last executing test programs:

6m50.70401884s ago: executing program 4 (id=375):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x1000000, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

6m50.567310987s ago: executing program 4 (id=378):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000004080)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="d3aa"], &(0x7f0000000480)='syzkaller\x00', 0xe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000700), 0x2}, 0x0, 0x1, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbbfffffffffffff0000000000000000000000000000000000000000000000020100006e71eca3c82eda0000000000feffffff0000000000"], 0xb8}}, 0x2c000010)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0xa, 0x3, 0x3a)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
socket$kcm(0x2, 0x200000000000001, 0x106)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)

6m49.561630697s ago: executing program 4 (id=383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a20000000000a03000000000000000000070000010900010073797a300000000060000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d1c0012801800cf275fd69ea013ce6e6e6c696d6974000000040002800800034000000110140000001000010000000000000000000584000a"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

6m49.390503381s ago: executing program 4 (id=386):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x8, 0x0, 0x8020, 0x90000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4)
recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
close(r7)

6m46.990285225s ago: executing program 4 (id=401):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xf20b45d2d82d6ffd)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0)
r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x10, 0x0, 0xfffffffeffffffef, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x4000002, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049005300c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba0000001f010580", @ANYRESOCT=r1], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1200000003000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, &(0x7f0000000140)=r4}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r3}, 0x18)
socket$kcm(0xa, 0x1, 0x0)

6m46.765615758s ago: executing program 4 (id=406):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000040000000100000000000000085000000170000bbd81114805fee558c6f12817ba114587d3fbd76e15b6591340e75ebc80883fe4b2ce1af38ef7a338f6be61e319a3209db83ef6139031a6996aaa0b2ed3b214198"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x3, 0x0, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$inet(0x2, 0x1, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0xfffffffffffffd66}], 0x1}, 0x2004c810)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)

6m31.665533165s ago: executing program 32 (id=406):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000040000000100000000000000085000000170000bbd81114805fee558c6f12817ba114587d3fbd76e15b6591340e75ebc80883fe4b2ce1af38ef7a338f6be61e319a3209db83ef6139031a6996aaa0b2ed3b214198"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x3, 0x0, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$inet(0x2, 0x1, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0xfffffffffffffd66}], 0x1}, 0x2004c810)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)

6m12.130064087s ago: executing program 3 (id=598):
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdc}, 0x60, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x50}, 0x40010160)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdf8001, 0x0, @perf_config_ext={0x8001, 0x3}, 0x4001, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffc, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x11, 0x26c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0xc, 0x222, 0x8, 0x0, 0x0, 0x80000, 0x0, 0x8000040000000000}, 0x0, 0xffffffffffffffff, r1, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x2000c000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x2048, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x802}, 0x48011)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r5, 0x0, 0x404c810)
socketpair(0x6, 0x4, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$kcm(0x2, 0x2, 0x0)

6m11.502058429s ago: executing program 3 (id=602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

6m11.216126758s ago: executing program 3 (id=607):
perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000c0000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

6m10.069811654s ago: executing program 3 (id=612):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x6871, 0x0, 0x8, 0x43fe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fcffffff0000000009000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xad}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000000500)=""/232, 0x41000, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x7ff, 0x4fb7deca}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x1, r0, r1], &(0x7f0000000800)=[{0x1, 0x1, 0x8}, {0x4, 0x1, 0x1}, {0x2, 0x1, 0x2, 0x3}, {0x3, 0x4, 0x9, 0xc26e2e9d38fb29ec}], 0x10, 0xfce}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084508864325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], 0x0}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a", 0x35}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e000000040104", 0x31}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0x5, @any, 0xa5, 0x1}, 0x80, 0x0}, 0x44)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b500"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0x3ff}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003b00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socket$tipc(0x1e, 0x2, 0x0)

6m9.425890095s ago: executing program 3 (id=619):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0xc0000, 0xd0, &(0x7f0000000980)=""/208, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x10, 0x57, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0), 0x0, 0x10, 0x9c8}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0, 0x0, 0x0, 0x4100}, 0x0)
recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120)
sendmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x4e22, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x268}, 0x40)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000200000000000000090000e7a3bd49523ed84d8eb82e6ab712260085000000270500000000000000000200"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xe)

6m9.111115448s ago: executing program 3 (id=625):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x240000000000}, 0x11efa, 0x4, 0x98, 0x9, 0x4000000000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

6m8.329543962s ago: executing program 33 (id=625):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x240000000000}, 0x11efa, 0x4, 0x98, 0x9, 0x4000000000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.997867946s ago: executing program 5 (id=4587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0)

2.856451693s ago: executing program 5 (id=4589):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x10008, 0xffffffffffffffff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400d0a4)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd854}, 0x4000814)
r7 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x3)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=r8, 0x4)
sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000)

2.54189845s ago: executing program 2 (id=4591):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8], 0x9a)

2.496579669s ago: executing program 5 (id=4593):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) (fail_nth: 2)

2.132724196s ago: executing program 2 (id=4596):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e000000006000000030000000800000009"], 0xc0}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000000e0601030000000000000000050000030900020033797a30001f00000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000e06015e0000000000000000050000033000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x4, 0x0, 0x0, 0x2000000000000, 0x80004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x5, 0x10000000000010, 0x0, 0xfff2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x468, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x9, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

2.132300358s ago: executing program 5 (id=4597):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, 0x0, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffa, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x3, 0x0, 0x95, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x13, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={r2, 0xea3, 0x4}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x80000001}}, 0x0, 0x2, 0x4d, &(0x7f0000000840)=""/77, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x4, 0x400, 0x101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)={0x178, 0x1403, 0x1, 0x70bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x178}}, 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x108400, 0x2, 0x0, 0x0, 0xffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

1.718905991s ago: executing program 2 (id=4604):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e)

1.456471875s ago: executing program 0 (id=4606):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0xc0)

1.438576504s ago: executing program 6 (id=4607):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
write$cgroup_devices(r1, 0x0, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000500"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010400000000000000000500000314000780050014006ae0000008000840000000440500010007000000050004000400000009000200"], 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004043}, 0x400c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000180), 0x4, 0x1}}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)

1.235499591s ago: executing program 0 (id=4608):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c051}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [], {0x95, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a000000000000010162000009001780fdffffffff"], 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x20000841)

1.23418945s ago: executing program 1 (id=4609):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c4}, 0xc010)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff300001800000000000000000000000010000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000ebfbb8c402030a55fa34ec4c8068dd7a895c3db2d62fba0ee17c32b5b92605b65007765d22c4f32da083359def9e672b39a50a9adc9683667ef810b77ba04911cbd79b2b6741ce", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, &(0x7f00000004c0)="5bc0eb75a79a8b6b94bfdd347eed855acb7c350399a0b8566c329980cacf2cbc803df60505339e8becd6c2b2c4781773224de9774c19ceb4f90b4cb9a551f447059fe937a01bd2a57c99be7a705307fb69d95cb3a130c3837fb5e1", &(0x7f0000000740)=""/233}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x10, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xd4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0)

1.101740934s ago: executing program 6 (id=4610):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x10008, 0xffffffffffffffff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400d0a4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)

1.099647315s ago: executing program 5 (id=4611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e)

1.030433943s ago: executing program 1 (id=4612):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e000000006000000030000000800000009"], 0xc0}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000000e0601030000000000000000050000030900020033797a30001f00000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000e06015e0000000000000000050000033000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x4, 0x0, 0x0, 0x2000000000000, 0x80004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x5, 0x10000000000010, 0x0, 0xfff2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x468, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x9, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

959.971122ms ago: executing program 0 (id=4613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f40000000002000a0000000000000000000000070800044000000004080005400000000e060007400003000013000b0063616c6c666f7277617264696e670000080008"], 0xf4}, 0x1, 0x0, 0x0, 0x24000800}, 0x20004080)
socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
getpid()
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1264, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xce98f31e9a13de71, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
close(r3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000280)}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xc5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @restrict={0x6}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000000400)=""/53, 0x65, 0x35, 0x1, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x930b252e5d6bd8d1, 0x1, 0x64b, 0x0, 0x28080, r0, 0x7, '\x00', r5, r6, 0x1, 0x1, 0x0, 0x0, @value=r6}, 0x50)

946.085428ms ago: executing program 6 (id=4614):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c051}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [], {0x95, 0x25}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a000000000000010162000009001780fdffffffff"], 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x20000841)

728.491447ms ago: executing program 1 (id=4615):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000004080)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="d3aa00"], &(0x7f0000000480)='syzkaller\x00', 0xe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000700), 0x2}, 0x0, 0x1, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbbfffffffffffff0000000000000000000000000000000000000000000000020100006e71eca3c82eda0000000000feffffff0000000000"], 0xb8}}, 0x2c000010)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, 0x0, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0xa, 0x3, 0x3a)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
socket$kcm(0x2, 0x200000000000001, 0x106)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)

666.542672ms ago: executing program 6 (id=4616):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ffb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x39, 0x1, 0x7fffa, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

643.378391ms ago: executing program 2 (id=4617):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000004080)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="d3aa00"], &(0x7f0000000480)='syzkaller\x00', 0xe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000700), 0x2}, 0x0, 0x1, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)
socket$kcm(0xa, 0x1, 0x106)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0xa, 0x3, 0x3a)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
socket$kcm(0x2, 0x200000000000001, 0x106)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)

620.887421ms ago: executing program 0 (id=4618):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0xa8, 0x2, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

522.271456ms ago: executing program 6 (id=4619):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75faf1b444b2746, @perf_config_ext={0x7f, 0x9}, 0x100c, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="9c1ae20bcb9c28571ae846a811bfff5cb81b49567aea68c9254a446ca2cb32146ba8a7eb5692d71ce0c32171272d858a97267876971183b8b7dd28cbbeff94c4f6ec7fc9b8a4c615d0"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82640, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8902, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000000200000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x21)
r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0xfc, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000200600010011"], 0x1c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r9, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x10802, 0x0)

449.196139ms ago: executing program 1 (id=4620):
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac"], 0xfdef)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef)

307.638755ms ago: executing program 0 (id=4621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

233.597315ms ago: executing program 1 (id=4622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpid()
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)={0x3e4, 0x42, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x2038}, @nested={0x3c8, 0x1, 0x0, 0x1, [@nested={0x3c2, 0x24, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}, @nested={0x7b, 0x132, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @fd=r0}, @generic="03cbc91f6096ee0abd916a5374425cff03d2c5627833e39ce0c815048a986dbe771f0f937b32060c351607a5da66acabe74306fe60043851e0d95107a2af40bbad0765afbdcfd7187d4618de3c401fa3a2754e44f31b7800c2b75ed0612150b39553cf2383c75a371a04a64c6c5ab0"]}, @typed={0x2e, 0x14, 0x0, 0x0, @binary="d41f8ceb793af1cdb853dde8666a3f7fcf0859d813ce8026544dab1d846be1afb747f7c9ab44dc2db9f7"}, @generic, @generic="d3b856b1bd803b148b3cca5a82dd48305d0eb11b12afd6fe14421c52ee528ecbde2a7943bb3502169f468cc4f29b7c1e3f23d238afa6cfcced86184d3cda623b50530106d5cc0ab3612455f087d6648fa21de5572b16bf40d0c33ee8e9d732e16865a51174215a6675a36650356cc6ba935bfd46cdbc295e1494ba6345038782cdeaf97279054d0cf0f1c4eebfbe7fa4d3b5175f55b43dba048cd4d9a02a5112c9e1432efa5b9b7cb1673d47b2400aecd445d133ca0ef07b8fe8077cf8c496555e0c43e3cb6e4dfbba659972382bb2ca6cd8e259504f58b1be3a5fa91ff6c06454e242c3e05c1d7962944cfd4ed1d2d15fb7ae6a3b84", @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@empty}, @nested={0x126, 0xd4, 0x0, 0x1, [@typed={0xc, 0x53, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x13d}, @nested={0x4, 0x91}, @generic="b6", @nested={0x4, 0x38}, @generic="8c924f7634192ab3e0e98ce67550f2e351e020337a2539b276f758a489ad392c220a4971ebf7952e87f284125df476428a398fc79c330d5b2f49d8487cf0d4836a1717d38b9e575511bbcd6aa591d838e8", @typed={0x28, 0x3a, 0x0, 0x0, @binary="160c00eef8a8838efaf03b7dd9252183006ebb7cbf09d516cbd37fd63e5b89527156a8e6"}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x3}, @generic="dd084c43580e2483c69e937207d966d7bca21af08ede4b581e1202716de95bd19c9d4e82cd8987dd80e5c71a23c34841071bc0d3eda958dcf3ae0a524619160fbf23b98b119d2dc176927a585f73e506934e26e2b8a8be8768cd4c911dc81b7538f55ca05f02039dd1f0d6c18dcb43822ab3c6f9cd798a0bacdd1a50bd66dcdf5dd6bd44", @generic]}, @nested={0xd5, 0x127, 0x0, 0x1, [@generic="ae8ba1afab44a0d8d5546025a9d74e88fb1bb5a07a5236049eecd8db31b74d0c206cac66a4439b8cb71869f6b1b91fce322200513bd54dd0b236916c662dd2a3e37e3695a45bd4301f26590a83928e13323ca2560e9bb5bd7afe281c8428c26b8ed1aa162768a83edf5ea95a660382dc015ab763d8c080a21f46e1799029cf6bfb34bcd8a6f39bc46aafb59b9cdc88719453015396cefc74af229fbb0dd85c7acd17d075c62aef696fecb85241c28990926e6bed7d1a2850b4b70993dbc6f8a209247c891aa4e230e1de1b16ec470a5513"]}]}]}, @nested={0x4, 0x4}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x2bb, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xa0d8, 0xa, 0x0, 0x0, 0xd99}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1d, 0x11, 0x3, 0x6, {0x6, 0x81, 0x6, 0x80006, 0x6, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', r6, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)=',\x00')

175.981179ms ago: executing program 0 (id=4623):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c4}, 0xc010)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff300001800000000000000000000000010000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000ebfbb8c402030a55fa34ec4c8068dd7a895c3db2d62fba0ee17c32b5b92605b65007765d22c4f32da083359def9e672b39a50a9adc9683667ef810b77ba04911cbd79b2b6741ce", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, &(0x7f00000004c0)="5bc0eb75a79a8b6b94bfdd347eed855acb7c350399a0b8566c329980cacf2cbc803df60505339e8becd6c2b2c4781773224de9774c19ceb4f90b4cb9a551f447059fe937a01bd2a57c99be7a705307fb69d95cb3a130c3837fb5e1", &(0x7f0000000740)=""/233}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x10, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xd4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0)

137.655992ms ago: executing program 5 (id=4624):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c051}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [], {0x95, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a000000000000010162000009001780fdffffffff"], 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x20000841)

93.678027ms ago: executing program 2 (id=4625):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)

68.955026ms ago: executing program 1 (id=4626):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)
socket$kcm(0x22, 0x2, 0x21)

2.000752ms ago: executing program 6 (id=4627):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, 0x0, 0x0)

0s ago: executing program 2 (id=4628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e)

kernel console output (not intermixed with test programs):

8][T11166] wlan1 speed is unknown, defaulting to 1000
[  272.173207][T11180] netlink: 'syz.0.1744': attribute type 25 has an invalid length.
[  272.204611][T11180] netlink: 'syz.0.1744': attribute type 1 has an invalid length.
[  272.212979][T11166] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  272.239208][T11180] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.545430][T11166] wlan1 speed is unknown, defaulting to 1000
[  272.565816][T11166] wlan1 speed is unknown, defaulting to 1000
[  272.586358][T11166] wlan1 speed is unknown, defaulting to 1000
[  272.635531][T11166] wlan1 speed is unknown, defaulting to 1000
[  272.664242][T11166] wlan1 speed is unknown, defaulting to 1000
[  274.170803][T11237] netlink: 'syz.5.1763': attribute type 1 has an invalid length.
[  274.592097][T11262] syzkaller0: entered promiscuous mode
[  274.607607][T11262] syzkaller0: entered allmulticast mode
[  276.808611][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'.
[  277.008319][T11329] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.1799'.
[  277.149639][T11334] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1801'.
[  277.164929][T11334] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1801'.
[  277.231565][T11331] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.268355][T11331] bridge_slave_0 (unregistering): left allmulticast mode
[  277.280458][T11331] bridge_slave_0 (unregistering): left promiscuous mode
[  277.287535][T11331] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.366588][T11339] syzkaller0: entered promiscuous mode
[  277.373471][T11339] syzkaller0: entered allmulticast mode
[  277.443746][T11353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1808'.
[  277.468181][T11353] netlink: 'syz.0.1808': attribute type 10 has an invalid length.
[  277.544011][T11356] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1811'.
[  277.662818][ T5838] Bluetooth: hci5: command 0x0406 tx timeout
[  278.801756][T11370] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1814'.
[  279.246595][T11390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.357632][T11398] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1827'.
[  279.375298][T11398] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1827'.
[  279.412990][T11400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1826'.
[  279.462639][T11400] netlink: 'syz.0.1826': attribute type 10 has an invalid length.
[  279.494951][T11402] siw: device registration error -23
[  279.615918][T11406] netlink: 'syz.2.1830': attribute type 49 has an invalid length.
[  279.739946][ T5838] Bluetooth: hci5: command 0x0406 tx timeout
[  279.796370][T11413] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.828477][T11413] bridge_slave_0 (unregistering): left allmulticast mode
[  279.838649][T11413] bridge_slave_0 (unregistering): left promiscuous mode
[  279.847635][T11413] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.138252][T11433] netlink: 'syz.0.1843': attribute type 10 has an invalid length.
[  280.357588][T11437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.256353][T11437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.469572][T11456] __nla_validate_parse: 3 callbacks suppressed
[  283.469592][T11456] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1852'.
[  283.492570][T11456] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1852'.
[  283.738488][T11468] syzkaller0: entered promiscuous mode
[  283.750731][T11468] syzkaller0: entered allmulticast mode
[  284.590596][T11497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.558003][T11474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.574816][T11485] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1868'.
[  287.948620][T11629] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1917'.
[  288.042645][T11629] netlink: 'syz.6.1917': attribute type 10 has an invalid length.
[  288.813950][T11676] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1933'.
[  288.871172][T11676] netlink: 'syz.6.1933': attribute type 10 has an invalid length.
[  289.636335][T11716] netlink: 1952 bytes leftover after parsing attributes in process `syz.2.1944'.
[  289.849549][T11732] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1950'.
[  289.872031][T11732] netlink: 'syz.6.1950': attribute type 10 has an invalid length.
[  289.936057][T11741] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  290.922869][T11789] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1967'.
[  290.928470][T11790] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  290.994088][T11801] netlink: 'syz.6.1967': attribute type 10 has an invalid length.
[  291.834132][T11835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1983'.
[  291.848077][T11835] netlink: 'syz.0.1983': attribute type 10 has an invalid length.
[  292.105038][T11853] syzkaller0: entered promiscuous mode
[  292.366230][T11866] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1994'.
[  292.897650][T11899] netlink: 'syz.1.2004': attribute type 29 has an invalid length.
[  293.122630][T11907] syzkaller0: entered promiscuous mode
[  293.714480][T11931] netlink: 'syz.6.2017': attribute type 29 has an invalid length.
[  294.104374][T11944] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  297.323776][T11961] netlink: 'syz.5.2031': attribute type 29 has an invalid length.
[  297.550542][T11973] netlink: 64535 bytes leftover after parsing attributes in process `syz.6.2036'.
[  297.832179][T11992] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  297.878132][T11995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2043'.
[  298.704897][T12030] netlink: 64535 bytes leftover after parsing attributes in process `syz.6.2051'.
[  298.862607][ T5848] Bluetooth: hci3: command 0x0406 tx timeout
[  299.086845][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2057'.
[  299.133144][T12046] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  299.164787][T12051] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2059'.
[  299.855244][T12068] netlink: 30487 bytes leftover after parsing attributes in process `syz.5.2066'.
[  300.016080][T12085] netlink: 'syz.6.2069': attribute type 1 has an invalid length.
[  300.070992][T12087] siw: device registration error -23
[  300.541917][T12110] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  300.716601][T12115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2076'.
[  300.775804][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2076'.
[  300.945441][T12122] netlink: 30487 bytes leftover after parsing attributes in process `syz.2.2080'.
[  301.173377][T12132] netlink: 'syz.6.2082': attribute type 1 has an invalid length.
[  301.567945][T12160] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2089'.
[  302.705388][T12218] __nla_validate_parse: 4 callbacks suppressed
[  302.705411][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2107'.
[  302.735905][T12215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2107'.
[  302.809375][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'.
[  303.377856][T12248] delete_channel: no stack
[  303.383205][ T5838] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  304.094552][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'.
[  304.512646][T12285] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  304.890094][T12301] delete_channel: no stack
[  305.233613][T12327] netlink: 'syz.2.2140': attribute type 1 has an invalid length.
[  305.922390][T12371] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2149'.
[  305.924656][T12351] delete_channel: no stack
[  306.912293][T12406] delete_channel: no stack
[  307.224646][T12435] siw: device registration error -23
[  307.873613][T12454] delete_channel: no stack
[  308.071244][T12459] syzkaller0: entered promiscuous mode
[  308.077062][T12459] syzkaller0: entered allmulticast mode
[  308.293546][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2192'.
[  308.476010][T12498] netlink: 'syz.0.2194': attribute type 5 has an invalid length.
[  308.486810][T12498] netlink: 'syz.0.2194': attribute type 5 has an invalid length.
[  308.688354][T12503] delete_channel: no stack
[  310.019238][T12488] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2194'.
[  310.043246][T12508] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  310.097347][T12523] dvmrp1: tun_chr_ioctl cmd 1074025672
[  310.114781][T12523] dvmrp1: ignored: set checksum disabled
[  310.746062][T12576] netlink: 'syz.5.2221': attribute type 1 has an invalid length.
[  311.318187][T12568] syzkaller0: entered promiscuous mode
[  311.324314][T12568] syzkaller0: entered allmulticast mode
[  311.411314][T12590] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2229'.
[  311.427540][T12590] netlink: 'syz.1.2229': attribute type 10 has an invalid length.
[  312.128659][T12603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2234'.
[  312.894689][T12594] dvmrp1: tun_chr_ioctl cmd 1074025672
[  312.900501][T12594] dvmrp1: ignored: set checksum disabled
[  313.210948][T12621] netlink: 'syz.1.2240': attribute type 1 has an invalid length.
[  313.383983][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2245'.
[  313.504635][T12633] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2248'.
[  313.518103][T12633] netlink: 'syz.2.2248': attribute type 10 has an invalid length.
[  313.844317][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2254'.
[  313.911623][T12643] syzkaller0: entered promiscuous mode
[  313.917251][T12643] syzkaller0: entered allmulticast mode
[  314.222994][T12673] netlink: 5224 bytes leftover after parsing attributes in process `syz.6.2263'.
[  314.306418][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2261'.
[  314.666207][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2270'.
[  314.915549][T12700] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2273'.
[  314.925289][T12700] openvswitch: netlink: Flow key attr not present in new flow.
[  315.249156][T12706] netlink: 5224 bytes leftover after parsing attributes in process `syz.0.2276'.
[  315.546914][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2278'.
[  316.013350][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'.
[  316.375922][T12732] netlink: 'syz.2.2287': attribute type 1 has an invalid length.
[  316.655799][T12746] netlink: 'syz.1.2293': attribute type 29 has an invalid length.
[  316.697210][T12737] hsr_slave_0: left promiscuous mode
[  317.139955][T12737] hsr_slave_1: left promiscuous mode
[  317.296676][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.303226][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.847224][T12781] netlink: 'syz.1.2308': attribute type 29 has an invalid length.
[  318.017956][T12790] netlink: 'syz.2.2310': attribute type 10 has an invalid length.
[  318.081697][T12790] veth0_vlan: left promiscuous mode
[  318.088447][T12790] veth0_vlan: entered promiscuous mode
[  318.164734][T12790] team0: Device veth0_vlan failed to register rx_handler
[  318.185699][T12797] netlink: 'syz.6.2314': attribute type 1 has an invalid length.
[  318.456755][T12805] __nla_validate_parse: 16 callbacks suppressed
[  318.456775][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2316'.
[  318.520735][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2316'.
[  318.557814][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2316'.
[  318.587118][T12815] netlink: 'syz.0.2321': attribute type 29 has an invalid length.
[  318.606083][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2316'.
[  318.642523][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2322'.
[  319.315571][T12840] netlink: 'syz.6.2329': attribute type 5 has an invalid length.
[  319.338573][T12840] netlink: 'syz.6.2329': attribute type 5 has an invalid length.
[  319.343831][T12829] syzkaller0: entered promiscuous mode
[  319.352780][T12829] syzkaller0: entered allmulticast mode
[  319.379097][T12835] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2329'.
[  319.806576][T12860] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2339'.
[  320.051745][T12870] netlink: 'syz.1.2342': attribute type 1 has an invalid length.
[  320.820056][T12894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2350'.
[  321.869857][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2355'.
[  322.047915][T12852] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  322.056279][T12870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2342'.
[  322.530476][T12927] openvswitch: netlink: Flow key attr not present in new flow.
[  322.991679][T12940] delete_channel: no stack
[  323.442984][T12952] netlink: 'syz.0.2367': attribute type 29 has an invalid length.
[  323.827895][T12968] __nla_validate_parse: 2 callbacks suppressed
[  323.827915][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2373'.
[  323.852789][T12968] openvswitch: netlink: Flow key attr not present in new flow.
[  323.858493][T12954] syzkaller0: entered promiscuous mode
[  323.866844][T12954] syzkaller0: entered allmulticast mode
[  324.076072][T12975] netlink: 'syz.0.2376': attribute type 1 has an invalid length.
[  324.614506][T12984] delete_channel: no stack
[  325.388102][T13006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2386'.
[  325.397371][T13006] openvswitch: netlink: Flow key attr not present in new flow.
[  325.497354][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2387'.
[  326.110878][T12975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2376'.
[  326.121584][T12993] netlink: 'syz.1.2381': attribute type 29 has an invalid length.
[  326.724843][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2397'.
[  326.754604][T13030] openvswitch: netlink: Flow actions attr not present in new flow.
[  326.761939][T13033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2398'.
[  326.922660][T13038] netlink: 'syz.6.2401': attribute type 1 has an invalid length.
[  326.971898][T13038] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2401'.
[  327.462706][T13065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2410'.
[  327.481153][T13068] netlink: 'syz.0.2412': attribute type 4 has an invalid length.
[  327.488074][T13065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2410'.
[  327.514919][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2413'.
[  327.534200][T13070] openvswitch: netlink: Flow actions attr not present in new flow.
[  327.985999][T13081] delete_channel: no stack
[  328.310774][T13102] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.360738][T13104] hsr_slave_0: left promiscuous mode
[  328.386656][T13104] hsr_slave_1: left promiscuous mode
[  328.515806][T13114] netlink: 'syz.0.2430': attribute type 29 has an invalid length.
[  328.540064][T13114] netlink: 'syz.0.2430': attribute type 29 has an invalid length.
[  328.873266][T13126] __nla_validate_parse: 11 callbacks suppressed
[  328.873287][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2433'.
[  329.002451][T13137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.158503][T13136] delete_channel: no stack
[  329.361979][T13152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.645417][T13169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.872395][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2453'.
[  330.006143][T13192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.815356][T13221] netlink: 'syz.5.2471': attribute type 29 has an invalid length.
[  331.205867][T13228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.837979][ T5838] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18
[  331.915628][T13256] tmpfs: Bad value for 'gid'
[  331.932103][T13256] tmpfs: Bad value for 'gid'
[  331.957290][T13256] netlink: 'syz.2.2482': attribute type 31 has an invalid length.
[  332.574400][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2488'.
[  332.596749][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2488'.
[  332.627110][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2488'.
[  332.638126][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2488'.
[  332.874521][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2494'.
[  333.397311][T13307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2502'.
[  333.433151][T13307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2502'.
[  333.470986][T13307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2502'.
[  333.831923][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  333.887761][T13326] __nla_validate_parse: 1 callbacks suppressed
[  333.887774][T13326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2511'.
[  333.994215][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2509'.
[  334.230456][T13347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2516'.
[  334.241488][T13347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2516'.
[  334.258046][T13347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2516'.
[  334.295503][T13347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2516'.
[  335.583282][T13395] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2530'.
[  335.624472][T13395] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2530'.
[  335.826182][T13403] openvswitch: netlink: IP tunnel dst address not specified
[  336.560239][T13418] tmpfs: Bad value for 'gid'
[  336.577025][T13420] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2540'.
[  336.586356][T13418] tmpfs: Bad value for 'gid'
[  336.600939][T13418] netlink: 'syz.0.2539': attribute type 31 has an invalid length.
[  336.895092][T13429] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2543'.
[  338.987118][T13495] __nla_validate_parse: 6 callbacks suppressed
[  338.987152][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2569'.
[  339.085882][T13499] syzkaller0: entered promiscuous mode
[  339.108763][T13499] syzkaller0: entered allmulticast mode
[  339.146766][T13511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.656058][T13549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2585'.
[  341.693091][T13551] netlink: 'syz.0.2586': attribute type 10 has an invalid length.
[  341.736779][T13551] veth0_vlan: left promiscuous mode
[  341.764346][T13551] veth0_vlan: entered promiscuous mode
[  341.797537][T13551] team0: Device veth0_vlan failed to register rx_handler
[  341.965203][T13566] openvswitch: netlink: IP tunnel dst address not specified
[  342.033877][T13568] openvswitch: netlink: Flow actions attr not present in new flow.
[  342.405110][T13585] syzkaller0: entered promiscuous mode
[  342.411916][T13585] syzkaller0: entered allmulticast mode
[  342.822898][T13606] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  344.246953][T13617] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2612'.
[  344.306549][T13617] netlink: 'syz.0.2612': attribute type 10 has an invalid length.
[  344.516202][T13629] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.748889][T13637] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2619'.
[  345.025915][T13646] netlink: 'syz.6.2621': attribute type 29 has an invalid length.
[  345.041894][T13646] netlink: 'syz.6.2621': attribute type 29 has an invalid length.
[  345.065238][T13646] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2621'.
[  345.423129][T13670] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2628'.
[  345.440587][T13670] netlink: 'syz.6.2628': attribute type 10 has an invalid length.
[  345.725210][T13684] netlink: 'syz.1.2632': attribute type 10 has an invalid length.
[  345.771302][T13684] veth0_vlan: left promiscuous mode
[  345.795854][T13684] veth0_vlan: entered promiscuous mode
[  345.806466][T13684] team0: Device veth0_vlan failed to register rx_handler
[  346.298224][T13717] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2643'.
[  346.361151][T13716] openvswitch: netlink: IP tunnel dst address not specified
[  346.741726][T13740] netlink: 'syz.1.2649': attribute type 10 has an invalid length.
[  346.762672][T13740] veth0_vlan: left promiscuous mode
[  346.785571][T13740] veth0_vlan: entered promiscuous mode
[  346.807550][T13740] team0: Device veth0_vlan failed to register rx_handler
[  347.374741][T13765] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  347.386401][T13765] syzkaller0: entered promiscuous mode
[  347.438063][T13770] netlink: 'syz.1.2658': attribute type 6 has an invalid length.
[  347.446800][T13770] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.2658'.
[  347.457776][T13770] netlink: 'syz.1.2658': attribute type 1 has an invalid length.
[  348.142641][T13795] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2666'.
[  348.266937][T13802] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  348.279433][T13802] syzkaller0: entered promiscuous mode
[  348.492666][T13815] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2673'.
[  348.516952][T13815] bridge_slave_1: default FDB implementation only supports local addresses
[  348.872990][T13835] netlink: 'syz.0.2679': attribute type 9 has an invalid length.
[  348.889084][T13835] netlink: 'syz.0.2679': attribute type 11 has an invalid length.
[  348.934779][T13835] netlink: 'syz.0.2679': attribute type 12 has an invalid length.
[  348.998775][T13835] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2679'.
[  349.776498][T13869] openvswitch: netlink: IP tunnel dst address not specified
[  349.849026][T13872] netlink: 'syz.6.2690': attribute type 29 has an invalid length.
[  349.860345][T13872] netlink: 'syz.6.2690': attribute type 29 has an invalid length.
[  349.871281][T13872] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2690'.
[  349.912217][T13874] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2691'.
[  351.325417][T13918] openvswitch: netlink: Flow actions attr not present in new flow.
[  351.489586][T13922] netlink: 'syz.2.2704': attribute type 29 has an invalid length.
[  351.513702][T13924] dvmrp1: tun_chr_ioctl cmd 1074025672
[  351.524979][T13924] dvmrp1: ignored: set checksum disabled
[  351.538513][T13922] netlink: 'syz.2.2704': attribute type 29 has an invalid length.
[  352.184761][T13942] netlink: 'syz.0.2714': attribute type 10 has an invalid length.
[  352.197404][T13942] veth0_vlan: left promiscuous mode
[  352.204005][T13942] veth0_vlan: entered promiscuous mode
[  352.212168][T13942] team0: Device veth0_vlan failed to register rx_handler
[  352.592681][T13968] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2719'.
[  352.621612][T13970] netlink: 'syz.6.2722': attribute type 1 has an invalid length.
[  352.654219][T13970] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2722'.
[  353.656301][T14011] netlink: 'syz.2.2733': attribute type 1 has an invalid length.
[  353.674197][T14011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2733'.
[  353.692336][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'.
[  354.090195][ T5848] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  354.184994][T14032] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2742'.
[  354.259276][T14032] netlink: 'syz.2.2742': attribute type 10 has an invalid length.
[  354.301871][T14039] netlink: 'syz.1.2745': attribute type 1 has an invalid length.
[  354.375372][T14045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2745'.
[  354.466017][T14042] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2746'.
[  354.523882][ T5848] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[  354.557021][ T5848] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  354.564385][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2751'.
[  354.982674][T14074] netlink: 'syz.5.2760': attribute type 1 has an invalid length.
[  355.011069][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2761'.
[  355.042146][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2761'.
[  355.064180][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2761'.
[  355.079030][T14078] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2760'.
[  355.280609][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  355.288233][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  355.463437][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2766'.
[  356.919924][T14149] netlink: 'syz.2.2780': attribute type 10 has an invalid length.
[  356.946940][T14149] veth0_vlan: left promiscuous mode
[  356.956332][T14149] veth0_vlan: entered promiscuous mode
[  356.972402][T14149] team0: Device veth0_vlan failed to register rx_handler
[  357.025327][ T5848] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  357.928043][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  357.940610][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  358.151096][T14208] netlink: 'syz.0.2795': attribute type 10 has an invalid length.
[  358.185402][T14208] veth0_vlan: left promiscuous mode
[  358.204929][T14208] veth0_vlan: entered promiscuous mode
[  358.228813][T14208] team0: Device veth0_vlan failed to register rx_handler
[  358.352677][T14215] openvswitch: netlink: IP tunnel dst address not specified
[  358.604241][T14227] netlink: 'syz.5.2802': attribute type 1 has an invalid length.
[  358.853154][ T5838] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18
[  358.861420][ T5838] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  359.018814][T14249] netlink: 'syz.5.2810': attribute type 10 has an invalid length.
[  359.027601][T14249] veth0_vlan: left promiscuous mode
[  359.034992][T14249] veth0_vlan: entered promiscuous mode
[  359.044446][T14249] team0: Device veth0_vlan failed to register rx_handler
[  359.242050][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2813'.
[  359.275615][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2813'.
[  359.507778][T14270] dvmrp1: tun_chr_ioctl cmd 1074025672
[  359.514768][T14270] dvmrp1: ignored: set checksum disabled
[  359.575520][ T5848] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  359.738407][T14281] netlink: 'syz.2.2824': attribute type 10 has an invalid length.
[  359.746715][T14281] veth0_vlan: left promiscuous mode
[  359.767565][T14281] veth0_vlan: entered promiscuous mode
[  359.780108][ T5838] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  359.801116][T14281] team0: Device veth0_vlan failed to register rx_handler
[  359.833333][T14289] netlink: 'syz.5.2827': attribute type 1 has an invalid length.
[  359.915989][T14291] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2827'.
[  361.029850][ T5838] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[  361.102837][T14325] netlink: 'syz.2.2840': attribute type 9 has an invalid length.
[  361.143693][T14325] netlink: 'syz.2.2840': attribute type 11 has an invalid length.
[  361.153557][T14325] netlink: 'syz.2.2840': attribute type 12 has an invalid length.
[  361.168358][T14325] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2840'.
[  361.192760][T14331] netlink: 'syz.0.2843': attribute type 1 has an invalid length.
[  361.205078][T14331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2843'.
[  361.339494][T14336] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  361.422880][T14336] syzkaller0: entered promiscuous mode
[  361.429552][T14336] syzkaller0: entered allmulticast mode
[  362.086722][T14368] netlink: 'syz.5.2856': attribute type 9 has an invalid length.
[  362.155501][T14368] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2856'.
[  362.689531][ T5838] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  362.697645][T14380] delete_channel: no stack
[  363.284277][T14404] tmpfs: Bad value for 'gid'
[  363.293427][T14404] tmpfs: Bad value for 'gid'
[  363.305122][T14404] validate_nla: 2 callbacks suppressed
[  363.305141][T14404] netlink: 'syz.1.2869': attribute type 31 has an invalid length.
[  364.771469][T14445] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2877'.
[  365.235920][T14460] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2878'.
[  365.256395][T14460] netlink: 'syz.6.2878': attribute type 10 has an invalid length.
[  365.485149][T14467] netlink: 5252 bytes leftover after parsing attributes in process `syz.6.2881'.
[  366.941844][T14493] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2891'.
[  366.976918][T14493] netlink: 'syz.0.2891': attribute type 10 has an invalid length.
[  367.177887][T14499] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2892'.
[  367.541322][T14513] netlink: 'syz.5.2899': attribute type 6 has an invalid length.
[  367.560433][T14513] netlink: 3936 bytes leftover after parsing attributes in process `syz.5.2899'.
[  367.574238][T14513] netlink: 'syz.5.2899': attribute type 1 has an invalid length.
[  367.822204][T14522] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2903'.
[  367.890211][T14522] bridge_slave_1: default FDB implementation only supports local addresses
[  368.184033][T14533] netlink: 'syz.1.2907': attribute type 10 has an invalid length.
[  368.204118][T14533] veth0_vlan: left promiscuous mode
[  368.226277][T14533] veth0_vlan: entered promiscuous mode
[  368.243334][T14533] team0: Device veth0_vlan failed to register rx_handler
[  368.417424][T14547] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2912'.
[  368.434926][T14547] netlink: 'syz.6.2912': attribute type 10 has an invalid length.
[  369.188064][T14577] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2925'.
[  369.206290][T14577] netlink: 'syz.6.2925': attribute type 10 has an invalid length.
[  369.373403][T14590] netlink: 'syz.6.2931': attribute type 29 has an invalid length.
[  369.392425][T14590] netlink: 'syz.6.2931': attribute type 29 has an invalid length.
[  369.900855][ T5838] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  370.137062][T14605] netlink: 'syz.2.2937': attribute type 9 has an invalid length.
[  370.169861][T14605] netlink: 'syz.2.2937': attribute type 11 has an invalid length.
[  370.197751][T14605] netlink: 'syz.2.2937': attribute type 12 has an invalid length.
[  370.259871][T14605] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2937'.
[  370.292724][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.306103][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.315055][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.324363][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.332473][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.416439][T14612] wlan1 speed is unknown, defaulting to 1000
[  370.481087][T14619] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2941'.
[  370.507850][T14617] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  370.688225][T14623] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  370.861419][T14612] chnl_net:caif_netlink_parms(): no params data found
[  371.237879][T14612] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.266807][T14612] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.283169][T14612] bridge_slave_0: entered allmulticast mode
[  371.302250][T14612] bridge_slave_0: entered promiscuous mode
[  371.327773][T14612] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.343451][T14612] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.360121][T14612] bridge_slave_1: entered allmulticast mode
[  371.370087][T14612] bridge_slave_1: entered promiscuous mode
[  371.434408][T14612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.458539][T14612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.513320][T14612] team0: Port device team_slave_0 added
[  371.524007][T14612] team0: Port device team_slave_1 added
[  371.571414][T14612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.578546][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.605934][T14612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.717012][T14612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.726026][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.829883][T14612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.882643][T14658] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2954'.
[  371.909168][T14658] netlink: 'syz.1.2954': attribute type 10 has an invalid length.
[  371.970869][T14612] hsr_slave_0: entered promiscuous mode
[  371.984599][T14612] hsr_slave_1: entered promiscuous mode
[  372.379972][ T5838] Bluetooth: hci4: command tx timeout
[  374.460472][ T5838] Bluetooth: hci4: command tx timeout
[  374.493099][T14612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.623005][T14690] netlink: 'syz.6.2967': attribute type 30 has an invalid length.
[  374.666818][T14612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.812428][T14612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.943685][T14612] bond0: (slave ������): Releasing backup interface
[  374.977682][T14612] netdevsim netdevsim0 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.539815][ T5838] Bluetooth: hci4: command tx timeout
[  377.831790][T14612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  377.847292][T14612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  377.885814][T14612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  377.898694][T14612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  377.992839][T14736] tmpfs: Bad value for 'gid'
[  377.997585][T14736] tmpfs: Bad value for 'gid'
[  378.164108][T14612] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.212133][T14612] 8021q: adding VLAN 0 to HW filter on device team0
[  378.219461][T14748] netlink: 'syz.2.2989': attribute type 29 has an invalid length.
[  378.241283][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.248513][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.257291][T14748] netlink: 'syz.2.2989': attribute type 29 has an invalid length.
[  378.276797][T14748] netlink: 828 bytes leftover after parsing attributes in process `syz.2.2989'.
[  378.294204][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.301392][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.624694][ T5838] Bluetooth: hci4: command tx timeout
[  378.717305][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.723718][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  378.796286][T14612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.871041][T14612] veth0_vlan: entered promiscuous mode
[  378.887783][T14612] veth1_vlan: entered promiscuous mode
[  378.939546][T14612] veth0_macvtap: entered promiscuous mode
[  378.955507][T14612] veth1_macvtap: entered promiscuous mode
[  378.993939][T14612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.024455][T14612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.054762][ T6845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.064412][ T6845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.084851][ T6845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.264108][ T6845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.461171][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.476304][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.543262][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.555568][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.212362][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.233527][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.241968][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.262077][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.282453][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.377605][T14807] wlan1 speed is unknown, defaulting to 1000
[  381.623962][T14807] chnl_net:caif_netlink_parms(): no params data found
[  381.754577][T14807] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.765480][T14807] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.806883][T14807] bridge_slave_0: entered allmulticast mode
[  381.815785][T14807] bridge_slave_0: entered promiscuous mode
[  381.895024][T14807] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.903165][T14807] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.910988][T14807] bridge_slave_1: entered allmulticast mode
[  381.923689][T14807] bridge_slave_1: entered promiscuous mode
[  382.003747][T14819] dvmrp1: tun_chr_ioctl cmd 1074025672
[  382.024136][T14819] dvmrp1: ignored: set checksum disabled
[  382.037894][T14827] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3014'.
[  382.102627][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.131327][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.211016][T14834] netlink: 'syz.0.3017': attribute type 9 has an invalid length.
[  382.225895][T14834] netlink: 'syz.0.3017': attribute type 11 has an invalid length.
[  382.245199][T14834] netlink: 'syz.0.3017': attribute type 12 has an invalid length.
[  382.257759][T14834] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3017'.
[  382.271498][T14807] team0: Port device team_slave_0 added
[  382.304177][T14807] team0: Port device team_slave_1 added
[  382.383764][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.390935][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.451111][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.473838][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.481496][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.508291][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.401415][T14807] hsr_slave_0: entered promiscuous mode
[  383.408535][T14807] hsr_slave_1: entered promiscuous mode
[  383.415327][T14807] debugfs: 'hsr0' already exists in 'hsr'
[  383.429423][T14807] Cannot create hsr debugfs directory
[  383.779974][T14807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.864953][ T5838] Bluetooth: hci0: command tx timeout
[  383.995660][T14807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.809544][T14807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.929285][T14892] netlink: 'syz.2.3039': attribute type 1 has an invalid length.
[  384.937482][T14807] bond0: (slave ): Releasing backup interface
[  384.948535][T14807] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.997387][T14892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3039'.
[  385.251861][T14807] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  385.288955][T14807] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  385.303014][T14807] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  385.331775][T14807] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  385.656407][T14807] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.762569][T14807] 8021q: adding VLAN 0 to HW filter on device team0
[  385.903347][ T5838] Bluetooth: hci0: command tx timeout
[  386.194675][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.201919][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.242261][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.249461][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.360750][T14936] netlink: 'syz.2.3054': attribute type 1 has an invalid length.
[  386.425467][T14936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3054'.
[  386.707778][T14807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.863024][T14807] veth0_vlan: entered promiscuous mode
[  386.893963][T14807] veth1_vlan: entered promiscuous mode
[  386.931817][T14807] veth0_macvtap: entered promiscuous mode
[  386.943430][T14807] veth1_macvtap: entered promiscuous mode
[  386.967886][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.987751][T14807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.012211][ T1029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.033750][ T1029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.274583][ T1029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.309763][ T1029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.539431][ T6845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.563226][ T6845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.622429][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.631150][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.920815][T14972] netlink: 'syz.2.3069': attribute type 1 has an invalid length.
[  387.935543][T14972] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3069'.
[  387.993872][ T5838] Bluetooth: hci0: command tx timeout
[  388.443007][T14982] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3072'.
[  388.488468][T14984] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3075'.
[  388.488916][T14982] netlink: 'syz.0.3072': attribute type 10 has an invalid length.
[  388.541775][T14986] netlink: 'syz.5.3074': attribute type 9 has an invalid length.
[  388.560242][T14986] netlink: 'syz.5.3074': attribute type 11 has an invalid length.
[  388.604009][T14986] netlink: 'syz.5.3074': attribute type 12 has an invalid length.
[  388.641421][T14986] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.3074'.
[  388.659989][T14982] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  388.822460][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  388.831158][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  388.839915][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  388.850302][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  388.858816][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  388.914255][T14990] wlan1 speed is unknown, defaulting to 1000
[  389.161516][T15002] netlink: 'syz.5.3079': attribute type 1 has an invalid length.
[  389.244585][T15009] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3079'.
[  389.615853][ T6845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.686322][T14990] chnl_net:caif_netlink_parms(): no params data found
[  389.820641][ T6845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.821375][T15027] netlink: 'syz.6.3086': attribute type 9 has an invalid length.
[  389.849326][T15027] netlink: 'syz.6.3086': attribute type 11 has an invalid length.
[  389.858058][T15023] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3085'.
[  389.876066][T15027] netlink: 'syz.6.3086': attribute type 12 has an invalid length.
[  389.888472][T15027] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.3086'.
[  390.024213][ T6845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.047303][T15040] netlink: 'syz.5.3091': attribute type 1 has an invalid length.
[  390.059904][ T5838] Bluetooth: hci0: command tx timeout
[  390.290047][T15040] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3091'.
[  390.343732][ T6845] bond0: (slave netdevsim0): Releasing backup interface
[  390.389486][ T6845] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  390.411418][ T6845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.949295][ T5838] Bluetooth: hci1: command tx timeout
[  391.073119][T14990] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.082190][T14990] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.097669][T14990] bridge_slave_0: entered allmulticast mode
[  391.131517][T14990] bridge_slave_0: entered promiscuous mode
[  391.162656][T14990] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.184591][T14990] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.200328][T14990] bridge_slave_1: entered allmulticast mode
[  391.208220][T14990] bridge_slave_1: entered promiscuous mode
[  391.306439][ T5838] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10
[  391.306476][ T5838] Bluetooth: unknown link type 255
[  391.319492][ T5838] Bluetooth: hci5: connection err: -111
[  391.350676][T14990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.374518][T14990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.448850][T15071] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3103'.
[  391.462466][T15069] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3102'.
[  391.560510][T15076] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3105'.
[  391.688782][T14990] team0: Port device team_slave_0 added
[  391.716976][T15078] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3104'.
[  391.722919][T14990] team0: Port device team_slave_1 added
[  391.912071][T15084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3108'.
[  391.955764][T14990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.989973][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.020238][T14990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.191292][ T5838] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  392.191394][ T5838] Bluetooth: unknown link type 255
[  392.205603][ T5838] Bluetooth: hci3: connection err: -111
[  392.652709][T15090] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  392.671421][T14990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.686400][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.751714][T14990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.916505][T15110] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3118'.
[  393.030495][ T5838] Bluetooth: hci1: command tx timeout
[  393.114739][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.129082][ T6845] bond_slave_0: left promiscuous mode
[  393.153755][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  393.170352][ T6845] bond_slave_1: left promiscuous mode
[  393.181826][ T6845] bond0 (unregistering): Released all slaves
[  393.195190][T15104] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3116'.
[  393.220681][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3122'.
[  393.315053][ T6845] : left promiscuous mode
[  393.427869][T14990] hsr_slave_0: entered promiscuous mode
[  393.438325][T14990] hsr_slave_1: entered promiscuous mode
[  393.474758][T14990] debugfs: 'hsr0' already exists in 'hsr'
[  393.489807][T14990] Cannot create hsr debugfs directory
[  393.815539][ T6845] tipc: Left network mode
[  394.796229][T15162] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3134'.
[  394.814515][T15162] validate_nla: 3 callbacks suppressed
[  394.814548][T15162] netlink: 'syz.1.3134': attribute type 10 has an invalid length.
[  394.828458][T15164] netlink: 'syz.0.3133': attribute type 1 has an invalid length.
[  395.099807][ T5838] Bluetooth: hci1: command tx timeout
[  396.864162][T15164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3133'.
[  397.106445][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'.
[  397.181153][ T5838] Bluetooth: hci1: command tx timeout
[  397.442272][ T6845] veth1_macvtap: left promiscuous mode
[  397.459182][ T6845] veth0_macvtap: left promiscuous mode
[  397.479253][ T6845] veth1_vlan: left promiscuous mode
[  397.606253][T15198] netlink: 'syz.1.3145': attribute type 1 has an invalid length.
[  398.124354][ T6845] team0 (unregistering): Port device team_slave_1 removed
[  398.158714][ T6845] team0 (unregistering): Port device C removed
[  398.355918][T15196] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  398.389764][T15198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3145'.
[  398.640663][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'.
[  398.655975][T15221] wlan1 speed is unknown, defaulting to 1000
[  398.684080][T15221] wlan1 speed is unknown, defaulting to 1000
[  398.692328][T15229] netlink: 4008 bytes leftover after parsing attributes in process `syz.6.3152'.
[  398.788279][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.102723][T14990] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  399.111098][T15221] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  399.638576][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.639135][T14990] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  399.695843][T14990] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  399.752423][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.758852][T14990] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  399.791515][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.898585][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.923139][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.932505][T15221] wlan1 speed is unknown, defaulting to 1000
[  399.954240][T15221] wlan1 speed is unknown, defaulting to 1000
[  400.054879][T14990] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.143316][T14990] 8021q: adding VLAN 0 to HW filter on device team0
[  400.221204][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.228422][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.262232][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.269477][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.470850][T15285] netlink: 4008 bytes leftover after parsing attributes in process `syz.5.3165'.
[  400.787066][T14990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.972589][T15306] siw: device registration error -23
[  400.978267][T14990] veth0_vlan: entered promiscuous mode
[  401.017438][T14990] veth1_vlan: entered promiscuous mode
[  401.054527][T14990] veth0_macvtap: entered promiscuous mode
[  401.068527][T14990] veth1_macvtap: entered promiscuous mode
[  401.128024][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.162207][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.213646][ T3599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.235490][ T3599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.257319][ T3599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.321494][ T3599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.516448][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.534173][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.627929][T15335] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3176'.
[  401.716551][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.725565][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.731689][T15387] siw: device registration error -23
[  404.772475][T15389] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3187'.
[  406.421239][T15438] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3200'.
[  406.465618][T15438] netlink: 'syz.6.3200': attribute type 10 has an invalid length.
[  409.176859][T15457] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3204'.
[  409.376243][T15467] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.435158][T15467] bridge_slave_0 (unregistering): left allmulticast mode
[  409.445021][T15467] bridge_slave_0 (unregistering): left promiscuous mode
[  409.452791][T15467] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.797789][T15484] netlink: 1952 bytes leftover after parsing attributes in process `syz.6.3214'.
[  410.954838][T15487] syzkaller0: entered promiscuous mode
[  410.963885][T15487] syzkaller0: entered allmulticast mode
[  410.988885][T15507] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.034430][T15507] bridge_slave_0 (unregistering): left allmulticast mode
[  411.046339][T15507] bridge_slave_0 (unregistering): left promiscuous mode
[  411.057595][T15507] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.683572][T15533] netlink: 'syz.1.3230': attribute type 9 has an invalid length.
[  412.711014][T15533] netlink: 'syz.1.3230': attribute type 11 has an invalid length.
[  412.726435][T15533] netlink: 'syz.1.3230': attribute type 12 has an invalid length.
[  412.763979][T15533] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3230'.
[  412.838096][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'.
[  413.605828][T15561] siw: device registration error -23
[  413.874214][T15565] syzkaller0: entered promiscuous mode
[  413.880019][T15565] syzkaller0: entered allmulticast mode
[  414.135226][T15579] netlink: 1952 bytes leftover after parsing attributes in process `syz.6.3248'.
[  414.344153][ T5838] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  414.347567][T15588] delete_channel: no stack
[  416.240002][T15630] netlink: 'syz.6.3269': attribute type 1 has an invalid length.
[  416.318793][T15630] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3269'.
[  416.563331][T15638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3272'.
[  416.613390][T15638] netlink: 'syz.1.3272': attribute type 10 has an invalid length.
[  416.947705][T15654] syzkaller0: entered promiscuous mode
[  416.959779][T15654] syzkaller0: entered allmulticast mode
[  418.185883][T15695] netlink: 'syz.5.3295': attribute type 1 has an invalid length.
[  418.411751][T15703] netlink: 'syz.2.3297': attribute type 5 has an invalid length.
[  418.420001][T15703] netlink: 'syz.2.3297': attribute type 5 has an invalid length.
[  419.289878][T15695] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3295'.
[  419.299794][T15702] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3297'.
[  419.478450][T15708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3298'.
[  419.584323][T15710] netlink: 1952 bytes leftover after parsing attributes in process `syz.2.3301'.
[  419.924005][T15733] netlink: 763 bytes leftover after parsing attributes in process `syz.5.3311'.
[  420.032230][T15733] netlink: 'syz.5.3311': attribute type 5 has an invalid length.
[  420.052735][T15733] netlink: 'syz.5.3311': attribute type 5 has an invalid length.
[  420.433715][T15755] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3317'.
[  420.601013][T15762] delete_channel: no stack
[  420.966906][T15782] siw: device registration error -23
[  421.798335][T15813] delete_channel: no stack
[  422.254845][T15849] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3346'.
[  422.329371][ T5838] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[  422.330301][T15850] delete_channel: no stack
[  422.872755][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.882311][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.890520][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.902139][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.911450][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  422.968056][T15878] wlan1 speed is unknown, defaulting to 1000
[  423.143751][ T5848] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4
[  423.597094][T15878] chnl_net:caif_netlink_parms(): no params data found
[  423.845120][T15878] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.890133][T15878] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.895419][ T5848] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4
[  423.897575][T15878] bridge_slave_0: entered allmulticast mode
[  423.932400][T15878] bridge_slave_0: entered promiscuous mode
[  423.947667][T15878] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.955596][T15878] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.963197][T15878] bridge_slave_1: entered allmulticast mode
[  423.977848][T15878] bridge_slave_1: entered promiscuous mode
[  424.034332][T15929] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3376'.
[  424.062857][T15878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.067278][T15929] netlink: 'syz.1.3376': attribute type 10 has an invalid length.
[  424.092900][T15878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.218425][T15878] team0: Port device team_slave_0 added
[  424.305632][T15878] team0: Port device team_slave_1 added
[  424.436402][T15878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.449817][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.498675][T15878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.513283][T15878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.523312][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.553814][T15878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.601230][   T78] bridge_slave_1: left allmulticast mode
[  424.607532][   T78] bridge_slave_1: left promiscuous mode
[  424.639405][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.936945][ T5848] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4
[  424.941185][ T5848] Bluetooth: hci2: command tx timeout
[  425.004871][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.024352][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.045369][   T78] bond0 (unregistering): Released all slaves
[  425.364278][   T78] tipc: Left network mode
[  425.491805][T15878] hsr_slave_0: entered promiscuous mode
[  425.509527][T15878] hsr_slave_1: entered promiscuous mode
[  425.533511][T15878] debugfs: 'hsr0' already exists in 'hsr'
[  425.539403][T15878] Cannot create hsr debugfs directory
[  426.001748][ T5848] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4
[  426.212627][T16003] delete_channel: no stack
[  426.212844][ T5848] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  426.372380][T16012] siw: device registration error -23
[  426.726135][T16019] siw: device registration error -23
[  427.020082][ T5848] Bluetooth: hci2: command tx timeout
[  427.063430][ T5848] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4
[  427.460046][   T78] team0 (unregistering): Port device team_slave_1 removed
[  427.536871][   T78] team0 (unregistering): Port device C removed
[  427.854153][T16054] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3415'.
[  428.029570][T16064] siw: device registration error -23
[  428.046372][T16063] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3418'.
[  428.302423][ T5848] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4
[  428.703981][T16079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3424'.
[  428.785826][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3424'.
[  428.862008][T16079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3424'.
[  428.884618][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3424'.
[  428.955341][T16082] syzkaller0: entered promiscuous mode
[  428.976255][T16091] netlink: 64535 bytes leftover after parsing attributes in process `syz.6.3428'.
[  429.064130][T15878] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  429.109822][ T5848] Bluetooth: hci2: command tx timeout
[  429.128554][T16096] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3429'.
[  429.159303][T15878] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  429.258002][T15878] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  429.301114][T15878] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  429.472223][T15878] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.515964][T15878] 8021q: adding VLAN 0 to HW filter on device team0
[  429.547897][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.555130][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.584078][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.591293][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.786831][ T5848] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  430.125381][T16150] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3440'.
[  430.307019][T15878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.646425][T16172] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3446'.
[  430.846354][T16181] dvmrp1: tun_chr_ioctl cmd 1074025672
[  430.849803][T16186] netlink: 'syz.1.3450': attribute type 1 has an invalid length.
[  430.852555][T16181] dvmrp1: ignored: set checksum disabled
[  431.031093][T15878] veth0_vlan: entered promiscuous mode
[  431.058100][T15878] veth1_vlan: entered promiscuous mode
[  431.096742][T15878] veth0_macvtap: entered promiscuous mode
[  431.112998][T15878] veth1_macvtap: entered promiscuous mode
[  431.148927][T15878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.167601][T15878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.184001][ T5848] Bluetooth: hci2: command tx timeout
[  431.189118][ T6845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.224753][ T6845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.238912][ T6845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.250709][ T6845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.357902][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.374736][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.473795][ T6853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.496754][ T6853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.722046][T16214] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.740845][T16214] bridge_slave_0 (unregistering): left allmulticast mode
[  431.748139][T16214] bridge_slave_0 (unregistering): left promiscuous mode
[  431.765313][T16214] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.613246][T16255] __nla_validate_parse: 3 callbacks suppressed
[  433.613273][T16255] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3477'.
[  433.658970][T16255] netlink: 'syz.6.3477': attribute type 10 has an invalid length.
[  433.823167][T16261] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3480'.
[  434.573023][T16290] netlink: 763 bytes leftover after parsing attributes in process `syz.6.3493'.
[  434.609178][T16290] netlink: 'syz.6.3493': attribute type 5 has an invalid length.
[  434.632824][T16290] netlink: 'syz.6.3493': attribute type 5 has an invalid length.
[  434.729447][ T5848] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  434.859240][T16300] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3498'.
[  434.949943][T16305] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.3500'.
[  435.194898][T16309] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3502'.
[  435.627952][T16322] syzkaller0: entered promiscuous mode
[  435.651584][T16322] syzkaller0: entered allmulticast mode
[  435.705032][T16320] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.767479][T16320] bridge_slave_0 (unregistering): left allmulticast mode
[  435.784669][T16320] bridge_slave_0 (unregistering): left promiscuous mode
[  435.800752][T16320] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.988118][T16342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3514'.
[  436.004426][T16342] netlink: 'syz.1.3514': attribute type 10 has an invalid length.
[  436.777630][T16355] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3520'.
[  437.368910][T16341] netlink: 64535 bytes leftover after parsing attributes in process `syz.6.3513'.
[  437.508830][T16361] netlink: 'syz.6.3521': attribute type 1 has an invalid length.
[  437.560686][T16357] netlink: 'syz.2.3522': attribute type 1 has an invalid length.
[  438.015580][T16382] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3532'.
[  438.061297][T16384] netlink: 'syz.0.3534': attribute type 4 has an invalid length.
[  438.421862][T16391] netlink: 'syz.0.3537': attribute type 1 has an invalid length.
[  439.016643][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  439.029799][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  439.040957][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  439.053599][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  439.063651][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  439.113083][T16409] syzkaller0: entered promiscuous mode
[  439.118613][T16409] syzkaller0: entered allmulticast mode
[  439.414030][T16427] netlink: 'syz.1.3550': attribute type 5 has an invalid length.
[  439.422783][T16427] netlink: 'syz.1.3550': attribute type 5 has an invalid length.
[  440.146776][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.159510][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.637851][T16424] __nla_validate_parse: 1 callbacks suppressed
[  440.637870][T16424] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3550'.
[  440.669212][T16431] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode
[  440.706721][T16410] wlan1 speed is unknown, defaulting to 1000
[  440.847905][T16437] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3555'.
[  440.950255][   T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.104846][ T5848] Bluetooth: hci5: command tx timeout
[  441.181646][T16453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3561'.
[  441.198745][T16453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3561'.
[  441.221139][   T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.341829][T16453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3561'.
[  441.351621][T16453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3561'.
[  441.364619][   T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.521970][   T35] bond0: (slave netdevsim0): Releasing backup interface
[  441.556673][   T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.593909][T16410] chnl_net:caif_netlink_parms(): no params data found
[  441.602493][T16453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3561'.
[  441.617393][T16453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3561'.
[  441.658150][T16463] syzkaller0: entered promiscuous mode
[  441.665536][T16463] syzkaller0: entered allmulticast mode
[  443.180445][ T5848] Bluetooth: hci5: command tx timeout
[  443.404912][T16499] netlink: 'syz.5.3576': attribute type 6 has an invalid length.
[  443.413298][T16499] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.3576'.
[  443.424759][T16499] netlink: 'syz.5.3576': attribute type 1 has an invalid length.
[  443.847467][T16410] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.865974][T16410] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.919330][T16410] bridge_slave_0: entered allmulticast mode
[  443.928237][T16410] bridge_slave_0: entered promiscuous mode
[  443.944295][   T35] bridge_slave_1: left allmulticast mode
[  443.952474][   T35] bridge_slave_1: left promiscuous mode
[  443.964506][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.195281][T16530] netlink: 'syz.2.3587': attribute type 6 has an invalid length.
[  444.203312][T16530] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.3587'.
[  444.216488][T16530] netlink: 'syz.2.3587': attribute type 1 has an invalid length.
[  444.313099][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.325003][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.337475][   T35] bond0 (unregistering): Released all slaves
[  444.354370][T16410] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.363314][T16410] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.371036][T16410] bridge_slave_1: entered allmulticast mode
[  444.378919][T16410] bridge_slave_1: entered promiscuous mode
[  444.423835][T16529] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  444.522481][T16536] syzkaller0: entered promiscuous mode
[  444.528226][T16536] syzkaller0: entered allmulticast mode
[  444.587628][ T9806] wlan1 speed is unknown, defaulting to 1000
[  444.620877][ T9806] syz0: Port: 1 Link DOWN
[  444.672859][T16410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.273008][ T5848] Bluetooth: hci5: command tx timeout
[  447.349750][ T5848] Bluetooth: hci5: command tx timeout
[  447.448388][T16410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.468017][T16555] dvmrp1: tun_chr_ioctl cmd 1074025672
[  447.473757][T16555] dvmrp1: ignored: set checksum disabled
[  447.522103][T16410] team0: Port device team_slave_0 added
[  447.560325][T16410] team0: Port device team_slave_1 added
[  447.991215][T16410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.998297][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.137896][T16410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.210696][T16410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.217705][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.396734][T16410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.608559][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.616232][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.636211][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.645930][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.700592][   T35] veth1_macvtap: left promiscuous mode
[  448.721466][   T35] veth0_macvtap: left promiscuous mode
[  448.759786][   T35] veth1_vlan: left promiscuous mode
[  448.765125][   T35] veth0_vlan: left promiscuous mode
[  449.639587][   T35] team0 (unregistering): Port device team_slave_1 removed
[  449.663845][   T35] team0 (unregistering): Port device team_slave_0 removed
[  450.305827][T16410] hsr_slave_0: entered promiscuous mode
[  450.337706][T16410] hsr_slave_1: entered promiscuous mode
[  450.360014][T16410] debugfs: 'hsr0' already exists in 'hsr'
[  450.369587][T16410] Cannot create hsr debugfs directory
[  451.931165][T16410] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  452.006938][T16410] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  452.043151][T16410] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  452.100999][T16410] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  452.354531][T16410] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.457467][T16410] 8021q: adding VLAN 0 to HW filter on device team0
[  452.517074][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.524313][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.546302][T16700] __nla_validate_parse: 1 callbacks suppressed
[  452.546341][T16700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3629'.
[  452.563092][T16702] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3630'.
[  452.574586][T16700] netlink: 'syz.0.3629': attribute type 10 has an invalid length.
[  452.597096][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.604318][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.693511][T16706] syzkaller0: entered promiscuous mode
[  452.729529][T16712] netlink: 'syz.1.3633': attribute type 10 has an invalid length.
[  452.885603][T16712] veth0_vlan: left promiscuous mode
[  452.923686][T16712] veth0_vlan: entered promiscuous mode
[  452.994866][T16712] team0: Device veth0_vlan failed to register rx_handler
[  453.745535][T16410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.775157][T16744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3642'.
[  453.777460][T16742] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3641'.
[  454.023106][T16750] syzkaller0: entered promiscuous mode
[  454.046575][T16750] syzkaller0: entered allmulticast mode
[  454.245364][T16769] syzkaller0: entered promiscuous mode
[  455.113668][T16786] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3649'.
[  456.469085][T16786] hsr_slave_0: left promiscuous mode
[  456.475296][T16786] hsr_slave_1: left promiscuous mode
[  456.517925][ T6853] bridge_slave_1: left allmulticast mode
[  456.524729][ T6853] bridge_slave_1: left promiscuous mode
[  456.532512][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.716660][ T5848] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  456.717137][ T5848] Bluetooth: hci0: connection err: -111
[  456.744314][T16811] delete_channel: no stack
[  456.911649][T16819] netlink: 'syz.0.3656': attribute type 10 has an invalid length.
[  456.920866][T16823] netlink: 'syz.5.3658': attribute type 10 has an invalid length.
[  456.981577][ T6853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.998402][ T6853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.016529][ T6853] bond0 (unregistering): Released all slaves
[  457.156968][T16819] veth0_vlan: left promiscuous mode
[  457.177885][T16819] veth0_vlan: entered promiscuous mode
[  457.208009][T16819] team0: Device veth0_vlan failed to register rx_handler
[  457.311181][T16823] veth0_vlan: left promiscuous mode
[  457.329600][T16823] veth0_vlan: entered promiscuous mode
[  457.368941][T16823] team0: Device veth0_vlan failed to register rx_handler
[  457.439247][T16827] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3659'.
[  457.612828][T16832] syzkaller0: entered promiscuous mode
[  457.698155][T16836] syzkaller0: entered promiscuous mode
[  457.709680][T16836] syzkaller0: entered allmulticast mode
[  457.731818][T16410] veth0_vlan: entered promiscuous mode
[  457.779278][T16841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3666'.
[  458.028618][T16847] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3668'.
[  458.214668][T16858] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3672'.
[  458.232931][T16858] netlink: 'syz.2.3672': attribute type 10 has an invalid length.
[  459.208007][T16858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  459.274878][T16410] veth1_vlan: entered promiscuous mode
[  459.339577][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.353200][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.372092][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.389967][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.401990][ T6853] veth1_macvtap: left promiscuous mode
[  459.407509][ T6853] veth0_macvtap: left promiscuous mode
[  459.413594][ T6853] veth1_vlan: left promiscuous mode
[  459.809264][ T6853] team0 (unregistering): Port device team_slave_1 removed
[  459.836480][ T6853] team0 (unregistering): Port device team_slave_0 removed
[  460.053912][T16872] dvmrp1: tun_chr_ioctl cmd 1074025672
[  460.073257][T16872] dvmrp1: ignored: set checksum disabled
[  460.090624][T16880] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3679'.
[  460.108037][T16410] veth0_macvtap: entered promiscuous mode
[  460.141081][T16881] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3679'.
[  460.155620][T16882] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3679'.
[  460.176041][T16883] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3679'.
[  460.196372][T16410] veth1_macvtap: entered promiscuous mode
[  460.287153][T16410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.309566][T16410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.389821][ T6849] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.421899][ T6849] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.475034][T16898] openvswitch: netlink: IP tunnel dst address not specified
[  460.516403][T16889] syzkaller0: entered promiscuous mode
[  460.528031][T16889] syzkaller0: entered allmulticast mode
[  460.558725][ T6849] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.569826][ T6849] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.588115][T16899] dvmrp1: tun_chr_ioctl cmd 1074025672
[  460.593835][T16899] dvmrp1: ignored: set checksum disabled
[  460.846546][T16910] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3690'.
[  462.031426][T16912] syzkaller0: entered promiscuous mode
[  462.037088][T16912] syzkaller0: entered allmulticast mode
[  462.417891][T16930] tmpfs: Bad value for 'gid'
[  462.422677][T16930] tmpfs: Bad value for 'gid'
[  462.429108][T16930] netlink: 'syz.5.3696': attribute type 31 has an invalid length.
[  462.883698][T16943] netlink: 'syz.5.3701': attribute type 10 has an invalid length.
[  463.811396][T16943] veth0_vlan: left promiscuous mode
[  463.818319][T16943] veth0_vlan: entered promiscuous mode
[  463.828631][T16943] team0: Device veth0_vlan failed to register rx_handler
[  464.022120][T16959] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3707'.
[  464.033457][T16959] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3707'.
[  464.064604][T16959] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3707'.
[  464.075369][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.100075][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.151330][ T6851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.168947][ T6851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.324367][ T6853] bridge_slave_1: left allmulticast mode
[  464.341483][ T6853] bridge_slave_1: left promiscuous mode
[  464.348481][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.277266][T16995] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3717'.
[  465.366882][ T6853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.379336][ T6853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.405668][ T6853] bond0 (unregistering): Released all slaves
[  465.496564][T16989] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[  465.616138][T17000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3719'.
[  465.658868][T17003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3719'.
[  465.698854][T17007] syzkaller0: entered promiscuous mode
[  465.713948][T17000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3719'.
[  465.814598][T17011] tmpfs: Bad value for 'gid'
[  465.819243][T17011] tmpfs: Bad value for 'gid'
[  465.856643][T17011] netlink: 'syz.0.3723': attribute type 31 has an invalid length.
[  465.966706][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.997734][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.064912][T17024] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3727'.
[  466.344049][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.401887][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.844728][ T6853] veth1_vlan: left promiscuous mode
[  467.238882][ T6853] team0 (unregistering): Port device 
1�2�� removed
[  467.279264][ T6853] team0 (unregistering): Port device team_slave_0 removed
[  467.447547][T17024] hsr_slave_0: left promiscuous mode
[  467.460715][T17024] hsr_slave_1: left promiscuous mode
[  467.509759][T17032] dvmrp1: tun_chr_ioctl cmd 1074025672
[  467.515778][T17032] dvmrp1: ignored: set checksum disabled
[  467.714247][T17065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3734'.
[  467.751912][T17065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3734'.
[  468.138802][T17074] syzkaller0: entered promiscuous mode
[  468.159695][T17074] syzkaller0: entered allmulticast mode
[  470.248717][T17115] __nla_validate_parse: 2 callbacks suppressed
[  470.248737][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3752'.
[  470.278447][T17100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3747'.
[  470.474763][T17123] netlink: 'syz.2.3756': attribute type 1 has an invalid length.
[  470.504921][ T5848] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[  470.574955][T17123] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3756'.
[  471.844974][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3769'.
[  471.921487][T17155] syzkaller0: entered promiscuous mode
[  471.943148][T17155] syzkaller0: entered allmulticast mode
[  472.233977][T17171] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3773'.
[  473.090036][ T5848] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  473.242536][T17189] siw: device registration error -23
[  474.052136][T17165] dvmrp1: tun_chr_ioctl cmd 1074025672
[  474.057636][T17165] dvmrp1: ignored: set checksum disabled
[  474.269244][T17201] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3785'.
[  474.676461][T17220] siw: device registration error -23
[  475.026879][T17229] syzkaller0: entered promiscuous mode
[  475.046267][T17229] syzkaller0: entered allmulticast mode
[  475.227779][T17231] dvmrp1: tun_chr_ioctl cmd 1074025672
[  475.237102][T17231] dvmrp1: ignored: set checksum disabled
[  475.309184][T17236] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3796'.
[  476.516064][T17238] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3797'.
[  476.717093][T17246] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3801'.
[  476.730508][T17248] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3802'.
[  476.759710][T17248] netlink: 'syz.0.3802': attribute type 10 has an invalid length.
[  476.789863][T17253] netlink: 'syz.5.3801': attribute type 10 has an invalid length.
[  476.824703][T17253] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  477.017415][T17264] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3808'.
[  477.039294][T17261] netlink: 'syz.6.3807': attribute type 9 has an invalid length.
[  477.068126][T17261] netlink: 'syz.6.3807': attribute type 11 has an invalid length.
[  477.108535][T17261] netlink: 'syz.6.3807': attribute type 12 has an invalid length.
[  477.146730][T17261] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.3807'.
[  477.216745][T17273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3810'.
[  477.780496][T17297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3820'.
[  477.800922][T17297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3820'.
[  477.824675][T17297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3820'.
[  477.887152][T17294] delete_channel: no stack
[  477.985128][T17303] netlink: 'syz.1.3823': attribute type 10 has an invalid length.
[  478.013602][T17303] veth0_vlan: left promiscuous mode
[  478.042403][T17303] veth0_vlan: entered promiscuous mode
[  478.067140][T17303] team0: Device veth0_vlan failed to register rx_handler
[  478.398296][T17322] netlink: 'syz.5.3827': attribute type 10 has an invalid length.
[  478.693984][T17334] delete_channel: no stack
[  478.903838][ T5848] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  480.404985][T17391] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  480.458892][T17391] syzkaller0: entered promiscuous mode
[  480.473006][T17391] syzkaller0: entered allmulticast mode
[  480.499060][T17397] netlink: 'syz.0.3859': attribute type 9 has an invalid length.
[  480.508050][T17397] netlink: 'syz.0.3859': attribute type 11 has an invalid length.
[  480.524848][T17397] netlink: 'syz.0.3859': attribute type 12 has an invalid length.
[  480.535394][T17397] __nla_validate_parse: 8 callbacks suppressed
[  480.535426][T17397] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3859'.
[  480.942831][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  481.422216][T17441] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3873'.
[  481.445478][T17439] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3874'.
[  481.772834][T17460] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3876'.
[  481.859528][T17463] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3878'.
[  481.914971][T17463] validate_nla: 2 callbacks suppressed
[  481.915003][T17463] netlink: 'syz.5.3878': attribute type 10 has an invalid length.
[  482.290080][T17473] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3880'.
[  482.348500][T17479] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3884'.
[  482.517179][T17476] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[  482.829958][T17500] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  482.855011][T17500] syzkaller0: entered promiscuous mode
[  483.020357][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  483.239007][T17521] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3899'.
[  483.385607][T17525] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3900'.
[  483.743683][T17542] delete_channel: no stack
[  483.967777][T17558] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3911'.
[  484.070336][T17560] dvmrp1: tun_chr_ioctl cmd 1074025672
[  484.087574][T17560] dvmrp1: ignored: set checksum disabled
[  485.042885][T17595] delete_channel: no stack
[  485.179507][T17608] netlink: 'syz.5.3925': attribute type 10 has an invalid length.
[  485.188993][T17608] veth0_vlan: left promiscuous mode
[  485.195380][T17608] veth0_vlan: entered promiscuous mode
[  485.204213][T17608] team0: Device veth0_vlan failed to register rx_handler
[  485.399143][T17614] netlink: 'syz.1.3928': attribute type 9 has an invalid length.
[  485.417043][T17614] netlink: 'syz.1.3928': attribute type 11 has an invalid length.
[  485.449017][T17614] netlink: 'syz.1.3928': attribute type 12 has an invalid length.
[  485.607363][T17628] __nla_validate_parse: 4 callbacks suppressed
[  485.607398][T17628] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3934'.
[  486.832436][T17657] netlink: 'syz.0.3942': attribute type 9 has an invalid length.
[  486.873967][T17657] netlink: 'syz.0.3942': attribute type 11 has an invalid length.
[  486.897176][T17657] netlink: 'syz.0.3942': attribute type 12 has an invalid length.
[  486.919127][T17657] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3942'.
[  486.949173][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3942'.
[  487.234381][T17669] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3944'.
[  487.358276][T17675] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3946'.
[  487.775793][T17694] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3949'.
[  488.115565][ T5838] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  488.658205][ T5838] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18
[  488.987516][T17727] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3964'.
[  489.218462][T17732] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  489.240593][T17732] syzkaller0: entered promiscuous mode
[  489.758939][T17758] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3977'.
[  490.153643][ T5832] Bluetooth: hci4: command 0x2016 tx timeout
[  490.603911][T17794] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3990'.
[  490.703247][ T5848] Bluetooth: hci5: command 0x2016 tx timeout
[  491.636758][T17838] netlink: 'syz.6.4004': attribute type 9 has an invalid length.
[  491.645562][T17838] netlink: 'syz.6.4004': attribute type 11 has an invalid length.
[  491.658404][T17838] netlink: 'syz.6.4004': attribute type 12 has an invalid length.
[  491.674437][T17838] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.4004'.
[  491.695779][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4004'.
[  491.912088][T17842] delete_channel: no stack
[  491.913432][ T5832] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  491.941868][T17850] netlink: 'syz.2.4010': attribute type 9 has an invalid length.
[  491.968284][T17850] netlink: 'syz.2.4010': attribute type 11 has an invalid length.
[  491.977410][T17850] netlink: 'syz.2.4010': attribute type 12 has an invalid length.
[  491.991724][T17850] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4010'.
[  492.002588][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'.
[  492.174100][ T5832] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  492.174572][T17855] delete_channel: no stack
[  492.222980][ T5832] Bluetooth: hci4: command 0x2016 tx timeout
[  492.427877][T17874] netlink: 'syz.0.4020': attribute type 1 has an invalid length.
[  492.457978][T17877] netlink: 'syz.2.4019': attribute type 9 has an invalid length.
[  492.467358][T17877] netlink: 'syz.2.4019': attribute type 11 has an invalid length.
[  492.481839][T17877] netlink: 'syz.2.4019': attribute type 12 has an invalid length.
[  492.491007][T17877] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4019'.
[  492.504147][T17874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4020'.
[  492.508569][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'.
[  492.796433][ T5838] Bluetooth: hci5: command 0x2016 tx timeout
[  493.738249][T17903] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4029'.
[  493.834580][T17909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4032'.
[  493.982667][T17913] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4034'.
[  494.299800][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  494.324765][ T5848] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  497.304876][T18042] __nla_validate_parse: 9 callbacks suppressed
[  497.304899][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'.
[  497.398928][T18042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4087'.
[  498.254752][T18079] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.4102'.
[  498.527883][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'.
[  498.552256][T18085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4105'.
[  498.777911][T18101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4108'.
[  498.805702][T18101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4108'.
[  498.843058][T18101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4108'.
[  499.306218][T18118] validate_nla: 14 callbacks suppressed
[  499.306239][T18118] netlink: 'syz.0.4117': attribute type 1 has an invalid length.
[  499.385789][T18118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4117'.
[  500.610088][T18156] netlink: 'syz.2.4132': attribute type 1 has an invalid length.
[  500.629877][T18156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4132'.
[  500.761963][T18161] delete_channel: no stack
[  501.592314][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.598695][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.618912][T18190] delete_channel: no stack
[  501.858670][T18200] netlink: 'syz.0.4151': attribute type 9 has an invalid length.
[  501.875178][T18200] netlink: 'syz.0.4151': attribute type 11 has an invalid length.
[  501.883633][T18200] netlink: 'syz.0.4151': attribute type 12 has an invalid length.
[  501.957029][T18206] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  502.005535][T18206] syzkaller0: entered promiscuous mode
[  502.020056][T18206] syzkaller0: entered allmulticast mode
[  502.664883][T18224] __nla_validate_parse: 3 callbacks suppressed
[  502.664933][T18224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4161'.
[  502.706606][T18226] netlink: 'syz.0.4162': attribute type 9 has an invalid length.
[  502.750318][T18224] netlink: 'syz.1.4161': attribute type 10 has an invalid length.
[  502.759207][T18226] netlink: 'syz.0.4162': attribute type 11 has an invalid length.
[  502.786373][T18226] netlink: 'syz.0.4162': attribute type 12 has an invalid length.
[  502.788082][T18228] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4163'.
[  502.802659][T18226] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4162'.
[  502.803476][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'.
[  503.899441][T18267] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4180'.
[  503.992943][T18267] netlink: 'syz.1.4180': attribute type 5 has an invalid length.
[  504.544332][T18281] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4185'.
[  504.757177][T18287] validate_nla: 1 callbacks suppressed
[  504.757226][T18287] netlink: 'syz.1.4187': attribute type 9 has an invalid length.
[  504.809001][T18289] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4188'.
[  504.830480][T18287] netlink: 'syz.1.4187': attribute type 11 has an invalid length.
[  504.841259][T18294] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4189'.
[  504.851436][T18287] netlink: 'syz.1.4187': attribute type 12 has an invalid length.
[  504.861736][T18294] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4189'.
[  504.879790][T18287] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4187'.
[  505.283012][T18301] netlink: 'syz.6.4193': attribute type 10 has an invalid length.
[  505.887063][T18301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  506.038883][T18313] netlink: 'syz.0.4197': attribute type 10 has an invalid length.
[  506.203303][T18317] syzkaller0: entered promiscuous mode
[  506.305399][T18323] delete_channel: no stack
[  506.460726][T18327] netlink: 'syz.2.4204': attribute type 10 has an invalid length.
[  506.905814][T18338] netlink: 'syz.2.4208': attribute type 10 has an invalid length.
[  507.578892][T18355] siw: device registration error -23
[  507.640890][T18358] netlink: 'syz.6.4217': attribute type 5 has an invalid length.
[  507.649485][T18358] netlink: 'syz.6.4217': attribute type 5 has an invalid length.
[  507.866082][T18367] syzkaller0: entered promiscuous mode
[  507.871894][T18367] syzkaller0: entered allmulticast mode
[  508.869840][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  509.359439][T18402] netlink: 'syz.6.4230': attribute type 5 has an invalid length.
[  509.374352][ T5848] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  509.378937][ T5848] Bluetooth: hci2: connection err: -111
[  509.398288][T18400] delete_channel: no stack
[  510.102603][T18388] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  510.158500][T18388] syzkaller0: entered promiscuous mode
[  510.165828][T18388] syzkaller0: entered allmulticast mode
[  510.181701][T18399] __nla_validate_parse: 9 callbacks suppressed
[  510.181721][T18399] netlink: 763 bytes leftover after parsing attributes in process `syz.6.4230'.
[  510.908517][T18424] siw: device registration error -23
[  511.138215][T18416] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4238'.
[  512.735308][T18458] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4254'.
[  512.783755][T18456] validate_nla: 1 callbacks suppressed
[  512.783772][T18456] netlink: 'syz.5.4254': attribute type 10 has an invalid length.
[  513.097060][T18464] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4258'.
[  513.104274][T18467] netlink: 'syz.1.4257': attribute type 9 has an invalid length.
[  513.133573][T18467] netlink: 'syz.1.4257': attribute type 11 has an invalid length.
[  513.161493][T18467] netlink: 'syz.1.4257': attribute type 12 has an invalid length.
[  513.197081][T18467] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4257'.
[  513.222087][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4257'.
[  513.427040][ T5848] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  513.900939][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  515.034043][T18500] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4270'.
[  515.702984][ T5838] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  516.004324][T18516] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4276'.
[  516.021851][T18521] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4278'.
[  516.205173][T18529] dvmrp1: tun_chr_ioctl cmd 1074025672
[  516.223483][T18529] dvmrp1: ignored: set checksum disabled
[  516.705535][T18549] dvmrp1: tun_chr_ioctl cmd 1074025672
[  516.716973][T18549] dvmrp1: ignored: set checksum disabled
[  516.972272][T18556] netlink: 'syz.1.4295': attribute type 9 has an invalid length.
[  516.984524][T18556] netlink: 'syz.1.4295': attribute type 11 has an invalid length.
[  516.993850][T18556] netlink: 'syz.1.4295': attribute type 12 has an invalid length.
[  517.003744][T18556] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4295'.
[  517.015640][T18557] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  517.024599][T18557] syzkaller0: entered promiscuous mode
[  517.038142][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'.
[  517.063550][ T5848] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  517.171726][T18566] netlink: 763 bytes leftover after parsing attributes in process `syz.5.4299'.
[  517.223104][T18566] netlink: 'syz.5.4299': attribute type 5 has an invalid length.
[  517.242690][T18566] netlink: 'syz.5.4299': attribute type 5 has an invalid length.
[  517.384670][T18570] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4301'.
[  517.749987][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  517.911383][ T5838] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  518.125394][T18607] netlink: 'syz.0.4312': attribute type 9 has an invalid length.
[  518.130521][T18609] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4314'.
[  518.143972][T18607] netlink: 'syz.0.4312': attribute type 11 has an invalid length.
[  518.186941][T18607] netlink: 'syz.0.4312': attribute type 12 has an invalid length.
[  518.197239][T18607] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4312'.
[  518.198108][T18609] netlink: 'syz.2.4314': attribute type 5 has an invalid length.
[  518.208933][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4312'.
[  518.249310][T18609] netlink: 'syz.2.4314': attribute type 5 has an invalid length.
[  518.642383][T18632] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4319'.
[  518.894087][T18635] delete_channel: no stack
[  519.059085][T18647] syzkaller0: entered promiscuous mode
[  519.073098][T18647] syzkaller0: entered allmulticast mode
[  519.189228][T18654] netlink: 'syz.5.4327': attribute type 9 has an invalid length.
[  519.197725][T18654] netlink: 'syz.5.4327': attribute type 11 has an invalid length.
[  519.212945][T18654] netlink: 'syz.5.4327': attribute type 12 has an invalid length.
[  519.231531][T18660] netlink: 'syz.6.4328': attribute type 5 has an invalid length.
[  519.239533][T18660] netlink: 'syz.6.4328': attribute type 5 has an invalid length.
[  519.822370][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  520.965973][T18682] delete_channel: no stack
[  521.247211][T18700] __nla_validate_parse: 7 callbacks suppressed
[  521.247231][T18700] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4346'.
[  521.265149][T18700] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4346'.
[  521.375333][T18703] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4347'.
[  522.139155][T18734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4360'.
[  522.149921][T18734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4360'.
[  522.213590][T18731] delete_channel: no stack
[  522.286994][T18738] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4362'.
[  522.297488][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4362'.
[  522.374488][T18740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4363'.
[  522.970850][T18758] syzkaller0: entered promiscuous mode
[  522.977428][T18758] syzkaller0: entered allmulticast mode
[  523.056592][T18766] siw: device registration error -23
[  523.196332][ T5838] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  525.027748][T18813] validate_nla: 10 callbacks suppressed
[  525.027780][T18813] netlink: 'syz.1.4381': attribute type 5 has an invalid length.
[  525.050635][T18813] netlink: 'syz.1.4381': attribute type 5 has an invalid length.
[  525.653590][T18798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4380'.
[  525.663238][T18812] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4381'.
[  526.295673][T18831] siw: device registration error -23
[  526.642540][T18842] __nla_validate_parse: 1 callbacks suppressed
[  526.642563][T18842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4393'.
[  526.684909][T18842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4393'.
[  527.483257][ T5838] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  527.838937][T18878] netlink: 'syz.5.4407': attribute type 9 has an invalid length.
[  527.848195][T18878] netlink: 'syz.5.4407': attribute type 11 has an invalid length.
[  527.871040][T18878] netlink: 'syz.5.4407': attribute type 12 has an invalid length.
[  527.909757][T18878] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.4407'.
[  527.940317][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4407'.
[  528.034882][T18886] siw: device registration error -23
[  528.249332][T18894] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4414'.
[  528.284821][T18894] netlink: 'syz.5.4414': attribute type 10 has an invalid length.
[  528.345639][T18896] netlink: 'syz.0.4415': attribute type 9 has an invalid length.
[  528.367027][T18900] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  528.379545][T18896] netlink: 'syz.0.4415': attribute type 11 has an invalid length.
[  528.396895][T18896] netlink: 'syz.0.4415': attribute type 12 has an invalid length.
[  528.431750][T18896] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4415'.
[  528.467899][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4415'.
[  528.542389][T18905] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4419'.
[  528.618529][T18905] netlink: 'syz.1.4419': attribute type 5 has an invalid length.
[  528.822976][T18914] FAULT_INJECTION: forcing a failure.
[  528.822976][T18914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.889287][T18914] CPU: 0 UID: 0 PID: 18914 Comm: syz.1.4423 Not tainted syzkaller #0 PREEMPT(full) 
[  528.889314][T18914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  528.889332][T18914] Call Trace:
[  528.889353][T18914]  <TASK>
[  528.889374][T18914]  dump_stack_lvl+0xe8/0x150
[  528.889478][T18914]  should_fail_ex+0x412/0x560
[  528.889632][T18914]  _copy_to_user+0x31/0xb0
[  528.889740][T18914]  simple_read_from_buffer+0xe1/0x170
[  528.889892][T18914]  proc_fail_nth_read+0x1bb/0x230
[  528.890016][T18914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  528.890153][T18914]  ? rw_verify_area+0x2a6/0x4d0
[  528.890205][T18914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  528.890302][T18914]  vfs_read+0x20c/0xa70
[  528.890347][T18914]  ? fdget_pos+0x246/0x320
[  528.890490][T18914]  ? __pfx___mutex_lock+0x10/0x10
[  528.890561][T18914]  ? __pfx_vfs_read+0x10/0x10
[  528.890670][T18914]  ? __fget_files+0x2a/0x420
[  528.890815][T18914]  ? __fget_files+0x3a0/0x420
[  528.890865][T18914]  ? __fget_files+0x2a/0x420
[  528.891090][T18914]  ksys_read+0x150/0x270
[  528.891214][T18914]  ? __pfx_ksys_read+0x10/0x10
[  528.891472][T18914]  do_syscall_64+0x14d/0xf80
[  528.891518][T18914]  ? trace_irq_disable+0x3b/0x150
[  528.891555][T18914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.891599][T18914]  ? clear_bhb_loop+0x40/0x90
[  528.891706][T18914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.891750][T18914] RIP: 0033:0x7fa744b5cece
[  528.891808][T18914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  528.891822][T18914] RSP: 002b:00007fa745af2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  528.891842][T18914] RAX: ffffffffffffffda RBX: 00007fa745af36c0 RCX: 00007fa744b5cece
[  528.891855][T18914] RDX: 000000000000000f RSI: 00007fa745af30a0 RDI: 0000000000000007
[  528.891867][T18914] RBP: 00007fa745af3090 R08: 0000000000000000 R09: 0000000000000000
[  528.891877][T18914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.891887][T18914] R13: 00007fa744e16038 R14: 00007fa744e15fa0 R15: 00007ffc9d48a998
[  528.892198][T18914]  </TASK>
[  529.579982][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  529.952714][ T5848] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  530.213739][T18941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4434'.
[  530.304045][T18938] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4433'.
[  530.429364][T18945] validate_nla: 1 callbacks suppressed
[  530.429388][T18945] netlink: 'syz.6.4436': attribute type 9 has an invalid length.
[  530.468200][T18945] netlink: 'syz.6.4436': attribute type 11 has an invalid length.
[  530.490988][T18945] netlink: 'syz.6.4436': attribute type 12 has an invalid length.
[  531.038118][ T5848] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  531.046103][ T5848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  531.055725][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[  531.055748][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  531.055759][ T5848] Workqueue: hci4 hci_rx_work
[  531.055791][ T5848] Call Trace:
[  531.055798][ T5848]  <TASK>
[  531.055806][ T5848]  dump_stack_lvl+0xe8/0x150
[  531.055834][ T5848]  sysfs_create_dir_ns+0x271/0x2a0
[  531.055858][ T5848]  ? kobject_add_internal+0x4aa/0xd00
[  531.055882][ T5848]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  531.055907][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  531.055934][ T5848]  kobject_add_internal+0x62b/0xd00
[  531.055973][ T5848]  kobject_add+0x163/0x240
[  531.056003][ T5848]  ? __pfx_kobject_add+0x10/0x10
[  531.056026][ T5848]  ? _raw_spin_unlock+0x28/0x50
[  531.056056][ T5848]  ? get_device_parent+0x366/0x3a0
[  531.056091][ T5848]  device_add+0x408/0xb70
[  531.056129][ T5848]  hci_conn_add_sysfs+0xd5/0x210
[  531.056163][ T5848]  le_conn_complete_evt+0xf1d/0x1430
[  531.056200][ T5848]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  531.056221][ T5848]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  531.056259][ T5848]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  531.056286][ T5848]  ? skb_pull_data+0xfb/0x200
[  531.056312][ T5848]  hci_le_conn_complete_evt+0x187/0x470
[  531.056347][ T5848]  hci_event_packet+0x7af/0x12c0
[  531.056382][ T5848]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  531.056405][ T5848]  ? __pfx_hci_event_packet+0x10/0x10
[  531.056441][ T5848]  ? kcov_remote_start+0x49a/0x7a0
[  531.056473][ T5848]  ? hci_send_to_monitor+0xe2/0x590
[  531.056502][ T5848]  hci_rx_work+0x3ee/0x1030
[  531.056541][ T5848]  ? process_scheduled_works+0xa25/0x1830
[  531.056571][ T5848]  process_scheduled_works+0xb02/0x1830
[  531.056633][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[  531.056667][ T5848]  ? assign_work+0x3d5/0x5e0
[  531.056699][ T5848]  worker_thread+0xa50/0xfc0
[  531.056761][ T5848]  kthread+0x388/0x470
[  531.056781][ T5848]  ? __pfx_worker_thread+0x10/0x10
[  531.056804][ T5848]  ? __pfx_kthread+0x10/0x10
[  531.056825][ T5848]  ret_from_fork+0x51e/0xb90
[  531.056855][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[  531.056878][ T5848]  ? __switch_to+0xc7d/0x1450
[  531.056907][ T5848]  ? __pfx_kthread+0x10/0x10
[  531.056928][ T5848]  ret_from_fork_asm+0x1a/0x30
[  531.056986][ T5848]  </TASK>
[  531.057020][ T5848] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  531.302024][ T5848] Bluetooth: hci4: failed to register connection device
[  531.540883][T18982] netlink: 'syz.6.4447': attribute type 10 has an invalid length.
[  531.649962][ T5848] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  531.660265][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  531.958933][T19005] netlink: 'syz.5.4451': attribute type 21 has an invalid length.
[  531.967781][T19005] __nla_validate_parse: 4 callbacks suppressed
[  531.967799][T19005] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4451'.
[  531.986266][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4451'.
[  532.160262][T19010] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4454'.
[  532.237907][T19013] siw: device registration error -23
[  532.608463][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4458'.
[  532.898346][T19030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4461'.
[  532.947063][T19030] netlink: 'syz.2.4461': attribute type 10 has an invalid length.
[  533.331842][T19046] netlink: 'syz.2.4464': attribute type 3 has an invalid length.
[  533.353324][T19046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4464'.
[  533.654457][T19058] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4468'.
[  533.740076][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  533.873274][T19076] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4474'.
[  533.889526][T19076] netlink: 'syz.0.4474': attribute type 10 has an invalid length.
[  534.044465][T19082] siw: device registration error -23
[  534.111215][T19089] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4478'.
[  534.155855][T19094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4476'.
[  534.156192][T19093] netlink: 'syz.6.4480': attribute type 8 has an invalid length.
[  534.393720][ T5848] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  534.951770][T19129] netlink: 'syz.2.4491': attribute type 1 has an invalid length.
[  535.588694][T19161] netlink: 'syz.1.4502': attribute type 1 has an invalid length.
[  535.820655][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  535.958084][T19184] netlink: 'syz.2.4509': attribute type 5 has an invalid length.
[  535.976981][T19184] netlink: 'syz.2.4509': attribute type 5 has an invalid length.
[  536.368586][T19201] netlink: 'syz.6.4515': attribute type 1 has an invalid length.
[  536.630882][T19218] xfrm0 speed is unknown, defaulting to 1000
[  536.696239][T19218] xfrm0 speed is unknown, defaulting to 1000
[  536.739166][T19218] xfrm0 speed is unknown, defaulting to 1000
[  536.937233][T19227] FAULT_INJECTION: forcing a failure.
[  536.937233][T19227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.969704][T19227] CPU: 1 UID: 0 PID: 19227 Comm: syz.1.4522 Not tainted syzkaller #0 PREEMPT(full) 
[  536.969732][T19227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  536.969743][T19227] Call Trace:
[  536.969760][T19227]  <TASK>
[  536.969777][T19227]  dump_stack_lvl+0xe8/0x150
[  536.969858][T19227]  should_fail_ex+0x412/0x560
[  536.969978][T19227]  _copy_from_user+0x2d/0xb0
[  536.970043][T19227]  __copy_msghdr+0x3c5/0x5b0
[  536.970161][T19227]  ___sys_sendmsg+0x213/0x360
[  536.970219][T19227]  ? perf_trace_run_bpf_submit+0xee/0x170
[  536.970314][T19227]  ? __pfx____sys_sendmsg+0x10/0x10
[  536.970658][T19227]  ? __fget_files+0x2a/0x420
[  536.970854][T19227]  ? __fget_files+0x2a/0x420
[  536.970896][T19227]  ? __fget_files+0x3a0/0x420
[  536.971096][T19227]  __x64_sys_sendmsg+0x1bd/0x2a0
[  536.971196][T19227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  536.971231][T19227]  ? perf_trace_preemptirq_template+0xb2/0x350
[  536.971401][T19227]  ? __pfx_ksys_write+0x10/0x10
[  536.971606][T19227]  do_syscall_64+0x14d/0xf80
[  536.971648][T19227]  ? trace_irq_disable+0x3b/0x150
[  536.971682][T19227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.971720][T19227]  ? clear_bhb_loop+0x40/0x90
[  536.971808][T19227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.971842][T19227] RIP: 0033:0x7fa744b9c629
[  536.971889][T19227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.971906][T19227] RSP: 002b:00007fa745af3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.971925][T19227] RAX: ffffffffffffffda RBX: 00007fa744e15fa0 RCX: 00007fa744b9c629
[  536.971940][T19227] RDX: 0000000000008001 RSI: 0000200000000cc0 RDI: 0000000000000004
[  536.971952][T19227] RBP: 00007fa745af3090 R08: 0000000000000000 R09: 0000000000000000
[  536.971963][T19227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.971973][T19227] R13: 00007fa744e16038 R14: 00007fa744e15fa0 R15: 00007ffc9d48a998
[  536.972216][T19227]  </TASK>
[  537.343807][T19218] infiniband syz1: set active
[  537.349951][ T9806] xfrm0 speed is unknown, defaulting to 1000
[  537.357134][T19218] infiniband syz1: added xfrm0
[  537.414016][T19218] RDS/IB: syz1: added
[  537.418839][T19218] smc: adding ib device syz1 with port count 1
[  537.436432][T19218] smc:    ib device syz1 port 1 has no pnetid
[  537.446813][ T9805] xfrm0 speed is unknown, defaulting to 1000
[  537.482083][T19218] xfrm0 speed is unknown, defaulting to 1000
[  537.495656][T19240] netlink: 'syz.6.4527': attribute type 1 has an invalid length.
[  537.545261][T19240] __nla_validate_parse: 15 callbacks suppressed
[  537.545336][T19240] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4527'.
[  537.899728][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  537.920272][T19258] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4533'.
[  537.993007][T19218] xfrm0 speed is unknown, defaulting to 1000
[  538.516859][T19218] xfrm0 speed is unknown, defaulting to 1000
[  538.796575][T19293] netlink: 'syz.6.4542': attribute type 1 has an invalid length.
[  538.825725][T19293] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4542'.
[  538.954265][T19298] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4545'.
[  539.016974][T19218] xfrm0 speed is unknown, defaulting to 1000
[  539.130491][T19302] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4547'.
[  539.180693][T19302] netlink: 'syz.6.4547': attribute type 10 has an invalid length.
[  539.288437][T19218] xfrm0 speed is unknown, defaulting to 1000
[  539.595074][T19315] netlink: 'syz.5.4552': attribute type 9 has an invalid length.
[  539.630232][T19315] netlink: 'syz.5.4552': attribute type 11 has an invalid length.
[  539.649549][T19315] netlink: 'syz.5.4552': attribute type 12 has an invalid length.
[  539.682867][T19315] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.4552'.
[  539.760453][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4552'.
[  539.811784][T19307] siw: device registration error -23
[  539.836291][T19323] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4555'.
[  539.979981][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  539.986980][T19329] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4557'.
[  540.227170][T19334] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4560'.
[  540.668032][T19352] dvmrp1: tun_chr_ioctl cmd 1074025672
[  540.697600][T19352] dvmrp1: ignored: set checksum disabled
[  540.698069][T19359] validate_nla: 1 callbacks suppressed
[  540.698082][T19359] netlink: 'syz.5.4572': attribute type 1 has an invalid length.
[  540.804220][T19365] siw: device registration error -23
[  540.934768][T19367] netlink: 'syz.5.4574': attribute type 10 has an invalid length.
[  541.560653][T19399] netlink: 'syz.1.4584': attribute type 1 has an invalid length.
[  541.962401][T19420] netlink: 'syz.5.4589': attribute type 10 has an invalid length.
[  542.007468][T19409] netlink: 'syz.1.4588': attribute type 18 has an invalid length.
[  542.232836][T19432] FAULT_INJECTION: forcing a failure.
[  542.232836][T19432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.266739][T19432] CPU: 1 UID: 0 PID: 19432 Comm: syz.5.4593 Not tainted syzkaller #0 PREEMPT(full) 
[  542.266767][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  542.266779][T19432] Call Trace:
[  542.266787][T19432]  <TASK>
[  542.266795][T19432]  dump_stack_lvl+0xe8/0x150
[  542.266825][T19432]  should_fail_ex+0x412/0x560
[  542.266850][T19432]  _copy_from_user+0x2d/0xb0
[  542.266878][T19432]  __copy_msghdr+0x3c5/0x5b0
[  542.266908][T19432]  ___sys_sendmsg+0x213/0x360
[  542.266939][T19432]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.266996][T19432]  ? __fget_files+0x2a/0x420
[  542.267020][T19432]  ? __fget_files+0x3a0/0x420
[  542.267053][T19432]  __x64_sys_sendmsg+0x1bd/0x2a0
[  542.267082][T19432]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  542.267117][T19432]  ? __pfx_ksys_write+0x10/0x10
[  542.267144][T19432]  do_syscall_64+0x14d/0xf80
[  542.267170][T19432]  ? trace_irq_disable+0x3b/0x150
[  542.267195][T19432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.267213][T19432]  ? clear_bhb_loop+0x40/0x90
[  542.267235][T19432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.267253][T19432] RIP: 0033:0x7f283819c629
[  542.267271][T19432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.267288][T19432] RSP: 002b:00007f283900d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.267308][T19432] RAX: ffffffffffffffda RBX: 00007f2838415fa0 RCX: 00007f283819c629
[  542.267321][T19432] RDX: 000000002000481c RSI: 0000200000000040 RDI: 0000000000000003
[  542.267333][T19432] RBP: 00007f283900d090 R08: 0000000000000000 R09: 0000000000000000
[  542.267345][T19432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.267355][T19432] R13: 00007f2838416038 R14: 00007f2838415fa0 R15: 00007fff57cdcc58
[  542.267384][T19432]  </TASK>
[  542.589367][T19435] __nla_validate_parse: 12 callbacks suppressed
[  542.589396][T19435] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4594'.
[  542.655381][T19445] netlink: 'syz.1.4598': attribute type 1 has an invalid length.
[  542.672255][T19445] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4598'.
[  542.711790][T19443] siw: device registration error -23
[  542.846000][T19452] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4599'.
[  542.914061][T19451] netlink: 'syz.1.4601': attribute type 9 has an invalid length.
[  542.926496][T19451] netlink: 'syz.1.4601': attribute type 11 has an invalid length.
[  542.936053][T19451] netlink: 'syz.1.4601': attribute type 12 has an invalid length.
[  542.954595][T19451] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4601'.
[  542.972762][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'.
[  543.015389][T19455] netlink: 'syz.0.4602': attribute type 9 has an invalid length.
[  543.026023][T19455] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4602'.
[  543.066672][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4602'.
[  543.255010][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'.
[  543.333747][ T5848] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  543.499175][T19473] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4609'.
[  543.583336][T19477] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4610'.
[  544.654726][ T5838] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  544.656762][T19510] delete_channel: no stack
[  544.682189][ T5848] ==================================================================
[  544.690302][ T5848] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2a0
[  544.697780][ T5848] Write of size 4 at addr ffff88807d9d4010 by task kworker/u9:9/5848
[  544.705943][ T5848] 
[  544.708280][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[  544.708303][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  544.708316][ T5848] Workqueue: hci0 hci_cmd_sync_work
[  544.708346][ T5848] Call Trace:
[  544.708353][ T5848]  <TASK>
[  544.708360][ T5848]  dump_stack_lvl+0xe8/0x150
[  544.708386][ T5848]  print_report+0xba/0x230
[  544.708415][ T5848]  ? hci_conn_drop+0x34/0x2a0
[  544.708432][ T5848]  kasan_report+0x117/0x150
[  544.708455][ T5848]  ? hci_conn_drop+0x34/0x2a0
[  544.708475][ T5848]  kasan_check_range+0x264/0x2c0
[  544.708498][ T5848]  hci_conn_drop+0x34/0x2a0
[  544.708515][ T5848]  ? __pfx_le_read_features_complete+0x10/0x10
[  544.708540][ T5848]  hci_cmd_sync_work+0x262/0x400
[  544.708566][ T5848]  ? process_scheduled_works+0xa25/0x1830
[  544.708590][ T5848]  process_scheduled_works+0xb02/0x1830
[  544.708624][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[  544.708649][ T5848]  ? assign_work+0x3d5/0x5e0
[  544.708671][ T5848]  worker_thread+0xa50/0xfc0
[  544.708706][ T5848]  kthread+0x388/0x470
[  544.708723][ T5848]  ? __pfx_worker_thread+0x10/0x10
[  544.708745][ T5848]  ? __pfx_kthread+0x10/0x10
[  544.708761][ T5848]  ret_from_fork+0x51e/0xb90
[  544.708785][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[  544.708806][ T5848]  ? __switch_to+0xc7d/0x1450
[  544.708827][ T5848]  ? __pfx_kthread+0x10/0x10
[  544.708843][ T5848]  ret_from_fork_asm+0x1a/0x30
[  544.708874][ T5848]  </TASK>
[  544.708881][ T5848] 
[  544.852063][ T5848] Allocated by task 5848:
[  544.856550][ T5848]  kasan_save_track+0x3e/0x80
[  544.861226][ T5848]  __kasan_kmalloc+0x93/0xb0
[  544.865803][ T5848]  __kmalloc_cache_noprof+0x31c/0x660
[  544.871160][ T5848]  __hci_conn_add+0x3c4/0x1e00
[  544.875908][ T5848]  le_conn_complete_evt+0x706/0x1430
[  544.881180][ T5848]  hci_le_conn_complete_evt+0x187/0x470
[  544.886723][ T5848]  hci_event_packet+0x7af/0x12c0
[  544.891837][ T5848]  hci_rx_work+0x3ee/0x1030
[  544.896351][ T5848]  process_scheduled_works+0xb02/0x1830
[  544.901899][ T5848]  worker_thread+0xa50/0xfc0
[  544.906489][ T5848]  kthread+0x388/0x470
[  544.910542][ T5848]  ret_from_fork+0x51e/0xb90
[  544.915131][ T5848]  ret_from_fork_asm+0x1a/0x30
[  544.919893][ T5848] 
[  544.922198][ T5848] Freed by task 5838:
[  544.926174][ T5848]  kasan_save_track+0x3e/0x80
[  544.930938][ T5848]  kasan_save_free_info+0x46/0x50
[  544.935977][ T5848]  __kasan_slab_free+0x5c/0x80
[  544.940777][ T5848]  kfree+0x1c1/0x630
[  544.944682][ T5848]  device_release+0x9e/0x1d0
[  544.949258][ T5848]  kobject_put+0x228/0x560
[  544.953657][ T5848]  hci_conn_del+0xc36/0x1230
[  544.958261][ T5848]  hci_disconn_complete_evt+0x64e/0x950
[  544.963826][ T5848]  hci_event_packet+0x805/0x12c0
[  544.968772][ T5848]  hci_rx_work+0x3ee/0x1030
[  544.973372][ T5848]  process_scheduled_works+0xb02/0x1830
[  544.979295][ T5848]  worker_thread+0xa50/0xfc0
[  544.983901][ T5848]  kthread+0x388/0x470
[  544.987972][ T5848]  ret_from_fork+0x51e/0xb90
[  544.992662][ T5848]  ret_from_fork_asm+0x1a/0x30
[  544.997519][ T5848] 
[  544.999846][ T5848] The buggy address belongs to the object at ffff88807d9d4000
[  544.999846][ T5848]  which belongs to the cache kmalloc-8k of size 8192
[  545.014158][ T5848] The buggy address is located 16 bytes inside of
[  545.014158][ T5848]  freed 8192-byte region [ffff88807d9d4000, ffff88807d9d6000)
[  545.028035][ T5848] 
[  545.030398][ T5848] The buggy address belongs to the physical page:
[  545.037690][ T5848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d9d0
[  545.046572][ T5848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  545.055150][ T5848] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  545.062690][ T5848] page_type: f5(slab)
[  545.066672][ T5848] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122
[  545.075421][ T5848] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  545.084031][ T5848] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122
[  545.092690][ T5848] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  545.101864][ T5848] head: 00fff00000000003 ffffea0001f67401 00000000ffffffff 00000000ffffffff
[  545.110529][ T5848] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  545.119180][ T5848] page dumped because: kasan: bad access detected
[  545.125593][ T5848] page_owner tracks the page as allocated
[  545.131293][ T5848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 69671586986, free_ts 69243169121
[  545.152638][ T5848]  post_alloc_hook+0x231/0x280
[  545.157432][ T5848]  get_page_from_freelist+0x24dc/0x2580
[  545.162980][ T5848]  __alloc_frozen_pages_noprof+0x18d/0x380
[  545.168861][ T5848]  allocate_slab+0x77/0x660
[  545.173353][ T5848]  refill_objects+0x331/0x3c0
[  545.178193][ T5848]  __pcs_replace_empty_main+0x2b9/0x620
[  545.183727][ T5848]  __kmalloc_noprof+0x474/0x760
[  545.188580][ T5848]  cache_create_net+0x98/0x230
[  545.193343][ T5848]  gss_svc_init_net+0x58/0x570
[  545.198102][ T5848]  ops_init+0x35c/0x5c0
[  545.202244][ T5848]  setup_net+0x118/0x340
[  545.206471][ T5848]  copy_net_ns+0x50e/0x730
[  545.210871][ T5848]  create_new_namespaces+0x3e7/0x6a0
[  545.216233][ T5848]  unshare_nsproxy_namespaces+0x11a/0x160
[  545.221989][ T5848]  ksys_unshare+0x4f4/0x900
[  545.226486][ T5848]  __x64_sys_unshare+0x38/0x50
[  545.231240][ T5848] page last free pid 5824 tgid 5824 stack trace:
[  545.237562][ T5848]  __free_frozen_pages+0xc2b/0xdb0
[  545.242668][ T5848]  __slab_free+0x263/0x2b0
[  545.247069][ T5848]  qlist_free_all+0x97/0x100
[  545.251643][ T5848]  kasan_quarantine_reduce+0x148/0x160
[  545.257085][ T5848]  __kasan_slab_alloc+0x22/0x80
[  545.261921][ T5848]  __kmalloc_cache_node_noprof+0x391/0x6b0
[  545.267720][ T5848]  __get_vm_area_node+0x13f/0x300
[  545.272738][ T5848]  __vmalloc_node_range_noprof+0x372/0x1730
[  545.278617][ T5848]  vmalloc_user_noprof+0xad/0xe0
[  545.283570][ T5848]  kcov_ioctl+0x55/0x620
[  545.287804][ T5848]  __se_sys_ioctl+0xfc/0x170
[  545.292380][ T5848]  do_syscall_64+0x14d/0xf80
[  545.296962][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.302840][ T5848] 
[  545.305148][ T5848] Memory state around the buggy address:
[  545.310760][ T5848]  ffff88807d9d3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  545.318804][ T5848]  ffff88807d9d3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  545.326848][ T5848] >ffff88807d9d4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  545.334889][ T5848]                          ^
[  545.339548][ T5848]  ffff88807d9d4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  545.347602][ T5848]  ffff88807d9d4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  545.355731][ T5848] ==================================================================
[  545.370625][ T5848] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  545.377945][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[  545.387404][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  545.397472][ T5848] Workqueue: hci0 hci_cmd_sync_work
[  545.402788][ T5848] Call Trace:
[  545.406071][ T5848]  <TASK>
[  545.409011][ T5848]  vpanic+0x56c/0xa60
[  545.413081][ T5848]  ? __pfx_vpanic+0x10/0x10
[  545.417686][ T5848]  panic+0xc5/0xd0
[  545.421400][ T5848]  ? __pfx_panic+0x10/0x10
[  545.425810][ T5848]  ? preempt_schedule_thunk+0x16/0x30
[  545.431172][ T5848]  ? preempt_schedule_thunk+0x16/0x30
[  545.436535][ T5848]  ? hci_conn_drop+0x34/0x2a0
[  545.441295][ T5848]  check_panic_on_warn+0x89/0xb0
[  545.446424][ T5848]  ? hci_conn_drop+0x34/0x2a0
[  545.451639][ T5848]  end_report+0x73/0x180
[  545.455900][ T5848]  ? hci_conn_drop+0x34/0x2a0
[  545.460658][ T5848]  kasan_report+0x128/0x150
[  545.465152][ T5848]  ? hci_conn_drop+0x34/0x2a0
[  545.470198][ T5848]  kasan_check_range+0x264/0x2c0
[  545.475294][ T5848]  hci_conn_drop+0x34/0x2a0
[  545.479806][ T5848]  ? __pfx_le_read_features_complete+0x10/0x10
[  545.486067][ T5848]  hci_cmd_sync_work+0x262/0x400
[  545.491001][ T5848]  ? process_scheduled_works+0xa25/0x1830
[  545.496893][ T5848]  process_scheduled_works+0xb02/0x1830
[  545.502640][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[  545.508616][ T5848]  ? assign_work+0x3d5/0x5e0
[  545.513194][ T5848]  worker_thread+0xa50/0xfc0
[  545.517983][ T5848]  kthread+0x388/0x470
[  545.522060][ T5848]  ? __pfx_worker_thread+0x10/0x10
[  545.527171][ T5848]  ? __pfx_kthread+0x10/0x10
[  545.532014][ T5848]  ret_from_fork+0x51e/0xb90
[  545.536616][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[  545.541728][ T5848]  ? __switch_to+0xc7d/0x1450
[  545.546420][ T5848]  ? __pfx_kthread+0x10/0x10
[  545.551008][ T5848]  ret_from_fork_asm+0x1a/0x30
[  545.555779][ T5848]  </TASK>
[  545.559170][ T5848] Kernel Offset: disabled
[  545.563501][ T5848] Rebooting in 86400 seconds..