507.771179][T20136] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5823'.
[  507.783153][T20136] hsr_slave_0: left promiscuous mode
[  507.804840][T20136] hsr_slave_1: left promiscuous mode
[  508.957927][T20168] netlink: 'syz.2.5838': attribute type 10 has an invalid length.
[  508.961249][T20168] geneve0: entered promiscuous mode
[  508.967326][T20168] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  509.044661][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5836'.
[  509.161625][T20177] netlink: zone id is out of range
[  509.163499][T20177] netlink: zone id is out of range
[  509.174337][T20177] netlink: zone id is out of range
[  509.177596][T20177] netlink: zone id is out of range
[  509.182224][T20177] netlink: zone id is out of range
[  509.193744][T20177] netlink: zone id is out of range
[  509.404810][T20177] netlink: zone id is out of range
[  509.406826][T20177] netlink: zone id is out of range
[  509.408777][T20177] netlink: zone id is out of range
[  509.410483][T20177] netlink: zone id is out of range
[  509.548832][T20189] IPv6: NLM_F_CREATE should be specified when creating new route
[  509.798789][T20199] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5852'.
[  510.978136][T20240] netlink: 'syz.2.5869': attribute type 21 has an invalid length.
[  510.980755][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5869'.
[  511.032709][T20246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5872'.
[  511.038690][T20246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5872'.
[  511.046699][T20246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5872'.
[  511.312038][T20259] netlink: 'syz.2.5878': attribute type 3 has an invalid length.
[  511.317224][T20259] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.5878'.
[  511.602152][T20278] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  511.899148][T20303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5898'.
[  512.717484][T20338] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5914'.
[  512.863829][T20352] netlink: 'syz.7.5921': attribute type 1 has an invalid length.
[  512.909930][T20354] netlink: 'syz.2.5922': attribute type 23 has an invalid length.
[  513.058110][T20363] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5926'.
[  513.266111][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5932'.
[  513.842095][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5950'.
[  513.921399][T20426] netlink: 'syz.2.5955': attribute type 29 has an invalid length.
[  514.315090][T20452] net_ratelimit: 23 callbacks suppressed
[  514.315105][T20452] openvswitch: netlink: Geneve opt len 89 is not a multiple of 4.
[  514.359178][T20460] netlink: 'syz.2.5968': attribute type 5 has an invalid length.
[  514.480697][T20470] netlink: 'syz.7.5974': attribute type 1 has an invalid length.
[  514.587808][T20480] IPv6: NLM_F_CREATE should be specified when creating new route
[  514.687192][T20484] netlink: 'syz.2.5981': attribute type 1 has an invalid length.
[  514.690551][T20484] netlink: 'syz.2.5981': attribute type 3 has an invalid length.
[  514.747875][T20484] netlink: 'syz.2.5981': attribute type 39 has an invalid length.
[  516.798367][T20514] __nla_validate_parse: 9 callbacks suppressed
[  516.798381][T20514] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.5995'.
[  516.956721][T20524] openvswitch: netlink: nsh attr 60 is out of range max 3
[  516.958942][T20524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.083166][T20536] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  517.732782][T20572] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.6023'.
[  517.937566][T20587] nbd: must specify a size in bytes for the device
[  518.228876][T20621] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6045'.
[  518.571996][T20644] netlink: 'syz.3.6056': attribute type 21 has an invalid length.
[  518.810708][T20666] netlink: 'syz.3.6063': attribute type 1 has an invalid length.
[  519.102183][T20687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6066'.
[  519.255991][T20678] delete_channel: no stack
[  519.307854][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6069'.
[  519.496851][T20714] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6074'.
[  519.737473][T20734] netlink: 'syz.2.6084': attribute type 4 has an invalid length.
[  519.739945][T20734] netlink: 'syz.2.6084': attribute type 3 has an invalid length.
[  519.742672][T20734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6084'.
[  519.774681][T20738] netlink: 'syz.2.6086': attribute type 1 has an invalid length.
[  519.840588][T20744] netlink: 'syz.3.6089': attribute type 23 has an invalid length.
[  519.985636][T20751] syzkaller0: entered promiscuous mode
[  519.987373][T20751] syzkaller0: entered allmulticast mode
[  520.141446][T20769] netlink: 'syz.3.6102': attribute type 1 has an invalid length.
[  520.363185][T20775] team0: Port device team_slave_0 removed
[  520.373025][T20775] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  520.379172][T20783] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6105'.
[  520.475651][T20789] netlink: 'syz.3.6108': attribute type 10 has an invalid length.
[  520.478231][T20789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6108'.
[  520.527804][T20793] netlink: 'syz.3.6110': attribute type 21 has an invalid length.
[  520.530214][T20793] IPv6: NLM_F_CREATE should be specified when creating new route
[  520.664827][T20803] netlink: 'syz.7.6115': attribute type 13 has an invalid length.
[  520.682322][T20803] netlink: 'syz.7.6115': attribute type 1 has an invalid length.
[  520.691507][T20803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6115'.
[  522.015023][T20841] nbd: couldn't find device at index 17
[  522.348665][T20863] lo speed is unknown, defaulting to 1000
[  522.402731][T20865] netlink: 'syz.7.6144': attribute type 4 has an invalid length.
[  522.413862][T20865] __nla_validate_parse: 1 callbacks suppressed
[  522.416397][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6144'.
[  522.546037][T20870] netlink: 304 bytes leftover after parsing attributes in process `syz.7.6146'.
[  522.563161][T20870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  522.595787][T20863] ip6gretap0 speed is unknown, defaulting to 1000
[  523.205906][T20883] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.211022][T20883] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.271540][T20883] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.274721][T20883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.279175][T20883] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.282712][T20883] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.802460][T20883] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  524.510401][T20934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.826591][T20944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6170'.
[  524.924894][T20946] validate_nla: 3 callbacks suppressed
[  524.924952][T20946] netlink: 'syz.2.6171': attribute type 10 has an invalid length.
[  525.083687][T20946] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  525.087414][T20948] netlink: 400 bytes leftover after parsing attributes in process `syz.7.6172'.
[  525.215576][T20953] netlink: get zone limit has 4 unknown bytes
[  525.335883][   T57] Bluetooth: hci1: adv larger than maximum supported
[  525.335921][   T57] Bluetooth: hci1: Unknown advertising packet type: 0x73
[  525.384286][T20969] netlink: 'syz.7.6182': attribute type 21 has an invalid length.
[  525.389755][T20969] IPv6: NLM_F_CREATE should be specified when creating new route
[  525.392844][T20969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  525.395759][T20969] IPv6: NLM_F_CREATE should be set when creating new route
[  525.398534][T20969] IPv6: NLM_F_CREATE should be set when creating new route
[  525.401384][T20969] IPv6: NLM_F_CREATE should be set when creating new route
[  526.500193][T20992] : port 1(vlan0) entered disabled state
[  526.594469][T12984] ip6gretap0 speed is unknown, defaulting to 1000
[  526.596497][T12984] syz0: Port: 1 Link DOWN
[  526.607191][T20998] dvmrp1: tun_chr_ioctl cmd 1074025675
[  526.608895][T20998] dvmrp1: persist enabled
[  526.610404][T20999] dvmrp1: tun_chr_ioctl cmd 1074025675
[  526.612107][T20999] dvmrp1: persist disabled
[  526.613642][   T13] netdevsim netdevsim7 : unset [1, 0] type 2 family 0 port 6081 - 0
[  526.624141][   T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.630189][   T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.632890][   T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.665551][T21001] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6195'.
[  527.745291][T21034] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6209'.
[  528.464703][T21045] netlink: 'syz.7.6215': attribute type 6 has an invalid length.
[  528.468196][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6215'.
[  528.548463][T21054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.631231][T21058] tmpfs: Unknown parameter 'audit'
[  529.744363][T21098] netlink: 'syz.2.6239': attribute type 10 has an invalid length.
[  529.747022][T21098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6239'.
[  529.749807][T21098] dummy0: entered promiscuous mode
[  529.751588][T21098] dummy0: entered allmulticast mode
[  529.763332][T21098] bond0: (slave dummy0): Releasing backup interface
[  529.780480][T21098] bridge0: port 3(dummy0) entered blocking state
[  529.783993][T21098] bridge0: port 3(dummy0) entered disabled state
[  529.939472][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6240'.
[  530.151906][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6246'.
[  530.174306][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6246'.
[  530.417402][T21128] syzkaller0: entered promiscuous mode
[  530.419653][T21128] syzkaller0: entered allmulticast mode
[  530.553055][   T57] Bluetooth: hci1: Malformed LE Event: 0x0d
[  530.670372][T21142] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  530.716164][T21144] netlink: 'syz.2.6260': attribute type 13 has an invalid length.
[  531.557608][T21177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6275'.
[  531.670232][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6279'.
[  531.672928][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6279'.
[  532.659207][   T13] bond0: left allmulticast mode
[  532.660811][   T13] bond_slave_0: left allmulticast mode
[  532.662591][   T13] bond_slave_1: left allmulticast mode
[  532.664442][   T13] bond0: left promiscuous mode
[  532.665968][   T13] bond_slave_0: left promiscuous mode
[  532.667733][   T13] bond_slave_1: left promiscuous mode
[  532.669592][   T13] bridge0: port 3(bond0) entered disabled state
[  532.677530][   T13] bridge_slave_1: left allmulticast mode
[  532.683400][   T13] bridge_slave_1: left promiscuous mode
[  532.688930][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.693987][   T13] bridge_slave_0: left allmulticast mode
[  532.698988][   T13] bridge_slave_0: left promiscuous mode
[  532.702021][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.714625][   T13] veth0_to_team: left allmulticast mode
[  532.716593][   T13] veth0_to_team: left promiscuous mode
[  532.718407][   T13] : port 2(veth0_to_team) entered disabled state
[  532.722232][   T13] veth0_to_bridge: left allmulticast mode
[  532.724766][   T13] veth0_to_bridge: left promiscuous mode
[  532.727358][   T13] : port 1(veth0_to_bridge) entered disabled state
[  533.051414][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.056356][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.059947][   T13] bond0 (unregistering): Released all slaves
[  533.127627][T21201] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  533.151236][T21201] syzkaller0: entered promiscuous mode
[  533.153459][T21201] syzkaller0: entered allmulticast mode
[  533.597768][   T13] hsr_slave_0: left promiscuous mode
[  533.599899][   T13] hsr_slave_1: left promiscuous mode
[  533.601907][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.615510][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.627000][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.629860][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.657102][   T13] veth1_vlan: left promiscuous mode
[  533.751436][T21227] netlink: 'syz.2.6295': attribute type 1 has an invalid length.
[  534.215145][T21245] netlink: 'syz.2.6302': attribute type 10 has an invalid length.
[  534.305827][   T13] team0 (unregistering): Port device team_slave_1 removed
[  534.341919][   T13] team0 (unregistering): Port device team_slave_0 removed
[  534.345495][ T3727] smc: removing ib device !yz!
[  534.714493][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6294'.
[  534.725873][T21245] veth1_macvtap: left promiscuous mode
[  535.172554][T21265] xt_policy: too many policy elements
[  535.999005][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  536.002784][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  536.006752][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  536.010396][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  536.013505][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  536.044810][T21292] lo speed is unknown, defaulting to 1000
[  536.047482][T21292] ip6gretap0 speed is unknown, defaulting to 1000
[  536.108953][T21296] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6324'.
[  536.191728][T21292] chnl_net:caif_netlink_parms(): no params data found
[  536.257725][T21292] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.262273][T21292] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.269007][T21292] bridge_slave_0: entered allmulticast mode
[  536.271668][T21292] bridge_slave_0: entered promiscuous mode
[  536.275088][T21292] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.277550][T21292] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.279896][T21292] bridge_slave_1: entered allmulticast mode
[  536.282833][T21292] bridge_slave_1: entered promiscuous mode
[  536.337621][T21292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.342280][T21292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.367089][T21292] team0: Port device team_slave_0 added
[  536.377117][T21292] team0: Port device team_slave_1 added
[  536.418270][T21292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.421298][T21292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.432849][T21292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.443182][T21292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.451132][T21292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.462770][T21292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.539066][T21292] hsr_slave_0: entered promiscuous mode
[  536.546067][T21292] hsr_slave_1: entered promiscuous mode
[  536.549153][T21292] debugfs: 'hsr0' already exists in 'hsr'
[  536.592424][T21292] Cannot create hsr debugfs directory
[  536.945108][T21335] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  537.191070][T21346] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6340'.
[  537.198992][T21346] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6340'.
[  537.561221][T21292] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  537.574930][T21292] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  537.592891][T21292] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  537.615515][T21292] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  537.808587][T21292] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.848134][T21292] 8021q: adding VLAN 0 to HW filter on device team0
[  537.868343][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.871327][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.878157][T21392] tap0: tun_chr_ioctl cmd 1074025681
[  537.886048][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.889326][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.044367][   T57] Bluetooth: hci3: command tx timeout
[  538.159874][T21292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.491281][T21292] veth0_vlan: entered promiscuous mode
[  538.503645][T21292] veth1_vlan: entered promiscuous mode
[  538.539099][T21292] veth0_macvtap: entered promiscuous mode
[  538.549941][T21292] veth1_macvtap: entered promiscuous mode
[  538.574618][T21292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.590405][T21292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.607640][ T5882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.617284][ T5882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.628713][ T5882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.640094][ T5882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.977200][T21453] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6363'.
[  540.124240][   T57] Bluetooth: hci3: command tx timeout
[  542.272943][   T57] Bluetooth: hci3: command tx timeout
[  544.284450][   T57] Bluetooth: hci3: command tx timeout
[  548.922448][T18501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.932372][T18501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.975627][T18501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.981960][T18501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.031008][T21480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6321'.
[  549.047403][T21480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6321'.
[  549.498345][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6374'.
[  550.500683][T21534] Dead loop on virtual device ip6_vti0, fix it urgently!
[  550.613705][T21542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6396'.
[  550.945637][T21558] netlink: 531 bytes leftover after parsing attributes in process `syz.7.6403'.
[  552.308502][T21579] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  552.312796][T21579] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  553.203636][T21609] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.6424'.
[  553.270311][T21610] netlink: 'syz.4.6425': attribute type 21 has an invalid length.
[  553.328851][T21610] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6425'.
[  553.343875][T21610] netlink: 'syz.4.6425': attribute type 4 has an invalid length.
[  553.351234][T21610] netlink: 'syz.4.6425': attribute type 3 has an invalid length.
[  553.528987][T21610] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6425'.
[  553.556732][   T57] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  553.731962][T21628] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6433'.
[  553.739686][T21628] batadv_slave_1: entered promiscuous mode
[  553.778443][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6435'.
[  555.022210][T21656] __nla_validate_parse: 1 callbacks suppressed
[  555.022225][T21656] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6446'.
[  555.028828][T21656] openvswitch: netlink: Missing key (keys=40, expected=100)
[  555.050931][T21658] netlink: 'syz.4.6447': attribute type 2 has an invalid length.
[  555.432674][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6458'.
[  555.694230][T21700] netlink: 'syz.7.6467': attribute type 6 has an invalid length.
[  555.696761][T21700] netlink: 'syz.7.6467': attribute type 4 has an invalid length.
[  555.699163][T21700] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6467'.
[  555.763849][T21705] netlink: 'syz.4.6470': attribute type 303 has an invalid length.
[  555.816469][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6470'.
[  555.828652][T21712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6474'.
[  555.950711][T21720] !: renamed from vlan0 (while UP)
[  556.065785][T21728] netlink: 830 bytes leftover after parsing attributes in process `syz.7.6481'.
[  556.411933][   T57] Bluetooth: hci1: Malformed Event: 0x13
[  556.427045][T21744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6487'.
[  556.523169][T21746] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  556.551348][T21744] siw: device registration error -23
[  556.673007][T21759] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  556.734008][T21759] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6494'.
[  559.169786][T21814] aaaaaaaaaaaaaaa: entered promiscuous mode
[  559.362045][T21822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6518'.
[  559.395129][T21815] netlink: 16222 bytes leftover after parsing attributes in process `syz.7.6515'.
[  559.767025][T21839] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  559.820976][T21838] lo speed is unknown, defaulting to 1000
[  559.828692][T21838] ip6gretap0 speed is unknown, defaulting to 1000
[  560.712251][T21859] netlink: 'syz.7.6532': attribute type 10 has an invalid length.
[  561.750545][T21885] __nla_validate_parse: 2 callbacks suppressed
[  561.750564][T21885] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6543'.
[  561.786553][T21883] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  563.516946][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6559'.
[  563.970812][T21946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6571'.
[  565.237731][T21992] netlink: 'syz.2.6592': attribute type 4 has an invalid length.
[  565.325306][   T57] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[  565.473269][T22012] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6601'.
[  565.484191][T22012] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6601'.
[  565.795809][T22032] netlink: 'syz.7.6602': attribute type 6 has an invalid length.
[  565.798224][T22032] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6602'.
[  566.197064][T22042] veth0_vlan: entered allmulticast mode
[  566.376986][T22046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6613'.
[  566.384746][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6613'.
[  566.391185][T22046] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6613'.
[  566.401887][T22046] netlink: 'syz.2.6613': attribute type 2 has an invalid length.
[  566.410193][T22046] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6613'.
[  568.448115][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  568.450757][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  572.981621][T22064] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6620'.
[  572.985243][T22064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  573.036202][T22067] netlink: 'syz.2.6622': attribute type 10 has an invalid length.
[  573.235831][T22067] bond0: (slave geneve0): Releasing backup interface
[  573.403091][T22083] openvswitch: netlink: Message has 716 unknown bytes.
[  573.432326][T22087] netlink: 'syz.2.6631': attribute type 17 has an invalid length.
[  573.436778][T22087] netlink: 'syz.2.6631': attribute type 41 has an invalid length.
[  573.439194][T22087] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6631'.
[  573.797584][T22104] openvswitch: netlink: Message has 1 unknown bytes.
[  573.798309][T22103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6638'.
[  573.800332][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.810736][T22104] netlink: 'syz.7.6637': attribute type 3 has an invalid length.
[  574.168064][T22112] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6641'.
[  574.197344][T22114] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6642'.
[  574.200583][T22114] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  574.856835][T22143] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6655'.
[  575.856890][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6658'.
[  575.893949][T22151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6659'.
[  576.015834][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6663'.
[  576.132311][T22166] openvswitch: netlink: Unknown key attributes 2
[  577.281749][T22192] netlink: 'syz.7.6678': attribute type 21 has an invalid length.
[  577.287520][T22192] netlink: 160 bytes leftover after parsing attributes in process `syz.7.6678'.
[  577.675136][T22214] netlink: 'syz.4.6688': attribute type 11 has an invalid length.
[  577.795585][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  577.798724][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  577.804776][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  577.811592][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.176382][T22216] net_ratelimit: 124 callbacks suppressed
[  578.176441][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.181443][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.184447][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.187429][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.190926][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.195670][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.199583][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.202626][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.205747][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.208949][T22216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  578.876823][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6698'.
[  579.202474][T22237] netlink: 10420 bytes leftover after parsing attributes in process `syz.2.6700'.
[  579.396305][T22252] lo speed is unknown, defaulting to 1000
[  579.399854][T22252] ip6gretap0 speed is unknown, defaulting to 1000
[  579.498004][T22261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6710'.
[  579.650307][T22269] netlink: 'syz.4.6714': attribute type 2 has an invalid length.
[  580.281355][T22289] netlink: 'syz.4.6723': attribute type 21 has an invalid length.
[  580.297041][T22289] netlink: 'syz.4.6723': attribute type 1 has an invalid length.
[  580.347391][T22293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6725'.
[  582.239387][T22333] IPv6: Can't replace route, no match found
[  582.574868][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6750'.
[  582.597653][T22352] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6751'.
[  582.723847][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6755'.
[  582.824805][T22345] delete_channel: no stack
[  582.870396][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6756'.
[  582.925683][T22368] netlink: 'syz.4.6758': attribute type 6 has an invalid length.
[  583.575795][T22418] netlink: 'syz.4.6780': attribute type 2 has an invalid length.
[  583.578812][T22418] netlink: 'syz.4.6780': attribute type 8 has an invalid length.
[  583.581975][T22418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6780'.
[  583.885624][T22425] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6783'.
[  584.141771][T22437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6789'.
[  584.295367][T22435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6788'.
[  584.300552][T22435] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6788'.
[  584.533490][T22447] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.6793'.
[  584.551377][T22447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6793'.
[  585.918087][T22505] netlink: 'syz.2.6811': attribute type 16 has an invalid length.
[  585.920439][T22505] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6811'.
[  585.923809][T22505] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.207824][T22521] net_ratelimit: 3192 callbacks suppressed
[  586.207833][T22521] openvswitch: netlink: IP tunnel dst address not specified
[  586.729501][T22542] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.817870][T22542] bridge_slave_0 (unregistering): left promiscuous mode
[  586.820906][T22542] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.860312][T22547] netlink: 'syz.4.6829': attribute type 10 has an invalid length.
[  586.887955][T22547] team0: Device veth1_macvtap failed to register rx_handler
[  587.571130][T22579] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0
[  587.576445][T22579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.923541][T22624] pim6reg: tun_chr_ioctl cmd 1074025677
[  588.929262][T22624] pim6reg: linktype set to 768
[  589.091634][T22623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.095917][T22630] syzkaller0: entered promiscuous mode
[  590.657532][T22637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6871'.
[  590.661855][T22637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6871'.
[  590.670630][T22637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6871'.
[  591.313334][T22655] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  592.495760][T22667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6884'.
[  592.571453][T22670] netlink: 'syz.4.6885': attribute type 10 has an invalid length.
[  592.592230][T22670] team0: Port device geneve1 added
[  592.873606][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  592.884653][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  592.893085][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  592.905851][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  592.909158][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  592.952209][T22683] netlink: 'syz.2.6890': attribute type 29 has an invalid length.
[  592.957042][T22677] lo speed is unknown, defaulting to 1000
[  592.961587][T22683] netlink: 'syz.2.6890': attribute type 29 has an invalid length.
[  592.966424][T22677] ip6gretap0 speed is unknown, defaulting to 1000
[  593.099307][   T13] netdevsim netdevsim7  (unregistering): left promiscuous mode
[  593.103806][   T13] team0: Port device  removed
[  593.161989][T22696] netlink: 'syz.2.6894': attribute type 12 has an invalid length.
[  593.174165][T22696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6894'.
[  593.186466][T22677] chnl_net:caif_netlink_parms(): no params data found
[  593.207351][T22698] netlink: 'syz.4.6895': attribute type 1 has an invalid length.
[  593.393892][T22677] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.397176][T22677] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.400141][T22677] bridge_slave_0: entered allmulticast mode
[  593.403883][T22677] bridge_slave_0: entered promiscuous mode
[  593.408824][T22677] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.411339][T22677] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.415074][T22677] bridge_slave_1: entered allmulticast mode
[  593.418753][T22677] bridge_slave_1: entered promiscuous mode
[  593.424459][   T13] vlan0: left allmulticast mode
[  593.426362][   T13] veth0_vlan: left allmulticast mode
[  593.428406][   T13] vlan0: left promiscuous mode
[  593.430577][   T13] : port 1(vlan0) entered disabled state
[  593.927861][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.932824][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.938517][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  593.943650][   T13] bond0 (unregistering): Released all slaves
[  593.978776][T22736] sctp: [Deprecated]: syz.2.6911 (pid 22736) Use of int in max_burst socket option deprecated.
[  593.978776][T22736] Use struct sctp_assoc_value instead
[  593.997653][T22677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.021091][T22677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.078581][T22677] team0: Port device team_slave_0 added
[  594.081865][T22677] team0: Port device team_slave_1 added
[  594.109180][T22677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  594.113363][T22677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.122355][T22677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  594.135612][T22677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.137810][T22677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.161968][T22677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  594.372454][T22677] hsr_slave_0: entered promiscuous mode
[  594.384823][T22677] hsr_slave_1: entered promiscuous mode
[  594.387497][T22677] debugfs: 'hsr0' already exists in 'hsr'
[  594.389306][T22677] Cannot create hsr debugfs directory
[  594.679732][   T13] hsr_slave_0: left promiscuous mode
[  594.682278][   T13] hsr_slave_1: left promiscuous mode
[  594.934648][ T5856] Bluetooth: hci2: command tx timeout
[  595.064946][   T13] team_slave_1 (unregistering): left promiscuous mode
[  595.068082][   T13] team0 (unregistering): Port device team_slave_1 removed
[  595.098378][   T13] C (unregistering): left promiscuous mode
[  595.101211][   T13] team0 (unregistering): Port device C removed
[  595.392576][T22777] tipc: Enabling of bearer <!{:\> rejected, media not registered
[  595.853012][T22677] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  595.862506][T22677] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  595.892056][T22677] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  595.908221][T22677] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  595.989831][T22677] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.000786][T22677] 8021q: adding VLAN 0 to HW filter on device team0
[  596.021649][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.023874][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.047319][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.049469][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.273550][T22677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  596.299267][T22677] veth0_vlan: entered promiscuous mode
[  596.304453][T22677] veth1_vlan: entered promiscuous mode
[  596.347506][T22677] veth0_macvtap: entered promiscuous mode
[  596.364180][T22677] veth1_macvtap: entered promiscuous mode
[  596.393786][T22677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  596.414892][T22677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  596.428672][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.448123][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.457649][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.461193][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.597027][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.599666][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.631055][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.634005][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.712817][T22864] netlink: 872 bytes leftover after parsing attributes in process `syz.2.6951'.
[  596.718443][T22864] netlink: 872 bytes leftover after parsing attributes in process `syz.2.6951'.
[  597.018726][ T5856] Bluetooth: hci2: command tx timeout
[  597.066199][T22888] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6956'.
[  597.555928][T22930] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  597.568027][T22932] netlink: 'syz.4.6970': attribute type 13 has an invalid length.
[  597.571096][T22932] netlink: 'syz.4.6970': attribute type 17 has an invalid length.
[  599.114747][ T5856] Bluetooth: hci2: command tx timeout
[  599.651383][T22932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  599.789681][T22977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6981'.
[  599.793244][T22977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6981'.
[  599.938349][T22997] netlink: 'syz.1.6987': attribute type 2 has an invalid length.
[  599.975722][T23000] netlink: 'syz.1.6988': attribute type 39 has an invalid length.
[  601.174201][ T5856] Bluetooth: hci2: command tx timeout
[  601.962312][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7009'.
[  601.965450][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7009'.
[  602.396327][T23083] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7023'.
[  602.396826][T23084] netlink: 'syz.1.7024': attribute type 3 has an invalid length.
[  602.487756][T23096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7029'.
[  602.577828][T23102] netlink: 'syz.1.7032': attribute type 39 has an invalid length.
[  602.959618][T23122] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7037'.
[  602.963580][T23117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7037'.
[  602.968715][T23121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7037'.
[  603.399607][T23157] netlink: 'syz.1.7055': attribute type 12 has an invalid length.
[  603.472441][T23161] netlink: 'syz.1.7057': attribute type 1 has an invalid length.
[  603.476114][T23161] netlink: 'syz.1.7057': attribute type 1 has an invalid length.
[  603.652564][T23177] ref_ctr_offset mismatch. inode: 0x10e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  603.879294][T23196] netlink: 'syz.2.7073': attribute type 1 has an invalid length.
[  603.882150][T23196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7073'.
[  604.001541][ T5882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.117069][   T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  604.120582][   T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  604.123318][   T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  604.126229][   T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  604.128725][   T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  604.158325][ T5882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.193519][T23207] lo speed is unknown, defaulting to 1000
[  604.446318][ T5882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.557845][ T5882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.940916][T23207] chnl_net:caif_netlink_parms(): no params data found
[  605.003340][ T5882] bridge_slave_1: left allmulticast mode
[  605.015284][ T5882] bridge_slave_1: left promiscuous mode
[  605.017836][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.027934][ T5882] bridge_slave_0: left allmulticast mode
[  605.029735][ T5882] bridge_slave_0: left promiscuous mode
[  605.031690][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.366292][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  605.373100][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  605.378438][ T5882] bond0 (unregistering): Released all slaves
[  605.440609][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7089'.
[  605.448248][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7089'.
[  605.620497][T23243] netlink: 'syz.4.7090': attribute type 6 has an invalid length.
[  605.668514][T23207] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.681751][T23207] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.685953][T23207] bridge_slave_0: entered allmulticast mode
[  605.702185][T23207] bridge_slave_0: entered promiscuous mode
[  605.710381][ T5882] hsr_slave_0: left promiscuous mode
[  605.729247][ T5882] hsr_slave_1: left promiscuous mode
[  605.732018][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  605.743992][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.749942][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  605.752295][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.774917][ T5882] veth1_macvtap: left promiscuous mode
[  605.777230][ T5882] veth0_macvtap: left promiscuous mode
[  605.779601][ T5882] veth1_vlan: left promiscuous mode
[  605.781991][ T5882] veth0_vlan: left promiscuous mode
[  605.851782][T23262] netlink: 'syz.4.7097': attribute type 10 has an invalid length.
[  606.215187][   T57] Bluetooth: hci0: command tx timeout
[  606.348418][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  606.378466][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  606.531592][   T57] Bluetooth: hci1: command 0x0406 tx timeout
[  606.631659][T23207] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.634795][T23207] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.637970][T23207] bridge_slave_1: entered allmulticast mode
[  606.642033][T23207] bridge_slave_1: entered promiscuous mode
[  606.652590][T23262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  606.701449][T23207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.709920][T23207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.757115][T23207] team0: Port device team_slave_0 added
[  606.762133][T23207] team0: Port device team_slave_1 added
[  606.804905][T23207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.807695][T23207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.835414][T23207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.848681][T23207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.851387][T23207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.858502][T23285] netlink: 'syz.2.7104': attribute type 21 has an invalid length.
[  606.864402][T23207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.966934][T23207] hsr_slave_0: entered promiscuous mode
[  606.972508][T23207] hsr_slave_1: entered promiscuous mode
[  606.979062][T23292] nbd: couldn't find a device at index 33
[  607.247812][ T5882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.349013][ T5882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.522258][ T5882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.630033][ T5882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.896122][T23320] netlink: 'syz.4.7114': attribute type 4 has an invalid length.
[  607.947017][T23207] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  607.975814][T23207] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  607.982623][T23207] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  608.035474][T23207] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  608.097165][ T5882] bridge_slave_1: left allmulticast mode
[  608.099529][ T5882] bridge_slave_1: left promiscuous mode
[  608.101961][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.118931][ T5882] bridge_slave_0: left allmulticast mode
[  608.121288][ T5882] bridge_slave_0: left promiscuous mode
[  608.123686][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.286906][ T5856] Bluetooth: hci0: command tx timeout
[  608.428592][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  608.433283][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  608.438220][ T5882] bond0 (unregistering): (slave team0): Releasing backup interface
[  608.443909][ T5882] bond0 (unregistering): Released all slaves
[  608.450459][T23355] __nla_validate_parse: 4 callbacks suppressed
[  608.450469][T23355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7125'.
[  608.458164][T23356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7125'.
[  608.474231][T23357] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7125'.
[  608.496752][T23355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7125'.
[  608.672234][T23207] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.711888][T23207] 8021q: adding VLAN 0 to HW filter on device team0
[  608.781663][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.784505][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.810057][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.812954][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.873656][ T5882] hsr_slave_0: left promiscuous mode
[  608.878165][ T5882] hsr_slave_1: left promiscuous mode
[  608.881328][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.883657][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.898564][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.901489][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.943614][ T5882] veth1_macvtap: left promiscuous mode
[  608.945729][ T5882] veth1_vlan: left promiscuous mode
[  608.948287][ T5882] veth0_vlan: left promiscuous mode
[  610.364432][ T5856] Bluetooth: hci0: command tx timeout
[  610.516977][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  610.826950][T23388] netlink: 'syz.4.7135': attribute type 5 has an invalid length.
[  610.829726][  T766] lo speed is unknown, defaulting to 1000
[  610.831571][  T766] syz1: Port: 1 Link DOWN
[  611.033301][T23402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7140'.
[  611.041484][T23402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7140'.
[  611.084571][T23402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7140'.
[  611.095684][T23402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7140'.
[  611.168409][T23411] netlink: 'syz.2.7141': attribute type 2 has an invalid length.
[  611.170872][T23411] netlink: 'syz.2.7141': attribute type 8 has an invalid length.
[  611.173228][T23411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7141'.
[  611.200586][T23207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.252573][T23207] veth0_vlan: entered promiscuous mode
[  611.314434][T23207] veth1_vlan: entered promiscuous mode
[  611.338569][T23421] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7144'.
[  611.352838][T23207] veth0_macvtap: entered promiscuous mode
[  611.370405][T23207] veth1_macvtap: entered promiscuous mode
[  611.410096][T23207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  611.451313][T23207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  611.464334][T23423] netlink: ct family unspecified
[  611.467461][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.470943][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.481855][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.484242][T23423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.510863][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.705417][ T4851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.714323][ T4851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.750583][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.759414][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.444770][ T5856] Bluetooth: hci0: command tx timeout
[  612.748114][T23501] netlink: 'syz.4.7170': attribute type 1 has an invalid length.
[  612.750656][T23501] netlink: 'syz.4.7170': attribute type 1 has an invalid length.
[  612.963129][T23516] veth1_macvtap: left promiscuous mode
[  612.970939][T23516] macsec0: entered allmulticast mode
[  613.114000][T23521] veth1_macvtap: entered promiscuous mode
[  613.137581][T23521] veth1_macvtap: entered allmulticast mode
[  613.156364][T23521] macsec0: entered promiscuous mode
[  613.292246][T23537] netlink: 'syz.4.7184': attribute type 3 has an invalid length.
[  613.460935][T23551] netlink: 'syz.1.7190': attribute type 9 has an invalid length.
[  613.900501][T23582] __nla_validate_parse: 3 callbacks suppressed
[  613.900516][T23582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7204'.
[  613.907534][T23582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7204'.
[  613.911857][T23582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7204'.
[  614.964965][T23623] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.7216'.
[  614.995237][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7218'.
[  615.071086][T23636] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  615.073675][T23636] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  615.375023][T23648] openvswitch: netlink: IP tunnel dst address not specified
[  615.895196][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7228'.
[  615.898359][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7228'.
[  616.021929][T23665] xt_HMARK: spi-set and port-set can't be combined
[  616.475081][T23693] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7246'.
[  617.368724][T23721] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7256'.
[  617.456584][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7257'.
[  617.678816][T23735] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  617.681643][T23735] openvswitch: netlink: Message has 16 unknown bytes.
[  619.616914][T23820] netlink: 'syz.1.7292': attribute type 1 has an invalid length.
[  619.748048][T23829] __nla_validate_parse: 4 callbacks suppressed
[  619.748092][T23829] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7298'.
[  620.540788][T23877] netlink: 'syz.1.7316': attribute type 21 has an invalid length.
[  621.659326][T23909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7332'.
[  621.670558][T23918] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.7336'.
[  621.685854][T23909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7332'.
[  621.696254][T23909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7332'.
[  621.833941][T23925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7339'.
[  621.836915][T23925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7339'.
[  621.898510][T23923] netlink: 'syz.4.7338': attribute type 10 has an invalid length.
[  621.905195][T23923] macvlan1: entered allmulticast mode
[  621.930311][T23932] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  622.032214][T23933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7342'.
[  622.889769][T23923] veth1_vlan: entered allmulticast mode
[  622.892992][T23923] team0: Port device macvlan1 added
[  622.902059][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7341'.
[  623.488052][T23987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7363'.
[  623.573519][T23995] netlink: 'syz.4.7365': attribute type 1 has an invalid length.
[  623.602075][T23999] netlink: 'syz.1.7367': attribute type 21 has an invalid length.
[  624.079704][T24026] openvswitch: netlink: Key type 29 is not supported
[  624.579732][ T5856] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11
[  626.473998][T24081] __nla_validate_parse: 3 callbacks suppressed
[  626.483110][T24081] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7402'.
[  627.341129][T24114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7416'.
[  627.355796][T24114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7416'.
[  627.360545][T24114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7416'.
[  628.482739][T24149] netlink: 'syz.2.7431': attribute type 1 has an invalid length.
[  628.487323][T24149] netlink: 'syz.2.7431': attribute type 2 has an invalid length.
[  628.605460][ T5856] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  628.608849][ T5856] Bluetooth: hci3: Injecting HCI hardware error event
[  628.611999][ T5856] Bluetooth: hci3: hardware error 0x00
[  628.671682][T24167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7439'.
[  628.674990][T24167] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  628.680487][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7440'.
[  628.687621][T24169] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7440'.
[  628.692425][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7440'.
[  628.715276][T24165] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7438'.
[  628.873490][T24175] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7443'.
[  629.935811][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  629.938394][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  630.266496][T24282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.714208][ T5856] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  630.882304][T24316] netlink: 'syz.1.7508': attribute type 3 has an invalid length.
[  630.942074][T24320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.118771][T24330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  634.779526][T24396] __nla_validate_parse: 11 callbacks suppressed
[  634.779538][T24396] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7542'.
[  635.601316][T24419] netlink: 'syz.1.7551': attribute type 1 has an invalid length.
[  635.604515][T24419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7551'.
[  635.608112][T24419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7551'.
[  635.696580][T24425] netlink: 'syz.1.7554': attribute type 11 has an invalid length.
[  637.154526][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7575'.
[  637.258625][T24477] netlink: 'syz.1.7578': attribute type 1 has an invalid length.
[  637.310877][T24483] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  637.317820][T24482] : entered promiscuous mode
[  637.463603][T24495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7586'.
[  638.191087][T24511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7594'.
[  638.194721][T24511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7594'.
[  638.415716][T24518] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7597'.
[  638.984307][T24551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7607'.
[  638.991150][T24548] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7607'.
[  639.062547][T24558] netlink: 'syz.1.7612': attribute type 9 has an invalid length.
[  639.065124][T24558] netlink: 'syz.1.7612': attribute type 11 has an invalid length.
[  639.067868][T24558] netlink: 'syz.1.7612': attribute type 12 has an invalid length.
[  639.156560][ T5856] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  639.314717][T24588] netlink: 'syz.4.7626': attribute type 10 has an invalid length.
[  639.327403][T24588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.333339][T24588] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  639.351168][T24588] bond0: entered promiscuous mode
[  639.352928][T24588] bond_slave_0: entered promiscuous mode
[  639.357260][T24588] bond_slave_1: entered promiscuous mode
[  639.360245][T24588] batadv0: entered promiscuous mode
[  639.423416][T24590] wg2: entered promiscuous mode
[  639.425244][T24590] wg2: entered allmulticast mode
[  639.822768][T24607] __nla_validate_parse: 2 callbacks suppressed
[  639.822777][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7633'.
[  640.092904][T24631] netlink: 'syz.4.7646': attribute type 39 has an invalid length.
[  640.408353][T24647] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7654'.
[  640.439061][T24649] netlink: 'syz.4.7655': attribute type 2 has an invalid length.
[  640.672539][T24666] netlink: 'syz.2.7663': attribute type 10 has an invalid length.
[  640.676961][T24666] dummy0: left allmulticast mode
[  640.678605][T24666] dummy0: left promiscuous mode
[  640.681504][T24666] bridge0: port 3(dummy0) entered disabled state
[  640.755974][T24666] team0: Port device dummy0 added
[  640.790886][T24672] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  640.845014][T24676] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.7667'.
[  640.975622][T24681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.858471][T24723] xt_l2tp: v2 tid > 0xffff: 327812
[  642.851716][T24757] C: renamed from team_slave_0 (while UP)
[  642.860303][T24757] netlink: 'syz.2.7688': attribute type 8 has an invalid length.
[  642.863835][T24757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  644.710844][T24831] netlink: 64935 bytes leftover after parsing attributes in process `syz.4.7712'.
[  648.230834][T24850] netlink: 'syz.4.7719': attribute type 10 has an invalid length.
[  648.241074][T24852] IPv6: NLM_F_CREATE should be specified when creating new route
[  648.249162][T24850] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.270927][T24850] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.343652][T24850] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.346572][T24850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  648.350238][T24850] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.352864][T24850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.471834][T24850] bridge0: entered promiscuous mode
[  648.585161][T24850] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  648.728809][T24863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7725'.
[  648.733146][T24863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7725'.
[  648.830032][T24869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7728'.
[  648.978680][T24877] C: renamed from team_slave_0 (while UP)
[  648.982854][T24877] netlink: 'syz.4.7732': attribute type 3 has an invalid length.
[  649.005291][T24877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7732'.
[  649.236841][T24883] bond_slave_1: mtu less than device minimum
[  649.655663][T24891] netlink: 822 bytes leftover after parsing attributes in process `syz.2.7738'.
[  651.236211][T24920] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7751'.
[  653.052229][T24943] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  653.246088][T24955] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  653.249065][T24955] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  653.367591][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'.
[  653.919885][T24970] netlink: 'syz.4.7773': attribute type 30 has an invalid length.
[  655.436922][T24163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  655.442349][T24163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  655.446110][T24163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  655.450178][T24163] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  655.453606][T24163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  655.606016][T24983] chnl_net:caif_netlink_parms(): no params data found
[  655.697395][T24983] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.699943][T24983] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.702327][T24983] bridge_slave_0: entered allmulticast mode
[  655.705205][T24983] bridge_slave_0: entered promiscuous mode
[  655.710099][T24983] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.713111][T24983] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.716341][T24983] bridge_slave_1: entered allmulticast mode
[  655.719999][T24983] bridge_slave_1: entered promiscuous mode
[  655.748685][T24983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.756083][T24983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.783530][T24983] team0: Port device team_slave_0 added
[  655.789002][T24983] team0: Port device team_slave_1 added
[  655.809586][T24983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.811752][T24983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.820523][T24983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.827048][T24983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.829846][T24983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.840121][T24983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.889044][T24983] hsr_slave_0: entered promiscuous mode
[  655.892236][T24983] hsr_slave_1: entered promiscuous mode
[  655.895245][T24983] debugfs: 'hsr0' already exists in 'hsr'
[  655.897537][T24983] Cannot create hsr debugfs directory
[  657.755287][ T5856] Bluetooth: hci2: command tx timeout
[  658.629597][T25015] netlink: 'syz.2.7787': attribute type 11 has an invalid length.
[  658.644226][T25015] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7787'.
[  658.897214][T24983] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  658.906254][T24983] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  658.934667][T24983] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  658.950072][T24983] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  659.037898][T25050] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7793'.
[  659.119003][T24983] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.140524][T24983] 8021q: adding VLAN 0 to HW filter on device team0
[  659.162112][T25062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7796'.
[  659.168099][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.171011][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.191371][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.194346][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.349259][T24983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.657895][T24983] veth0_vlan: entered promiscuous mode
[  659.669043][T24983] veth1_vlan: entered promiscuous mode
[  659.694288][T24983] veth0_macvtap: entered promiscuous mode
[  659.699142][T24983] veth1_macvtap: entered promiscuous mode
[  659.715617][T24983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  659.724390][T24983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  659.731858][ T5882] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  659.738602][ T5882] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  659.804437][ T5856] Bluetooth: hci2: command tx timeout
[  660.041045][ T5882] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.247802][ T5882] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.308821][T25102] netlink: 'syz.4.7805': attribute type 33 has an invalid length.
[  660.312012][T25102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7805'.
[  660.349776][ T3615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.352704][ T3615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.395942][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.398756][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.467737][T25109] syzkaller0: entered promiscuous mode
[  660.469988][T25109] syzkaller0: entered allmulticast mode
[  660.851802][T25123] bridge_slave_1: left allmulticast mode
[  660.856771][T25123] bridge_slave_1: left promiscuous mode
[  660.865614][T25123] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.939710][T25123] bond0: (slave bridge0): Releasing backup interface
[  660.988431][T25124] wg2: entered promiscuous mode
[  660.992877][T25124] wg2: entered allmulticast mode
[  660.992908][T25133] netlink: 'syz.4.7812': attribute type 27 has an invalid length.
[  661.003649][T25133] netlink: 'syz.4.7812': attribute type 3 has an invalid length.
[  661.011099][T25133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7812'.
[  661.196501][T25145] delete_channel: no stack
[  661.911458][ T5856] Bluetooth: hci2: command tx timeout
[  662.733867][T25194] netlink: 'syz.2.7829': attribute type 29 has an invalid length.
[  662.740993][T25194] netlink: 'syz.2.7829': attribute type 29 has an invalid length.
[  663.206518][T25202] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7833'.
[  663.579101][T25212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7837'.
[  663.582920][T25212] nbd: illegal input index -67109120
[  663.966514][ T5856] Bluetooth: hci2: command tx timeout
[  664.431442][T25218] netlink: 'syz.2.7840': attribute type 3 has an invalid length.
[  664.861587][T25239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7846'.
[  665.598713][T25252] netlink: 'syz.2.7850': attribute type 2 has an invalid length.
[  665.601998][T25252] netlink: 'syz.2.7850': attribute type 8 has an invalid length.
[  665.605900][T25252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7850'.
[  666.058363][T25268] netlink: 'syz.4.7858': attribute type 7 has an invalid length.
[  666.160412][T25278] tmpfs: Bad value for 'mode'
[  666.678729][T25308] netlink: 'syz.5.7875': attribute type 1 has an invalid length.
[  666.692154][T25308] netlink: 'syz.5.7875': attribute type 1 has an invalid length.
[  666.696935][T25308] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.7875'.
[  667.364329][ T5856] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  668.638025][T25359] netlink: 'syz.4.7896': attribute type 8 has an invalid length.
[  668.642612][T25359] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.7896'.
[  669.017334][T25379] netlink: 'syz.4.7904': attribute type 21 has an invalid length.
[  669.066017][T25380] delete_channel: no stack
[  669.218086][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7911'.
[  669.221738][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7911'.
[  669.313953][T25394] netlink: 'syz.5.7910': attribute type 9 has an invalid length.
[  669.407945][T25398] bridge0: port 3(ip6gretap0) entered blocking state
[  669.410122][T25398] bridge0: port 3(ip6gretap0) entered disabled state
[  669.412325][T25398] ip6gretap0: entered allmulticast mode
[  669.417956][T25398] ip6gretap0: entered promiscuous mode
[  669.420962][T25398] bridge0: port 3(ip6gretap0) entered blocking state
[  669.423795][T25398] bridge0: port 3(ip6gretap0) entered forwarding state
[  670.089726][ T5856] Bluetooth: hci2: SCO packet too small
[  670.299116][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7935'.
[  671.275546][T25463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7941'.
[  671.432798][T25473] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7946'.
[  671.436540][T25473] bond_slave_0: entered promiscuous mode
[  671.439032][T25473] bond_slave_1: entered promiscuous mode
[  671.712702][T25498] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7958'.
[  672.088337][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7966'.
[  672.265538][T24983] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  672.289515][T24983] CPU: 0 UID: 0 PID: 24983 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  672.289531][T24983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  672.289536][T24983] Call Trace:
[  672.289539][T24983]  <TASK>
[  672.289543][T24983]  dump_stack_lvl+0x189/0x250
[  672.289557][T24983]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.289566][T24983]  ? __pfx__printk+0x10/0x10
[  672.289580][T24983]  dump_header+0xd4/0x4c0
[  672.289589][T24983]  oom_kill_process+0x263/0x800
[  672.289598][T24983]  out_of_memory+0xf0c/0x12b0
[  672.289610][T24983]  ? __pfx_out_of_memory+0x10/0x10
[  672.289620][T24983]  mem_cgroup_out_of_memory+0x145/0x240
[  672.289631][T24983]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  672.289643][T24983]  ? _raw_spin_unlock+0x28/0x50
[  672.289653][T24983]  ? memcg1_oom_prepare+0x37f/0x450
[  672.289661][T24983]  try_charge_memcg+0xde4/0x1280
[  672.289675][T24983]  ? __pfx_try_charge_memcg+0x10/0x10
[  672.289689][T24983]  charge_memcg+0x9f/0x180
[  672.289696][T24983]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  672.289703][T24983]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  672.289712][T24983]  __read_swap_cache_async+0x212/0x480
[  672.289725][T24983]  swap_cluster_readahead+0x336/0x630
[  672.289738][T24983]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  672.289752][T24983]  ? get_vma_policy+0x27c/0x3c0
[  672.289762][T24983]  swapin_readahead+0x189/0xc60
[  672.289776][T24983]  ? __pfx_swapin_readahead+0x10/0x10
[  672.289786][T24983]  ? swap_table_get+0x1e/0x260
[  672.289794][T24983]  ? swap_table_get+0x1e/0x260
[  672.289801][T24983]  ? swap_table_get+0x1e/0x260
[  672.289810][T24983]  ? swap_table_get+0x216/0x260
[  672.289819][T24983]  ? swap_cache_get_folio+0x51c/0x530
[  672.289830][T24983]  do_swap_page+0x837/0x5c70
[  672.289839][T24983]  ? __lock_acquire+0x6b6/0x2cf0
[  672.289851][T24983]  ? __lock_acquire+0x6b6/0x2cf0
[  672.289870][T24983]  ? do_swap_page+0x17d/0x5c70
[  672.289884][T24983]  ? __pfx_do_swap_page+0x10/0x10
[  672.289898][T24983]  ? __lock_acquire+0x6b6/0x2cf0
[  672.289910][T24983]  ? __pfx_default_wake_function+0x10/0x10
[  672.289921][T24983]  ? ___pte_offset_map+0x1ae/0x240
[  672.289938][T24983]  ? pte_offset_map_rw_nolock+0xea/0x160
[  672.289956][T24983]  handle_mm_fault+0x1277/0x32b0
[  672.289976][T24983]  ? handle_mm_fault+0xdb/0x32b0
[  672.289989][T24983]  ? __pfx_handle_mm_fault+0x10/0x10
[  672.289998][T24983]  ? lock_vma_under_rcu+0x42c/0x4a0
[  672.290011][T24983]  ? do_user_addr_fault+0x1a8/0x1380
[  672.290020][T24983]  do_user_addr_fault+0xa7c/0x1380
[  672.290029][T24983]  ? rcu_is_watching+0x15/0xb0
[  672.290038][T24983]  ? trace_page_fault_user+0x84/0x1c0
[  672.290045][T24983]  exc_page_fault+0x82/0x100
[  672.290054][T24983]  asm_exc_page_fault+0x26/0x30
[  672.290062][T24983] RIP: 0033:0x7f3dc8bc2088
[  672.290069][T24983] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  672.290076][T24983] RSP: 002b:00007ffe8f51d7d0 EFLAGS: 00010293
[  672.290083][T24983] RAX: 0000000000000000 RBX: 000000000000005e RCX: 00007f3dc8bc2085
[  672.290088][T24983] RDX: 00007ffe8f51d810 RSI: 0000000000000000 RDI: 0000000000000000
[  672.290092][T24983] RBP: 00007ffe8f51d87c R08: 0000000000000000 R09: 0000000000000000
[  672.290096][T24983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  672.290101][T24983] R13: 00000000000927c0 R14: 00000000000a3f8d R15: 00007ffe8f51d8d0
[  672.290119][T24983]  </TASK>
[  672.290122][T24983] memory: usage 307200kB, limit 307200kB, failcnt 1108
[  672.434148][T24983] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0
[  672.437019][T24983] kmem: usage 306940kB, limit 9007199254740988kB, failcnt 0
[  672.439819][T24983] Memory cgroup stats for /syz5:
[  672.439887][T24983] cache 0
[  672.442927][T24983] rss 24576
[  672.454118][T24983] rss_huge 0
[  672.455461][T24983] shmem 0
[  672.456649][T24983] mapped_file 0
[  672.457848][T24983] dirty 0
[  672.458973][T24983] writeback 0
[  672.472186][T24983] workingset_refault_anon 2
[  672.478650][T24983] workingset_refault_file 0
[  672.483989][T24983] swap 94208
[  672.488902][T24983] swapcached 12288
[  672.494316][T24983] pgpgin 26123
[  672.499340][T24983] pgpgout 26117
[  672.503211][T24983] pgfault 24472
[  672.508051][T24983] pgmajfault 6
[  672.512887][T24983] inactive_anon 0
[  672.517854][T24983] active_anon 20480
[  672.536333][T24983] inactive_file 0
[  672.557219][T24983] active_file 0
[  672.565505][T24983] unevictable 0
[  672.578406][T24983] hierarchical_memory_limit 314572800
[  672.590686][T24983] hierarchical_memsw_limit 9223372036854771712
[  672.603002][T24983] total_cache 0
[  672.626661][T24983] total_rss 24576
[  672.627930][T24983] total_rss_huge 0
[  672.632847][T24983] total_shmem 0
[  672.642443][T24983] total_mapped_file 0
[  672.654266][T24983] total_dirty 0
[  672.655762][T24983] total_writeback 0
[  672.657336][T24983] total_workingset_refault_anon 2
[  672.659380][T24983] total_workingset_refault_file 0
[  672.661530][T24983] total_swap 94208
[  672.663080][T24983] total_swapcached 12288
[  672.665164][T24983] total_pgpgin 26123
[  672.666716][T24983] total_pgpgout 26117
[  672.668353][T24983] total_pgfault 24478
[  672.670556][T24983] total_pgmajfault 6
[  672.672171][T24983] total_inactive_anon 0
[  672.673869][T24983] total_active_anon 20480
[  672.675851][T24983] total_inactive_file 0
[  672.677703][T24983] total_active_file 0
[  672.684151][T24983] total_unevictable 0
[  672.685845][T24983] anon_cost 0
[  672.686922][T24983] file_cost 0
[  672.688045][T24983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7961,pid=25501,uid=0
[  672.692573][T24983] Memory cgroup out of memory: Killed process 25501 (syz.5.7961) total-vm:101960kB, anon-rss:1140kB, file-rss:21552kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  673.607183][T25534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7973'.
[  673.614781][T25534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7973'.
[  673.618897][T25534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7973'.
[  674.174290][T25549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7980'.
[  675.412007][T25578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.239843][T25628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8019'.
[  676.294146][ T6658] wlan1: Trigger new scan to find an IBSS to join
[  676.317292][T25633] netlink: 348 bytes leftover after parsing attributes in process `syz.5.8022'.
[  676.496689][T25642] tQ6\bY4: renamed from lo (while UP)
[  677.792363][T25685] xt_time: unknown flags 0xf4
[  679.066566][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8055'.
[  679.257712][T25723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8061'.
[  679.403570][T25732] IPv6: NLM_F_CREATE should be specified when creating new route
[  679.410612][T25732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  679.413676][T25732] IPv6: NLM_F_CREATE should be set when creating new route
[  680.106578][T25764] lo speed is unknown, defaulting to 1000
[  680.109954][T25764] lo speed is unknown, defaulting to 1000
[  680.114389][T25764] lo speed is unknown, defaulting to 1000
[  680.284209][   T36] wlan1: Trigger new scan to find an IBSS to join
[  680.367350][T25764] infiniband syz2: set active
[  680.368877][ T6919] lo speed is unknown, defaulting to 1000
[  680.374374][T25764] infiniband syz2: added lo
[  680.415673][T25764] RDS/IB: syz2: added
[  680.417164][T25764] smc: adding ib device syz2 with port count 1
[  680.419180][T25764] smc:    ib device syz2 port 1 has no pnetid
[  680.421443][T20891] lo speed is unknown, defaulting to 1000
[  680.423906][T25764] lo speed is unknown, defaulting to 1000
[  680.593511][T25764] lo speed is unknown, defaulting to 1000
[  680.849228][T25764] lo speed is unknown, defaulting to 1000
[  680.878594][T25785] netlink: 'syz.5.8087': attribute type 13 has an invalid length.
[  680.881688][T25785] netlink: 'syz.5.8087': attribute type 58 has an invalid length.
[  680.896844][T25785] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8087'.
[  681.056611][T25764] lo speed is unknown, defaulting to 1000
[  681.231751][   T77] wlan1: Creating new IBSS network, BSSID fe:fb:f2:b2:f9:be
[  681.745855][T25831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8109'.
[  682.567420][T25859] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8121'.
[  682.571149][T25859] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  683.130190][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8133'.
[  684.631301][T24163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  684.635819][T24163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  684.638540][T24163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  684.642254][T24163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  684.645559][T24163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  684.707780][T25903] lo speed is unknown, defaulting to 1000
[  685.135440][T25903] chnl_net:caif_netlink_parms(): no params data found
[  685.313938][T25903] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.321673][T25903] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.331575][T25903] bridge_slave_0: entered allmulticast mode
[  685.335692][T25903] bridge_slave_0: entered promiscuous mode
[  685.345665][T25903] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.353357][T25903] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.358564][T25903] bridge_slave_1: entered allmulticast mode
[  685.367360][T25903] bridge_slave_1: entered promiscuous mode
[  685.428541][T25903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  685.443593][T25903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  685.509246][T25903] team0: Port device team_slave_0 added
[  685.520392][T25903] team0: Port device team_slave_1 added
[  685.577194][T25903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  685.584145][T25903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.604966][T25903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  685.617411][T25903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  685.623821][T25903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.644964][T25903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.744247][T25903] hsr_slave_0: entered promiscuous mode
[  685.750989][T25903] hsr_slave_1: entered promiscuous mode
[  685.758117][T25903] debugfs: 'hsr0' already exists in 'hsr'
[  685.765418][T25903] Cannot create hsr debugfs directory
[  686.170151][T25926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8146'.
[  686.218405][T25926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8146'.
[  686.235335][T25926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8146'.
[  686.677344][T25903] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  686.684963][T24163] Bluetooth: hci0: command tx timeout
[  686.696869][T25903] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  686.707785][T25903] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  686.747510][T25903] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  686.747866][T25954] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.8153'.
[  686.810349][T25966] netlink: 'syz.5.8155': attribute type 6 has an invalid length.
[  686.812777][T25966] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8155'.
[  686.877193][T25903] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.895673][T25903] 8021q: adding VLAN 0 to HW filter on device team0
[  686.910320][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.912668][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.936614][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.938917][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.978314][T25903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  687.128654][T25903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  687.152592][T25994] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8162'.
[  687.228957][T25903] veth0_vlan: entered promiscuous mode
[  687.252188][T25903] veth1_vlan: entered promiscuous mode
[  687.300072][T25903] veth0_macvtap: entered promiscuous mode
[  687.303988][T25903] veth1_macvtap: entered promiscuous mode
[  687.321561][T25903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  687.338801][T25903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.358856][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  687.379310][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.382071][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.388380][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.465391][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.467829][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.499248][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.503707][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.796771][T26031] netlink: 'syz.5.8168': attribute type 2 has an invalid length.
[  687.801825][T26031] netlink: 'syz.5.8168': attribute type 8 has an invalid length.
[  687.850824][T26031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8168'.
[  688.218268][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8173'.
[  688.258314][T26063] netlink: 802 bytes leftover after parsing attributes in process `syz.5.8174'.
[  688.308659][T26065] netlink: 'syz.5.8175': attribute type 2 has an invalid length.
[  688.312742][T26065] netlink: 'syz.5.8175': attribute type 3 has an invalid length.
[  688.315281][T26065] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8175'.
[  688.771493][T24163] Bluetooth: hci0: command tx timeout
[  688.913606][T26089] lo speed is unknown, defaulting to 1000
[  689.574115][T26105] rdma_rxe: rxe_newlink: failed to add lo
[  689.842448][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  689.855766][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  689.859541][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  689.866160][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  689.871420][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  689.940839][ T5882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.961758][T26112] lo speed is unknown, defaulting to 1000
[  690.064332][ T5882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.201900][ T5882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.279738][ T5882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.362823][T26112] chnl_net:caif_netlink_parms(): no params data found
[  690.366825][T26139] netlink: 196 bytes leftover after parsing attributes in process `syz.5.8208'.
[  690.515443][ T5882] bridge_slave_1: left allmulticast mode
[  690.527329][ T5882] bridge_slave_1: left promiscuous mode
[  690.529736][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.533966][ T5882] bridge_slave_0: left allmulticast mode
[  690.537288][ T5882] bridge_slave_0: left promiscuous mode
[  690.539771][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.590458][T26158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8215'.
[  690.720184][T26164] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768
[  690.844293][ T5856] Bluetooth: hci0: command tx timeout
[  690.941879][ T5882] team0: Port device geneve1 removed
[  690.959800][T26166] netlink: 'syz.5.8216': attribute type 2 has an invalid length.
[  690.962337][T26166] netlink: 134 bytes leftover after parsing attributes in process `syz.5.8216'.
[  690.967764][T26166] netlink: 264 bytes leftover after parsing attributes in process `syz.5.8216'.
[  690.971780][T26166] netlink: 'syz.5.8216': attribute type 2 has an invalid length.
[  690.990823][ T5882] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  690.995074][ T5882] bridge0 (unregistering): left promiscuous mode
[  691.209863][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  691.213774][ T5882] bond_slave_0: left promiscuous mode
[  691.218652][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  691.222375][ T5882] bond_slave_1: left promiscuous mode
[  691.228818][ T5882] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  691.232372][ T5882] batadv0: left promiscuous mode
[  691.235711][ T5882] bond0 (unregistering): Released all slaves
[  691.248937][T26112] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.251865][T26112] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.254686][T26112] bridge_slave_0: entered allmulticast mode
[  691.258217][T26112] bridge_slave_0: entered promiscuous mode
[  691.266386][T26112] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.269137][T26112] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.271871][T26112] bridge_slave_1: entered allmulticast mode
[  691.275224][T26112] bridge_slave_1: entered promiscuous mode
[  691.326904][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  691.329089][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  691.342378][T26112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.349360][T26112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.964924][ T5856] Bluetooth: hci1: command tx timeout
[  692.924552][ T5856] Bluetooth: hci0: command tx timeout
[  693.582665][T26112] team0: Port device team_slave_0 added
[  693.592493][T26112] team0: Port device team_slave_1 added
[  693.690071][T26112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.712368][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.725417][T26112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.734655][T26112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.737494][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.757935][T26112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.901609][T26112] hsr_slave_0: entered promiscuous mode
[  693.914787][T26112] hsr_slave_1: entered promiscuous mode
[  693.918677][T26112] debugfs: 'hsr0' already exists in 'hsr'
[  693.936313][T26112] Cannot create hsr debugfs directory
[  694.047702][ T5856] Bluetooth: hci1: command tx timeout
[  694.228917][T26210] __nla_validate_parse: 2 callbacks suppressed
[  694.228928][T26210] netlink: 124 bytes leftover after parsing attributes in process `syz.5.8228'.
[  694.426369][ T5882] hsr_slave_0: left promiscuous mode
[  694.429158][ T5882] hsr_slave_1: left promiscuous mode
[  694.431630][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.438261][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.441149][T26222] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8232'.
[  694.445134][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.447526][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.463347][ T5882] veth0_macvtap: left promiscuous mode
[  694.465386][ T5882] veth1_vlan: left allmulticast mode
[  694.467084][ T5882] veth1_vlan: left promiscuous mode
[  694.619410][ T5882] team0 (unregistering): Port device macvlan1 removed
[  694.852787][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  694.883016][ T5882] team0 (unregistering): Port device C removed
[  695.428444][ T5856] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[  695.773349][T26112] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  695.789345][T26112] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  695.801984][T26112] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  695.812661][T26112] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  695.882386][T26112] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.908571][T26112] 8021q: adding VLAN 0 to HW filter on device team0
[  695.913754][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.916222][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.930448][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.932663][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.987985][T26112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.137391][ T5856] Bluetooth: hci1: command tx timeout
[  696.152201][T26112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  696.163942][T26301] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8254'.
[  696.167715][T26301] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8254'.
[  696.331635][T26112] veth0_vlan: entered promiscuous mode
[  696.342216][T26112] veth1_vlan: entered promiscuous mode
[  696.379331][T26112] veth0_macvtap: entered promiscuous mode
[  696.385899][T26112] veth1_macvtap: entered promiscuous mode
[  696.410025][T26112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.423956][T26112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.441201][ T5882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.448363][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.451365][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.471199][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.043774][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.058584][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.098443][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.101689][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.259398][T26340] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.8196'.
[  697.416282][T26352] netlink: 'syz.5.8264': attribute type 27 has an invalid length.
[  697.419206][T26352] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8264'.
[  697.613224][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8272'.
[  698.008364][T26418] netlink: 'syz.0.8285': attribute type 12 has an invalid length.
[  698.011727][T26418] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.8285'.
[  698.206142][ T5856] Bluetooth: hci1: command tx timeout
[  699.291515][T26474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8301'.
[  699.325613][T26479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8302'.
[  699.578738][T26511] netlink: 'syz.5.8311': attribute type 11 has an invalid length.
[  699.621245][T26514] syzkaller0: entered promiscuous mode
[  699.623077][T26514] syzkaller0: entered allmulticast mode
[  699.703766][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8316'.
[  699.706721][T26522] netlink: 'syz.5.8316': attribute type 1 has an invalid length.
[  699.769440][T26524] netlink: 'syz.5.8317': attribute type 39 has an invalid length.
[  701.661366][T26562] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8334'.
[  701.720716][T26566] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8336'.
[  701.726941][T26566] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8336'.
[  704.806552][T26588] netlink: 'syz.8.8343': attribute type 28 has an invalid length.
[  704.820966][T26588] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280
[  704.828664][T26592] netlink: 'syz.5.8345': attribute type 21 has an invalid length.
[  708.157617][T26635] netlink: 'syz.0.8362': attribute type 10 has an invalid length.
[  708.659029][T26643] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  708.720398][T26649] netlink: 422 bytes leftover after parsing attributes in process `syz.5.8368'.
[  709.073345][T26676] netlink: 'syz.5.8374': attribute type 5 has an invalid length.
[  709.076062][T26676] netlink: 'syz.5.8374': attribute type 5 has an invalid length.
[  709.316644][T26687] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.8375'.
[  709.909051][T26694] syzkaller0: create flow: hash 1642774914 index 1
[  709.929254][ T6918] syzkaller0: tun_net_xmit 76
[  709.950597][T26700] netlink: 'syz.5.8382': attribute type 1 has an invalid length.
[  709.959906][T26694] syzkaller0: delete flow: hash 1642774914 index 1
[  711.237028][T26715] bridge0: port 4(veth1_virt_wifi) entered blocking state
[  711.239620][T26715] bridge0: port 4(veth1_virt_wifi) entered disabled state
[  711.241975][T26715] veth1_virt_wifi: entered allmulticast mode
[  711.246276][T26715] veth1_virt_wifi: left allmulticast mode
[  711.278241][ T6656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  711.340525][T26719] netlink: 'syz.5.8391': attribute type 29 has an invalid length.
[  711.393126][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8394'.
[  711.427853][T26731] netlink: 'syz.8.8396': attribute type 1 has an invalid length.
[  711.509658][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8401'.
[  711.512541][T26741] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8401'.
[  711.532911][T26743] proc: Unknown parameter 'g'
[  711.568055][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8404'.
[  711.629834][T26753] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8405'.
[  711.634322][T26749] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8405'.
[  711.653195][T26749] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8405'.
[  711.692817][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8409'.
[  711.968439][T26780] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  711.970795][T26780] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  711.982947][T26782] netlink: 'syz.8.8421': attribute type 3 has an invalid length.
[  713.233394][T26832] pim6reg1: entered promiscuous mode
[  713.238329][T26832] pim6reg1: entered allmulticast mode
[  713.309795][T26836] netlink: 'syz.0.8446': attribute type 4 has an invalid length.
[  713.808526][T26877] __nla_validate_parse: 9 callbacks suppressed
[  713.808540][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8464'.
[  714.152252][T26887] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8469'.
[  714.780244][T26894] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8471'.
[  714.785144][T26894] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8471'.
[  714.825940][T26898] netlink: 92 bytes leftover after parsing attributes in process `syz.8.8473'.
[  714.828712][T26898] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8473'.
[  714.831462][T26898] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8473'.
[  714.871072][T26904] netlink: 'syz.8.8476': attribute type 1 has an invalid length.
[  715.383482][T26930] dvmrp1: tun_chr_ioctl cmd 1074025677
[  715.387383][T26930] dvmrp1: linktype set to 805
[  715.408106][T26934] xt_l2tp: v2 sid > 0xffff: 16776960
[  715.527384][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8494'.
[  715.596450][T26950] netlink: 'syz.5.8496': attribute type 3 has an invalid length.
[  715.599122][T26950] netlink: 'syz.5.8496': attribute type 11 has an invalid length.
[  715.622129][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8498'.
[  715.811983][T26958] netlink: 'syz.8.8499': attribute type 32 has an invalid length.
[  715.820035][T26958] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8499'.
[  716.146889][T26980] netlink: 'syz.5.8508': attribute type 10 has an invalid length.
[  716.268267][T26980] team0: Port device wlan1 added
[  716.527499][T26989] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  717.790822][T27017] netlink: 'syz.5.8525': attribute type 13 has an invalid length.
[  718.284363][ T4263] wlan1: Trigger new scan to find an IBSS to join
[  718.720917][ T5856] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  718.910979][T27101] __nla_validate_parse: 7 callbacks suppressed
[  718.910995][T27101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8562'.
[  718.924531][T27101] netlink: 35 bytes leftover after parsing attributes in process `syz.0.8562'.
[  718.930740][T27101] netlink: 'syz.0.8562': attribute type 5 has an invalid length.
[  718.934444][T27101] netlink: 'syz.0.8562': attribute type 6 has an invalid length.
[  718.944295][T27101] netlink: 35 bytes leftover after parsing attributes in process `syz.0.8562'.
[  719.233441][T27134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8578'.
[  719.268328][T27134] lo speed is unknown, defaulting to 1000
[  719.271074][T27134] lo speed is unknown, defaulting to 1000
[  719.301408][T27134] lo speed is unknown, defaulting to 1000
[  719.420852][T27134] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  719.595146][T27144] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.8582'.
[  719.940094][T27134] lo speed is unknown, defaulting to 1000
[  720.011401][T27134] lo speed is unknown, defaulting to 1000
[  720.065726][T27134] lo speed is unknown, defaulting to 1000
[  720.076103][T27134] lo speed is unknown, defaulting to 1000
[  720.079190][T27134] lo speed is unknown, defaulting to 1000
[  721.427318][ T4851] wlan1: Trigger new scan to find an IBSS to join
[  723.322628][T27226] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8612'.
[  723.579593][T27231] netlink: 'syz.5.8617': attribute type 1 has an invalid length.
[  723.663752][T27240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8620'.
[  724.163335][T27254] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8626'.
[  724.209629][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8629'.
[  724.212380][T27259] openvswitch: netlink: Invalid VLAN frame
[  724.306863][T27266] netlink: 'syz.8.8632': attribute type 29 has an invalid length.
[  724.350074][T27268] bridge0: port 3(ip6gretap0) entered disabled state
[  724.352953][T27268] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.356269][T27268] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.361233][T27268] bridge0: entered allmulticast mode
[  724.402302][T27274] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8636'.
[  724.416139][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8636'.
[  724.419720][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8636'.
[  724.431177][T27268] ip6gretap0: left allmulticast mode
[  724.433566][T27268] ip6gretap0: left promiscuous mode
[  724.445380][T27268] bridge0: port 3(ip6gretap0) entered disabled state
[  724.451956][T27268] bridge_slave_1: left allmulticast mode
[  724.455147][T27268] bridge_slave_1: left promiscuous mode
[  724.457578][T27268] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.468259][T27268] bridge_slave_0: left allmulticast mode
[  724.470034][T27268] bridge_slave_0: left promiscuous mode
[  724.472057][T27268] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.256140][   T54] wlan1: Trigger new scan to find an IBSS to join
[  725.963983][T27283] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8640'.
[  726.002179][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8641'.
[  726.002696][T27287] tmpfs: Unknown parameter '0xffffffffffffffff0xffffffffffffffff'
[  726.154613][ T1095] wlan1: Creating new IBSS network, BSSID ba:12:a7:72:aa:f4
[  726.648095][T27332] netlink: 830 bytes leftover after parsing attributes in process `syz.8.8663'.
[  726.752561][T27343] nbd: couldn't find a device at index 49663
[  726.871385][T27353] netlink: 'syz.8.8672': attribute type 6 has an invalid length.
[  726.880943][T27353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8672'.
[  726.899585][T27349] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check.
[  727.207839][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8675'.
[  729.674549][T27421] __nla_validate_parse: 1 callbacks suppressed
[  729.674560][T27421] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8700'.
[  729.680308][T27422] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8700'.
[  729.705832][T27424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8701'.
[  729.722736][T27424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8701'.
[  730.122720][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8721'.
[  730.130545][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8721'.
[  730.205940][T27467] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  730.209262][T27467] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  730.219911][   T34] audit: type=1107 audit(1766174385.725:8): pid=27466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  730.653124][T27496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  730.689920][T27498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8735'.
[  731.319635][T27503] netlink: 'syz.0.8737': attribute type 7 has an invalid length.
[  731.322800][T27503] netlink: 'syz.0.8737': attribute type 1 has an invalid length.
[  731.590252][T27528] pim6reg1: entered promiscuous mode
[  731.592535][T27528] pim6reg1: entered allmulticast mode
[  731.627933][T27531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  731.665032][T27531] netlink: 'syz.8.8751': attribute type 1 has an invalid length.
[  731.668840][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8751'.
[  731.690616][T27534] netlink: 'syz.0.8752': attribute type 7 has an invalid length.
[  732.379133][T27573] netlink: 'syz.5.8769': attribute type 11 has an invalid length.
[  732.381671][T27573] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.8769'.
[  733.018525][T27602] bridge0: port 3(veth1_to_team) entered blocking state
[  733.021717][T27602] bridge0: port 3(veth1_to_team) entered disabled state
[  733.026633][T27602] veth1_to_team: entered allmulticast mode
[  733.031902][T27602] veth1_to_team: entered promiscuous mode
[  733.035122][T27602] bridge0: port 3(veth1_to_team) entered blocking state
[  733.038077][T27602] bridge0: port 3(veth1_to_team) entered forwarding state
[  733.455443][T27611] netlink: 'syz.0.8785': attribute type 10 has an invalid length.
[  733.469231][T27611] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.472759][T27611] bridge_slave_1: left allmulticast mode
[  733.480013][T27611] bridge_slave_1: left promiscuous mode
[  733.482467][T27611] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.499514][T27611] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  733.508076][T27613] netlink: 'syz.8.8786': attribute type 1 has an invalid length.
[  733.578601][T27617] netlink: 'syz.0.8788': attribute type 10 has an invalid length.
[  733.813153][T27634] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  733.836509][T27636] netlink: 'syz.8.8796': attribute type 1 has an invalid length.
[  733.847089][T27636] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.8796'.
[  734.816487][T27649] netlink: 'syz.5.8801': attribute type 5 has an invalid length.
[  734.819446][T27649] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8801'.
[  734.989257][T27663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  736.189166][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8816'.
[  736.269896][T27688] netlink: 'syz.0.8819': attribute type 1 has an invalid length.
[  736.961191][T27708] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8827'.
[  736.970610][T27708] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8827'.
[  750.469590][T24163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  750.473760][T24163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  750.477624][T24163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  750.480746][T24163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  750.483987][T24163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  752.526879][T24163] Bluetooth: hci3: command tx timeout
[  752.633413][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  752.639983][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  752.646930][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  752.655093][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  752.658304][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  752.684950][T24163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  752.690193][T24163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  752.694174][T24163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  752.697627][T24163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  752.700822][T24163] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  752.772110][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  752.774791][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  754.604724][ T5856] Bluetooth: hci3: command tx timeout
[  754.685292][ T5856] Bluetooth: hci4: command tx timeout
[  754.764268][ T5856] Bluetooth: hci5: command tx timeout
[  756.230615][ T6656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  756.684359][ T5856] Bluetooth: hci3: command tx timeout
[  756.764185][ T5856] Bluetooth: hci4: command tx timeout
[  756.844201][ T5856] Bluetooth: hci5: command tx timeout
[  758.764450][ T5856] Bluetooth: hci3: command tx timeout
[  758.844260][ T5856] Bluetooth: hci4: command tx timeout
[  758.924347][ T5856] Bluetooth: hci5: command tx timeout
[  760.924294][ T5856] Bluetooth: hci4: command tx timeout
[  761.004774][ T5856] Bluetooth: hci5: command tx timeout
[  766.469705][T27667] Set syz1 is full, maxelem 65536 reached
[  780.250149][ T5882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.445611][T24163] Bluetooth: hci2: command 0x0406 tx timeout
[  781.962814][T27731] lo speed is unknown, defaulting to 1000
[  782.035508][T27731] lo speed is unknown, defaulting to 1000
[  782.167847][T27731] chnl_net:caif_netlink_parms(): no params data found
[  782.206972][T27731] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.209261][T27731] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.211502][T27731] bridge_slave_0: entered allmulticast mode
[  782.214293][T27731] bridge_slave_0: entered promiscuous mode
[  782.217497][T27731] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.219721][T27731] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.221975][T27731] bridge_slave_1: entered allmulticast mode
[  782.224833][T27731] bridge_slave_1: entered promiscuous mode
[  782.240891][T27731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  782.245395][T27731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  782.261182][T27731] team0: Port device team_slave_0 added
[  782.264517][T27731] team0: Port device team_slave_1 added
[  782.277859][T27731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.280026][T27731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.287838][T27731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.291999][T27731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.294271][T27731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.302014][T27731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  782.325056][T27731] hsr_slave_0: entered promiscuous mode
[  782.327359][T27731] hsr_slave_1: entered promiscuous mode
[  782.329806][T27731] debugfs: 'hsr0' already exists in 'hsr'
[  782.331686][T27731] Cannot create hsr debugfs directory
[  795.959487][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  810.606942][T27747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  810.611497][T27747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  810.615350][T27747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  810.618791][T27747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  810.621860][T27747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  812.575031][   T57] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  812.580200][   T57] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  812.582971][   T57] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  812.585803][   T57] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  812.588416][   T57] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  813.643216][T27750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  813.648437][T27750] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  813.651776][T27750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  813.657804][T27750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  813.660894][T27750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  814.211295][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  814.213873][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  870.743849][T27761] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  870.748862][T27761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  870.752306][T27761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  870.755988][T27761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  870.759257][T27761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  872.604267][T27757] Bluetooth: hci3: command 0x0406 tx timeout
[  872.743336][T27754] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  872.749128][T27754] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  872.752609][T27754] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  872.756157][T27754] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  872.759685][T27754] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  873.763982][T27766] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  873.768822][T27766] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  873.772580][T27766] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  873.776188][T27766] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  873.779452][T27766] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  875.653762][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  875.657722][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  877.805062][T27772] Bluetooth: hci4: command 0x0406 tx timeout
[  877.807578][T27772] Bluetooth: hci5: command 0x0406 tx timeout
[  886.934054][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  886.936375][    C0] rcu: 	0-....: (1 GPs behind) idle=a8c4/1/0x4000000000000000 softirq=127373/127374 fqs=5247
[  886.940538][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  886.942732][    C0] rcu: 	 number:   839073          0            0
[  886.944934][    C0] rcu: 	cputime:    37332      15157           55   ==> 52500(ms)
[  886.947604][    C0] rcu: 	(t=10502 jiffies g=104137 q=1769 ncpus=2)
[  886.949826][    C0] CPU: 0 UID: 0 PID: 27703 Comm: syz.5.8826 Not tainted syzkaller #0 PREEMPT(full) 
[  886.949836][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  886.949841][    C0] RIP: 0010:arch_stack_walk+0x11c/0x150
[  886.949853][    C0] Code: ff ff 4c 89 ff e8 f4 74 09 00 48 85 c0 74 24 48 89 df 48 89 c6 4d 89 f3 2e e8 30 d8 f3 09 84 c0 74 11 4c 89 ff e8 24 76 09 00 <83> bd 78 ff ff ff 00 75 cf 65 48 8b 05 53 e7 13 11 48 3b 45 d8 75
[  886.949858][    C0] RSP: 0018:ffffc90000007228 EFLAGS: 00000296
[  886.949865][    C0] RAX: 0000000090bc1501 RBX: ffffc900000072e0 RCX: 4ce0f46ab3137b00
[  886.949870][    C0] RDX: 0000000000000006 RSI: ffffffff8d97916f RDI: ffff888173d257c0
[  886.949874][    C0] RBP: ffffc900000072b0 R08: ffffc90008a5ff38 R09: 0000000000000000
[  886.949878][    C0] R10: ffffc90000007278 R11: fffff52000000e51 R12: ffff888173d257c0
[  886.949882][    C0] R13: 0000000000000400 R14: ffffffff81ada120 R15: ffffc90000007228
[  886.949887][    C0] FS:  00007f3dc6df66c0(0000) GS:ffff88818e835000(0000) knlGS:0000000000000000
[  886.949892][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  886.949896][    C0] CR2: 00007fdd64a09157 CR3: 000000011e362000 CR4: 00000000000006f0
[  886.949922][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  886.949928][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000f0602
[  886.949932][    C0] Call Trace:
[  886.949936][    C0]  <IRQ>
[  886.949942][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.949951][    C0]  stack_trace_save+0x9c/0xe0
[  886.949961][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  886.949969][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  886.949983][    C0]  kasan_save_track+0x3e/0x80
[  886.949991][    C0]  ? kasan_save_track+0x3e/0x80
[  886.949996][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  886.950002][    C0]  ? __kmalloc_noprof+0x41d/0x800
[  886.950008][    C0]  ? ___neigh_create+0x6d5/0x2230
[  886.950014][    C0]  ? ip6_finish_output2+0x1175/0x1480
[  886.950021][    C0]  ? ip6_output+0x340/0x550
[  886.950027][    C0]  ? ndisc_send_skb+0xbce/0x1510
[  886.950036][    C0]  ? addrconf_rs_timer+0x369/0x6a0
[  886.950043][    C0]  ? call_timer_fn+0x16e/0x590
[  886.950050][    C0]  ? __run_timer_base+0x61a/0x860
[  886.950055][    C0]  ? run_timer_softirq+0xb7/0x180
[  886.950060][    C0]  ? handle_softirqs+0x27d/0x850
[  886.950067][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  886.950072][    C0]  ? irq_exit_rcu+0x9/0x30
[  886.950077][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  886.950084][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  886.950090][    C0]  ? preempt_schedule_common+0x6c/0xd0
[  886.950096][    C0]  ? preempt_schedule+0xae/0xc0
[  886.950101][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  886.950107][    C0]  ? smp_call_function_single+0x470/0x590
[  886.950115][    C0]  ? perf_install_in_context+0x593/0x8f0
[  886.950121][    C0]  ? __se_sys_perf_event_open+0x1966/0x1d90
[  886.950127][    C0]  ? do_syscall_64+0xfa/0xf80
[  886.950144][    C0]  __kasan_kmalloc+0x93/0xb0
[  886.950152][    C0]  __kmalloc_noprof+0x41d/0x800
[  886.950158][    C0]  ? handle_softirqs+0x27d/0x850
[  886.950163][    C0]  ? ___neigh_create+0x6d5/0x2230
[  886.950168][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  886.950176][    C0]  ___neigh_create+0x6d5/0x2230
[  886.950185][    C0]  ? __ipv6_neigh_lookup_noref+0x52a/0x710
[  886.950197][    C0]  ip6_finish_output2+0x1175/0x1480
[  886.950209][    C0]  ? __pfx_ip6_finish_output2+0x10/0x10
[  886.950217][    C0]  ? ip6_mtu+0x7d/0x490
[  886.950223][    C0]  ? ip6_mtu+0x38c/0x490
[  886.950230][    C0]  ? ip6_finish_output+0x2ef/0x4e0
[  886.950237][    C0]  ? ip6_output+0x126/0x550
[  886.950244][    C0]  ip6_output+0x340/0x550
[  886.950253][    C0]  ndisc_send_skb+0xbce/0x1510
[  886.950262][    C0]  ? ndisc_send_skb+0x1e4/0x1510
[  886.950273][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  886.950282][    C0]  ? ndisc_alloc_skb+0x1a6/0x480
[  886.950296][    C0]  addrconf_rs_timer+0x369/0x6a0
[  886.950306][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  886.950322][    C0]  call_timer_fn+0x16e/0x590
[  886.950329][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  886.950336][    C0]  ? call_timer_fn+0xbe/0x590
[  886.950343][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  886.950384][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  886.950394][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  886.950400][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  886.950408][    C0]  __run_timer_base+0x61a/0x860
[  886.950414][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  886.950427][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  886.950436][    C0]  ? __pfx_run_timer_softirq+0x10/0x10
[  886.950445][    C0]  run_timer_softirq+0xb7/0x180
[  886.950452][    C0]  handle_softirqs+0x27d/0x850
[  886.950459][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  886.950467][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  886.950476][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  886.950484][    C0]  __irq_exit_rcu+0xca/0x1f0
[  886.950491][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  886.950500][    C0]  irq_exit_rcu+0x9/0x30
[  886.950506][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  886.950512][    C0]  </IRQ>
[  886.950514][    C0]  <TASK>
[  886.950517][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  886.950523][    C0] RIP: 0010:preempt_schedule_common+0x6c/0xd0
[  886.950529][    C0] Code: f6 85 c0 74 09 31 ff e8 a2 12 42 f6 31 db 65 4c 8b 34 25 08 b0 7e 92 49 81 c6 20 15 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 6a 27 cb f6 49 89 1e bf 01 00 00 00 e8 4d aa ff
[  886.950534][    C0] RSP: 0018:ffffc90008a5f9c0 EFLAGS: 00000246
[  886.950540][    C0] RAX: 1ffff1102e7a4d9c RBX: ffffffff8b5cf27e RCX: 0000000000080000
[  886.950544][    C0] RDX: ffffc90023bd1000 RSI: 0000000000001520 RDI: ffffffff8b5cf27e
[  886.950548][    C0] RBP: ffffc90008a5fa58 R08: ffffffff8f821f77 R09: 1ffffffff1f043ee
[  886.950552][    C0] R10: dffffc0000000000 R11: fffffbfff1f043ef R12: 0000000000000000
[  886.950556][    C0] R13: dffffc0000000000 R14: ffff888173d26ce0 R15: dffffc0000000000
[  886.950562][    C0]  ? preempt_schedule+0xae/0xc0
[  886.950569][    C0]  ? preempt_schedule+0xae/0xc0
[  886.950577][    C0]  preempt_schedule+0xae/0xc0
[  886.950583][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[  886.950591][    C0]  preempt_schedule_thunk+0x16/0x30
[  886.950598][    C0]  ? smp_call_function_single+0x46b/0x590
[  886.950607][    C0]  smp_call_function_single+0x470/0x590
[  886.950615][    C0]  ? __pfx_remote_function+0x10/0x10
[  886.950623][    C0]  ? __pfx_smp_call_function_single+0x10/0x10
[  886.950632][    C0]  ? __pfx_remote_function+0x10/0x10
[  886.950643][    C0]  perf_install_in_context+0x593/0x8f0
[  886.950652][    C0]  ? __pfx_perf_install_in_context+0x10/0x10
[  886.950659][    C0]  ? __pfx___perf_install_in_context+0x10/0x10
[  886.950669][    C0]  ? anon_inode_getfile+0x106/0x1a0
[  886.950675][    C0]  ? perf_event__header_size+0x168/0x230
[  886.950683][    C0]  __se_sys_perf_event_open+0x1966/0x1d90
[  886.950693][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  886.950699][    C0]  ? irqentry_exit+0x5dd/0x660
[  886.950712][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  886.950719][    C0]  do_syscall_64+0xfa/0xf80
[  886.950726][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.950733][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.950739][    C0] RIP: 0033:0x7f3dc8b8f7c9
[  886.950746][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  886.950751][    C0] RSP: 002b:00007f3dc6df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  886.950757][    C0] RAX: ffffffffffffffda RBX: 00007f3dc8de5fa0 RCX: 00007f3dc8b8f7c9
[  886.950761][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  886.950765][    C0] RBP: 00007f3dc8bf297f R08: 0000000000000000 R09: 0000000000000000
[  886.950769][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  886.950773][    C0] R13: 00007f3dc8de6038 R14: 00007f3dc8de5fa0 R15: 00007ffe8f51d4b8
[  886.950783][    C0]  </TASK>
[  888.251428][    C0] sched: DL replenish lagged too much
[  888.256910][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 106468068993 wd_nsec: 106468071432
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  890.059192][T27757] Bluetooth: hci8: command tx timeout
[  891.025802][ T5882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.207258][ T5882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.318077][ T5882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.444457][ T5882] bridge_slave_1: left allmulticast mode
[  891.446341][ T5882] bridge_slave_1: left promiscuous mode
[  891.448216][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.455848][ T5882] bridge_slave_0: left allmulticast mode
[  891.457636][ T5882] bridge_slave_0: left promiscuous mode
[  891.459431][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.767437][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  891.771564][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  891.777149][ T5882] bond0 (unregistering): Released all slaves
[  892.067356][ T5882] hsr_slave_0: left promiscuous mode
[  892.069438][ T5882] hsr_slave_1: left promiscuous mode
[  892.071478][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  892.074390][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  892.077872][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  892.080198][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  892.106526][ T5882] veth1_macvtap: left allmulticast mode
[  892.108373][ T5882] veth1_macvtap: left promiscuous mode
[  892.110045][ T5882] veth0_macvtap: left promiscuous mode
[  892.111780][ T5882] veth1_vlan: left promiscuous mode
[  892.114209][ T5882] veth0_vlan: left promiscuous mode
[  892.467921][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  892.494165][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  893.043794][ T5882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.097798][ T5882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.149542][ T5882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.196302][ T5882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.331690][ T5882] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.394395][ T5882] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.455555][ T5882] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.508204][ T5882] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.626843][ T5882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.675414][ T5882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.740427][ T5882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.826611][ T5882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.931714][ T5882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.999789][ T5882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.050506][ T5882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.146770][ T5882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.286504][ T5882] bridge_slave_1: left allmulticast mode
[  894.291041][ T5882] bridge_slave_1: left promiscuous mode
[  894.293068][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.297714][ T5882] bridge_slave_0: left allmulticast mode
[  894.299489][ T5882] bridge_slave_0: left promiscuous mode
[  894.301302][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.306659][ T5882] bridge_slave_1: left allmulticast mode
[  894.308591][ T5882] bridge_slave_1: left promiscuous mode
[  894.310438][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.316377][ T5882] bridge_slave_0: left allmulticast mode
[  894.319815][ T5882] bridge_slave_0: left promiscuous mode
[  894.321777][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.346442][ T5882] veth1_to_team: left allmulticast mode
[  894.348313][ T5882] veth1_to_team: left promiscuous mode
[  894.350363][ T5882] bridge0: port 3(veth1_to_team) entered disabled state
[  894.364404][ T5882] bridge_slave_0: left allmulticast mode
[  894.366589][ T5882] bridge_slave_0: left promiscuous mode
[  894.368729][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.383866][ T5882] bond_slave_0: left promiscuous mode
[  894.386383][ T5882] bond_slave_1: left promiscuous mode
[  894.552927][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  894.557378][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  894.561240][ T5882] bond0 (unregistering): Released all slaves
[  894.706543][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  894.710852][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  894.715300][ T5882] bond0 (unregistering): Released all slaves
[  894.948659][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  894.952781][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  894.957224][ T5882] bond0 (unregistering): Released all slaves
[  895.222538][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  895.228609][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  895.234402][ T5882] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  895.239431][ T5882] bond0 (unregistering): Released all slaves
[  895.401966][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  895.406744][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  895.410804][ T5882] bond0 (unregistering): Released all slaves
