last executing test programs:

42.739322637s ago: executing program 2 (id=7):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x44010)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xe98, 0x30, 0xb, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x1, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x2}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x6, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x6, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x3, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xe, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0xff5}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c10, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0x0, 0x22800000, 0x3, 0x10, 0x9}, {0x1, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x2, 0x9}, {0x82, 0x13, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x9b7, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x5, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x5}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7bd00000000200000000000000900"/25], 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={<r3=>0xffffffffffffffff})
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000001000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_u8={{0x17}}], 0x38}, 0x0)
sendmsg$unix(r3, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, @perf_config_ext={0x9, 0x1}, 0x4b0, 0xc8, 0x0, 0x2, 0x1000000000003}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x29, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x52, 0x1, 0x0, 0xff, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x400000000000aea}, 0x114005, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)

42.468500914s ago: executing program 2 (id=15):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r2}, 0x10)

42.218727732s ago: executing program 0 (id=20):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x10, 0x4}]}]}, {0x0, [0x5f, 0x61, 0x5f]}}, 0x0, 0x35, 0x0, 0x1, 0x9}, 0x28)

42.172916968s ago: executing program 0 (id=21):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

42.052933404s ago: executing program 0 (id=23):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200009d96d1c800000000000000008500000020000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)

41.934618739s ago: executing program 0 (id=24):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r0, 0x0, 0x80)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}, 0x80c8, 0x0, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x38, 0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce12"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

41.670343633s ago: executing program 2 (id=25):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0)

41.600367923s ago: executing program 2 (id=27):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x12, &(0x7f0000000000), 0x4)

41.548905674s ago: executing program 0 (id=29):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r0)

41.548643358s ago: executing program 2 (id=30):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)

40.110200685s ago: executing program 0 (id=38):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]})

39.979293013s ago: executing program 32 (id=38):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]})

39.379657458s ago: executing program 2 (id=45):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

39.163931483s ago: executing program 33 (id=45):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.338719741s ago: executing program 4 (id=542):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1c, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@loopback, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x71}}, 0xf0}}, 0x0)

1.338213666s ago: executing program 4 (id=544):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x9)

1.277830558s ago: executing program 1 (id=545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28000}, 0x80)

1.277603351s ago: executing program 4 (id=546):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x37)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e61800192db35c66a9", 0x5d}], 0x1}, 0x24000008)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20)

1.277400801s ago: executing program 1 (id=548):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94)

1.226078332s ago: executing program 1 (id=549):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x2505, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f0000, 0x7f}, 0x80, 0x4, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x20000000000002b1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000018000000000000000000000071122e0000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff7)
ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180))
close(r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$kcm(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x40c0ac4d)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced0003", 0x2d}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x2}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xc, 0x8, 0x9d, 0x5, 0x0, 0x100000000, 0x905a, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x227a, 0x0, @perf_config_ext={0x3, 0x6}, 0x8440, 0x9, 0x1, 0x1, 0x8, 0x4, 0x6, 0x0, 0x1}, 0x0, 0x0, r0, 0x2)

969.161838ms ago: executing program 3 (id=550):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075e, 0x80}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2801, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x0)

807.45495ms ago: executing program 3 (id=551):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

807.189424ms ago: executing program 1 (id=552):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

807.017187ms ago: executing program 1 (id=553):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x100)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100)

806.892935ms ago: executing program 3 (id=554):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60040207000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

748.881086ms ago: executing program 4 (id=555):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

748.649739ms ago: executing program 3 (id=556):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
close(0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90600fc60", 0x14}], 0x1}, 0x800)

669.898439ms ago: executing program 1 (id=557):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)

538.984018ms ago: executing program 3 (id=558):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

538.790075ms ago: executing program 4 (id=559):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0)

225.606122ms ago: executing program 3 (id=560):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0)

105.676774ms ago: executing program 34 (id=560):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0)

49.414322ms ago: executing program 4 (id=562):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, 0x1}, 0xc)

0s ago: executing program 35 (id=562):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, 0x1}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33073' (ED25519) to the list of known hosts.
syzkaller login: [   48.023583][ T5773] cgroup: Unknown subsys name 'net'
[   48.176039][ T5773] cgroup: Unknown subsys name 'cpuset'
[   48.181539][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.783908][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.374636][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.380861][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.384333][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.388173][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.391182][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.428586][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.432269][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.435832][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.439293][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.443417][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.524610][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.529872][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.533236][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.536610][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.540129][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.547157][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   54.627477][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.630298][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.634227][ T5841] bridge_slave_0: entered allmulticast mode
[   54.637695][ T5841] bridge_slave_0: entered promiscuous mode
[   54.642638][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.645493][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.648348][ T5841] bridge_slave_1: entered allmulticast mode
[   54.652467][ T5841] bridge_slave_1: entered promiscuous mode
[   54.702020][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.721796][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.773734][ T5841] team0: Port device team_slave_0 added
[   54.780576][ T5841] team0: Port device team_slave_1 added
[   54.804684][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.807557][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.817352][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.827775][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.830480][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.840591][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.854743][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.947679][ T5841] hsr_slave_0: entered promiscuous mode
[   54.950970][ T5841] hsr_slave_1: entered promiscuous mode
[   54.978580][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.052947][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.055846][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.058751][ T5847] bridge_slave_0: entered allmulticast mode
[   55.062362][ T5847] bridge_slave_0: entered promiscuous mode
[   55.076220][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.078731][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.081180][ T5847] bridge_slave_1: entered allmulticast mode
[   55.084326][ T5847] bridge_slave_1: entered promiscuous mode
[   55.174026][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.176429][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.178918][ T5852] bridge_slave_0: entered allmulticast mode
[   55.181969][ T5852] bridge_slave_0: entered promiscuous mode
[   55.185199][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.187607][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.190391][ T5852] bridge_slave_1: entered allmulticast mode
[   55.194535][ T5852] bridge_slave_1: entered promiscuous mode
[   55.199177][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.217507][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.269037][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.274499][ T5847] team0: Port device team_slave_0 added
[   55.286122][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.305549][ T5847] team0: Port device team_slave_1 added
[   55.350939][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.354321][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.365242][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.370622][ T5852] team0: Port device team_slave_0 added
[   55.375772][ T5852] team0: Port device team_slave_1 added
[   55.379235][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.381969][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.390224][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.434426][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.437026][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.446012][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.450483][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.453948][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.462417][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.473205][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.492411][ T5847] hsr_slave_0: entered promiscuous mode
[   55.494852][ T5847] hsr_slave_1: entered promiscuous mode
[   55.497367][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.499837][ T5847] Cannot create hsr debugfs directory
[   55.503207][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.522116][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.529096][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.578796][ T5852] hsr_slave_0: entered promiscuous mode
[   55.583140][ T5852] hsr_slave_1: entered promiscuous mode
[   55.585346][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   55.587306][ T5852] Cannot create hsr debugfs directory
[   55.758316][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.772909][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.788134][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.805080][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.839377][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.848139][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.857923][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.872773][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.887038][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.936149][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   55.947772][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.950936][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.962970][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.965966][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.025711][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.059792][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.078887][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.081441][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.093851][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.103678][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.106281][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.124034][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.138358][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.140898][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.153396][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.156380][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.254257][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.310160][ T5841] veth0_vlan: entered promiscuous mode
[   56.327889][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.344345][ T5841] veth1_vlan: entered promiscuous mode
[   56.381090][ T5841] veth0_macvtap: entered promiscuous mode
[   56.399126][ T5841] veth1_macvtap: entered promiscuous mode
[   56.402262][ T5233] Bluetooth: hci0: command tx timeout
[   56.416594][ T5847] veth0_vlan: entered promiscuous mode
[   56.425540][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.438117][ T5847] veth1_vlan: entered promiscuous mode
[   56.443818][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.456074][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.476434][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.479498][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.484948][ T5233] Bluetooth: hci1: command tx timeout
[   56.494052][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.509023][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.539251][ T5847] veth0_macvtap: entered promiscuous mode
[   56.548119][ T5847] veth1_macvtap: entered promiscuous mode
[   56.561893][ T5233] Bluetooth: hci2: command tx timeout
[   56.575727][ T5852] veth0_vlan: entered promiscuous mode
[   56.596964][ T5852] veth1_vlan: entered promiscuous mode
[   56.605843][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.612742][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.616042][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.625287][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.648864][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.652039][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.659092][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.676417][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.687278][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.689968][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.735863][ T5852] veth0_macvtap: entered promiscuous mode
[   56.755389][ T5852] veth1_macvtap: entered promiscuous mode
[   56.770363][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.805231][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.819058][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.831040][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.836657][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.840192][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.841550][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.849067][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.859212][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.885896][ T5906] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   56.889221][ T5906] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.903384][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.906898][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.949661][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.958915][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.977365][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.980255][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.031668][    C0] hrtimer: interrupt took 42538 ns
[   57.102922][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.106016][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.243727][ T5924] nbd: must specify an index to disconnect
[   57.426590][ T5938] netlink: 192 bytes leftover after parsing attributes in process `syz.0.16'.
[   57.916279][ T5960] Zero length message leads to an empty skb
[   58.481878][ T5233] Bluetooth: hci0: command tx timeout
[   59.757076][ T5712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.876970][ T5712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.943851][ T5712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.033225][ T5712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.079881][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.084679][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.088404][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.105230][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.111848][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.235082][ T5712] bridge_slave_1: left allmulticast mode
[   60.237524][ T5712] bridge_slave_1: left promiscuous mode
[   60.240724][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.258293][ T6007] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   60.267962][ T5712] bridge_slave_0: left allmulticast mode
[   60.268080][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   60.270333][ T5712] bridge_slave_0: left promiscuous mode
[   60.270525][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.339229][ T6008] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   60.555104][ T5712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.562005][ T5233] Bluetooth: hci0: command tx timeout
[   60.584135][ T5712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.594175][ T5712] bond0 (unregistering): Released all slaves
[   60.878852][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.884200][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.888152][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.893331][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.897281][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.048302][ T5712] hsr_slave_0: left promiscuous mode
[   62.051091][ T5712] hsr_slave_1: left promiscuous mode
[   62.056262][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.059243][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.088239][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.094375][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.121784][ T5712] veth1_macvtap: left promiscuous mode
[   62.124420][ T5712] veth0_macvtap: left promiscuous mode
[   62.126888][ T5712] veth1_vlan: left promiscuous mode
[   62.129659][ T5712] veth0_vlan: left promiscuous mode
[   62.162025][ T5233] Bluetooth: hci1: command tx timeout
[   62.518134][ T5712] team0 (unregistering): Port device team_slave_1 removed
[   62.547299][ T5712] team0 (unregistering): Port device team_slave_0 removed
[   62.651594][ T5233] Bluetooth: hci0: command tx timeout
[   62.753101][ T6010] chnl_net:caif_netlink_parms(): no params data found
[   62.776459][ T6047] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   62.972786][ T5233] Bluetooth: hci2: command tx timeout
[   62.977057][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.980308][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.983082][ T6010] bridge_slave_0: entered allmulticast mode
[   62.986763][ T6010] bridge_slave_0: entered promiscuous mode
[   62.990255][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.994360][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.997256][ T6010] bridge_slave_1: entered allmulticast mode
[   63.000990][ T6010] bridge_slave_1: entered promiscuous mode
[   63.541072][ T6001] chnl_net:caif_netlink_parms(): no params data found
[   63.603874][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.617157][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.668890][ T6010] team0: Port device team_slave_0 added
[   63.705944][ T6010] team0: Port device team_slave_1 added
[   63.717832][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.720210][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.723488][ T6001] bridge_slave_0: entered allmulticast mode
[   63.726810][ T6001] bridge_slave_0: entered promiscuous mode
[   63.731988][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.734784][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.737441][ T6001] bridge_slave_1: entered allmulticast mode
[   63.741087][ T6001] bridge_slave_1: entered promiscuous mode
[   63.827187][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.830092][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.843753][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.877772][ T5712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.901029][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.936871][ T5712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.944359][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.946959][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.962686][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.983187][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.006425][ T5712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.044471][ T6001] team0: Port device team_slave_0 added
[   64.087700][ T5712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.097751][ T6001] team0: Port device team_slave_1 added
[   64.128993][ T6010] hsr_slave_0: entered promiscuous mode
[   64.134216][ T6010] hsr_slave_1: entered promiscuous mode
[   64.136433][ T6010] debugfs: 'hsr0' already exists in 'hsr'
[   64.138960][ T6010] Cannot create hsr debugfs directory
[   64.152612][ T6080] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.60'.
[   64.166870][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.169238][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.181939][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.198833][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.201671][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.211240][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.241772][ T5233] Bluetooth: hci1: command tx timeout
[   64.345450][ T6001] hsr_slave_0: entered promiscuous mode
[   64.347856][ T6001] hsr_slave_1: entered promiscuous mode
[   64.350034][ T6001] debugfs: 'hsr0' already exists in 'hsr'
[   64.354173][ T6001] Cannot create hsr debugfs directory
[   64.429005][ T5712] bridge_slave_1: left allmulticast mode
[   64.431191][ T5712] bridge_slave_1: left promiscuous mode
[   64.433960][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.450769][ T5712] bridge_slave_0: left allmulticast mode
[   64.454306][ T5712] bridge_slave_0: left promiscuous mode
[   64.457448][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.673184][ T5712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.678629][ T5712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.684307][ T5712] bond0 (unregistering): Released all slaves
[   64.702272][ T6086] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.63'.
[   65.047834][ T5233] Bluetooth: hci2: command tx timeout
[   65.050355][ T5712] hsr_slave_0: left promiscuous mode
[   65.059332][ T5712] hsr_slave_1: left promiscuous mode
[   65.082172][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.085455][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.158712][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.169070][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.615351][ T5712] veth1_macvtap: left promiscuous mode
[   65.617277][ T5712] veth0_macvtap: left promiscuous mode
[   65.619479][ T5712] veth1_vlan: left promiscuous mode
[   65.622165][ T5712] veth0_vlan: left promiscuous mode
[   65.854675][ T6101] netlink: 188 bytes leftover after parsing attributes in process `syz.1.65'.
[   65.920868][ T5712] team0 (unregistering): Port device team_slave_1 removed
[   65.945366][ T5712] team0 (unregistering): Port device team_slave_0 removed
[   66.176283][ T6010] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.182487][ T6010] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.258040][ T6010] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.287060][ T6010] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.322012][ T5233] Bluetooth: hci1: command tx timeout
[   66.338353][ T6001] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.347744][ T6001] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.368901][ T6001] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.392559][ T6001] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.653920][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.660179][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.704920][ T6001] 8021q: adding VLAN 0 to HW filter on device team0
[   66.710751][ T6010] 8021q: adding VLAN 0 to HW filter on device team0
[   66.720934][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.724004][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.739976][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.743067][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.748227][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.750655][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.754659][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.757178][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.044169][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.073001][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.121590][ T5233] Bluetooth: hci2: command tx timeout
[   67.140701][ T6001] veth0_vlan: entered promiscuous mode
[   67.161088][ T6001] veth1_vlan: entered promiscuous mode
[   67.206957][ T6001] veth0_macvtap: entered promiscuous mode
[   67.215828][ T6001] veth1_macvtap: entered promiscuous mode
[   67.238634][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.256640][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.276921][ T5712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.280661][ T5712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.302544][ T5712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.306647][ T5712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.471393][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.474738][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.489906][ T6010] veth0_vlan: entered promiscuous mode
[   67.522778][ T6010] veth1_vlan: entered promiscuous mode
[   67.570455][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.579936][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.605681][ T6010] veth0_macvtap: entered promiscuous mode
[   67.613377][ T6010] veth1_macvtap: entered promiscuous mode
[   67.656418][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.684088][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.719774][ T5712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.729312][ T5712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.745986][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.761660][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.837157][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.843987][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.883443][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.888764][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.150908][ T6178] netlink: 'syz.1.75': attribute type 29 has an invalid length.
[   68.171223][ T6178] netlink: 'syz.1.75': attribute type 29 has an invalid length.
[   68.207186][ T6178] netlink: 'syz.1.75': attribute type 29 has an invalid length.
[   68.223359][ T6178] netlink: 'syz.1.75': attribute type 29 has an invalid length.
[   68.413442][ T5233] Bluetooth: hci1: command tx timeout
[   69.202457][ T5233] Bluetooth: hci2: command tx timeout
[   70.550574][ T6250] lo speed is unknown, defaulting to 1000
[   70.552879][ T6250] lo speed is unknown, defaulting to 1000
[   70.555904][ T6250] lo speed is unknown, defaulting to 1000
[   70.560776][ T6250] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.570641][ T6250] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.602175][ T6250] lo speed is unknown, defaulting to 1000
[   70.610440][ T6250] lo speed is unknown, defaulting to 1000
[   70.614229][ T6250] lo speed is unknown, defaulting to 1000
[   71.102058][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1040529234 wd_nsec: 1040513533
[   71.188510][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.190656][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.583648][ T6274] netlink: 'syz.1.97': attribute type 11 has an invalid length.
[   71.586192][ T6274] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.97'.
[   71.597130][ T6280] netlink: 'syz.4.99': attribute type 2 has an invalid length.
[   71.814211][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.064630][ T6280] lo speed is unknown, defaulting to 1000
[   72.257122][ T6164] Set syz1 is full, maxelem 65536 reached
[   72.494829][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.105'.
[   72.499453][ T6307] unsupported nlmsg_type 40
[   72.632033][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'.
[   74.147671][ T6359] netlink: ct family unspecified
[   74.149941][ T6359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.620586][ T6390] netlink: 14 bytes leftover after parsing attributes in process `syz.4.133'.
[   74.631592][ T6390] hsr_slave_0: left promiscuous mode
[   74.673648][ T6390] hsr_slave_1: left promiscuous mode
[   74.812891][ T6399] netlink: 'syz.4.137': attribute type 25 has an invalid length.
[   75.029072][ T6420] netlink: 'syz.3.147': attribute type 21 has an invalid length.
[   75.033832][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'.
[   75.240571][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'.
[   75.560257][ T6453] netlink: 'syz.1.163': attribute type 22 has an invalid length.
[   76.198814][ T6459] warning: `syz.4.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.314548][ T6463] : entered promiscuous mode
[   76.653130][ T6474] wg2: entered promiscuous mode
[   76.655540][ T6474] wg2: entered allmulticast mode
[   78.236976][ T6500] netlink: 'syz.4.180': attribute type 13 has an invalid length.
[   78.287403][ T6500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.293125][    T9] lo speed is unknown, defaulting to 1000
[   78.406389][ T6515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.429951][ T6518] netlink: 809 bytes leftover after parsing attributes in process `syz.3.188'.
[   78.449895][ T6518] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.188'.
[   78.455191][ T6518] netlink: 809 bytes leftover after parsing attributes in process `syz.3.188'.
[   78.583709][ T6527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.192'.
[   78.698476][ T6542] netlink: 324 bytes leftover after parsing attributes in process `syz.4.199'.
[   78.767670][ T6549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.588611][ T6611] netlink: 'syz.4.229': attribute type 5 has an invalid length.
[   79.639754][ T6616] netlink: 'syz.4.231': attribute type 10 has an invalid length.
[   79.646000][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.649419][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.654869][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.657435][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.659916][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.662268][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.669893][ T6616] team0: Port device bridge0 added
[   79.958816][ T6626] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   81.373184][   T51] cfg80211: failed to load regulatory.db
[   81.681195][ T6713] netlink: 10 bytes leftover after parsing attributes in process `syz.4.269'.
[   81.697396][ T6716] netlink: 'syz.1.270': attribute type 10 has an invalid length.
[   81.701223][ T6716] geneve0: entered promiscuous mode
[   81.709122][ T6716] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   82.186301][ T6739] netlink: 208344 bytes leftover after parsing attributes in process `syz.4.275'.
[   82.189946][ T6739] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   82.193769][ T6739] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.888832][ T6779] netlink: 'syz.4.289': attribute type 4 has an invalid length.
[   82.892120][ T6779] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.289'.
[   83.165755][ T6799] pim6reg1: entered allmulticast mode
[   83.404279][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'.
[   83.408189][ T6828] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   83.420115][ T6828] netlink: 'syz.1.306': attribute type 2 has an invalid length.
[   83.424578][ T6828] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   83.691743][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'.
[   83.792643][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'.
[   83.820308][ T6859] netlink: 220 bytes leftover after parsing attributes in process `syz.1.316'.
[   83.931684][ T6864] lo speed is unknown, defaulting to 1000
[   84.559598][ T6916] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.333'.
[   84.728917][ T6930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.337'.
[   84.959465][ T6945] netlink: 10 bytes leftover after parsing attributes in process `syz.1.343'.
[   86.905581][ T7031] syz.4.367 uses obsolete (PF_INET,SOCK_PACKET)
[   86.912508][ T7034] syzkaller0: entered promiscuous mode
[   86.914370][ T7034] syzkaller0: entered allmulticast mode
[   86.929578][ T7034] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   87.290691][ T7066] netlink: 'syz.1.379': attribute type 4 has an invalid length.
[   87.693425][ T7090] netlink: 196 bytes leftover after parsing attributes in process `syz.1.390'.
[   87.901798][ T7098] netlink: 'syz.3.393': attribute type 29 has an invalid length.
[   87.930302][ T7098] netlink: 'syz.3.393': attribute type 10 has an invalid length.
[   88.719873][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.731201][ T7098] team0: Port device bond0 added
[   88.936730][ T7098] syz.3.393 (7098) used greatest stack depth: 19368 bytes left
[   88.963793][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'.
[   88.992640][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'.
[   89.070343][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'.
[   89.088953][ T7128] netlink: 'syz.4.404': attribute type 6 has an invalid length.
[   89.092257][ T7128] netlink: 164 bytes leftover after parsing attributes in process `syz.4.404'.
[   89.256997][ T7143] netlink: 'syz.1.410': attribute type 2 has an invalid length.
[   89.259741][ T7143] netlink: 'syz.1.410': attribute type 7 has an invalid length.
[   89.262957][ T7143] netlink: 85 bytes leftover after parsing attributes in process `syz.1.410'.
[   89.266114][ T7143] netlink: 130140 bytes leftover after parsing attributes in process `syz.1.410'.
[   89.269491][ T7143] netlink: 'syz.1.410': attribute type 2 has an invalid length.
[   89.275701][ T7143] netlink: 'syz.1.410': attribute type 7 has an invalid length.
[   89.281552][ T7143] netlink: 85 bytes leftover after parsing attributes in process `syz.1.410'.
[   89.476668][ T7151] netlink: 208 bytes leftover after parsing attributes in process `syz.1.415'.
[   90.838915][ T7182] netlink: 'syz.3.427': attribute type 3 has an invalid length.
[   90.847863][ T7182] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.427'.
[   90.900888][ T7184] netlink: 64 bytes leftover after parsing attributes in process `syz.4.429'.
[   91.366464][ T7199] netlink: 'syz.4.434': attribute type 10 has an invalid length.
[   91.405552][ T7199] team0: Port device dummy0 added
[   91.749355][ T7216] lo speed is unknown, defaulting to 1000
[   92.105313][ T7239] geneve0: entered promiscuous mode
[   92.205314][ T7239] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   92.671564][ T5233] Bluetooth: hci2: unexpected event 0x01 length: 151 > 1
[   92.758689][ T7276] validate_nla: 1 callbacks suppressed
[   92.758763][ T7276] netlink: 'syz.4.465': attribute type 10 has an invalid length.
[   92.781195][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   92.789552][ T7281] netlink: 'syz.1.467': attribute type 3 has an invalid length.
[   93.287922][ T7276] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   93.340905][ T7288] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.585278][ T7306] netlink: 'syz.1.478': attribute type 10 has an invalid length.
[   93.619452][ T7304] netlink: 'syz.3.477': attribute type 29 has an invalid length.
[   94.222099][ T7334] netlink: 'syz.1.490': attribute type 1 has an invalid length.
[   94.226915][ T7334] __nla_validate_parse: 8 callbacks suppressed
[   94.226932][ T7334] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.490'.
[   94.359607][ T7337] netlink: 'syz.1.491': attribute type 10 has an invalid length.
[   94.363043][ T7337] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.491'.
[   94.576783][ T7350] netlink: 'syz.1.497': attribute type 17 has an invalid length.
[   94.580451][ T7350] netlink: 148 bytes leftover after parsing attributes in process `syz.1.497'.
[   94.639939][ T7350] netlink: 'syz.1.497': attribute type 29 has an invalid length.
[   96.844587][ T7392] netlink: 'syz.4.515': attribute type 21 has an invalid length.
[   96.848274][ T7392] netlink: 14045 bytes leftover after parsing attributes in process `syz.4.515'.
[   97.564886][ T7386] wg2: entered promiscuous mode
[   97.568060][ T7386] wg2: entered allmulticast mode
[   97.663451][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[   97.670211][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.521'.
[   97.676794][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.521'.
[   97.695185][ T7406] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   97.998148][ T7424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.528'.
[   98.064712][ T7432] netlink: 'syz.3.532': attribute type 21 has an invalid length.
[   98.068854][ T7432] netlink: 'syz.3.532': attribute type 10 has an invalid length.
[   98.072632][ T7432] netlink: 55 bytes leftover after parsing attributes in process `syz.3.532'.
[   98.505712][ T7457] netlink: 220 bytes leftover after parsing attributes in process `syz.4.542'.
[   99.033919][ T7485] netlink: 'syz.1.552': attribute type 12 has an invalid length.
[   99.076035][ T7489] netlink: 'syz.3.554': attribute type 4 has an invalid length.
[   99.119681][ T7493] netlink: 'syz.4.555': attribute type 3 has an invalid length.
[   99.147457][ T7493] netlink: 'syz.4.555': attribute type 2 has an invalid length.
[   99.647371][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.724062][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.815662][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.867268][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
SYZFAIL: SIGBUS
pc-offset:0xffffffffffec0ae0 pc:0x7fd6ce18e670 addr:(nil) code=128 (errno 4: Interrupted system call)
[  100.006994][   T12] bridge_slave_1: left allmulticast mode
[  100.009603][   T12] bridge_slave_1: left promiscuous mode
[  100.013820][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.023559][   T12] bridge_slave_0: left allmulticast mode
[  100.026019][   T12] bridge_slave_0: left promiscuous mode
[  100.028554][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.235485][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  100.401801][   T12] team0: Port device bond0 removed
[  100.406801][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.412859][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.418181][   T12] bond0 (unregistering): Released all slaves
[  100.696401][   T12] hsr_slave_0: left promiscuous mode
[  100.699799][   T12] hsr_slave_1: left promiscuous mode
[  100.706415][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.709498][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.716471][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.719666][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.734227][   T12] veth1_macvtap: left promiscuous mode
[  100.736575][   T12] veth0_macvtap: left promiscuous mode
[  100.975852][   T12] team0 (unregistering): Port device team_slave_1 removed
[  101.003004][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.611414][   T26] wlan1: Trigger new scan to find an IBSS to join
[  105.602583][   T26] wlan1: Trigger new scan to find an IBSS to join
[  105.683224][   T26] wlan1: Creating new IBSS network, BSSID 46:d2:58:60:cb:8e

VM DIAGNOSIS:
21:50:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000003 RBX=ffffffff8b8bd324 RCX=014f66ac75da7a00 RDX=ffffffff8172c195
RSI=ffffffff8e139ee0 RDI=ffffffff8b8bd320 RBP=ffffc900000f6c80 RSP=ffffc900000f6b58
R8 =ffffc900000f7a70 R9 =0000000000000000 R10=ffffc900000f6e18 R11=fffff5200001edc5
R12=1ffff9200001ed78 R13=ffffffff8172c195 R14=dffffc0000000000 R15=0000000000000002
RIP=ffffffff8b751bdf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff14859da8 CR3=000000010f000000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff1102467c886 RBX=0000000000000000 RCX=ffff8881083c9cc0 RDX=0000000000000000
RSI=00007fd6ce18ebe9 RDI=ffffffffa0000848 RBP=0000000000000000 RSP=ffffc90002e6edd0
R8 =0000000000000000 R9 =ffffffff81cea1f6 R10=ffffc90002e6eeb8 R11=ffffffff81ac3890
R12=ffffffffa0000848 R13=dffffc0000000000 R14=00007fd6ce18ebe9 R15=ffff8881233e4430
RIP=ffffffff81cea372 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555620e3500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd6ceee7d60 CR3=000000010b010000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe330787498 00007fe330787470 XMM03=00007fe3307874a8 00007fe3307874a0
XMM04=00007fe3312ed100 00007fe330787460 XMM05=00007fe330787478 00007fe3307874c0
XMM06=00007fe3307874b8 00007fe3307874b0 XMM07=00007fe3307874a8 00007fe3307874a0
XMM08=0000000000000000 00007fe330612ee7 XMM09=0000000000000000 00007fe330612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
