last executing test programs:

3m41.287729388s ago: executing program 1 (id=1971):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002580)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014000700000022738823c60c25ef0973448e626a33de03e93e29674a42fd4cd2be868ddd07b3a1a21ba7b852"], 0x90}, 0x1, 0x7}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000500)=@generic={0x29, "695448035658d1c45eff50a7c12f7e3a9edbdf4b1a42028808437877801de851ef8fb9ea4f82c2355c2b219b34cf633fde0139126dab1cfea17d61c1c0a33716e7602b637671c11ff3e5850d3e66df4d4763a9b26ebd3e23b1a8c3073db884b16bbec29839da3b6602544613eed5464b75c58850f3ac5c67bca0d74cf745"}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="18007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000101000000000"], 0x10b8}, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff0000", @ANYBLOB="000000000000000005000000000000009520000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
sendmsg$OSF_MSG_REMOVE(r3, 0x0, 0x80440c0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x200080c4)

3m40.573357191s ago: executing program 1 (id=1979):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfb, {0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, 0x1, 0x1de6}}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x48804)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

3m40.009245522s ago: executing program 1 (id=1982):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002041)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000000000000", @ANYRES32, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

3m38.590791819s ago: executing program 1 (id=1988):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r0}, 0x38)
r1 = socket(0x11, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11000000040000"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r1}, 0x20)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

3m36.443688536s ago: executing program 1 (id=2000):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

3m33.459114801s ago: executing program 1 (id=2005):
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x9, 0x4, 0x8, 0x0, 0x7, 0x4023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0xe}, 0x409, 0x8000000000000040, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x200000fa}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000100)=0x8000000000000000, 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd26, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffa}}, 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$inet6(0xa, 0x800, 0xfffffff7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r3, 0x29, 0x31, 0x0, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x11}, @TCA_PIE_ALPHA={0x8, 0x4, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6048041}, 0x4000000)

3m32.718299256s ago: executing program 32 (id=2005):
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x9, 0x4, 0x8, 0x0, 0x7, 0x4023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0xe}, 0x409, 0x8000000000000040, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x200000fa}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000100)=0x8000000000000000, 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd26, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffa}}, 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$inet6(0xa, 0x800, 0xfffffff7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r3, 0x29, 0x31, 0x0, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x11}, @TCA_PIE_ALPHA={0x8, 0x4, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6048041}, 0x4000000)

3m23.077743267s ago: executing program 2 (id=2046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x682, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

3m22.485929964s ago: executing program 2 (id=2049):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x100000000000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = socket$kcm(0x1e, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8600)

3m21.662075597s ago: executing program 2 (id=2053):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x24, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x4, 0x800}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd}]}, 0x24}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000600))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140), 0x1000012, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x4}}, {}, {@mode={'mode', 0x3d, 0x36b380}}, {@mode}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@context={'context', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt}, {@fsname={'fsname', 0x3d, 'syzkaller\x00'}}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='uid', @ANYRESHEX=r4, @ANYBLOB="2c6d6f6465710a450d15"])
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$kcm(0x10, 0x2, 0x0)

3m21.105215219s ago: executing program 2 (id=2065):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_clone(0x4b40100, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x58}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}]}}, 0x0, 0x42}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m20.511497289s ago: executing program 2 (id=2060):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x2, 0x6, 0x1, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
r0 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000001)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
close(r0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

3m19.864135109s ago: executing program 2 (id=2062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x682, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

3m4.552942154s ago: executing program 33 (id=2062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x682, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

8.237856734s ago: executing program 0 (id=3316):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, 0x0, 0x8090)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080), 0x12)

7.95565534s ago: executing program 0 (id=3320):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0f"], 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x5, 0x0, 0xf1, 0x8}, 0x10, 0x4946, r5, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

7.839196134s ago: executing program 4 (id=3321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xa0c2d10423be50a9)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0x10, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
close(0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

7.225837991s ago: executing program 4 (id=3325):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000500030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0xc, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe33)
r2 = socket$inet6(0xa, 0x1, 0x100)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$sock_attach_bpf(r2, 0x29, 0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000000)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x32120)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x9c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x88, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x3ff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x38, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x10, 0x6, "7202cf0c0000c49f95a68fe3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}}, 0xc004)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0xd2, &(0x7f00000001c0)=""/210, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

7.088953233s ago: executing program 0 (id=3336):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
mkdir(0x0, 0x18b)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
perf_event_open(0x0, 0x0, 0x7, r0, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2000c841)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)

6.998377529s ago: executing program 4 (id=3328):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0xf6a}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x1, 0x0, 0x1, 0x8, 0x5, 0x8, 0x7, 0x7, 0xc, 0x5, 0x4, 0xc, 0xf, 0xc], 0x0, [0x0, 0x2, 0x6, 0x6, 0x6, 0x7f, 0x5, 0xff1e, 0x7, 0x6, 0x6, 0x3, 0x30, 0x9, 0x4, 0xfff], [0xe9, 0x3, 0x3, 0x2, 0x10, 0xfff8, 0xf89b, 0x242a, 0x1, 0x9, 0x78, 0xbd, 0x7f, 0x4, 0x6, 0x4]}}}}]}, 0x88}}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', r3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000009aaa0000181500005b3ebdbfefb927c63a02a1bfd828607dc5b9cc3c276c37720c39d4d2f231ec352ce540264d4ba5201e732900a46b133c04d9044c1afe80b42fdd391113caccbdfb25e8d2504e9beacf3f9c545e2961fe22c821451a862e79542d03d1bd2501ee15ae9cabd3c5478cbdb216f423cbba4f679dc384c3f91bb153b2fd3586ab13a128f7e070fe9a86e939332ae8669fb93dcfd025f9a091b8bc7016b4006c8138a5dd88e39bf382b9ce742d1c08219188ff0c422f0b68301a15e94570a4ca4f837deb518146a2a7f80db0012b748de13989865384950ecd363fd56285cb37cebd6baa9687ece10d05bd7c5370000c9adfb38ebf27eb15adb2c2", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000260000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003200010026bd7000fddbdb250f"], 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x40010)

6.443490789s ago: executing program 4 (id=3331):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x3, 0x6, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r2, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x12, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffecb, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x3, 0x0, 0xff, 0x401, 0x1, 0x6, 0x8, 0x29d7, 0x7}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x14, 0x7, 0xffffffff, 0x1, 0x7ff, 0x2}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14000}, 0x4000010)

5.056150824s ago: executing program 4 (id=3337):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c40)=""/4074, 0xfea}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/38, 0x26}], 0x4}, 0x40002002)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200088d0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x74800)

3.345247993s ago: executing program 3 (id=3340):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x36, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.208192131s ago: executing program 4 (id=3343):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, 0x0, 0x8090)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080), 0x12)

3.013408423s ago: executing program 5 (id=3344):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_clone(0x4b40100, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}]}}, 0x0, 0x42}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.945921466s ago: executing program 3 (id=3345):
r0 = socket$kcm(0xa, 0x1, 0x106)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4, 0x7, 0xfffffffc, 0xe, 0x3fe, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="8d00000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050000000900020073797a3000000000050005060200000005000100060000b100000000"], 0x4c}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x7ff, 0x9, 0x3, 0x0, 0xffffffff, 0x1}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb100, 0x0, 0x7}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000001}, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x17, &(0x7f0000000000)=r9, 0x10)
write$cgroup_subtree(r9, &(0x7f0000000200)={[{0x2d, 'devices'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'cpuacct'}, {0x2d, 'rdma'}]}, 0x22)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}], 0x1}, 0x0)

1.857102599s ago: executing program 6 (id=3346):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000004000000000000000076"], 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f00000003c0)=0x103, 0x12)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x40000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1, <r8=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@fallback=r0, r1, 0x2f, 0x2038, 0x4, @void, @void, @value=r8}, 0x20)

1.227183822s ago: executing program 5 (id=3347):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x4040)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000ddff00000100000007"], 0x50)
r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x6, 0xe, 0xa, 0x0, 0xffffffffffffff39, 0x80, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x10, 0x6}, 0x0, 0x2, 0x9, 0x3, 0x4fd1, 0xdf, 0xb61, 0x0, 0xa, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='\'\x93/\x94#*^{(-\x00')
setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100)=r2, 0x5042)

1.226630706s ago: executing program 6 (id=3348):
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f00000007c0)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x210020000005)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
getpid()
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000000800000000", @ANYBLOB], 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1, 0x3fe, 0x3, 0x7, 0x4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x2}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b5", 0xa}], 0x2}, 0x0)

1.142837398s ago: executing program 3 (id=3349):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c40)=""/4074, 0xfea}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/38, 0x26}], 0x4}, 0x40002002)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200088d0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x74800)

935.481655ms ago: executing program 5 (id=3350):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xa0c2d10423be50a9)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0x10, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
close(0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

907.07219ms ago: executing program 0 (id=3351):
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x32, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xd, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001800010324bd7002fadb701f52"], 0x14}}, 0x0)

750.159222ms ago: executing program 6 (id=3352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x9a, &(0x7f0000000640)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf092000000000005d09010000000000950000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1)
close(0x3)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x2}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="415453569d163263a89953", 0xb}, {&(0x7f0000000180)="5c5897ef51189505691e4fe97b42e6dbca760d35814dc825825f3d70f09c8551079c2b45eebffca80f09dfa33b576808970caabefb0b2adc6d40600bbdceedf08425635444a4ff944983128a6a070f5c09b4667fd981edfddb029dbf630ba25721d2af4aeda551d2e072c8560613fc62984d24b2068f68fddec57dcb56546f007d82fbd6c64e44b5fbbdea6d24bdecd343461db640a23e288f24585e9055a4829912ef78f10a8d26fe25c960", 0xac}, {&(0x7f0000000340)="c8b67232409d2ea03642540386d5ddd50a78dd849403d397934530ab12d10d4b6b56e53649eb2ffb77045698c301c7c7e6a20893d1b216af6e5eb665397976b6822984f98efc8305a30354894ced21ec344be1e687618e96ac43f55029291d32a86cd3afc2977c34f577ba6244b5343f6af254ca6cf5332508ae0a4f07c57fff1f13b95ed5d515da7494aca6631a8a3a7ea4dd4a3a3fe08c613b74fbdc25db5b7414021198c8a0a763a5d65110abdc67bf2a0c598e9d8eca7f30c5cf5825cafdea748bdf75081d7e208004a4c4b41633093bba95c21729141dd782899f1c792f88c6fc", 0xe3}, {&(0x7f0000000440)="e961b8e70beea0a7a10fb437baa6a3fb321e84d4ba0a6f3d792d642c5a3e0fa16d030cb8daf3835c54dbfd0e9771911e74de07cdfcee3dce80977b8830bf6c037b5647787a44d4128bde6ed5c2e06eefe28b83cba0850f2f3c4ef34823ae6a7d7418cbb08c90145944d7c65b81efafbdb0c03cba614ad1c47f1134dd92a187ea4b78d3c238260aae031fb607c30aeac2c4730cd9022881", 0x97}], 0x4, &(0x7f0000000540)="97ebb6495eb6307a137a42ffc1916e55c19f4dd2a7f0135c7a5d3d5e2489e5329d91ddf7bec4e30d4f864388b8ccabf162b05ea51181f4bfcc5292b831353842dbdc66b44ddf6e35bff5ab1b04869fd1cd", 0x51, 0x81}, 0x0)

742.489957ms ago: executing program 3 (id=3353):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c40)=""/4074, 0xfea}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/38, 0x26}], 0x4}, 0x40002002)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200088d0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x74800)

739.044968ms ago: executing program 5 (id=3354):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c40)=""/4074, 0xfea}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/38, 0x26}], 0x4}, 0x40002002)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200088d0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x74800)

507.441313ms ago: executing program 0 (id=3355):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x36, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

500.633142ms ago: executing program 6 (id=3356):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
getpid()
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2400c0d4)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010325bd7000fcffffff110000000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x200040c4)
ioctl$SIOCSIFHWADDR(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xc47a}, 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x13)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)

458.836229ms ago: executing program 3 (id=3357):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000a80), 0x6e, &(0x7f0000000f00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)=""/212, 0xd4}, {0x0}], 0x4}, 0x40000140)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1000, 0x2, 0xffffff81, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}, 0x8804)
sendmsg$sock(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x4000010)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

360.536666ms ago: executing program 0 (id=3358):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_clone(0x4b40100, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}]}}, 0x0, 0x42}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

359.628398ms ago: executing program 5 (id=3359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x8, 0x0, 0x1fffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaed, 0x0, @perf_config_ext, 0x114905, 0x7, 0xfffffffd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, r1, 0x1, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0xb}, 0x100600, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x96aa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000036000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x141)
perf_event_open(0x0, r1, 0x11, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000019500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

203.469642ms ago: executing program 6 (id=3360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x4040)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000ddff00000100000007"], 0x50)
r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x6, 0xe, 0xa, 0x0, 0xffffffffffffff39, 0x80, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x10, 0x6}, 0x0, 0x2, 0x9, 0x3, 0x4fd1, 0xdf, 0xb61, 0x0, 0xa, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='\'\x93/\x94#*^{(-\x00')
setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100)=r2, 0x5042)

93.055898ms ago: executing program 3 (id=3361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4000000)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x64ab, r5}, 0x38)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000cc0)={0x7fff, <r6=>0x0}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r5}, &(0x7f0000000ec0), 0x0}, 0x20)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x21, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000000a80)=""/193, 0x40f00, 0x1b, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x9}, 0x10, r6, 0x0, 0x3, 0x0, &(0x7f0000000fc0)=[{0x0, 0x5, 0x10, 0xc}, {0x4, 0x5, 0xf, 0x4}, {0x2, 0x3, 0x7, 0x4}], 0x10, 0x1}, 0x94)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000dc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x4d}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r8, 0x0, 0x4008040)

82.549123ms ago: executing program 5 (id=3362):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000002c0)="f3fffeff", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000002010400000000000000000200000524000280140001800800010000000000080002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003e00ffffffff0800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)

0s ago: executing program 6 (id=3363):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c40)=""/4074, 0xfea}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/38, 0x26}], 0x4}, 0x40002002)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200088d0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x74800)

kernel console output (not intermixed with test programs):

51.933304][ T9629] bridge_slave_0: entered promiscuous mode
[  351.943200][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.951736][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.959535][ T9629] bridge_slave_1: entered allmulticast mode
[  351.968410][ T9629] bridge_slave_1: entered promiscuous mode
[  352.391315][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.479976][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.502198][ T9706] netlink: zone id is out of range
[  352.519825][ T9706] netlink: zone id is out of range
[  352.541615][ T9706] netlink: zone id is out of range
[  352.569399][ T9706] netlink: zone id is out of range
[  352.583758][ T9709] sctp: [Deprecated]: syz.2.1225 (pid 9709) Use of struct sctp_assoc_value in delayed_ack socket option.
[  352.583758][ T9709] Use struct sctp_sack_info instead
[  352.626145][ T9629] team0: Port device team_slave_0 added
[  352.644728][ T9629] team0: Port device team_slave_1 added
[  352.738620][ T9713] netlink: 352 bytes leftover after parsing attributes in process `syz.3.1228'.
[  352.837016][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.849591][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.877734][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.011940][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.034328][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.091516][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.235322][ T9629] hsr_slave_0: entered promiscuous mode
[  353.257546][ T9629] hsr_slave_1: entered promiscuous mode
[  353.282377][ T9629] debugfs: 'hsr0' already exists in 'hsr'
[  353.290623][ T9629] Cannot create hsr debugfs directory
[  353.854536][ T9738] netlink: 'syz.0.1246': attribute type 66 has an invalid length.
[  353.982030][   T50] Bluetooth: hci0: command tx timeout
[  354.149732][ T9629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.483910][ T9629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.608389][ T9629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.750569][ T9629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.019762][ T9751] netlink: 11910 bytes leftover after parsing attributes in process `syz.0.1248'.
[  355.510807][ T9629] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  355.537389][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  355.546335][ T9629] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  355.568522][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  355.592443][ T9629] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  355.621442][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  355.661546][ T9629] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  355.700964][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.052961][   T50] Bluetooth: hci0: command tx timeout
[  356.096643][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.129966][ T9629] 8021q: adding VLAN 0 to HW filter on device team0
[  356.145506][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.152882][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.223280][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.230603][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.418494][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1251'.
[  356.913636][ T9790] ip6gretap0: entered promiscuous mode
[  356.922330][ T9790] ip6gretap0: entered allmulticast mode
[  357.034152][ T9797] cgroup: fork rejected by pids controller in /syz2
[  357.235509][ T9798] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1252'.
[  357.260034][ T9798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  357.960051][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.028374][ T9629] veth0_vlan: entered promiscuous mode
[  358.048160][ T9629] veth1_vlan: entered promiscuous mode
[  358.097263][ T9629] veth0_macvtap: entered promiscuous mode
[  358.109768][ T9629] veth1_macvtap: entered promiscuous mode
[  358.122984][   T50] Bluetooth: hci0: command tx timeout
[  358.140213][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.161336][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.181945][ T5910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.191117][ T5910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.208257][ T5910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.218115][ T5910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.334065][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.357532][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.420484][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.430175][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.558014][ T9833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1203'.
[  359.428552][ T9854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1268'.
[  359.441733][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'.
[  359.451584][ T9851] netlink: 'syz.1.1253': attribute type 39 has an invalid length.
[  359.468198][ T9851] veth1_macvtap: left promiscuous mode
[  361.601465][ T9885] netlink: 'syz.4.1263': attribute type 21 has an invalid length.
[  361.624431][ T9885] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1263'.
[  361.654056][ T9885] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1263'.
[  361.836520][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.850625][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.859293][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.875549][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.891709][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.491788][ T9900] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[  363.254583][ T9925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1280'.
[  364.402811][ T5637] Bluetooth: hci4: command tx timeout
[  364.741606][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.767898][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.781208][ T9887] bridge_slave_0: entered allmulticast mode
[  364.807202][ T9887] bridge_slave_0: entered promiscuous mode
[  364.830472][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.860030][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.867769][ T9887] bridge_slave_1: entered allmulticast mode
[  364.888570][ T9887] bridge_slave_1: entered promiscuous mode
[  366.018193][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.079532][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.252274][ T9887] team0: Port device team_slave_0 added
[  366.280211][ T9887] team0: Port device team_slave_1 added
[  366.412345][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.429747][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.471146][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.482785][   T50] Bluetooth: hci4: command tx timeout
[  366.517425][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.554630][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.651193][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.777290][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1301'.
[  366.807256][T10001] netlink: 'syz.1.1291': attribute type 10 has an invalid length.
[  367.699101][ T9887] hsr_slave_0: entered promiscuous mode
[  367.715968][ T9887] hsr_slave_1: entered promiscuous mode
[  367.734541][ T9887] debugfs: 'hsr0' already exists in 'hsr'
[  367.752733][ T9887] Cannot create hsr debugfs directory
[  367.918780][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'.
[  368.309881][   T50] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  368.522768][   T50] Bluetooth: hci4: command tx timeout
[  368.617044][ T9887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.667531][T10030] netlink: 'syz.1.1300': attribute type 21 has an invalid length.
[  368.687564][T10030] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1300'.
[  368.707076][T10030] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1300'.
[  368.900639][ T9887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.248692][ T9887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.577140][ T9887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.806146][T10048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.902307][T10056] netlink: 'syz.0.1314': attribute type 2 has an invalid length.
[  370.405158][T10070] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1318'.
[  370.512357][ T9887] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  370.551751][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  370.565333][ T9887] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  370.603828][   T50] Bluetooth: hci4: command tx timeout
[  370.623016][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  370.641506][ T9887] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  370.659735][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  370.668242][ T9887] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  370.707584][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  370.725249][T10083] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1319'.
[  370.781430][T10079] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1319'.
[  371.220004][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.276549][ T9887] 8021q: adding VLAN 0 to HW filter on device team0
[  371.306683][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.314040][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.353005][T10104] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  371.389341][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.396651][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.660915][T10112] netlink: 'syz.0.1326': attribute type 2 has an invalid length.
[  371.693661][T10112] netlink: 'syz.0.1326': attribute type 8 has an invalid length.
[  371.729311][T10112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1326'.
[  372.692180][T10149] netlink: 'syz.4.1332': attribute type 2 has an invalid length.
[  372.755956][T10149] netlink: 'syz.4.1332': attribute type 2 has an invalid length.
[  373.131649][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.186560][T10161] netlink: 'syz.4.1336': attribute type 10 has an invalid length.
[  373.277189][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1337'.
[  373.338745][T10165] Cannot find add_set index 46338 as target
[  373.378496][T10161] veth0_vlan: left promiscuous mode
[  373.421712][T10161] veth0_vlan: entered promiscuous mode
[  373.477450][T10161] team0: Device veth0_vlan failed to register rx_handler
[  373.667595][ T9887] veth0_vlan: entered promiscuous mode
[  373.718678][ T9887] veth1_vlan: entered promiscuous mode
[  373.842324][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'.
[  373.905975][ T9887] veth0_macvtap: entered promiscuous mode
[  373.958232][ T9887] veth1_macvtap: entered promiscuous mode
[  374.055220][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.072450][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.136340][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.163762][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.208413][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.231349][T10193] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1343'.
[  374.321505][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.718875][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.749730][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.867599][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.900820][T10213] netlink: 'syz.1.1345': attribute type 7 has an invalid length.
[  374.911923][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.313477][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'.
[  376.122960][T10242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1354'.
[  376.875696][T10243] syzkaller0: entered promiscuous mode
[  376.910254][T10243] syzkaller0: entered allmulticast mode
[  377.543458][   T50] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  377.552305][   T50] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  379.180412][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  379.187229][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  382.631928][T10281] xfrm0 speed is unknown, defaulting to 1000
[  382.643697][T10281] xfrm0 speed is unknown, defaulting to 1000
[  382.764099][T10281] xfrm0 speed is unknown, defaulting to 1000
[  382.798346][T10281] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  382.814264][T10281] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  382.833154][T10281] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  382.867069][T10281] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  382.936395][T10281] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  383.172028][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.195698][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.226994][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.239010][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.257797][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.271764][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.291665][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.311558][T10281] xfrm0 speed is unknown, defaulting to 1000
[  383.549464][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'.
[  383.830689][T10299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1385'.
[  384.074966][T10305] netlink: 'syz.2.1376': attribute type 4 has an invalid length.
[  384.094399][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'.
[  386.085200][T10345] netlink: 'syz.4.1389': attribute type 62 has an invalid length.
[  386.672011][T10354] netlink: 'syz.1.1391': attribute type 39 has an invalid length.
[  387.767660][T10367] netlink: 'syz.3.1395': attribute type 10 has an invalid length.
[  388.149738][T10367] veth0_vlan: left promiscuous mode
[  388.228312][T10367] veth0_vlan: entered promiscuous mode
[  388.259726][T10367] team0: Device veth0_vlan failed to register rx_handler
[  389.159648][T10391] netlink: 'syz.1.1405': attribute type 1 has an invalid length.
[  389.251769][T10397] netlink: 'syz.4.1407': attribute type 10 has an invalid length.
[  389.307166][T10397] ipvlan0: entered allmulticast mode
[  389.318765][T10399] netlink: 'syz.3.1408': attribute type 2 has an invalid length.
[  389.338809][T10397] veth0_vlan: entered allmulticast mode
[  389.493075][T10397] team0: Device ipvlan0 failed to register rx_handler
[  391.447765][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1428'.
[  391.717986][   T50] Bluetooth: hci0: Malformed LE Event: 0x0d
[  392.066164][T10459] xfrm0 speed is unknown, defaulting to 1000
[  392.275013][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'.
[  392.734624][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'.
[  394.196346][T10516] xfrm0 speed is unknown, defaulting to 1000
[  394.476097][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'.
[  394.988298][T10523] xfrm0 speed is unknown, defaulting to 1000
[  395.390891][T10540] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1461'.
[  395.421621][T10537] netlink: 'syz.1.1458': attribute type 10 has an invalid length.
[  395.638753][T10547] netlink: 'syz.2.1462': attribute type 27 has an invalid length.
[  395.667514][T10547] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1462'.
[  397.395938][T10583] syzkaller0: entered promiscuous mode
[  397.411544][T10583] syzkaller0: entered allmulticast mode
[  398.630558][T10611] netlink: 'syz.1.1484': attribute type 10 has an invalid length.
[  403.865637][   T50] Bluetooth: hci4: Malformed LE Event: 0x0d
[  404.710387][T10656] netlink: 'syz.4.1499': attribute type 2 has an invalid length.
[  405.361238][   T50] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  405.369510][   T50] Bluetooth: hci1: unexpected event for opcode 0x1004
[  405.618674][T10667] netlink: zone id is out of range
[  405.643175][T10667] netlink: zone id is out of range
[  405.649434][T10667] netlink: zone id is out of range
[  406.817383][T10667] netlink: set zone limit has 4 unknown bytes
[  406.961211][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1505'.
[  407.070429][T10683] Cannot find add_set index 46338 as target
[  407.104248][   T50] Bluetooth: hci1: adv larger than maximum supported
[  407.104277][   T50] Bluetooth: hci1: Malformed LE Event: 0x0d
[  407.254678][   T50] Bluetooth: hci3: Malformed LE Event: 0x0d
[  407.670345][   T50] Bluetooth: hci1: Unknown advertising packet type: 0x7a
[  407.670369][   T50] Bluetooth: hci1: Malformed LE Event: 0x0d
[  408.158091][T10718] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  409.255389][T10732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1524'.
[  409.283592][   T50] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  409.317470][T10732] Cannot find add_set index 46338 as target
[  409.406158][   T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  409.419915][   T50] Bluetooth: hci1: Injecting HCI hardware error event
[  409.436783][ T5637] Bluetooth: hci1: hardware error 0x00
[  409.554037][T10741] netlink: 'syz.4.1531': attribute type 29 has an invalid length.
[  409.954957][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1536'.
[  409.988630][T10754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.015264][T10754] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.034291][T10754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.075715][T10754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.484043][ T5637] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  414.070720][T10813] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1544'.
[  414.140434][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'.
[  415.000429][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1555'.
[  415.315867][T10827] syzkaller0: entered promiscuous mode
[  415.353076][T10827] syzkaller0: entered allmulticast mode
[  415.611232][T10845] syzkaller0: tun_chr_ioctl cmd 1074025672
[  415.619702][T10845] syzkaller0: ignored: set checksum disabled
[  415.843132][T10850] raw_sendmsg: syz.1.1556 forgot to set AF_INET. Fix it!
[  419.947652][T10896] netlink: 'syz.2.1572': attribute type 6 has an invalid length.
[  419.972016][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  420.697635][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'.
[  421.391257][ T5637] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  421.747334][T10941] openvswitch: netlink: IP tunnel TTL not specified.
[  421.943982][T10948] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1599'.
[  422.373338][T10954] netlink: 'syz.3.1592': attribute type 39 has an invalid length.
[  422.523631][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'.
[  422.596019][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'.
[  422.769453][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.060262][T10978] siw: device registration error -23
[  423.971743][T10995] netlink: 'syz.4.1609': attribute type 39 has an invalid length.
[  424.189789][T11006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.977402][T11021] netlink: 'syz.2.1616': attribute type 10 has an invalid length.
[  425.020273][T11002] xfrm0 speed is unknown, defaulting to 1000
[  425.221109][T11027] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1620'.
[  425.403017][ T5637] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  425.415497][ T5637] Bluetooth: hci0: Injecting HCI hardware error event
[  425.431938][   T50] Bluetooth: hci0: hardware error 0x00
[  426.278111][T11054] netlink: 'syz.2.1630': attribute type 10 has an invalid length.
[  426.301217][T11054] ipvlan0: entered allmulticast mode
[  426.319645][T11054] veth0_vlan: entered allmulticast mode
[  426.465064][T11054] team0: Device ipvlan0 failed to register rx_handler
[  426.810746][T11061] netlink: 'syz.3.1632': attribute type 29 has an invalid length.
[  426.941942][T11060] xfrm0 speed is unknown, defaulting to 1000
[  427.099409][T11065] syzkaller0: entered promiscuous mode
[  427.115589][T11065] syzkaller0: entered allmulticast mode
[  427.218013][T11065] syzkaller0: tun_net_xmit 1280
[  427.489426][   T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  428.200523][T11093] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1640'.
[  431.330759][T11111] netlink: 'syz.0.1647': attribute type 29 has an invalid length.
[  431.390466][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'.
[  431.906947][   T50] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  434.623102][T11134] netlink: 'syz.1.1665': attribute type 29 has an invalid length.
[  434.637942][T11133] ÿÿÿÿÿÿ: renamed from vlan1
[  436.032815][T11172] netlink: 'syz.1.1667': attribute type 16 has an invalid length.
[  436.278407][T11176] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1671'.
[  436.394148][T11172] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.402451][T11172] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.928195][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.974128][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.795392][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'.
[  438.188783][ T5747] xfrm0 speed is unknown, defaulting to 1000
[  438.203765][ T5893] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.204453][ T5747] syz1: Port: 1 Link DOWN
[  438.224167][ T5893] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.254233][ T5893] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.289667][ T5893] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.439440][T11203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1679'.
[  438.444532][T11189] xfrm0 speed is unknown, defaulting to 1000
[  440.340289][T11220] netlink: 'syz.1.1685': attribute type 10 has an invalid length.
[  440.413079][T11220] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1685'.
[  440.475494][T11220] veth1_virt_wifi: entered promiscuous mode
[  440.591686][T11220] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  440.608402][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  440.623047][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  440.665840][T11220] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  440.718659][T11225] netlink: 'syz.3.1687': attribute type 10 has an invalid length.
[  440.749904][T11220] veth1_virt_wifi: entered allmulticast mode
[  440.780744][T11225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1687'.
[  441.041499][T11220] veth1_virt_wifi: left allmulticast mode
[  441.156617][T11225] team0: Port device geneve1 added
[  441.734012][T11240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1694'.
[  443.016651][   T30] audit: type=1107 audit(1779553713.274:3): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  443.064801][   T30] audit: type=1107 audit(1779553713.284:4): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='º‚'
[  443.345557][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'.
[  443.427237][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1705'.
[  443.451226][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1705'.
[  443.607183][T11274] xfrm0 speed is unknown, defaulting to 1000
[  444.760305][T11166] Set syz1 is full, maxelem 65536 reached
[  445.353708][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'.
[  445.988253][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'.
[  446.018107][T11314] netlink: 'syz.3.1718': attribute type 10 has an invalid length.
[  446.043810][T11314] ipvlan0: entered allmulticast mode
[  446.054186][T11314] veth0_vlan: entered allmulticast mode
[  446.104257][T11314] team0: Device ipvlan0 failed to register rx_handler
[  446.922947][T11316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.963857][T11316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.016206][T11316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.037862][T11316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.450823][T11337] netlink: 'syz.2.1721': attribute type 29 has an invalid length.
[  447.482895][T11333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1723'.
[  447.524147][T11333] netlink: 'syz.4.1723': attribute type 6 has an invalid length.
[  447.554580][T11333] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.1723'.
[  447.594344][T11333] netlink: 'syz.4.1723': attribute type 1 has an invalid length.
[  447.715063][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'.
[  447.811513][ T5637] block nbd6: Receive control failed (result -107)
[  447.832247][T11353] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1725'.
[  447.853809][T11333] nbd6: detected capacity change from 0 to 339754496
[  447.916564][T10805] block nbd6: Dead connection, failed to find a fallback
[  447.957579][T10805] block nbd6: shutting down sockets
[  447.977479][T10805] blk_print_req_error: 58 callbacks suppressed
[  447.977499][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.033744][T10805] buffer_io_error: 56 callbacks suppressed
[  448.033827][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.085283][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.110411][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.137521][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.177892][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.229455][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.248286][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.290741][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.326674][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.360523][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.388236][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.414199][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.443825][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.464828][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.517961][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.579495][T10805] ldm_validate_partition_table(): Disk read failed.
[  448.632054][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.729680][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.790942][T10805] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.847283][T10805] Buffer I/O error on dev nbd6, logical block 0, async page read
[  448.878087][T10805] Dev nbd6: unable to read RDB block 0
[  448.888564][T10805]  nbd6: unable to read partition table
[  448.915536][T10805] ldm_validate_partition_table(): Disk read failed.
[  448.941567][T10805] Dev nbd6: unable to read RDB block 0
[  448.955106][T10805]  nbd6: unable to read partition table
[  449.861365][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1736'.
[  449.892769][T11397] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.927362][T11397] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.437197][T11418] netlink: 'syz.2.1741': attribute type 10 has an invalid length.
[  453.302840][T11471] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1755'.
[  453.364549][T11472] xt_l2tp: v2 tid > 0xffff: 327812
[  453.697828][T11479] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1761'.
[  453.989307][T11484] netlink: 'syz.1.1762': attribute type 1 has an invalid length.
[  456.005380][T11504] netlink: 'syz.3.1779': attribute type 1 has an invalid length.
[  456.240484][T11504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1779'.
[  456.426705][ T5637] Bluetooth: hci4: unexpected subevent 0x10 length: 150 > 2
[  456.574747][T11518] : renamed from veth1_to_bond
[  457.290501][T11534] netlink: 'syz.0.1777': attribute type 9 has an invalid length.
[  458.010626][   T30] audit: type=1107 audit(1779553728.274:5): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  458.066251][T11546] sctp: [Deprecated]: syz.2.1784 (pid 11546) Use of struct sctp_assoc_value in delayed_ack socket option.
[  458.066251][T11546] Use struct sctp_sack_info instead
[  458.214579][T11548] xfrm0 speed is unknown, defaulting to 1000
[  458.430492][T11559] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1789'.
[  458.454397][T11557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1788'.
[  458.557737][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'.
[  458.668049][T11564] netlink: 4008 bytes leftover after parsing attributes in process `syz.2.1788'.
[  458.879825][T11571] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1792'.
[  459.084474][T11573] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1793'.
[  459.181421][T11575] xt_l2tp: v2 tid > 0xffff: 327812
[  461.234499][T11610] netlink: 'syz.3.1808': attribute type 39 has an invalid length.
[  461.913974][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1816'.
[  461.934513][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1816'.
[  462.710586][T11644] siw: device registration error -23
[  462.903433][T11650] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1824'.
[  462.990474][T11655] xt_l2tp: v2 tid > 0xffff: 327812
[  463.009266][T11654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1825'.
[  463.931605][T11665] netlink: 'syz.2.1830': attribute type 10 has an invalid length.
[  463.941198][T11665] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1830'.
[  463.953854][T11665] veth1_virt_wifi: entered promiscuous mode
[  463.964660][T11665] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  464.012890][T11665] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  464.052892][T11665] veth1_virt_wifi: entered allmulticast mode
[  464.083344][T11665] veth1_virt_wifi: left allmulticast mode
[  464.477521][T11670] netlink: 'syz.1.1832': attribute type 21 has an invalid length.
[  464.528545][T11670] netlink: 'syz.1.1832': attribute type 6 has an invalid length.
[  464.567616][T11670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1832'.
[  466.003156][T11703] syzkaller0: entered promiscuous mode
[  466.013624][T11703] syzkaller0: entered allmulticast mode
[  468.509730][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'.
[  468.527752][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'.
[  468.540573][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1867'.
[  468.580111][T11764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1865'.
[  468.910990][T11778] netlink: 'syz.2.1869': attribute type 1 has an invalid length.
[  468.950259][T11780] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  469.603990][T11791] netlink: 'syz.3.1875': attribute type 10 has an invalid length.
[  469.636470][T11791] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1875'.
[  469.655122][T11791] veth1_virt_wifi: entered promiscuous mode
[  469.679529][T11791] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  469.699481][T11791] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  469.734120][T11791] veth1_virt_wifi: entered allmulticast mode
[  469.766915][T11791] veth1_virt_wifi: left allmulticast mode
[  469.996628][T11799] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1878'.
[  470.609363][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  470.621757][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  470.637309][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  470.649133][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  470.659405][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  470.795076][T11815] netlink: 'syz.4.1884': attribute type 1 has an invalid length.
[  470.986446][T11822] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1895'.
[  471.404045][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'.
[  471.579082][T11839] netlink: 'syz.0.1889': attribute type 10 has an invalid length.
[  471.601511][T11839] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.1889'.
[  471.638597][T11810] xfrm0 speed is unknown, defaulting to 1000
[  471.935470][T11810] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.943204][T11810] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.950862][T11810] bridge_slave_0: entered allmulticast mode
[  471.959228][T11810] bridge_slave_0: entered promiscuous mode
[  471.969535][T11810] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.977160][T11810] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.984690][T11810] bridge_slave_1: entered allmulticast mode
[  471.992465][T11810] bridge_slave_1: entered promiscuous mode
[  472.027680][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.040207][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.079839][T11810] team0: Port device team_slave_0 added
[  472.088511][T11810] team0: Port device team_slave_1 added
[  472.117231][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.124565][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.151223][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.165835][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.174871][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.203319][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.254351][T11810] hsr_slave_0: entered promiscuous mode
[  472.261150][T11810] hsr_slave_1: entered promiscuous mode
[  472.267865][T11810] debugfs: 'hsr0' already exists in 'hsr'
[  472.275139][T11810] Cannot create hsr debugfs directory
[  472.473237][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'.
[  472.764033][   T50] Bluetooth: hci0: command tx timeout
[  473.402976][ T5893] wlan1: Trigger new scan to find an IBSS to join
[  474.498368][T11810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  474.546069][T11810] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  474.607854][T11810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  474.663551][T11810] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  474.687107][T11810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  474.702279][T11810] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  474.717656][T11810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  474.751130][T11810] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  474.842693][   T50] Bluetooth: hci0: command tx timeout
[  475.029948][T11810] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.057242][T11810] 8021q: adding VLAN 0 to HW filter on device team0
[  475.073083][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.080330][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.098845][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.106118][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.656949][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.727756][T11810] veth0_vlan: entered promiscuous mode
[  475.742398][T11810] veth1_vlan: entered promiscuous mode
[  475.784709][T11810] veth0_macvtap: entered promiscuous mode
[  475.798097][T11810] veth1_macvtap: entered promiscuous mode
[  475.825475][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.845895][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.868458][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.888846][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.910835][  T444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.920666][  T444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.049524][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.066848][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.112811][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.122457][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.463632][  T134] wlan1: Trigger new scan to find an IBSS to join
[  476.531780][ T5899] bridge_slave_1: left allmulticast mode
[  476.539818][T11926] __nla_validate_parse: 5 callbacks suppressed
[  476.539840][T11926] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1909'.
[  476.564492][ T5899] bridge_slave_1: left promiscuous mode
[  476.582143][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.739210][ T5899] bridge_slave_0: left allmulticast mode
[  476.759718][T11928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1908'.
[  476.761529][ T5899] bridge_slave_0: left promiscuous mode
[  476.834958][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.923478][   T50] Bluetooth: hci0: command tx timeout
[  477.464945][ T5895] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  477.668412][  T444] smbdirect: ib_dev[syz1] removed
[  477.817351][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.839582][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.855722][ T5899] bond0 (unregistering): Released all slaves
[  477.871995][T11936] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1914'.
[  477.888229][T11940] netlink: 'syz.2.1916': attribute type 29 has an invalid length.
[  478.710902][   T50] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10
[  478.906299][ T5899] hsr_slave_0: left promiscuous mode
[  478.949189][ T5899] hsr_slave_1: left promiscuous mode
[  479.004061][   T50] Bluetooth: hci0: command tx timeout
[  479.507006][ T5899] team0 (unregistering): Port device team_slave_1 removed
[  479.536403][ T5899] team0 (unregistering): Port device team_slave_0 removed
[  480.078080][T11991] syz.0.1935: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  480.155199][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.0.1935 Not tainted syzkaller #0 PREEMPT(full) 
[  480.155232][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  480.155256][T11991] Call Trace:
[  480.155268][T11991]  <TASK>
[  480.155278][T11991]  dump_stack_lvl+0xe8/0x150
[  480.155311][T11991]  warn_alloc+0x249/0x340
[  480.155343][T11991]  ? stack_trace_save+0xa9/0x100
[  480.155379][T11991]  ? __pfx_warn_alloc+0x10/0x10
[  480.155417][T11991]  ? kasan_save_track+0x4f/0x80
[  480.155444][T11991]  ? kasan_save_track+0x3e/0x80
[  480.155470][T11991]  ? __kasan_kmalloc+0x93/0xb0
[  480.155497][T11991]  ? __kmalloc_cache_noprof+0x31c/0x660
[  480.155524][T11991]  ? xskq_create+0x56/0x170
[  480.155551][T11991]  ? xsk_setsockopt+0x603/0x990
[  480.155573][T11991]  ? do_sock_setsockopt+0x17c/0x1b0
[  480.155601][T11991]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  480.155626][T11991]  ? do_syscall_64+0x15f/0xf80
[  480.155669][T11991]  __vmalloc_node_range_noprof+0x132/0x1750
[  480.155736][T11991]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  480.155774][T11991]  ? __kasan_kmalloc+0x93/0xb0
[  480.155811][T11991]  vmalloc_user_noprof+0xad/0xe0
[  480.155840][T11991]  ? xskq_create+0xbf/0x170
[  480.155868][T11991]  xskq_create+0xbf/0x170
[  480.155898][T11991]  xsk_init_queue+0x8a/0xe0
[  480.155926][T11991]  xsk_setsockopt+0x603/0x990
[  480.155955][T11991]  ? __pfx_xsk_setsockopt+0x10/0x10
[  480.155979][T11991]  ? __pfx_aa_sk_perm+0x10/0x10
[  480.156010][T11991]  ? aa_sock_opt_perm+0xff/0x1a0
[  480.156041][T11991]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  480.156071][T11991]  ? __pfx_xsk_setsockopt+0x10/0x10
[  480.156098][T11991]  do_sock_setsockopt+0x17c/0x1b0
[  480.156133][T11991]  __x64_sys_setsockopt+0x13d/0x1b0
[  480.156166][T11991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.156191][T11991]  do_syscall_64+0x15f/0xf80
[  480.156229][T11991]  ? clear_bhb_loop+0x40/0x90
[  480.156258][T11991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.156282][T11991] RIP: 0033:0x7f3ede59ce59
[  480.156303][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.156321][T11991] RSP: 002b:00007f3edf43c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  480.156346][T11991] RAX: ffffffffffffffda RBX: 00007f3ede815fa0 RCX: 00007f3ede59ce59
[  480.156362][T11991] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a
[  480.156375][T11991] RBP: 00007f3ede632d6f R08: 0000000000000004 R09: 0000000000000000
[  480.156389][T11991] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  480.156402][T11991] R13: 00007f3ede816038 R14: 00007f3ede815fa0 R15: 00007ffdacbb2cb8
[  480.156435][T11991]  </TASK>
[  480.156497][T11991] Mem-Info:
[  480.474891][T11991] active_anon:5821 inactive_anon:0 isolated_anon:0
[  480.474891][T11991]  active_file:21831 inactive_file:40108 isolated_file:0
[  480.474891][T11991]  unevictable:768 dirty:364 writeback:0
[  480.474891][T11991]  slab_reclaimable:11364 slab_unreclaimable:109377
[  480.474891][T11991]  mapped:29371 shmem:1292 pagetables:1183
[  480.474891][T11991]  sec_pagetables:0 bounce:0
[  480.474891][T11991]  kernel_misc_reclaimable:0
[  480.474891][T11991]  free:1298091 free_pcp:11297 free_cma:0
[  480.526142][T11991] Node 0 active_anon:23284kB inactive_anon:0kB active_file:87324kB inactive_file:160228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117484kB dirty:1456kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12936kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  480.608519][T11991] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  480.688143][T11991] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  480.787841][T11991] lowmem_reserve[]: 0 2492 2493 2493 2493
[  480.813778][T11991] Node 0 DMA32 free:1230952kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23184kB inactive_anon:0kB active_file:87324kB inactive_file:160228kB unevictable:1536kB writepending:1456kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:44652kB local_pcp:22972kB free_cma:0kB
[  480.943520][T11991] lowmem_reserve[]: 0 0 0 0 0
[  480.948348][T12004] gretap0 speed is unknown, defaulting to 1000
[  480.994287][T11991] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  481.043288][T12005] sctp: [Deprecated]: syz.4.1939 (pid 12005) Use of struct sctp_assoc_value in delayed_ack socket option.
[  481.043288][T12005] Use struct sctp_sack_info instead
[  481.060038][   T30] audit: type=1107 audit(1779553751.304:6): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  481.117094][T11991] lowmem_reserve[]: 0 0 0 0 0
[  481.126544][T11991] Node 1 Normal free:3947568kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  481.142066][T12004] gretap0 speed is unknown, defaulting to 1000
[  481.209715][T11991] lowmem_reserve[]: 0 0 0 0 0
[  481.221434][T11991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  481.251789][T12004] gretap0 speed is unknown, defaulting to 1000
[  481.261757][T12004] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  481.285787][T11991] Node 0 DMA32: 3221*4kB (UME) 2921*8kB (UME) 2191*16kB (UME) 857*32kB (UME) 185*64kB (UME) 161*128kB (UME) 94*256kB (UM) 35*512kB (UME) 14*1024kB (UME) 11*2048kB (UM) 249*4096kB (M) = 1229932kB
[  481.357677][T11991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  481.371914][T12004] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  481.411158][T11991] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 5*16kB (UM) 8*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947568kB
[  481.448613][T12004] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  481.465434][T11991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  481.501070][T11991] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  481.536852][T11991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  481.585928][T12004] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  481.605688][T11991] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  481.637037][T11991] 63231 total pagecache pages
[  481.652811][T11991] 0 pages in swap cache
[  481.659961][T11991] Free swap  = 124996kB
[  481.664505][T11991] Total swap = 124996kB
[  481.668972][T11991] 2097051 pages RAM
[  481.673170][T11991] 0 pages HighMem/MovableOnly
[  481.677945][T11991] 427115 pages reserved
[  481.682489][T11991] 0 pages cma reserved
[  481.839721][T12004] gretap0 speed is unknown, defaulting to 1000
[  481.851709][T12004] gretap0 speed is unknown, defaulting to 1000
[  481.862494][T12004] gretap0 speed is unknown, defaulting to 1000
[  481.880386][T12004] gretap0 speed is unknown, defaulting to 1000
[  481.921513][T12004] gretap0 speed is unknown, defaulting to 1000
[  482.012077][T12004] gretap0 speed is unknown, defaulting to 1000
[  482.057624][T12004] gretap0 speed is unknown, defaulting to 1000
[  482.092011][T12004] gretap0 speed is unknown, defaulting to 1000
[  483.103439][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'.
[  483.371907][T12068] netlink: 'syz.3.1957': attribute type 16 has an invalid length.
[  483.505019][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'.
[  483.784418][T12075] xt_HMARK: spi-set and port-set can't be combined
[  484.146435][T12068] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.154165][T12068] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.664393][T12107] netlink: 'syz.0.1967': attribute type 9 has an invalid length.
[  484.883016][T12068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.944375][T12068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.283206][T12120] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1970'.
[  485.482491][ T5630] gretap0 speed is unknown, defaulting to 1000
[  485.502062][ T5630] syz0: Port: 1 Link DOWN
[  485.589902][  T444] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.611023][  T444] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.647155][  T444] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.736142][T12127] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.1971'.
[  485.764252][T12127] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.1971'.
[  485.810010][T12127] netlink: 640 bytes leftover after parsing attributes in process `syz.1.1971'.
[  485.887180][T12131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1974'.
[  486.287462][T12152] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1978'.
[  487.302749][T12176] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1984'.
[  488.846220][ T5637] Bluetooth: hci4: command 0x0406 tx timeout
[  489.465394][T12195] syzkaller0: entered promiscuous mode
[  489.485381][T12195] syzkaller0: entered allmulticast mode
[  493.556819][ T5903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.008803][ T5903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.166670][ T5903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.357485][ T5903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.703698][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  494.720517][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  494.731751][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  494.742954][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  494.752357][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  495.573389][T12271] lo speed is unknown, defaulting to 1000
[  495.662805][T12271] lo speed is unknown, defaulting to 1000
[  495.756707][T12271] lo speed is unknown, defaulting to 1000
[  495.819812][T12271] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  495.876329][T12271] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  495.935835][T12271] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  495.950186][ T5903] bridge_slave_1: left allmulticast mode
[  495.973870][ T5903] bridge_slave_1: left promiscuous mode
[  495.992850][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.030211][ T5903] bridge_slave_0: left allmulticast mode
[  496.044844][ T5903] bridge_slave_0: left promiscuous mode
[  496.061901][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.193241][T12271] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  496.826693][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.840867][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.843951][ T5637] Bluetooth: hci0: command tx timeout
[  496.863928][ T5903] bond0 (unregistering): Released all slaves
[  496.890580][T12271] lo speed is unknown, defaulting to 1000
[  496.910283][T12271] lo speed is unknown, defaulting to 1000
[  496.930969][T12251] gretap0 speed is unknown, defaulting to 1000
[  496.950529][T12251] lo speed is unknown, defaulting to 1000
[  497.038125][T12271] lo speed is unknown, defaulting to 1000
[  497.315565][T12271] lo speed is unknown, defaulting to 1000
[  497.335639][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  497.344218][T12271] lo speed is unknown, defaulting to 1000
[  497.367009][T12304] netlink: 'syz.4.2018': attribute type 21 has an invalid length.
[  497.434224][T12271] lo speed is unknown, defaulting to 1000
[  497.441951][T12304] netlink: 'syz.4.2018': attribute type 6 has an invalid length.
[  497.484394][T12304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2018'.
[  497.554563][T12271] lo speed is unknown, defaulting to 1000
[  497.650648][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'.
[  498.146917][T12271] lo speed is unknown, defaulting to 1000
[  498.436444][ T5903] hsr_slave_0: left promiscuous mode
[  498.446432][ T5903] hsr_slave_1: left promiscuous mode
[  498.459346][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.468011][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.494141][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.527433][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.923184][ T5637] Bluetooth: hci0: command tx timeout
[  499.444782][ T5903] veth1_macvtap: left promiscuous mode
[  499.461006][ T5903] veth0_macvtap: left promiscuous mode
[  499.555191][ T5903] veth1_vlan: left promiscuous mode
[  499.565966][ T5903] veth0_vlan: left promiscuous mode
[  499.898498][T12358] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2029'.
[  501.002805][ T5637] Bluetooth: hci0: command tx timeout
[  501.032393][ T5903] team0 (unregistering): Port device team_slave_1 removed
[  501.069739][ T5903] team0 (unregistering): Port device team_slave_0 removed
[  501.259256][T12370] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2032'.
[  501.456635][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  501.972497][T12251] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.006559][T12251] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.053485][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  502.059906][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  502.067274][T12251] bridge_slave_0: entered allmulticast mode
[  502.080278][T12251] bridge_slave_0: entered promiscuous mode
[  502.132246][T12251] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.147665][T12251] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.183208][T12251] bridge_slave_1: entered allmulticast mode
[  502.203580][T12251] bridge_slave_1: entered promiscuous mode
[  502.311828][T12251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.341597][T12251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.454617][T12251] team0: Port device team_slave_0 added
[  502.479795][T12251] team0: Port device team_slave_1 added
[  502.804737][T12251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.861289][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.962841][T12251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.995769][T12251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.015396][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.085907][ T5637] Bluetooth: hci0: command tx timeout
[  503.177804][T12251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.416316][T12251] hsr_slave_0: entered promiscuous mode
[  503.438794][T12251] hsr_slave_1: entered promiscuous mode
[  503.466346][T12251] debugfs: 'hsr0' already exists in 'hsr'
[  503.496525][T12251] Cannot create hsr debugfs directory
[  503.513669][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  503.823759][T12421] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2044'.
[  504.565220][T12441] netlink: 'syz.2.2049': attribute type 10 has an invalid length.
[  504.591076][T12441] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2049'.
[  504.630001][T12441] bond0: entered promiscuous mode
[  504.648530][T12441] bond_slave_0: entered promiscuous mode
[  504.669087][T12441] bond_slave_1: entered promiscuous mode
[  504.719569][T12441] bridge0: port 3(bond0) entered blocking state
[  504.745852][T12441] bridge0: port 3(bond0) entered disabled state
[  504.764016][T12441] bond0: entered allmulticast mode
[  504.779017][T12441] bond_slave_0: entered allmulticast mode
[  504.800501][T12441] bond_slave_1: entered allmulticast mode
[  504.864694][T12441] bridge0: port 3(bond0) entered blocking state
[  504.871655][T12441] bridge0: port 3(bond0) entered forwarding state
[  505.289275][T12466] bpf: Bad value for 'uid'
[  505.545126][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4
[  505.702351][T12251] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  505.746196][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.768752][T12251] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  505.806003][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.827217][T12251] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  505.843950][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.853732][T12251] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  505.878194][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  506.152507][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'.
[  506.196811][T12488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2057'.
[  506.237206][T12494] netlink: 'syz.0.2057': attribute type 6 has an invalid length.
[  506.237254][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'.
[  506.337905][T12251] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.354812][T12488] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2057'.
[  506.410129][T12251] 8021q: adding VLAN 0 to HW filter on device team0
[  506.441909][T12497] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2058'.
[  506.482846][T12497] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2058'.
[  506.789254][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.796765][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.881552][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.888823][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.019942][T12251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.198491][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2068'.
[  508.466283][T12548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2069'.
[  509.115190][T12251] veth0_vlan: entered promiscuous mode
[  509.155967][T12251] veth1_vlan: entered promiscuous mode
[  509.188732][T12569] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2073'.
[  509.270578][T12251] veth0_macvtap: entered promiscuous mode
[  509.312608][T12251] veth1_macvtap: entered promiscuous mode
[  509.362002][T12251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  509.376526][T12571] netlink: 'syz.3.2074': attribute type 3 has an invalid length.
[  509.404035][T12251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.410196][T12571] netlink: 'syz.3.2074': attribute type 1 has an invalid length.
[  509.445580][T12571] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2074'.
[  509.460057][  T134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.479553][  T134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.504244][  T134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.528848][  T134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.724093][ T1164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  509.787540][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.826172][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.948981][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.970372][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.740921][T12601] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2079'.
[  510.830022][T12605] netlink: 133536 bytes leftover after parsing attributes in process `syz.3.2081'.
[  510.944888][T12611] netlink: 'syz.0.2082': attribute type 1 has an invalid length.
[  511.434024][T12611] rdma_rxe: rxe_newlink: failed to add lo
[  515.330707][T12659] netdevsim netdevsim4: Direct firmware load for  failed with error -2
[  515.351095][T12659] netdevsim netdevsim4: Falling back to sysfs fallback for: 
[  515.725378][T12670] netlink: 'syz.4.2095': attribute type 2 has an invalid length.
[  517.166580][T12706] netdevsim netdevsim5: Direct firmware load for  failed with error -2
[  517.257000][T12706] netdevsim netdevsim5: Falling back to sysfs fallback for: 
[  518.234579][T12723] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2110'.
[  518.371145][T12727] netlink: 'syz.0.2112': attribute type 10 has an invalid length.
[  518.412849][T12727] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2112'.
[  518.444863][T12727] bond0: entered promiscuous mode
[  518.492752][T12727] bond_slave_0: entered promiscuous mode
[  518.530063][T12727] bond_slave_1: entered promiscuous mode
[  518.567915][T12733] netlink: 'syz.4.2113': attribute type 10 has an invalid length.
[  518.583795][T12727] bridge0: port 3(bond0) entered blocking state
[  518.600600][T12733] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2113'.
[  518.619630][T12727] bridge0: port 3(bond0) entered disabled state
[  518.641048][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2114'.
[  518.650826][T12727] bond0: entered allmulticast mode
[  518.676631][T12727] bond_slave_0: entered allmulticast mode
[  518.695319][T12727] bond_slave_1: entered allmulticast mode
[  518.756646][T12727] bridge0: port 3(bond0) entered blocking state
[  518.763561][T12727] bridge0: port 3(bond0) entered forwarding state
[  518.820482][T12733] veth1_virt_wifi: entered promiscuous mode
[  519.120021][ T5637] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  519.345896][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2117'.
[  519.403333][T12757] openvswitch: netlink: Flow actions attr not present in new flow.
[  519.482999][ T5899] wlan1: Trigger new scan to find an IBSS to join
[  522.716571][T12833] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2124'.
[  522.777767][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  522.794224][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  522.804670][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  522.825890][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  522.837811][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  524.072383][T12867] netlink: 'syz.4.2128': attribute type 10 has an invalid length.
[  524.095247][T12867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.112734][T12867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.284437][T12867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.298739][T12867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.443956][   T36] wlan1: Trigger new scan to find an IBSS to join
[  524.825700][T12839] gretap0 speed is unknown, defaulting to 1000
[  524.923211][   T50] Bluetooth: hci5: command tx timeout
[  525.161074][  T281] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.371794][T12839] lo speed is unknown, defaulting to 1000
[  525.409803][ T1164] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  526.249948][ T5288] veth1_macvtap: entered promiscuous mode
[  526.574552][  T281] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.850798][  T281] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.881716][T12932] netlink: 'syz.3.2142': attribute type 1 has an invalid length.
[  527.003339][ T5637] Bluetooth: hci5: command tx timeout
[  527.147261][T12932] rdma_rxe: rxe_newlink: failed to add lo
[  527.273217][  T281] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.136293][T12839] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.143837][T12839] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.151374][T12839] bridge_slave_0: entered allmulticast mode
[  528.160379][T12839] bridge_slave_0: entered promiscuous mode
[  528.171705][T12839] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.187770][T12839] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.212375][T12839] bridge_slave_1: entered allmulticast mode
[  528.239393][T12839] bridge_slave_1: entered promiscuous mode
[  528.547020][T12839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.595578][T12839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.084208][ T5637] Bluetooth: hci5: command tx timeout
[  529.352890][T12839] team0: Port device team_slave_0 added
[  529.427712][T12839] team0: Port device team_slave_1 added
[  529.459495][  T281] bond0: left allmulticast mode
[  529.468410][  T281] bond_slave_0: left allmulticast mode
[  529.477229][  T281] bond_slave_1: left allmulticast mode
[  529.498452][  T281] bridge0: port 3(bond0) entered disabled state
[  529.517493][  T281] bridge_slave_1: left allmulticast mode
[  529.523326][  T281] bridge_slave_1: left promiscuous mode
[  529.530541][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.545520][  T281] bridge_slave_0: left allmulticast mode
[  529.568103][  T281] bridge_slave_0: left promiscuous mode
[  529.575225][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.972205][T12993] netlink: 'syz.0.2162': attribute type 3 has an invalid length.
[  529.995357][T12993] netlink: 'syz.0.2162': attribute type 15 has an invalid length.
[  530.016524][T12993] netlink: 11910 bytes leftover after parsing attributes in process `syz.0.2162'.
[  530.062827][T12993] netlink: 'syz.0.2162': attribute type 3 has an invalid length.
[  530.088110][T12993] netlink: 'syz.0.2162': attribute type 4 has an invalid length.
[  530.103706][T12993] netlink: 'syz.0.2162': attribute type 5 has an invalid length.
[  530.112261][T12993] netlink: 'syz.0.2162': attribute type 6 has an invalid length.
[  530.142337][T12993] netlink: 'syz.0.2162': attribute type 7 has an invalid length.
[  530.167382][T12993] netlink: 'syz.0.2162': attribute type 11 has an invalid length.
[  530.265895][T12993] netlink: 'syz.0.2162': attribute type 15 has an invalid length.
[  530.300395][T12993] netlink: 'syz.0.2162': attribute type 16 has an invalid length.
[  530.345416][  T281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.368816][  T281] bond_slave_0: left promiscuous mode
[  530.388722][  T281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.405216][  T281] bond_slave_1: left promiscuous mode
[  530.416067][  T281] bond0 (unregistering): Released all slaves
[  530.455747][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2154'.
[  530.567787][T12839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.580678][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.628194][T12839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.655634][T12839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.673329][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.774814][T12839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.908365][T13003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2166'.
[  531.071236][T13004] rdma_rxe: rxe_newlink: failed to add lo
[  531.077869][T12839] hsr_slave_0: entered promiscuous mode
[  531.099175][T12839] hsr_slave_1: entered promiscuous mode
[  531.117896][T12839] debugfs: 'hsr0' already exists in 'hsr'
[  531.130369][T12839] Cannot create hsr debugfs directory
[  531.164271][ T5637] Bluetooth: hci5: command tx timeout
[  531.368032][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2157'.
[  532.132416][T13023] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  532.221378][T13023] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  532.401692][  T281] hsr_slave_0: left promiscuous mode
[  532.431897][  T281] hsr_slave_1: left promiscuous mode
[  532.501430][  T281] veth1_macvtap: left promiscuous mode
[  532.511621][  T281] veth0_macvtap: left promiscuous mode
[  532.526964][  T281] veth1_vlan: left promiscuous mode
[  532.542923][  T281] veth0_vlan: left promiscuous mode
[  533.067941][T13048] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2169'.
[  533.737354][  T281] team0 (unregistering): Port device team_slave_1 removed
[  533.778635][  T281] team0 (unregistering): Port device team_slave_0 removed
[  533.989247][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5
[  533.994523][ T5899] smbdirect: ib_dev[syz2] removed
[  534.021803][ T5747] lo speed is unknown, defaulting to 1000
[  534.034752][ T5747] syz2: Port: 1 Link DOWN
[  534.694575][T12839] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  534.752190][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  534.780544][T12839] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  534.807749][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  534.830531][T12839] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  534.858161][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  534.897798][T12839] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  534.959055][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  535.372111][T12839] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.438963][T12839] 8021q: adding VLAN 0 to HW filter on device team0
[  535.461252][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.468830][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.506215][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.513648][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.930724][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6
[  537.864807][T12839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.893126][T13162] validate_nla: 7 callbacks suppressed
[  537.893144][T13162] netlink: 'syz.0.2191': attribute type 21 has an invalid length.
[  537.956699][T13162] netlink: 'syz.0.2191': attribute type 6 has an invalid length.
[  537.993691][T13162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2191'.
[  538.438847][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7
[  538.577649][T12839] veth0_vlan: entered promiscuous mode
[  538.603705][T12839] veth1_vlan: entered promiscuous mode
[  538.651263][T12839] veth0_macvtap: entered promiscuous mode
[  538.666400][T12839] veth1_macvtap: entered promiscuous mode
[  538.722898][T12839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.745597][T12839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.768028][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.789243][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.800939][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.921744][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.320422][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.359587][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.474551][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.488500][ T5899] wlan1: Trigger new scan to find an IBSS to join
[  539.498662][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.695434][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8
[  541.194473][T13233] netlink: 'syz.4.2202': attribute type 1 has an invalid length.
[  541.238535][T13223] veth1_to_bond: entered allmulticast mode
[  541.434710][T13233] lo speed is unknown, defaulting to 1000
[  541.486568][T13237] netlink: 'syz.6.2204': attribute type 10 has an invalid length.
[  541.592914][T13237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  541.627334][T13237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.663793][T13237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  541.684364][T13237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.802824][T13233] lo speed is unknown, defaulting to 1000
[  541.810138][T13233] lo speed is unknown, defaulting to 1000
[  541.857227][T13245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2206'.
[  542.261610][T13255] netlink: 'syz.5.2208': attribute type 1 has an invalid length.
[  542.465203][T13265] netlink: 'syz.5.2215': attribute type 1 has an invalid length.
[  542.705493][    T9] lo speed is unknown, defaulting to 1000
[  542.725478][T13233] infiniband syz2: set active
[  542.742983][T13233] infiniband syz2: added lo
[  542.931584][T13233] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  543.034567][T13233] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  543.117924][T13233] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  543.386141][T13233] RDS/IB: syz2: added
[  543.411435][T13233] smc: adding ib device syz2 with port count 1
[  543.435109][T13233] smc:    ib device syz2 port 1 has no pnetid
[  543.580416][    T9] lo speed is unknown, defaulting to 1000
[  543.610254][T13233] lo speed is unknown, defaulting to 1000
[  544.188660][T13301] netlink: 'syz.0.2225': attribute type 10 has an invalid length.
[  544.260873][T13233] lo speed is unknown, defaulting to 1000
[  544.398594][T13303] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2226'.
[  544.411129][T13303] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2226'.
[  544.447232][   T36] wlan1: Trigger new scan to find an IBSS to join
[  544.455850][T13303] netlink: 'syz.6.2226': attribute type 6 has an invalid length.
[  544.508932][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2226'.
[  544.615746][T13309] netlink: 'syz.0.2228': attribute type 2 has an invalid length.
[  544.901542][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'.
[  545.037586][T13317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  545.062498][T13233] lo speed is unknown, defaulting to 1000
[  545.073441][T13320] netlink: 'syz.0.2232': attribute type 10 has an invalid length.
[  545.153725][T13320] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2232'.
[  545.380170][  T134] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  545.625395][T13233] lo speed is unknown, defaulting to 1000
[  545.999952][T13332] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  546.126718][T13233] lo speed is unknown, defaulting to 1000
[  546.636599][T13351] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2243'.
[  546.753641][T13233] lo speed is unknown, defaulting to 1000
[  547.688693][T13233] lo speed is unknown, defaulting to 1000
[  548.178586][T13381] netlink: 'syz.5.2249': attribute type 10 has an invalid length.
[  548.195123][T13381] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2249'.
[  548.465765][  T134] wlan1: Trigger new scan to find an IBSS to join
[  548.526310][T13233] lo speed is unknown, defaulting to 1000
[  549.190611][T13405] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2254'.
[  551.484275][ T5893] wlan1: Trigger new scan to find an IBSS to join
[  553.896482][ T5893] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  554.312437][T13482] netlink: 'syz.6.2267': attribute type 1 has an invalid length.
[  554.448820][T13482] rdma_rxe: rxe_newlink: failed to add lo
[  555.252321][ T5637] Bluetooth: hci0: unexpected subevent 0x10 length: 150 > 2
[  556.128825][T13520] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2281'.
[  556.404547][T13531] netlink: 5192 bytes leftover after parsing attributes in process `syz.4.2283'.
[  556.434118][T13531] nbd: socks must be embedded in a SOCK_ITEM attr
[  556.751760][T13541] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.759499][T13541] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.803302][T13541] bridge0: entered allmulticast mode
[  556.829240][T13544] bridge_slave_1: left allmulticast mode
[  556.861543][T13544] bridge_slave_1: left promiscuous mode
[  556.919446][T13544] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.037170][T13544] bridge_slave_0: left allmulticast mode
[  557.101340][T13544] bridge_slave_0: left promiscuous mode
[  557.117390][T13544] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.546218][T13543] veth1_to_bond: entered allmulticast mode
[  557.632535][T13552] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  557.697045][T13555] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.842813][T13564] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2290'.
[  558.645425][T13595] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2298'.
[  558.720956][T13595] netlink: 'syz.4.2298': attribute type 10 has an invalid length.
[  559.060288][T13614] netlink: 604 bytes leftover after parsing attributes in process `syz.0.2297'.
[  559.216378][T13593] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  559.288745][T13612] veth1_to_bond: entered allmulticast mode
[  559.319917][T13603] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  559.413711][T13621] netlink: 'syz.5.2303': attribute type 6 has an invalid length.
[  559.422446][T13621] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2303'.
[  559.949978][T13640] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2309'.
[  560.110744][T13644] openvswitch: netlink: IP tunnel dst address not specified
[  560.446001][ T5903] wlan1: Trigger new scan to find an IBSS to join
[  560.959359][T13665] veth1_to_bond: entered allmulticast mode
[  561.379791][T13680] netlink: 'syz.5.2335': attribute type 2 has an invalid length.
[  561.440946][T13680] netlink: 'syz.5.2335': attribute type 5 has an invalid length.
[  561.469058][T13680] netlink: 'syz.5.2335': attribute type 2 has an invalid length.
[  561.487593][T13680] netlink: 'syz.5.2335': attribute type 5 has an invalid length.
[  563.486317][ T5903] wlan1: Trigger new scan to find an IBSS to join
[  563.510232][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  563.518791][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  565.617085][T13728] netlink: 'syz.4.2339': attribute type 1 has an invalid length.
[  565.711492][T13728] syz2: rxe_newlink: already configured on lo
[  565.934331][T13740] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  565.981267][T13740] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  566.122779][T13745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.289575][T13748] netlink: 'syz.0.2346': attribute type 10 has an invalid length.
[  566.299313][T13748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2346'.
[  566.310404][T13748] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  566.506877][T13755] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2349'.
[  566.581598][T13759] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2350'.
[  566.945123][T13767] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  566.956628][   T36] wlan1: Selected IBSS BSSID 00:00:00:08:00:00 based on configured SSID
[  567.469916][T13790] netlink: 5192 bytes leftover after parsing attributes in process `syz.5.2360'.
[  567.492496][   T36] wlan1: Trigger new scan to find an IBSS to join
[  567.493582][T13790] nbd: socks must be embedded in a SOCK_ITEM attr
[  567.706827][T13793] veth1_to_bond: entered allmulticast mode
[  568.411804][T13814] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  568.714686][ T5903] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  568.934079][T13828] netlink: 'syz.5.2373': attribute type 10 has an invalid length.
[  569.359564][T13828] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  569.535897][T13828] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  569.797378][ T5637] Bluetooth: hci5: unexpected event 0x3c length: 15 > 7
[  569.893869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.291727][ T5637] Bluetooth: hci5: unexpected subevent 0x19 length: 150 > 28
[  570.299654][ T5637] Bluetooth: hci5: Unable to find connection with handle 0x0000
[  571.075927][T13879] netlink: 'syz.3.2392': attribute type 10 has an invalid length.
[  571.109863][T13879] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2392'.
[  571.130458][T13885] netlink: zone id is out of range
[  571.144653][T13885] netlink: zone id is out of range
[  571.160130][T13885] netlink: zone id is out of range
[  571.189903][T13885] netlink: zone id is out of range
[  571.770255][T13885] netlink: set zone limit has 4 unknown bytes
[  572.174176][T13899] netlink: 'syz.0.2398': attribute type 8 has an invalid length.
[  572.504333][T13910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2403'.
[  573.008588][T13921] netlink: 'syz.5.2415': attribute type 3 has an invalid length.
[  573.379987][T13930] netlink: 'syz.4.2408': attribute type 10 has an invalid length.
[  573.564955][T13937] set match dimension is over the limit!
[  573.578517][T13934] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2409'.
[  573.636324][T13935] netlink: 'syz.5.2409': attribute type 3 has an invalid length.
[  573.673793][T13935] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.2409'.
[  573.827141][T13930] team0 (unregistering): Port device team_slave_0 removed
[  573.925646][T13930] team0 (unregistering): Port device team_slave_1 removed
[  574.097598][T13946] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.105213][T13946] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.131300][T13945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2414'.
[  574.184087][T13946] bridge0: entered allmulticast mode
[  574.245954][T13949] bridge_slave_1: left allmulticast mode
[  574.285101][T13949] bridge_slave_1: left promiscuous mode
[  574.302908][T13949] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.338969][T13949] bridge_slave_0: left allmulticast mode
[  574.346316][T13949] bridge_slave_0: left promiscuous mode
[  574.352327][T13949] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.451043][T13952] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2427'.
[  574.544484][T13958] netlink: 'syz.3.2417': attribute type 10 has an invalid length.
[  574.607726][T13958] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2417'.
[  575.351312][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'.
[  575.686811][T13987] netlink: 'syz.6.2426': attribute type 10 has an invalid length.
[  575.755515][T13987] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2426'.
[  576.092866][T13997] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2432'.
[  576.488469][T14004] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2434'.
[  576.897604][T14016] netlink: 'syz.6.2437': attribute type 10 has an invalid length.
[  578.927660][T14065] siw: device registration error -23
[  579.413771][T14081] netlink: 'syz.5.2461': attribute type 1 has an invalid length.
[  579.427863][T14081] netlink: 'syz.5.2461': attribute type 2 has an invalid length.
[  579.443797][T14080] openvswitch: netlink: IP tunnel dst address not specified
[  579.450446][T14081] netlink: 'syz.5.2461': attribute type 3 has an invalid length.
[  579.509163][T14085] __nla_validate_parse: 1 callbacks suppressed
[  579.509208][T14085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2463'.
[  579.854170][T14095] bridge_slave_0: entered promiscuous mode
[  580.540795][T14112] mac80211_hwsim hwsim57 wlan1: entered promiscuous mode
[  580.559028][T14112] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode
[  580.658365][T14122] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2472'.
[  580.817050][T14124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2474'.
[  581.172231][T14139] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2481'.
[  581.185707][T14138] ÿÿÿÿÿÿ: renamed from vlan1
[  581.235404][T14139] netlink: 'syz.6.2481': attribute type 10 has an invalid length.
[  582.396015][T14150] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  582.423851][T14150] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  582.448056][T14150] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  582.457084][T14158] mac80211_hwsim hwsim54 wlan1: entered promiscuous mode
[  582.457133][T14158] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode
[  582.549297][T14162] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2489'.
[  583.262142][T14180] bridge_slave_0: entered promiscuous mode
[  583.421226][T14190] netlink: 'syz.3.2499': attribute type 21 has an invalid length.
[  583.429792][T14190] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2499'.
[  583.766010][T14198] netlink: 'syz.3.2501': attribute type 8 has an invalid length.
[  583.822340][T14200] netlink: 'syz.4.2502': attribute type 10 has an invalid length.
[  583.995026][ T5893] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  584.004673][T14208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2506'.
[  584.029564][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  584.092843][T14200] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  585.569488][T14240] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2513'.
[  586.853524][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2520'.
[  588.151280][T14285] netlink: 'syz.3.2525': attribute type 10 has an invalid length.
[  588.240205][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  588.322676][T14285] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  588.758410][T14294] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2528'.
[  589.978661][T14325] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2540'.
[  591.679941][T14353] netlink: 'syz.0.2547': attribute type 10 has an invalid length.
[  592.944324][T14387] netlink: 'syz.0.2556': attribute type 2 has an invalid length.
[  593.588175][T14410] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2564'.
[  594.020498][T14419] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2568'.
[  595.445478][T14437] netlink: 'syz.5.2572': attribute type 2 has an invalid length.
[  595.494320][T14437] tipc: Started in network mode
[  595.518066][T14437] tipc: Node identity 30008, cluster identity 4711
[  595.552759][T14437] tipc: Node number set to 196616
[  595.831972][T14455] netlink: 'syz.6.2578': attribute type 10 has an invalid length.
[  596.331545][T14455] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  596.372287][T14455] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  596.926957][ T5637] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[  597.264083][T14483] netlink: 'syz.5.2587': attribute type 10 has an invalid length.
[  597.952783][T14483] team0 (unregistering): Port device team_slave_0 removed
[  597.982907][T14483] team0 (unregistering): Port device team_slave_1 removed
[  598.296279][T14509] netlink: 'syz.5.2594': attribute type 21 has an invalid length.
[  598.305734][T14509] netlink: 'syz.5.2594': attribute type 4 has an invalid length.
[  598.317034][T14509] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2594'.
[  598.778185][T14515] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2597'.
[  599.062902][T14528] netlink: 'syz.6.2612': attribute type 39 has an invalid length.
[  602.371972][T14608] bridge0: entered allmulticast mode
[  603.014230][T14641] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2639'.
[  603.996098][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2645'.
[  605.506451][T14695] netlink: 'syz.3.2650': attribute type 2 has an invalid length.
[  607.740266][T14751] netlink: 'syz.6.2666': attribute type 2 has an invalid length.
[  607.767677][T14751] tipc: Started in network mode
[  607.778509][T14751] tipc: Node identity 30008, cluster identity 4711
[  607.794154][T14751] tipc: Node number set to 196616
[  611.235072][T14812] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  611.677992][ T5637] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5
[  612.306594][T14838] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2691'.
[  612.499322][T14848] hsr0: entered promiscuous mode
[  612.529097][T14848] hsr0: entered allmulticast mode
[  612.536921][T14848] hsr_slave_0: entered allmulticast mode
[  612.554649][T14848] hsr_slave_1: entered allmulticast mode
[  612.785532][T14855] tmpfs: Bad value for 'gid'
[  612.798751][T14855] tmpfs: Bad value for 'gid'
[  615.017381][ T5903] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  615.876491][T14868] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2699'.
[  616.270783][T14876] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  616.281855][T14873] netlink: 'syz.0.2702': attribute type 6 has an invalid length.
[  616.320662][T14873] netlink: 'syz.0.2702': attribute type 6 has an invalid length.
[  616.661045][T14890] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2706'.
[  616.783794][T14880] : entered promiscuous mode
[  617.196727][T14896] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2708'.
[  617.706863][T14898] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2709'.
[  618.440689][T14914] netlink: 'syz.5.2713': attribute type 15 has an invalid length.
[  618.451858][T14914] netlink: 'syz.5.2713': attribute type 7 has an invalid length.
[  618.460416][T14914] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2713'.
[  619.063084][T14913] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  620.153210][T14942] netlink: 'syz.5.2721': attribute type 10 has an invalid length.
[  620.322619][T14948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2723'.
[  620.393997][T14947] netlink: 'syz.3.2724': attribute type 10 has an invalid length.
[  620.486897][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2721'.
[  620.592934][T14947] team0: Device wg2 is of different type
[  620.947993][   T50] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  621.883193][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  622.090078][T14980] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2737'.
[  622.129457][T14980] nbd: couldn't find device at index 7
[  622.170964][T14978] netlink: 'syz.0.2736': attribute type 29 has an invalid length.
[  622.202493][T14978] netlink: 'syz.0.2736': attribute type 29 has an invalid length.
[  622.947868][T15000] netlink: 'syz.5.2745': attribute type 27 has an invalid length.
[  622.996685][T15000] netlink: 'syz.5.2745': attribute type 28 has an invalid length.
[  623.010891][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  623.062689][T15000] netlink: 'syz.5.2745': attribute type 29 has an invalid length.
[  623.085937][T15000] netlink: 'syz.5.2745': attribute type 30 has an invalid length.
[  623.110102][T15000] netlink: 'syz.5.2745': attribute type 31 has an invalid length.
[  623.165051][T15000] netlink: 'syz.5.2745': attribute type 32 has an invalid length.
[  623.189929][T15000] netlink: 'syz.5.2745': attribute type 33 has an invalid length.
[  623.216877][T15000] netlink: 'syz.5.2745': attribute type 35 has an invalid length.
[  623.255545][T15000] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2745'.
[  623.300644][T15003] syzkaller0: entered promiscuous mode
[  623.382891][T15003] syzkaller0: entered allmulticast mode
[  623.392243][T15004] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2743'.
[  623.497188][T15011] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2743'.
[  623.618139][ T5637] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  624.272147][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2758'.
[  624.290258][   T50] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  624.557251][T15046] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2760'.
[  624.973492][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  624.980032][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  625.642835][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  625.765652][T15068] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2768'.
[  626.025490][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'.
[  626.087261][T15081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2773'.
[  627.784853][T15102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2780'.
[  627.903376][T15112] bridge0: port 3(ip6gretap0) entered blocking state
[  627.932351][T15112] bridge0: port 3(ip6gretap0) entered disabled state
[  628.045158][T15112] ip6gretap0: entered allmulticast mode
[  628.079828][T15118] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2787'.
[  628.139648][T15112] ip6gretap0: entered promiscuous mode
[  628.551771][T15131] netlink: 'syz.3.2791': attribute type 11 has an invalid length.
[  628.571159][T15131] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2791'.
[  629.148336][T15145] validate_nla: 13 callbacks suppressed
[  629.148359][T15145] netlink: 'syz.5.2794': attribute type 3 has an invalid length.
[  629.312632][T15145] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2794'.
[  629.650378][T15160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2798'.
[  630.515106][T15184] netlink: 'syz.6.2805': attribute type 10 has an invalid length.
[  630.537670][T15179] gretap0 speed is unknown, defaulting to 1000
[  630.637003][T15179] lo speed is unknown, defaulting to 1000
[  631.110576][T15191] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2807'.
[  631.865538][T15210] netlink: 'syz.6.2813': attribute type 29 has an invalid length.
[  631.887817][T15212] netlink: 'syz.6.2813': attribute type 29 has an invalid length.
[  632.479937][T15229] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2819'.
[  632.665792][T15221] netlink: 'syz.0.2816': attribute type 4 has an invalid length.
[  632.860563][T15236] netlink: 'syz.5.2822': attribute type 6 has an invalid length.
[  632.898264][T15236] netlink: 'syz.5.2822': attribute type 6 has an invalid length.
[  632.969471][T15235] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  633.257079][T15246] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2825'.
[  633.331233][T15246] nbd: couldn't find device at index 7
[  633.459257][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'.
[  633.635809][T15263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2832'.
[  633.645746][T15263] unsupported nlmsg_type 40
[  634.365294][T15270] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2834'.
[  634.959002][T15282] netlink: 'syz.3.2838': attribute type 29 has an invalid length.
[  635.005991][T15284] netlink: 'syz.3.2838': attribute type 29 has an invalid length.
[  635.066528][T15293] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2843'.
[  635.412443][T15309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2846'.
[  635.533859][T15311] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2849'.
[  635.803765][ T5903] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  636.906905][T15346] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2861'.
[  637.007781][T15347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2863'.
[  638.010567][   T30] audit: type=1107 audit(1779553908.274:7): pid=15361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  638.088863][   T30] audit: type=1107 audit(1779553908.294:8): pid=15361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='º‚'
[  638.324691][T15377] netlink: 'syz.5.2873': attribute type 29 has an invalid length.
[  638.349507][T15377] netlink: 'syz.5.2873': attribute type 29 has an invalid length.
[  638.378656][T15377] netlink: 'syz.5.2873': attribute type 29 has an invalid length.
[  638.471192][T15384] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2876'.
[  639.673758][T15418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2889'.
[  639.859742][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2890'.
[  640.172679][ T5637] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[  640.853844][T15450] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2897'.
[  640.946950][T15453] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2899'.
[  641.119894][T15461] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2903'.
[  641.236191][T15468] netlink: 'syz.5.2902': attribute type 2 has an invalid length.
[  641.277586][T15468] netlink: 'syz.5.2902': attribute type 8 has an invalid length.
[  641.294654][T15468] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2902'.
[  641.851626][T15485] netlink: 'syz.4.2911': attribute type 10 has an invalid length.
[  641.880109][T15485] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2911'.
[  641.996600][T15490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2913'.
[  642.544356][T15511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2918'.
[  643.436979][T15535] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2927'.
[  644.372919][T15564] netlink: 'syz.0.2934': attribute type 29 has an invalid length.
[  644.431414][T15564] netlink: 'syz.0.2934': attribute type 29 has an invalid length.
[  644.448145][T15565] netlink: 'syz.3.2937': attribute type 29 has an invalid length.
[  644.458946][T15566] netlink: 'syz.3.2937': attribute type 29 has an invalid length.
[  645.358219][T15584] __nla_validate_parse: 2 callbacks suppressed
[  645.358263][T15584] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2944'.
[  646.047246][  T444] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  646.409029][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'.
[  646.779434][T15616] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2953'.
[  647.483650][ T5637] Bluetooth: hci5: command 0x0406 tx timeout
[  647.677358][T15632] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2959'.
[  648.729453][T15661] netlink: 'syz.6.2968': attribute type 29 has an invalid length.
[  648.756563][T15662] netlink: 'syz.6.2968': attribute type 29 has an invalid length.
[  648.785921][T15661] netlink: 'syz.6.2968': attribute type 29 has an invalid length.
[  649.027137][T15665] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2969'.
[  649.305981][T15667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2970'.
[  649.363830][T15671] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2972'.
[  649.365625][T15667] x_tables: ip_tables: udp match: only valid for protocol 17
[  649.531528][T15680] netlink: 'syz.6.2973': attribute type 29 has an invalid length.
[  649.567085][T15674] netlink: 'syz.6.2973': attribute type 29 has an invalid length.
[  650.559158][T15712] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2984'.
[  651.147654][T15718] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2987'.
[  651.452016][T15728] netlink: 'syz.6.2988': attribute type 29 has an invalid length.
[  651.481326][T15728] netlink: 'syz.6.2988': attribute type 29 has an invalid length.
[  654.031582][ T5899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  654.441503][T15741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2994'.
[  655.071879][T15764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3001'.
[  655.085536][T15765] netlink: 'syz.5.3002': attribute type 29 has an invalid length.
[  655.099247][T15765] netlink: 'syz.5.3002': attribute type 29 has an invalid length.
[  655.347044][T15767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3003'.
[  655.959408][T15777] netlink: 'syz.5.3006': attribute type 29 has an invalid length.
[  656.007813][T15778] netlink: 'syz.6.3005': attribute type 29 has an invalid length.
[  656.060505][T15778] netlink: 'syz.6.3005': attribute type 29 has an invalid length.
[  657.383004][T15795] netlink: 'syz.0.3011': attribute type 29 has an invalid length.
[  657.423773][T15796] netlink: 'syz.0.3011': attribute type 29 has an invalid length.
[  657.755090][T15803] netlink: 'syz.3.3013': attribute type 10 has an invalid length.
[  657.765239][T15803] veth0_vlan: left promiscuous mode
[  657.781151][T15803] veth0_vlan: entered promiscuous mode
[  657.800871][T15803] team0: Device veth0_vlan failed to register rx_handler
[  658.236423][T15818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3018'.
[  658.272803][T15819] netlink: 'syz.0.3019': attribute type 27 has an invalid length.
[  658.281234][T15819] netlink: 'syz.0.3019': attribute type 28 has an invalid length.
[  658.289751][T15819] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3019'.
[  659.981763][T15851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3031'.
[  660.648540][T15858] validate_nla: 22 callbacks suppressed
[  660.648579][T15858] netlink: 'syz.5.3032': attribute type 4 has an invalid length.
[  660.864640][T15875] netlink: 'syz.5.3037': attribute type 29 has an invalid length.
[  661.939973][T15905] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3044'.
[  661.954015][T15909] netlink: 'syz.0.3045': attribute type 29 has an invalid length.
[  661.963190][T15909] netlink: 'syz.0.3045': attribute type 29 has an invalid length.
[  666.074069][T15945] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3061'.
[  666.550326][T15960] netlink: 'syz.6.3069': attribute type 1 has an invalid length.
[  667.096834][T15974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3073'.
[  667.233659][T15977] netlink: 'syz.6.3074': attribute type 29 has an invalid length.
[  667.308593][T15980] netlink: 'syz.4.3076': attribute type 29 has an invalid length.
[  667.591469][T15993] netlink: 'syz.5.3079': attribute type 2 has an invalid length.
[  667.617724][T15982] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3077'.
[  667.633386][T15993] netlink: 'syz.5.3079': attribute type 1 has an invalid length.
[  667.675180][T15993] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3079'.
[  667.821957][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  667.875658][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3079'.
[  668.088424][T16002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3082'.
[  668.410482][T16017] netlink: 'syz.5.3096': attribute type 29 has an invalid length.
[  668.768224][T16024] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3088'.
[  668.848534][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3089'.
[  669.729839][T16049] syzkaller0: entered promiscuous mode
[  669.736677][T16049] syzkaller0: entered allmulticast mode
[  669.760363][T16058] netlink: 'syz.0.3099': attribute type 10 has an invalid length.
[  669.811223][T16058] veth0_vlan: left promiscuous mode
[  669.826634][T16058] veth0_vlan: entered promiscuous mode
[  669.850052][T16058] team0: Device veth0_vlan failed to register rx_handler
[  670.223004][T16069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3105'.
[  670.273612][T16072] netlink: 'syz.4.3106': attribute type 62 has an invalid length.
[  670.586756][T16075] openvswitch: netlink: IP tunnel dst address not specified
[  671.565026][T16096] netlink: 'syz.6.3112': attribute type 10 has an invalid length.
[  675.220130][T16096] veth0_vlan: left promiscuous mode
[  675.273282][T16096] veth0_vlan: entered promiscuous mode
[  675.310812][T16096] team0: Device veth0_vlan failed to register rx_handler
[  675.360113][T16107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3117'.
[  675.391984][   T30] audit: type=1107 audit(1779553945.654:9): pid=16104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  675.724862][T16115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3128'.
[  676.974118][T16140] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.3126'.
[  677.279875][ T5899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  677.916724][T16155] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3133'.
[  678.022260][T16153] netlink: 'syz.5.3130': attribute type 10 has an invalid length.
[  678.072047][T16157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3134'.
[  678.089785][T16158] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.3131'.
[  678.138156][T16161] netlink: 'syz.6.3131': attribute type 1 has an invalid length.
[  678.170143][T16161] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.3131'.
[  678.184990][T16161] nbd: nbd0 already in use
[  678.496391][T16165] netlink: 'syz.0.3136': attribute type 29 has an invalid length.
[  678.545915][T16165] netlink: 'syz.0.3136': attribute type 29 has an invalid length.
[  678.909995][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'.
[  679.125360][T16185] netlink: 'syz.5.3141': attribute type 29 has an invalid length.
[  679.147629][T16185] netlink: 'syz.5.3141': attribute type 29 has an invalid length.
[  679.551394][T16194] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3145'.
[  679.610836][T16198] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3147'.
[  680.666738][T16223] netlink: 'syz.3.3157': attribute type 29 has an invalid length.
[  680.681830][T16223] netlink: 'syz.3.3157': attribute type 29 has an invalid length.
[  680.913178][T16233] __nla_validate_parse: 1 callbacks suppressed
[  680.913217][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3160'.
[  680.985525][T16234] netlink: 'syz.3.3161': attribute type 6 has an invalid length.
[  680.994097][T16234] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.3161'.
[  681.004288][T16234] netlink: 'syz.3.3161': attribute type 1 has an invalid length.
[  681.053507][T16233] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.3160'.
[  681.077855][T16233] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3160'.
[  681.122390][T16239] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3162'.
[  681.181952][   T50] block nbd8: Receive control failed (result -107)
[  681.226383][T16234] nbd8: detected capacity change from 0 to 339754496
[  681.346671][T16114] block nbd8: Dead connection, failed to find a fallback
[  681.373823][T16114] block nbd8: shutting down sockets
[  681.388927][T16114] blk_print_req_error: 24 callbacks suppressed
[  681.388964][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.436972][T16114] buffer_io_error: 23 callbacks suppressed
[  681.436993][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.471237][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.495395][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.511231][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'.
[  681.521445][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.532260][T16249] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  681.532260][T16249] Please contact the netfilter-devel mailing list or update your nftables rules.
[  681.551008][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.568811][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.591476][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.610825][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.621855][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.630574][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.640280][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.651826][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.661487][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.683980][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.712852][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.726265][T16114] ldm_validate_partition_table(): Disk read failed.
[  681.744196][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.774880][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.818297][T16114] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  681.845079][T16114] Buffer I/O error on dev nbd8, logical block 0, async page read
[  681.871888][T16114] Dev nbd8: unable to read RDB block 0
[  681.915365][T16114]  nbd8: unable to read partition table
[  681.952451][T16114] ldm_validate_partition_table(): Disk read failed.
[  681.984001][T16114] Dev nbd8: unable to read RDB block 0
[  682.022029][T16114]  nbd8: unable to read partition table
[  682.073699][T16260] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3170'.
[  682.376120][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3175'.
[  682.663029][T16278] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3177'.
[  682.819768][T16273] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3175'.
[  683.354888][T16294] validate_nla: 4 callbacks suppressed
[  683.354941][T16294] netlink: 'syz.5.3184': attribute type 29 has an invalid length.
[  683.392065][T16294] netlink: 'syz.5.3184': attribute type 29 has an invalid length.
[  683.504288][T16299] netlink: 'syz.3.3186': attribute type 1 has an invalid length.
[  683.800652][T16313] netlink: 'syz.5.3190': attribute type 10 has an invalid length.
[  684.328951][T16320] netdevsim netdevsim5: Direct firmware load for .net/syz1 failed with error -2
[  684.348410][T16320] netdevsim netdevsim5: Falling back to sysfs fallback for: .net/syz1
[  685.260625][   T30] audit: type=1107 audit(1779553955.524:10): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  686.021022][T16368] __nla_validate_parse: 5 callbacks suppressed
[  686.021045][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3209'.
[  686.081568][T16369] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3208'.
[  686.419523][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  686.426040][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  686.442218][T16368] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3209'.
[  686.508027][T16375] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3210'.
[  686.809662][T16383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3213'.
[  687.232377][T16399] netlink: 'syz.5.3219': attribute type 29 has an invalid length.
[  687.259050][T16399] netlink: 'syz.5.3219': attribute type 29 has an invalid length.
[  687.644715][T16413] netlink: 'syz.0.3222': attribute type 29 has an invalid length.
[  687.691574][T16413] netlink: 'syz.0.3222': attribute type 29 has an invalid length.
[  688.178883][T16425] netlink: 'syz.0.3226': attribute type 1 has an invalid length.
[  688.187396][T16425] netlink: 'syz.0.3226': attribute type 4 has an invalid length.
[  688.199025][T16425] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3226'.
[  689.192937][T16461] netlink: 'syz.5.3237': attribute type 29 has an invalid length.
[  689.222183][T16461] netlink: 'syz.5.3237': attribute type 29 has an invalid length.
[  689.410857][T16459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3239'.
[  689.820742][T16467] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3242'.
[  690.028551][T16473] netlink: 'syz.6.3253': attribute type 29 has an invalid length.
[  690.075123][T16477] netlink: 'syz.6.3253': attribute type 29 has an invalid length.
[  690.092992][T16480] netlink: 'syz.4.3244': attribute type 1 has an invalid length.
[  690.399284][T16487] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2
[  690.417201][T16487] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1
[  690.449153][T16489] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3247'.
[  691.140220][T16514] netlink: 'syz.4.3259': attribute type 29 has an invalid length.
[  691.166959][T16514] netlink: 'syz.4.3259': attribute type 29 has an invalid length.
[  691.396113][T16522] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3261'.
[  692.013792][T16549] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3271'.
[  692.281489][T16556] netlink: 'syz.4.3274': attribute type 10 has an invalid length.
[  692.391755][T16556] bond0: (slave netdevsim1): Releasing backup interface
[  692.458708][T16559] netlink: 'syz.4.3274': attribute type 10 has an invalid length.
[  692.720459][T16565] netlink: 'syz.3.3275': attribute type 29 has an invalid length.
[  694.383161][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3294'.
[  694.406533][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3294'.
[  695.410898][T16651] validate_nla: 6 callbacks suppressed
[  695.410942][T16651] netlink: 'syz.4.3301': attribute type 21 has an invalid length.
[  695.453265][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'.
[  695.496456][T16648] netdevsim netdevsim6: Direct firmware load for .net/syz1 failed with error -2
[  695.516942][T16648] netdevsim netdevsim6: Falling back to sysfs fallback for: .net/syz1
[  697.615576][T16664] netlink: 'syz.4.3305': attribute type 29 has an invalid length.
[  697.648006][T16663] netlink: 'syz.5.3304': attribute type 29 has an invalid length.
[  697.678797][T16664] netlink: 'syz.4.3305': attribute type 29 has an invalid length.
[  697.692777][T16663] netlink: 'syz.5.3304': attribute type 29 has an invalid length.
[  697.887598][T16674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3309'.
[  698.304480][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'.
[  698.541953][T16695] netlink: 'syz.4.3315': attribute type 6 has an invalid length.
[  698.582381][T16695] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.3315'.
[  698.637789][T16695] netlink: 'syz.4.3315': attribute type 1 has an invalid length.
[  698.774442][   T50] block nbd9: Receive control failed (result -107)
[  698.814028][T16695] nbd9: detected capacity change from 0 to 339754496
[  698.830181][T16246] block nbd9: Dead connection, failed to find a fallback
[  698.865950][T16246] block nbd9: shutting down sockets
[  698.891371][T16246] blk_print_req_error: 24 callbacks suppressed
[  698.891391][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  698.973413][T16246] buffer_io_error: 23 callbacks suppressed
[  698.973433][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.014893][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.027958][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.037518][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.048960][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.057442][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.073853][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.084722][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.097009][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.106103][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.116514][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.127146][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.140806][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.150312][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.180548][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.224619][T16246] ldm_validate_partition_table(): Disk read failed.
[  699.247643][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.283057][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.311417][T16246] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  699.375085][T16246] Buffer I/O error on dev nbd9, logical block 0, async page read
[  699.412009][T16246] Dev nbd9: unable to read RDB block 0
[  699.439891][T16246]  nbd9: unable to read partition table
[  699.460818][T16713] netlink: 'syz.5.3322': attribute type 29 has an invalid length.
[  699.488954][T16246] ldm_validate_partition_table(): Disk read failed.
[  699.519755][T16713] netlink: 'syz.5.3322': attribute type 29 has an invalid length.
[  699.535728][T16246] Dev nbd9: unable to read RDB block 0
[  699.542250][T16246]  nbd9: unable to read partition table
[  699.551368][T16717] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3324'.
[  699.569058][T16715] netlink: 'syz.3.3323': attribute type 2 has an invalid length.
[  699.613759][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'.
[  699.804908][ T5903] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  700.055059][T16736] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3329'.
[  700.094998][T16736] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3329'.
[  700.858075][T16748] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3331'.
[  701.608582][T16761] validate_nla: 1 callbacks suppressed
[  701.608606][T16761] netlink: 'syz.5.3332': attribute type 29 has an invalid length.
[  701.629368][T16757] netlink: 'syz.5.3332': attribute type 29 has an invalid length.
[  703.001354][T16774] netlink: 'syz.4.3337': attribute type 29 has an invalid length.
[  703.234754][T16770] netlink: 'syz.4.3337': attribute type 29 has an invalid length.
[  703.333583][T16780] netlink: 'syz.5.3338': attribute type 29 has an invalid length.
[  703.384382][T16777] netlink: 'syz.5.3338': attribute type 29 has an invalid length.
[  705.827073][T16810] netlink: 'syz.3.3349': attribute type 29 has an invalid length.
[  705.854027][T16810] netlink: 'syz.3.3349': attribute type 29 has an invalid length.
[  706.181269][T16821] netlink: 'syz.3.3353': attribute type 29 has an invalid length.
[  706.204901][T16821] netlink: 'syz.3.3353': attribute type 29 has an invalid length.
[  706.803001][T16850] ------------[ cut here ]------------
[  706.810488][T16850] !cfg80211_chandef_valid(chandef)
[  706.810528][T16850] WARNING: net/wireless/chan.c:796 at cfg80211_chandef_dfs_required+0xe06/0xec0, CPU#0: syz.3.3361/16850
[  706.827275][T16850] Modules linked in:
[  706.833073][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.3.3361 Not tainted syzkaller #0 PREEMPT(full) 
[  706.843699][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  706.854806][T16850] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0
[  706.861847][T16850] Code: de e8 0e 99 c1 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 bf 94 c1 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 ab 94 c1 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 b8 96 a4 00 89 d1 80 e1
[  706.882330][T16850] RSP: 0018:ffffc90005d67700 EFLAGS: 00010287
[  706.889003][T16850] RAX: ffffffff8b042d25 RBX: ffff88805ad0d858 RCX: 0000000000080000
[  706.897133][T16850] RDX: ffffc900064d9000 RSI: 0000000000000673 RDI: 0000000000000674
[  706.905585][T16850] RBP: ffffc90005d67890 R08: ffffffff9030b6f7 R09: 1ffffffff20616de
[  706.913778][T16850] R10: dffffc0000000000 R11: fffffbfff20616df R12: 0000000000000006
[  706.921905][T16850] R13: dffffc0000000000 R14: ffffc90005d67a00 R15: dffffc0000000000
[  706.930006][T16850] FS:  00007fb65eb7c6c0(0000) GS:ffff88812528c000(0000) knlGS:0000000000000000
[  706.939071][T16850] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  706.945755][T16850] CR2: 0000001b34a1eff8 CR3: 0000000061caa000 CR4: 00000000003526f0
[  706.954000][T16850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  706.962072][T16850] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  706.971069][T16850] Call Trace:
[  706.974942][T16850]  <TASK>
[  706.977922][T16850]  ? kvfree_call_rcu+0x9f/0x430
[  706.982985][T16850]  ? ieee80211_free_chanctx+0x2dc/0x390
[  706.988596][T16850]  ? __pfx_ieee80211_free_chanctx+0x10/0x10
[  706.994614][T16850]  ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10
[  707.001207][T16850]  _ieee80211_link_use_channel+0x27a/0x7f0
[  707.007796][T16850]  ? __pfx___ieee80211_link_release_channel+0x10/0x10
[  707.014812][T16850]  ? __pfx__ieee80211_link_use_channel+0x10/0x10
[  707.021235][T16850]  ? rcu_is_watching+0x15/0xb0
[  707.026133][T16850]  ieee80211_set_monitor_channel+0x692/0x8e0
[  707.032186][T16850]  ? __pfx_ieee80211_set_monitor_channel+0x10/0x10
[  707.038830][T16850]  ? __mutex_trylock_common+0x158/0x260
[  707.044644][T16850]  cfg80211_set_monitor_channel+0x22d/0x5f0
[  707.050646][T16850]  cfg80211_wext_siwfreq+0x713/0x850
[  707.056106][T16850]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  707.062003][T16850]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  707.067937][T16850]  ioctl_standard_call+0xcb/0x1b0
[  707.074126][T16850]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  707.080001][T16850]  wext_ioctl_dispatch+0xee/0x410
[  707.085836][T16850]  ? __pfx_ioctl_standard_call+0x10/0x10
[  707.091548][T16850]  wext_handle_ioctl+0x10f/0x1d0
[  707.096584][T16850]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  707.102103][T16850]  ? do_futex+0x395/0x420
[  707.106594][T16850]  sock_ioctl+0x159/0x7f0
[  707.111172][T16850]  ? __pfx_sock_ioctl+0x10/0x10
[  707.116206][T16850]  ? __fget_files+0x2a/0x420
[  707.120863][T16850]  ? __fget_files+0x3a0/0x420
[  707.125660][T16850]  ? __fget_files+0x2a/0x420
[  707.130319][T16850]  ? bpf_lsm_file_ioctl+0x9/0x20
[  707.135396][T16850]  ? __pfx_sock_ioctl+0x10/0x10
[  707.140319][T16850]  __se_sys_ioctl+0xfc/0x170
[  707.145038][T16850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.151169][T16850]  do_syscall_64+0x15f/0xf80
[  707.155878][T16850]  ? trace_irq_disable+0x3b/0x140
[  707.161075][T16850]  ? clear_bhb_loop+0x40/0x90
[  707.166195][T16850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.172185][T16850] RIP: 0033:0x7fb65dd9ce59
[  707.177617][T16850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.197905][T16850] RSP: 002b:00007fb65eb7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.206479][T16850] RAX: ffffffffffffffda RBX: 00007fb65e015fa0 RCX: 00007fb65dd9ce59
[  707.214655][T16850] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000007
[  707.222805][T16850] RBP: 00007fb65de32d6f R08: 0000000000000000 R09: 0000000000000000
[  707.230863][T16850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.238971][T16850] R13: 00007fb65e016038 R14: 00007fb65e015fa0 R15: 00007ffc1021b178
[  707.247540][T16850]  </TASK>
[  707.250639][T16850] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  707.258130][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.3.3361 Not tainted syzkaller #0 PREEMPT(full) 
[  707.267730][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  707.277830][T16850] Call Trace:
[  707.281168][T16850]  <TASK>
[  707.284139][T16850]  vpanic+0x56c/0xa60
[  707.288174][T16850]  ? __pfx__printk+0x10/0x10
[  707.292811][T16850]  ? __pfx_vpanic+0x10/0x10
[  707.297453][T16850]  ? is_bpf_text_address+0x292/0x2b0
[  707.302801][T16850]  ? is_bpf_text_address+0x26/0x2b0
[  707.308061][T16850]  panic+0xc5/0xd0
[  707.311911][T16850]  ? __pfx_panic+0x10/0x10
[  707.316404][T16850]  __warn+0x315/0x4c0
[  707.320440][T16850]  ? cfg80211_chandef_dfs_required+0xe06/0xec0
[  707.326661][T16850]  ? cfg80211_chandef_dfs_required+0xe06/0xec0
[  707.332868][T16850]  __report_bug+0x29a/0x540
[  707.337872][T16850]  ? cfg80211_chandef_dfs_required+0xe06/0xec0
[  707.344162][T16850]  ? __pfx___report_bug+0x10/0x10
[  707.349236][T16850]  ? perf_trace_preemptirq_template+0xb2/0x350
[  707.355446][T16850]  ? perf_trace_preemptirq_template+0x26f/0x350
[  707.361735][T16850]  ? call_rcu+0x644/0x890
[  707.366118][T16850]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  707.373030][T16850]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  707.379693][T16850]  ? cfg80211_chandef_dfs_required+0xe06/0xec0
[  707.385905][T16850]  report_bug+0x16a/0x220
[  707.390298][T16850]  ? cfg80211_chandef_dfs_required+0xe06/0xec0
[  707.396624][T16850]  ? cfg80211_chandef_dfs_required+0xe08/0xec0
[  707.402840][T16850]  handle_bug+0x9c/0x200
[  707.407141][T16850]  exc_invalid_op+0x1a/0x50
[  707.411697][T16850]  asm_exc_invalid_op+0x1a/0x20
[  707.416611][T16850] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0
[  707.423441][T16850] Code: de e8 0e 99 c1 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 bf 94 c1 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 ab 94 c1 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 b8 96 a4 00 89 d1 80 e1
[  707.443183][T16850] RSP: 0018:ffffc90005d67700 EFLAGS: 00010287
[  707.449326][T16850] RAX: ffffffff8b042d25 RBX: ffff88805ad0d858 RCX: 0000000000080000
[  707.457353][T16850] RDX: ffffc900064d9000 RSI: 0000000000000673 RDI: 0000000000000674
[  707.465382][T16850] RBP: ffffc90005d67890 R08: ffffffff9030b6f7 R09: 1ffffffff20616de
[  707.473411][T16850] R10: dffffc0000000000 R11: fffffbfff20616df R12: 0000000000000006
[  707.481536][T16850] R13: dffffc0000000000 R14: ffffc90005d67a00 R15: dffffc0000000000
[  707.489575][T16850]  ? cfg80211_chandef_dfs_required+0xe05/0xec0
[  707.495800][T16850]  ? kvfree_call_rcu+0x9f/0x430
[  707.500715][T16850]  ? ieee80211_free_chanctx+0x2dc/0x390
[  707.506309][T16850]  ? __pfx_ieee80211_free_chanctx+0x10/0x10
[  707.512273][T16850]  ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10
[  707.518838][T16850]  _ieee80211_link_use_channel+0x27a/0x7f0
[  707.524692][T16850]  ? __pfx___ieee80211_link_release_channel+0x10/0x10
[  707.531494][T16850]  ? __pfx__ieee80211_link_use_channel+0x10/0x10
[  707.537861][T16850]  ? rcu_is_watching+0x15/0xb0
[  707.542673][T16850]  ieee80211_set_monitor_channel+0x692/0x8e0
[  707.548698][T16850]  ? __pfx_ieee80211_set_monitor_channel+0x10/0x10
[  707.555235][T16850]  ? __mutex_trylock_common+0x158/0x260
[  707.560837][T16850]  cfg80211_set_monitor_channel+0x22d/0x5f0
[  707.566782][T16850]  cfg80211_wext_siwfreq+0x713/0x850
[  707.572106][T16850]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  707.577954][T16850]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  707.583825][T16850]  ioctl_standard_call+0xcb/0x1b0
[  707.588914][T16850]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  707.594769][T16850]  wext_ioctl_dispatch+0xee/0x410
[  707.599838][T16850]  ? __pfx_ioctl_standard_call+0x10/0x10
[  707.605522][T16850]  wext_handle_ioctl+0x10f/0x1d0
[  707.610496][T16850]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  707.615988][T16850]  ? do_futex+0x395/0x420
[  707.620374][T16850]  sock_ioctl+0x159/0x7f0
[  707.624876][T16850]  ? __pfx_sock_ioctl+0x10/0x10
[  707.629776][T16850]  ? __fget_files+0x2a/0x420
[  707.634420][T16850]  ? __fget_files+0x3a0/0x420
[  707.639147][T16850]  ? __fget_files+0x2a/0x420
[  707.643786][T16850]  ? bpf_lsm_file_ioctl+0x9/0x20
[  707.648766][T16850]  ? __pfx_sock_ioctl+0x10/0x10
[  707.653646][T16850]  __se_sys_ioctl+0xfc/0x170
[  707.658328][T16850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.664434][T16850]  do_syscall_64+0x15f/0xf80
[  707.669069][T16850]  ? trace_irq_disable+0x3b/0x140
[  707.674126][T16850]  ? clear_bhb_loop+0x40/0x90
[  707.679095][T16850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.685017][T16850] RIP: 0033:0x7fb65dd9ce59
[  707.689469][T16850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.709728][T16850] RSP: 002b:00007fb65eb7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.718179][T16850] RAX: ffffffffffffffda RBX: 00007fb65e015fa0 RCX: 00007fb65dd9ce59
[  707.726186][T16850] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000007
[  707.734183][T16850] RBP: 00007fb65de32d6f R08: 0000000000000000 R09: 0000000000000000
[  707.742179][T16850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.750178][T16850] R13: 00007fb65e016038 R14: 00007fb65e015fa0 R15: 00007ffc1021b178
[  707.758191][T16850]  </TASK>
[  707.762093][T16850] Kernel Offset: disabled
[  707.766461][T16850] Rebooting in 86400 seconds..