last executing test programs:

1m1.609129737s ago: executing program 4 (id=1419):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x1000000000000, 0x0, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0xd, 0x7, 0xc8, 0x0, 0x2, 0x24b21, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10000, 0x4, 0x1, 0x2, 0xffffffffffffff30, 0x7f, 0x401, 0x0, 0x8, 0x0, 0x5}, r1, 0x6, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

1m1.474213597s ago: executing program 4 (id=1422):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xa, 0x5}, 0x100b84, 0x4, 0xfffffffc, 0x1, 0x100000000000, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff320000010800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

1m1.274959467s ago: executing program 4 (id=1424):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x160e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5170c520ae73d446}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10)

1m0.766755485s ago: executing program 4 (id=1427):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1", 0x2}], 0x1}, 0x20000044)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000f60000000000000d400000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000000201080000000000000000020000051cb842c09d6af9f5040001802a8f68eb626f08c1182973ace42b00cb27b49b120930962a302812c1ebedc1ec"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x2400c084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018003865d42c86ec312a2411197c66740000000000000c0000020c00000004000000020000000000001808000000000061003296b8b0ec9e3d092c367784ed656cb68b24ca04d84ade7db45c1ddf1f1b75b3b26e8675cc84fa35f6e1de546ff8de"], 0x0, 0x28, 0x0, 0x2, 0x4}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x601, 0x70bd26, 0x25dfdbff, {0x4, 0x1, 0x0, 0x0, 0x4, 0xb, 0xfffffffa, 0x80000000, 0x0, 0xffffffff, 0xfffffff9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4044854)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x2, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3304c34b24f58a63)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004055}, 0xc00c880)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x22, &(0x7f0000000000)=r10, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000020000040900010073797a300000000020000000000a01040002000000000000010000030900010073797a300000000028000000000a010800000000000000000100000108000240000000010900010073797a3000000000000000001100010000000000000000000500000a"], 0x90}}, 0x4)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})

1m0.14055747s ago: executing program 4 (id=1432):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x19f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x6, 0x4}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={<r5=>r0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480)="bfa5107823711697b88ca984b65eb782d1d1baa58f43a2f282cd9ab4255a44fe8f85dcd0d1e6f59df549a313ce7eec393d8c0d0317bdb39b69ea9891c47e0740332989245b3cb8f29e35ada67c23baee943d1c", &(0x7f0000000500)=@udp6=r5}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x22, 0x0, &(0x7f0000000b80)="f8ad48cc02cb29dcc8007f5b0800cfd6782bdb91b94088001652f33644b0db7c9d35", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000f1400012abd7000ffdbdf2508000100000000000800010000000a92ff27b5c0d1463bc6be3200000800450073727000080003000000000008000100010000000800010001000000110045006962056d756c741fa5f8356963617374"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x28000010)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

59.830886148s ago: executing program 4 (id=1439):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

44.410307192s ago: executing program 32 (id=1439):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

6.897987813s ago: executing program 0 (id=1792):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008100)=ANY=[@ANYBLOB="340000003e000701fcffffff00000100017c0000040042800c00018006000600800a0000100002800c1514800800158004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40), 0x700}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40), 0x700}, 0x20)
r6 = socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000100000000095454208e7248ebea72bc0df630397af98895a2b1381986b3de918730a6652622a53a8cc9b7af744dcedd12b3edfcaa06bbae76dd1264aa8853fe7a7078f43135844ad9b639264b9cd8da1896f23dc591506afc0957535ac1db8c046ef8a06bf557150cc8e3f200f2439c2"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x800a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x940, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11012, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xf8080, 0x0)
socket$kcm(0x23, 0x2, 0x0) (async)
r11 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) (async)
sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r12 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r12, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x30008004) (async)
sendmsg$inet(r12, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x30008004)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r12, 0x1, 0x7, &(0x7f0000000140)=r13, 0x4) (async)
setsockopt$sock_attach_bpf(r12, 0x1, 0x7, &(0x7f0000000140)=r13, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r13, &(0x7f00000001c0)="189cfe1e09ac30a24d9b5f9f38f52f9e59877a9ea9f6b14b30d03827589e4c79d28d77c08219f4d10a97c10a564055176a39297939ec19eb85b0964d3d25ca0e374f9072c2a5d05bc12117399bdc758c7d0b603dfcc577e50294b2", &(0x7f0000000440)=""/170}, 0x20)

5.574842074s ago: executing program 0 (id=1799):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100008, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000002, 0x0)
socket$kcm(0xa, 0x3, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x6ac0be14)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x20004040)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21d, 0x4, @perf_config_ext={0xffff8880b8622f20, 0x1}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0xa, 0x2, 0x3a)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001280)={'team_slave_1\x00', 0x1000})
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x40050)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
unlink(&(0x7f0000000200)='./cgroup\x00')

5.573998298s ago: executing program 1 (id=1800):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x9, 0x59549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000200), 0xc}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0x10000, 0xfffc, 0x0, 0x4, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x11) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='task_newtask\x00'}, 0x18) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c77aa"], 0xfdef) (async)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) (async)
close(r0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x400, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) (async)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff) (async)
syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x210, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r6 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x80184947, 0x0)

5.571147579s ago: executing program 2 (id=1801):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e60803dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001380)=""/182, 0xb6}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/65, 0x41}, {&(0x7f0000001640)=""/79, 0x4f}], 0x6, &(0x7f0000000240)=""/40, 0x28}, 0x40000042)
perf_event_open(0x0, 0x0, 0xc, r0, 0xb)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000180)}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x0, 0x80, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="09000000ab117a3b5b632f065a36c23fec03d63a15527192c93c5916134b7c669a735dc3f717e3975b6d71fab55bfd7de04c5048daaf3b13838caeb16a0373ed33ac917d616ae56430e6926bb5dd1d824019f0e955133bcadcdae13b8bdb847cf3aa8a7811ce2c0bf22f2633a034dd393f8bb1ec4402a012aa071d883d69b573398f997a56e46f79d5"], 0x38, 0x4000}, 0x80)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @cgroup_skb=0x1}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xd, 0x7, 0x0, 0x7fffffff, 0x420, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x26, 0x7ff, 0x5, 0x7, 0x81, 0x6, 0x5, 0x0, 0x2, 0x0, 0xe7}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x7fffffff, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8, 0x0, 0x0}}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x1000002, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1}, 0x80, &(0x7f0000000340)}, 0x41)

5.408160744s ago: executing program 1 (id=1802):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000e00000000000000", @ANYRES32=r0, @ANYBLOB="b49500000021e385a2ed1e000000000000000000170000000000581b94e419d40fb7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000100"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x110c2300fe)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x28, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x85}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @generic={0xf8, 0x9, 0x9, 0x1, 0x44fb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x7b2d, 0xba, &(0x7f0000000380)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x9, 0x200, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, &(0x7f0000000080))
sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x3f2, 0x8, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4084004}, 0x40000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r11=>0xffffffffffffffff}, 0x4)
r12 = getpid()
fstat(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fstat(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstat(r5, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getpid()
fstat(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
fstat(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
sendmsg$unix(r4, &(0x7f0000000d00)={&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)="8a8733cad8df22462d010d09e623bb13afd4642308", 0x15}, {&(0x7f0000000940)="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", 0xfc}, {&(0x7f0000000a40)="89ddac9ec9b7b376818505d086dc6b7e760db58f604e179e3128a545bc4fc7cd20089f34b8436b72491bb920aa49bd0348124d6692fa2fccae4b2f6602ca779392100189ebe9a9c0358cab16074bec77ace2d269ae48d0dec539920f0d31e8b9a386ae275cf8c45bedff8e9d0840fb4d76929d00a7e3d5732d433e822a6799fe4f80d00acd9b972d05c43dec8b4a490475718107d5878c439579ef5f58a3db2a0a42f6d102d86b8f18273563828a2f5272aef8a7433a4d20f44acd5a6d26b6d9c9c2f5cd9d", 0xc5}], 0x3, &(0x7f0000000e80)=[@rights={{0x38, 0x1, 0x1, [r2, r3, r2, r1, r8, r5, r7, r5, r1, r8]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r8, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0xb8, 0x8010}, 0x84)

5.277287809s ago: executing program 3 (id=1803):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x7, [@union={0xc, 0x1, 0x0, 0x5, 0x0, 0x401, [{0x3, 0x2, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5ce}}, @func={0x9, 0x0, 0x0, 0xc, 0x3}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x6, 0x0, 0x1}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x401}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x1, 0xffffff81, 0x2b4c9e36}, {0x2, 0x7, 0x400}, {0x2, 0x700, 0x6}, {0x4, 0x3, 0x1}, {0x1, 0x7, 0xfff}], "956167"}]}, {0x0, [0x61, 0xe, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000e80)=""/4096, 0xcb, 0x1000, 0x1, 0x7, 0x10000}, 0x28) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:23'], 0xa)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc4041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async, rerun: 64)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'vlan0\x00', 0x13d2})
close(r7) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
r9 = socket$kcm(0x10, 0x2, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf960569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2000000000000000585451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4fffae2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b00a13e3f0e21c882c66f4f05ffb6d95e07de02205fca4f18a2eb5b63e45d01"], 0x0}, 0x90)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000340)='%d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') (async, rerun: 32)
r10 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0xb3)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000500)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)="073a1b9c2ed351ff8cf1d01bb9fd9748cbcef5bb2ce65357eff60864b0d62113fdb11c01622371ebece19d7474f890a857aaecfce35ed8d0b248cf023a128d40bc63629510af1ad4991d94aa205b04857ba338aaac5bc745522411be1409b59fad7b412cac57d18e0136f2d785e672956d902c45a17b1e7267c2686b85e7526cbc5c7a42bc9b144015606865d2e701e5a2f338755ea5af031401cd58b59273ab5e19292dc2092e515ccc43e93c63aeac885f309e51f523d0a8814ad5a643a63a3b39b8ed1550d0a7736df602d094d139a3cf6194a246e272", 0xd8}, {&(0x7f0000000700)="e4425780092592e922722c384bce29c68aa4d17924d03025efebc2c1d897d243a34038d907a3f7082cb544fa0ae913971638b684a76e6db8a1975b061aeb78ef2a7ec00832485dd8331802faf37bcbeb3ac8707e27606ac6bedda5e1cb275f898181c5f9071e1e160fb632dc29bf1826f6fe1f14bb25e249555ff33735f8fa2e693569d3ff238e542200f82593173d105c66b579167ccf775402c86a6c2c687ea158eb03", 0xa4}, {&(0x7f00000002c0)="ddcd3a7af517b94cf86bd5840654080a7d35c1505744961b072eab31e79060410d870840317038447240a35e4cc43def38750a23a9c4c549ab58c2d89baa0da4", 0x40}, {&(0x7f00000007c0)="b2754b8a9b654421947f8a34eae097f177ec6a4afe6c5c7f8ed2b85f1b19e2af34358f2d5a7cc17770b6fa957a0dec0c69fe9c1adf70c22adfc86165336e39eff75915d89c11668acf0876b7298fd08e9ccbb22bfd78b50028c5a6b51c99b95f901ac4bcc165180bb119814147a40aa8", 0x70}, {&(0x7f0000000900)="58000d3782292fabb65bc476faa57bd5e5e3362ab90c5d8a889f5249c6bafcb15d378a551d43f71bf6407e7828b1f2c327c916e866ccb19ece194a8009544f158a1fa2c03288c876c799d1da7774b4564dcaddf29ae9945a2ea03cc12b134ba860884e327e63c4c3b86aa0", 0x6b}], 0x5, &(0x7f0000001e80)=[{0x78, 0x104, 0x7, "3399ecb9e3d08683944903874a58fefa3f7e1ce4ccdcb2aafbb820313f356e083a39e971d58f25dd0ef307eb2b74003be6af2d9c3306b702cbb3633f43807475ab989078875e374991fbb23253ea1b1514bea7d0f53bba5b685dc9ac26d88c50c196"}, {0xc8, 0x88, 0x0, "aa300943af6f17a4215f443e2022004949d261697517b03b004102b1ef60a5a8708bba3f142b691636e01cb1941f8ab208fb4dffdcdb4ab039bc7d13a8298777639214018291cc078dc1c5e6c4f44dc30ba1ea6689aee216d42fcbde3c16f394a86efffafca64d63820347cbe0755a6b31b1af29e18e57ae80593fdcb6d74c5eb893f0b27945b0f2f4073c0ac1867e4c51921ee9a502bfff811c121ceb9093fb915eb0daf188bbecb209649dc0a5a6693dc36f7ac9b7d21f"}, {0x58, 0x118, 0x0, "b92248180623eccba7de2a065edc6f32c9084663e4eeed8a4a4d1dd2e20f712a10d5b7b81f99b8b9cf708e033b5591a0ae59054c34b2f49f0080a414b68b84c18299"}, {0x110, 0x114, 0x7, "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"}, {0xf0, 0x115, 0xff, "03c6d397816d45a4e793074c64a0ee5b2d3a0fd3109541a1ccc2ff4c903659150780bea77f622bbe9e7607343c9a0f61f30db13a90e69559b0078e1e211e49060a434d709467792172394350afb93b42b682bae8979413e486f3204d3abdb7345f6983aaa0e2e8454a9f8a0001056caab7e8d5511604bf56a0b5d8e2603941ce563e0ed00fd74e486565988017a00a1ed21c3872d77d8f8f0fe83d7aaf37c30d3b4f177c521b4fd9952268c73cf925409e8bc888cdff6517ce978aa22f1bc66b4812a4d33f446ef64f25875364162d7378ce3a7343358ee4c58a6f5e1d9b"}, {0x20, 0x107, 0x4, "df8acb70027fcd2990250c"}], 0x3b8}, 0x4000) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x2000000, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.208056042s ago: executing program 2 (id=1804):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYRES16=r0], 0x0, 0x4a}, 0x28)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x2, 0x0, 0x10, 0x0, 0x9c, 0x80020, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x4}, 0x40, 0x0, 0xfff, 0x8, 0xb, 0x1, 0x4, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x101, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000563c00000100000002000000", @ANYRES32, @ANYBLOB="a98bd55c5eba560d64f677000000000000000000000000000000000800000f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, 0x0, 0x0}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.168701771s ago: executing program 3 (id=1805):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x2e, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x290, 0x12, 0x8, 0x70bd2d, 0x25dfdbff, {0x18, 0x7, 0xd, 0x7, {0x4e20, 0x4e20, [0x5, 0x80000, 0x4, 0x1], [0x1, 0x10000, 0x1, 0x8], r1, [0x5, 0x4]}, 0x81, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "c48c8931b9b1495d10c2d538d49ba3e04622e21e78552540dbc6a58a541153a6e1efdedd8b669bb69a125c6fc6f50aae8d5cc19c1be6ddecc7b35ae4aaffc6b4db15eb82c6a69746fae3038e416b66c798488f3e79b07aae803a6c9825a2598b80914c6b97e1fcf103b3f60d472d59982074433b7359f81dfb867d8af20d4c9454f65fd4a350735afe23131bcf93b37556ffa7e22740ffab19a524e443e651f97dfe167ed5c1a53e6bc407ae241e8b727a99052c05f0f98ba9b767535f42eb6ffa666edc3a318652cad7e0f0c1cce3085b283d7cb47b54667601ecc27982291a4e"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "d71ee2fda363420a7ea06f931766752c99c718c7bd7f78a40da4ca2b647bf113f732bb9161872680e4b23dbc48f1c5c9fcd9cb7f045026292a691da632f383178ce85b87bed165ae7b311f6b1f9482766be0bc68f372a9715a81dba507689bd94ae9d9a97e3f35b6e33129a2a1eaf8081457ab9b0e569c564e72fdd255db40f1eb63a8501ecb60ea3ffa1efe6fa5a6e0c370502c68907c888b350bb0e8d0aecd4298009320a41a8e7258"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "3dc60b0ead8674a7"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "b514f7d520d39c4a68c084fac04fcd2c5ba7faf1b9f24f9069a1caee742040127082d8a6624fd7a47fe7607c87a883460c606612"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "000cd686e551c4ad1f4a5ee60229920d7040cf67675353bff5651ec82e468a017a1f19cc8147deafc364187fa21974926c3e3fa836c40f58145723e731a9ec6195d9ac004eb79becab9b972730520784659c6d67a4378b9c42166d8dab4f650ea7a65c"}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e"], 0xfdef)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000000c0)=0x1)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x1f, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x20004000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r7, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000015c0)="7c533121ba56b5b10006000081001a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r5)
sendmsg$key(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x20000880)
openat$cgroup_type(r5, &(0x7f0000000940), 0x2, 0x0)

4.799832472s ago: executing program 5 (id=1807):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002600)={0xffffffffffffffff, 0xe0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002340)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000002380)=[0x0, 0x0], &(0x7f00000023c0)=[0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000002400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002440), &(0x7f0000002480), 0x8, 0x27, 0x8, 0x8, &(0x7f00000024c0)}}, 0x10)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x1d, r0, 0x4, {0x2, 0x1}, 0xfd}, 0x18, &(0x7f00000026c0)={&(0x7f0000002680)='XgV', 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4.472495942s ago: executing program 0 (id=1808):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345a7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x105503, 0x4, 0x80f, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x23, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

2.297165992s ago: executing program 1 (id=1809):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80009, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x5704, 0x200004, 0xffffffff, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r2, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)

2.296449775s ago: executing program 3 (id=1810):
socket$kcm(0xa, 0x2, 0x73)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{}, &(0x7f0000000180), 0x0}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.273045895s ago: executing program 5 (id=1811):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000b05", 0x8}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
close(0x3)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0xa2241a, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
recvmsg$kcm(r6, 0x0, 0x42)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005480)={0x30, 0x3e, 0x1, 0x80000, 0x3, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4008094)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000140)=')&\\$%%\x00')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0xfe33)
r8 = socket(0x10, 0x80002, 0x0)
socket(0x2b, 0x1, 0x1)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1fae084be4"], 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0xffffffff, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}]}, {0xfffffdad}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
socket$kcm(0x15, 0x5, 0x0)

2.246567836s ago: executing program 0 (id=1812):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYRES16=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcf, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xc0e, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@delchain={0x0, 0x65, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {0x14, 0xfff3}, {0xf, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x80, 0x53}}]}, 0xff41}}, 0x0)

2.162975669s ago: executing program 2 (id=1813):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18230000030085e8ffff3500000095000000cfb0d63d4897fd10000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)

2.153369134s ago: executing program 2 (id=1814):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}}, 0x10004000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4ed}}, @NFQA_PAYLOAD={0x35, 0xa, "8e9d5e2053f5b0135e6d37b71e28fa4ab1e14e2da93e8e0db484239bd5bfc39e4618091044e74d6319575d5773de0e141b"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040001)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20040051)
close(r0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x1, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x93}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6d15}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x0)
close(r0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg(r1, &(0x7f0000001d40)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000006c0)="e815907d7b0b55ab4be47efe3c36ce2ca511183315a29419f65f2a1d3c09d7625c3c44cbe232d21efc1527fc1f96cc10e2e8fb97fe4e6b3f5996fc83388c76b0ce943bb3c2203d9972240e1f0b67cc33fe6938502889a2e3366b8ae93761b71a6b6d0fa112ca244eb3d3d922a957939c93355c60dff95ecb6ac74201983bd51a62492a847ec503b1480a07bd29d4f714e1af5f55aecc5f74ae613440133fa426818c7a108ae1171e5b95a50306cb", 0xae}, {&(0x7f0000000780)="ebc68b01ed9252be6a687302290d435ea84b0d23b1070a75f4d552dc516d1109f0cdee2f83f9c85e685b6349964e20457de77e9da7f3a9f535255fd6b675fd08e3384d85d62e4855724572553356557166b657c4fe961d558cdc0e51eb6ef555f03048d8c3ff273981367972c4c008676c1b5d320d313288b5eeeff9bd1301c321", 0x81}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="e326c806beaac31a29ff4549246ab616922d926601150888b5af818dfb4126d7d6838e464f2d45d221794a7e2aa881e033c6617b77cd7a839730e1f3e909f4aae08fbc5b10ed3d9d1fab88b43a5b9ac3de84ebb7ebc3231bf0a8c5cd0ec10bd1cca2eb3688e9fd9014960b4c3061c53fe7a50c493846ad06164020c92555d8fb6dd38b96deab5b3ce9c94905beaaf434756028b2edf0da56a66891c7a0cfdb2c780fe750c1f00b97be7510f229bee8c2e1e742209dd980601444ee880173ccf8c1", 0xc1}], 0x4, &(0x7f0000001980)=[{0x108, 0x119, 0x3, "17f5f9826f4fbdca98b3397aef8f778fbb1bf3648e97fc2f7716d2bcd01636539da2cb444e978c5f9f226a989f501a3dddeeaba71f80e669957ea55ad5a5b695e6fc315cf4fc30cb24e6cc92f4b45d2c16f1afae3663a771ada4bf6a2da46d51fd5f07deec5ff0db79105eae9f71e0e400fd58b53ec4968f44967ddadaa30c328cb32bff4a926372a5c2e75bbc92249079edf341e2066e95946e224ea35d8b04243fa4518307ebbd56b3a28a17c9d87bc234a5db00ba027d499fffdf156581ed7eb657aced26feef4e52787a2ceac30fed35f2e8bd6d676f52e041c1d6830ed764c8f3845e525eeff1916b09d4493795c2fcf5ecf7a5567a"}, {0x58, 0x107, 0x268, "1b622a7fdbeb0e991896c0907e6f9fbd1c56e00c6f298f9955cea43dd87b2d865a1712be0471fcfa2f056656848fb4752d847dcf4e84fa9a85132a495c0f7599f632"}, {0x70, 0xff, 0x9, "fec6f87daf99579997be5cef11ecd3e0562651027d127978d87abad5c9235005ab2cddfeab9d7999ce0d083d79aa27d95d1bc816a2f006c28d68fd41f370daf305093d268ccec12ca4e1fcdaa60b1b86a8e41c771e4a1ea3dc9f9eb1dbfac332"}, {0x70, 0x108, 0x2, "5bf5fa075778877d01e1cfe0d3fe6f75975f451408fe133c8c6efe012f66465dd3ccb9dda0a8318a8a4289068fe44419a8316adfbbe73b5b7f0627765604abfdd5a9a2013630eb04809b2c1d6f345b93a6fa5dd884bae0047f04"}, {0xf8, 0x10f, 0x8, "426c607914c2be72d30ff96ac6cedd8c8d996c381d198c22b12d2fe4bc11eda976216934d541c86c574ff7c793460dece8d6b2f53917ccd288a73024bd9a7926b0bb909130e81347280f4d180a045162775356c81950ce498f0fcd577895689e9c378b7d20153518eae94ae62b2551465944845e94474bdc6844fde43e24ccceef36d4620d5961b6e1020d12cb56ba51e94f56ca1cdeb44b484af09b10e3d9af9288aeaf41ee26cc5ee9267257b3aa39cbed08cc147ebcaa83e030fb29c25e8fa76b70b8fe74cabb9353f7bf4bc60d9ce40e3dc5f9ad912c631ae869594d82eee7a6a4920f21903f"}, {0x10, 0x29, 0x2996}, {0x60, 0x117, 0x9, "fe83a92f57f87f585e47aa8338c076b456a9dbb25a558494f5e1e65d33b9533cdeec895eca8822606be8c3f1e1b2fee44fcd9bee20d2e8d77112fa8550df34e9219119cd586397a8bd9741"}], 0x3a8}, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000002ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e80)={&(0x7f0000001dc0)={0x10b8, 0x24, 0x800, 0x70bd2b, 0x25dfdbfc, {0x11}, [@generic="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", @typed={0x49, 0x3e, 0x0, 0x0, @binary="10dc17dbb9b26aeb70a036cde2b8cf491db0b7677a74b1bd2760468efd70b6c6263a1ff6b7b3d19d438b276ca44ce3bcf12eb50df2b58a8ba01d333c573a25f87ff5435598"}, @generic="52a201e037367698d03d87ab9d3e2d5ee7a7f851c323c063da169a134c38c15e4057b7319992e930eb292f185cb54bc1bd102abd90e510594a33e20260f30a0c8400cda2716e7703061fc6c040b6fb", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x20004080}, 0x11)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003280)={0xffffffffffffffff, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000003080)=[{}, {}], 0x10, 0x10, &(0x7f00000030c0), &(0x7f0000003100), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000003140)}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000032c0), 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003380)={0x11, 0x5, &(0x7f0000002f00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f0000002f40)='syzkaller\x00', 0x5, 0x30, &(0x7f0000002f80)=""/48, 0x41000, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000003300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000003340)={0x5, 0x9, 0x0, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
recvmsg(r2, &(0x7f0000005880)={&(0x7f0000003440)=@can={0x1d, <r6=>0x0}, 0x80, &(0x7f0000005800)=[{&(0x7f00000034c0)=""/193, 0xc1}, {&(0x7f00000035c0)=""/59, 0x3b}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/116, 0x74}, {&(0x7f0000005680)=""/182, 0xb6}, {&(0x7f0000005740)=""/85, 0x55}, {&(0x7f00000057c0)=""/49, 0x31}], 0x8}, 0x12000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000058c0))
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005900)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r7, &(0x7f0000005940), 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005980)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000059c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', r6, r4, 0x0, 0x3, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005ac0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000005a40), &(0x7f0000005a80)=r5}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000005b00)=@base={0x4, 0x5, 0x40, 0x6, 0x68002, 0xffffffffffffffff, 0xff, '\x00', r3, r4, 0x3, 0x0, 0x0, 0x0, @value=r4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005d80)={0x1, 0x58, &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000005e00)=@base={0x19, 0xffffffa1, 0x7, 0x34b, 0x40002, 0x1, 0x4, '\x00', r3, r4, 0x1, 0x0, 0x2}, 0x50)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000005e80)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005f40)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000005ec0), &(0x7f0000005f00)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006080)={0x11, 0x27, &(0x7f0000005b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff8e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x3, 0x9, 0x1, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0xa, 0x0, 0xa, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005cc0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005dc0)={0x0, 0x2, 0xf, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000005f80)=[r12, r13, r14], &(0x7f0000005fc0)=[{0x0, 0x1, 0x0, 0x4}, {0x0, 0x5, 0xf, 0xc}, {0x1, 0x5, 0x10, 0xa}, {0x0, 0x2, 0x8, 0x7}, {0x2, 0x3, 0x6, 0xc}, {0x1, 0x2, 0x7, 0x8}, {0x4, 0x4, 0x1, 0x4}, {0x0, 0x2, 0x7, 0xc}, {0x0, 0x1, 0x1, 0xc}], 0x10, 0x8}, 0x94)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)={0x10, 0x3f5, 0x400, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040d0)

1.383523505s ago: executing program 1 (id=1815):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="b7519167361ad320c97d89d1505214df981665f77ab4cf371fe83e043217f66fc3416fffcb4f83f0d41edc2136e7548dfab206bdfb1b89a57062a09504c6862e523bbf4635bc94fd6b0a80905a17d1a939fdef60176c216483f04645d00a0cda0946363b8e501485f9e794e1ad11e464809a0650891b50a4321090e8eb38c2ed0f1f5f4d5fdaa7f5ae4a092dc8", 0x8d}], 0x1, &(0x7f0000000c40)=[{0xe0, 0x0, 0x0, "6447c3e92bffef31b79aa3338b774698b7e2445130a36a6ab802cc35a866980ff62e50c922fde30ee645e0f8df3459624b3e604594b87b17cdc0b1103509dff7a4ffcc214af4ac37d762b191af5b3f23239b2115ea90f94a27eb08c628522e90880f1aaa81d8cf78f20d6f77a989bf69727aeb684666ca9f36618181d3edc406e5d9ccfe765aaa217191ae72c9979ef97ee76cc1f9dd72b994faf269a048696fd50fceebc58e45e2eebd1ed0e50684a606c87f60748c997a9d43b6d02df466a737c0726852c946c795"}, {0x70, 0x113, 0x1, "325c04daeb17d5a8fe857d3bbf3070382093aeda97b3fd8a6c90d77658e591ed613ff4d107d6629e2928baa1f382b6edbe89d78cee99a918588c5710aab90e82e68d9be6ec82397052c12bfdb9a9afe750d525990cf49cf5dc61028f80e1834a"}, {0x18, 0x10c, 0x10, '8I'}, {0x20, 0x0, 0x0, "9461383047cd69d771dac65adb"}, {0x20, 0x1, 0x8, "6e10de88b40bfffc8fe31ea230"}], 0x1a8}, 0x15)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)

1.334810284s ago: executing program 0 (id=1816):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = syz_clone(0x12002100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$rds(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000440)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000c80)=""/207, 0xcf}, 0x0, 0x8}}], 0x30, 0x4000001}, 0x40040) (async)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) (async)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0xd348cdb3786281fb, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)

1.29791359s ago: executing program 3 (id=1817):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async)
r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async)
r3 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x404c840) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32)
r7 = perf_event_open(0x0, r3, 0x3, 0xffffffffffffffff, 0x0) (rerun: 32)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r7, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

1.26927503s ago: executing program 1 (id=1818):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="00000000000000000000000000000000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000000000000000001811000048963fd2cf1b7f59ed1b064c43df4bb6f1ad5d658155f05e814ff4d0aa5a4f7a9f248bf663e0fdfdfe1c485bed9fe72158c21cf19c559f1e6c5be3e5944fd492b7ed759fc847c03b0da2a2e4d650a527dad9d71805043ce1ac8dc3aad0bd18bbcd533468330586e1cc3d9e989647832543e7e281721bc93d3c525dd4804edf8d9b93b67cd6f29fec87982036cc9ae8859ec287b3593b6b5a3bf366927bceb8d033fde4c362a3fb3f0e5106681954cb3637edb59d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100150600000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=<r8=>r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYRES8=r1, @ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRESHEX=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000ffffffff000000000800000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xc, '\x00', r11, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000700)='fsi_master_gpio_in\x00', r2}, 0x18) (async)
socketpair(0x25, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') (async)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004fcd2467f73a0909ada99ef59a24e4b51c57c9c511101fe18f14771b92f0809d6a48d7f1fff92e7a56d629c64429b17b971a283a32cd1ebcd0c65a73f5a0cef0ad5ad6487bba49c31b262167bffa124a8d422bc445d00c30ce44da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x7, 0x4, 0xfffff271, 0xfffc, 0x0, 0x7b80000, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r14 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xc}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000010) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r15, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005240)=ANY=[@ANYBLOB="300000003e000701fefffffffcffffff017c0000040042800c00018006000600800a00000c00028008000480"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

1.222852916s ago: executing program 5 (id=1819):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pK    \x00'}, 0x20)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000003c0))
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, &(0x7f0000000080))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x40000)
r8 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000002c0), 0x4)
sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x44, &(0x7f0000000640), 0x4)
r9 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000a80)=ANY=[@ANYRES8=r7, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008579700003000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xe, 0xa2, &(0x7f0000000800)=""/162, 0x41100, 0x10, '\x00', r10, 0x19, r5, 0x8, &(0x7f00000008c0)={0xa, 0x800}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x8, 0x18000, 0x7ff}, 0x10, 0x1c9ce, r5, 0x1, &(0x7f0000000440), &(0x7f0000000980)=[{0x2, 0x1, 0x2, 0x4}], 0x10, 0x3}, 0x94)
r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8)
close(r12)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r12, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x2}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000700)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d501807a75fd350a40403d86d5514323ee373192744a9105ce01f2deee3ace168a695b14456b9954fee7db534c05bca620d6c5251184daca824886f99dca7d579a7d6b", 0xfd7d}], 0x1}, 0xc008910)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.221605976s ago: executing program 2 (id=1820):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x114905, 0x4, 0x9, 0x8, 0x0, 0x9, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x7}}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33)

1.220591137s ago: executing program 0 (id=1821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000000900020073797a31000000000940000000063c0000401e0a05010000000000000000070000000900020073797a31000000000900010073797a300000f310100003800c00008008009ca995e02b03b908ce04e0fefb2db4018004000000000000020000000a002d946bf7af6616caa504111698a764561f5f90d154d035c0f7e2c61ee9837ba5bba8a891020ab9f553d6e4be563e83959931b34c848e6938b1db58598e4400"/255], 0xc0}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="ef4891b7c8f723630000000085000000360000009500"/38], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

678.14037ms ago: executing program 5 (id=1822):
socket$kcm(0xa, 0x2, 0x3a)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.oom.group\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48054)
r2 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000880)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x203fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="5d703020719243b4231d2631db887206ecddf7e09dd09fc8c07c62a672ab46b3a3882c9eae2b0ec06eb810e0e88a0d3655df1762f486be7a71769ebebcea219a9aeebf2e0b129264e51d798f675246c706e06c60b60e9ae725ca788e7fa75d9160a353a9d114450a9c442c2753c03c487fa1f95f9f4ec56f9db9c8b24ec66ac83dafd989c3bec90937672395ab06a992732ca33e88d3380dba84bb43d0d3f0ef63b90f134dc850", 0xa7}, {&(0x7f0000000740)="05a0aab0b3a55e1de4f951fed8a5c3224f733e2444ccdebc8f5f8b60779578d39c642991b0d3858073aab7142e65a4f56f3686830e3ca21270a83be35c3999c57508dce4f479515c0430b006824ed305e154ae72567a8dbaf97c26f517fb0284e2c396a8f17f096ec5c3c62c203daa39abc5b52053de710db2a3190953c63355bcc08be1112aaf201114afe0d9c92714088f50738ad6b0e227f732c07e454257fd4f05941b685d83b43b387157e04faf8699cb0d515211a1f4841fbd9deb43455e6336cbd49d382e73faae5e518eab56298717491c64ffe5df740045b9878abd59433e75f906326ecff04e944893901b3d12a43f0b", 0xf5}, {&(0x7f0000000140)}, {&(0x7f0000000840)="bfd263d907b8809088321eb5d2fa1516e5bcbe56ab1ee6236d787b163fe31278eb868049fc75dd551c5ff0797fdbe8d0cdf19c7177e79c65a06ac5602fdea147d94714031b0605803c1a68119bc30856df699d56b8dc48dc414c2c7de4a64c6c174a0ad80e5b7f9413b048279182d9bc5936a12ddda9d37560ef07e2ffbc016c323f0f81aec7faa6447cb7a3dc44495d67e81d596e277b", 0x97}, {&(0x7f0000000480)="fc0e076f82971f50c77de41aa4c5c9c42689b598c3c7b22a959bf439eab6433b79d98ea425cd7c257afd75e161213e143d3009819155bf855e67a5ebd00f7c7e78", 0x41}], 0x5}, 0x810)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000200), 0x8, 0x19, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)
gettid()
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x200800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0)

586.767504ms ago: executing program 1 (id=1823):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x971b0410a25b9443)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f00000000c0)=r2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10c000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x6, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r6, &(0x7f0000000380), 0x12)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810)
setsockopt$sock_attach_bpf(r7, 0x6, 0x17, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x34}, [@jmp={0x5, 0x1, 0xa, 0x0, 0x5, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x6e}, @generic={0xff, 0x3, 0xc, 0xfffe, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0xc3c, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x10, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r1, r1, r1, r1, r0], &(0x7f0000000700)=[{0x0, 0x3, 0x10, 0xa}, {0x4, 0x5, 0xd, 0xc}, {0x1, 0x4, 0x3, 0x6}], 0x10, 0x35301dad}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x4000, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)={0x8}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4005000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x38, 0x1401, 0x20, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24080080}, 0x800)
mkdir(&(0x7f0000000800)='./file0\x00', 0x92)

507.284057ms ago: executing program 3 (id=1824):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345a7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x105503, 0x4, 0x80f, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x23, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

504.073806ms ago: executing program 2 (id=1825):
socket$kcm(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001948}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2, 0x0, 0x7fffffff}, 0x18)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000014)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'ip6erspan0\x00', 0x1000})
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000140)="06004307600300", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x18}, 0x94)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x400454dc, 0x0)

159.029886ms ago: executing program 5 (id=1826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x79, &(0x7f0000000000)=r4, 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

83.399308ms ago: executing program 5 (id=1827):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r3 = perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0x4a, 0x41, 0x0, 0x0, 0x0, 0xffffe00000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x437, 0x0, @perf_config_ext={0x8000000000000002, 0x7ff}, 0x0, 0x0, 0x0, 0x8, 0x3fa, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x29, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$kcm(0x2a, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000ea00000000000000", @ANYBLOB="80000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x541b, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd70001c0000001400000008000300470000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x48050)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f0000000200), &(0x7f0000000280)=r11}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 3 (id=1828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x71}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x80000, 0x5, 0x10000000, 0x7, 0x10000}}}, @TCA_IFE_METALST={0x8}]}, {0x4, 0x6, "664832c2b8b50801b573e7da7bfe94a80c3eba45c31bfb2ac5d6913d7f3329228c90d147330b26d4418d7d305e04ed4d2f7ba8313930cdd4df585c1d3e46d0319f1deb6659eee130c0001b4907fab6e048f1eedb2032f3ddd1831413a8a8a0bad2708ab78cd1f66ce0483651f145f90963071e8f9a6d1171b6453893"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x2004c004)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38010000100001100000000000000000fc00000000002100000000000000000164010100000000000000000000000000000000000002000000000000df000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000004000000000000000000000000000000000000000000000000000000000000000f60100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063500000a0001004000000000000000480003006465666c61746500"/240], 0x138}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x11, 0x2, 0x0)
close(r5)
r6 = socket$kcm(0x11, 0x2, 0x0)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

ndle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.457684][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.494322][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.527573][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.629204][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.770543][ T6892] bond0: entered promiscuous mode
[  139.779252][ T6892] bond_slave_0: entered promiscuous mode
[  139.795787][ T6892] bond_slave_1: entered promiscuous mode
[  139.812670][ T6895] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[  139.870872][ T6895] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  139.909560][ T6896] netlink: 830 bytes leftover after parsing attributes in process `syz.0.209'.
[  139.957089][ T6708] hsr_slave_0: entered promiscuous mode
[  139.963774][ T6708] hsr_slave_1: entered promiscuous mode
[  139.971411][ T6708] debugfs: 'hsr0' already exists in 'hsr'
[  139.980304][ T6708] Cannot create hsr debugfs directory
[  140.005099][ T5869] Bluetooth: hci0: command tx timeout
[  140.085474][ T6900] netlink: 'syz.1.210': attribute type 7 has an invalid length.
[  140.103527][ T6900] netlink: 168 bytes leftover after parsing attributes in process `syz.1.210'.
[  140.147696][ T5869] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  140.155697][ T5869] Bluetooth: hci4: Invalid handle: 0x85b0 > 0x0eff
[  140.231781][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.288706][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'.
[  140.384666][ T6908] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[  140.621313][ T6470] 8021q: adding VLAN 0 to HW filter on device team0
[  140.655356][ T6915] netlink: 'syz.0.216': attribute type 5 has an invalid length.
[  140.672433][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.679753][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.702395][ T6915] netlink: 176 bytes leftover after parsing attributes in process `syz.0.216'.
[  140.757915][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'.
[  140.962254][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.969487][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.451470][ T6950] netlink: 'syz.4.221': attribute type 7 has an invalid length.
[  142.469679][ T6950] netlink: 'syz.4.221': attribute type 6 has an invalid length.
[  142.996896][ T6969] netlink: 'syz.1.224': attribute type 7 has an invalid length.
[  143.097149][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.142043][ T6708] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  143.216377][ T6708] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  143.236747][ T6976] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[  143.255838][ T5185] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  143.256132][ T5185] Bluetooth: hci2: connection err: -111
[  143.274469][ T6708] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  143.308146][ T6708] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  143.394635][ T6970] netlink: 'syz.4.223': attribute type 1 has an invalid length.
[  143.447237][ T6976] hsr_slave_0 (unregistering): left promiscuous mode
[  143.600399][ T6982] netlink: 124 bytes leftover after parsing attributes in process `syz.0.226'.
[  143.630394][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.226'.
[  143.814047][ T6470] veth0_vlan: entered promiscuous mode
[  143.948021][ T6470] veth1_vlan: entered promiscuous mode
[  144.079654][ T6470] veth0_macvtap: entered promiscuous mode
[  144.119405][ T6470] veth1_macvtap: entered promiscuous mode
[  144.166440][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.196143][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.252343][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.319254][ T6708] 8021q: adding VLAN 0 to HW filter on device team0
[  144.350407][   T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.373485][   T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.396444][   T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.449895][   T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.481333][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.488574][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.582500][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.589756][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.863608][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.888778][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.963562][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.988495][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[  145.020979][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.026509][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[  145.088510][ T7034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.593460][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.930055][ T6708] veth0_vlan: entered promiscuous mode
[  145.963668][ T7073] netlink: 'syz.0.237': attribute type 13 has an invalid length.
[  146.033456][ T7076] netlink: 830 bytes leftover after parsing attributes in process `syz.0.237'.
[  146.083781][ T6708] veth1_vlan: entered promiscuous mode
[  146.246162][ T6708] veth0_macvtap: entered promiscuous mode
[  146.281746][ T6708] veth1_macvtap: entered promiscuous mode
[  146.389333][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.472073][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.512222][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.547093][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.590701][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.622866][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.890150][ T7109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.897716][ T7109] IPv6: NLM_F_CREATE should be set when creating new route
[  146.897850][ T7109] IPv6: NLM_F_CREATE should be set when creating new route
[  146.897876][ T7109] IPv6: NLM_F_CREATE should be set when creating new route
[  146.905200][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.020576][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.123457][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'.
[  147.153204][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'.
[  147.195380][ T7116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.262973][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.298041][ T7121] netlink: 64 bytes leftover after parsing attributes in process `syz.1.250'.
[  147.328331][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.345389][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'.
[  147.625706][ T7133] netlink: zone id is out of range
[  147.651854][ T7133] netlink: zone id is out of range
[  147.686384][ T7133] netlink: zone id is out of range
[  147.708866][ T7133] netlink: zone id is out of range
[  147.793155][ T7133] netlink: zone id is out of range
[  147.817642][ T7133] netlink: zone id is out of range
[  147.843131][ T7133] netlink: zone id is out of range
[  147.869448][ T7145] netlink: 14 bytes leftover after parsing attributes in process `syz.4.255'.
[  147.879549][ T7133] netlink: zone id is out of range
[  148.211240][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.259749][ T7145] bond_slave_0: left promiscuous mode
[  148.290001][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.297500][ T7157] netlink: 'syz.0.257': attribute type 7 has an invalid length.
[  148.309617][ T7157] netlink: 'syz.0.257': attribute type 6 has an invalid length.
[  148.320201][ T7145] bond_slave_1: left promiscuous mode
[  148.353116][ T7145] bond0 (unregistering): Released all slaves
[  148.578773][ T7166] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.259'.
[  148.626035][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'.
[  148.740892][ T7172] netlink: 'syz.3.262': attribute type 2 has an invalid length.
[  148.804270][ T7172] netlink: 'syz.3.262': attribute type 1 has an invalid length.
[  148.852887][ T7172] nbd: illegal input index -404748436
[  150.592308][ T7201] __nla_validate_parse: 3 callbacks suppressed
[  150.592340][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'.
[  150.605475][ T7204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.266'.
[  151.279460][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'.
[  151.328306][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[  151.662045][ T7235] veth1_macvtap: entered allmulticast mode
[  151.961141][ T7250] netlink: 292 bytes leftover after parsing attributes in process `syz.3.278'.
[  151.995840][ T7250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.278'.
[  152.041320][ T5185] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  152.048892][ T5185] Bluetooth: hci2: Unable to find connection for dst b9:44:db:82:f7:81 sid 0x06
[  152.211099][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[  152.355936][ T7263] netlink: 'syz.2.282': attribute type 10 has an invalid length.
[  152.464888][ T7263] netlink: 55 bytes leftover after parsing attributes in process `syz.2.282'.
[  153.076615][ T7304] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.289'.
[  153.225439][ T7312] netlink: 731 bytes leftover after parsing attributes in process `syz.4.287'.
[  154.134231][ T7325] netlink: 'syz.4.294': attribute type 29 has an invalid length.
[  154.155440][ T7324] netlink: 'syz.4.294': attribute type 29 has an invalid length.
[  154.262752][ T7324] netlink: 'syz.4.294': attribute type 29 has an invalid length.
[  154.736517][   T30] audit: type=1107 audit(1759263044.230:2): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  154.749231][ T5185] Bluetooth: hci2: unknown advertising packet type: 0xff
[  155.876485][ T7376] __nla_validate_parse: 5 callbacks suppressed
[  155.876506][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'.
[  156.345597][ T7383] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.309'.
[  156.774205][ T7389] syzkaller0: entered promiscuous mode
[  156.780042][ T7389] syzkaller0: entered allmulticast mode
[  158.202999][ T7426] netlink: 'syz.3.324': attribute type 14 has an invalid length.
[  158.231732][ T7426] netlink: 164 bytes leftover after parsing attributes in process `syz.3.324'.
[  158.278257][ T7427] netlink: 6820 bytes leftover after parsing attributes in process `syz.3.324'.
[  158.299211][ T7427] net_ratelimit: 12 callbacks suppressed
[  158.299236][ T7427] openvswitch: netlink: Flow key attr not present in new flow.
[  158.734328][ T7432] netlink: 'syz.4.326': attribute type 10 has an invalid length.
[  160.124672][ T7404] �: port 1(vlan0) entered blocking state
[  160.130968][ T7404] �: port 1(vlan0) entered disabled state
[  160.137026][ T7404] vlan0: entered allmulticast mode
[  160.142179][ T7404] veth0_vlan: entered allmulticast mode
[  160.151376][ T7404] vlan0: entered promiscuous mode
[  160.333593][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'.
[  160.441729][ T7439] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[  160.462246][ T7439] netlink: 55 bytes leftover after parsing attributes in process `syz.1.328'.
[  161.005850][ T7458] netlink: 22 bytes leftover after parsing attributes in process `syz.2.335'.
[  161.577658][ T7478] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.340'.
[  161.598227][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[  162.378659][ T7499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.348'.
[  162.417165][ T7498] FAULT_INJECTION: forcing a failure.
[  162.417165][ T7498] name failslab, interval 1, probability 0, space 0, times 1
[  162.442575][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) 
[  162.442599][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  162.442615][ T7498] Call Trace:
[  162.442623][ T7498]  <TASK>
[  162.442631][ T7498]  dump_stack_lvl+0x189/0x250
[  162.442666][ T7498]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.442687][ T7498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.442723][ T7498]  should_fail_ex+0x414/0x560
[  162.442747][ T7498]  should_failslab+0xa8/0x100
[  162.442767][ T7498]  __kmalloc_noprof+0xcb/0x4f0
[  162.442782][ T7498]  ? bpf_test_init+0x9f/0x150
[  162.442807][ T7498]  bpf_test_init+0x9f/0x150
[  162.442831][ T7498]  bpf_prog_test_run_skb+0x206/0x1550
[  162.442850][ T7498]  ? __fget_files+0x2a/0x420
[  162.442876][ T7498]  ? __fget_files+0x2a/0x420
[  162.442898][ T7498]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  162.442918][ T7498]  bpf_prog_test_run+0x2c7/0x340
[  162.442945][ T7498]  __sys_bpf+0x562/0x860
[  162.442967][ T7498]  ? __pfx___sys_bpf+0x10/0x10
[  162.443002][ T7498]  ? do_syscall_64+0xb7/0x3b0
[  162.443024][ T7498]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  162.443047][ T7498]  ? __pfx_ksys_write+0x10/0x10
[  162.443069][ T7498]  __x64_sys_bpf+0x7c/0x90
[  162.443087][ T7498]  do_syscall_64+0xfa/0x3b0
[  162.443106][ T7498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.443120][ T7498]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.443135][ T7498]  ? clear_bhb_loop+0x60/0xb0
[  162.443153][ T7498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.443167][ T7498] RIP: 0033:0x7f8de1d8eec9
[  162.443189][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.443201][ T7498] RSP: 002b:00007f8de2c54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  162.443226][ T7498] RAX: ffffffffffffffda RBX: 00007f8de1fe5fa0 RCX: 00007f8de1d8eec9
[  162.443237][ T7498] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  162.443246][ T7498] RBP: 00007f8de2c54090 R08: 0000000000000000 R09: 0000000000000000
[  162.443255][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.443264][ T7498] R13: 00007f8de1fe6038 R14: 00007f8de1fe5fa0 R15: 00007ffd180f8d58
[  162.443287][ T7498]  </TASK>
[  162.675880][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.348'.
[  163.080327][ T7506] netlink: 'syz.0.351': attribute type 6 has an invalid length.
[  163.184933][ T7506] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.351'.
[  163.517562][ T7518] netlink: 'syz.4.353': attribute type 10 has an invalid length.
[  164.150515][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[  164.222392][ T7542] erspan0: default FDB implementation only supports local addresses
[  164.255901][ T7552] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[  164.480607][ T7565] FAULT_INJECTION: forcing a failure.
[  164.480607][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  164.523789][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.2.363 Not tainted syzkaller #0 PREEMPT(full) 
[  164.523814][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  164.523824][ T7565] Call Trace:
[  164.523831][ T7565]  <TASK>
[  164.523839][ T7565]  dump_stack_lvl+0x189/0x250
[  164.523863][ T7565]  ? __pfx____ratelimit+0x10/0x10
[  164.523883][ T7565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.523902][ T7565]  ? __pfx__printk+0x10/0x10
[  164.523938][ T7565]  should_fail_ex+0x414/0x560
[  164.523961][ T7565]  _copy_from_user+0x2d/0xb0
[  164.523978][ T7565]  bpf_test_init+0xd8/0x150
[  164.524002][ T7565]  bpf_prog_test_run_skb+0x206/0x1550
[  164.524021][ T7565]  ? __fget_files+0x2a/0x420
[  164.524045][ T7565]  ? __fget_files+0x2a/0x420
[  164.524068][ T7565]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  164.524088][ T7565]  bpf_prog_test_run+0x2c7/0x340
[  164.524114][ T7565]  __sys_bpf+0x562/0x860
[  164.524136][ T7565]  ? __pfx___sys_bpf+0x10/0x10
[  164.524153][ T7565]  ? kvm_sched_clock_read+0x11/0x20
[  164.524187][ T7565]  ? do_syscall_64+0xb7/0x3b0
[  164.524215][ T7565]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.524248][ T7565]  __x64_sys_bpf+0x7c/0x90
[  164.524268][ T7565]  do_syscall_64+0xfa/0x3b0
[  164.524289][ T7565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.524304][ T7565]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.524320][ T7565]  ? clear_bhb_loop+0x60/0xb0
[  164.524340][ T7565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.524355][ T7565] RIP: 0033:0x7fb23238eec9
[  164.524371][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.524384][ T7565] RSP: 002b:00007fb233296038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  164.524401][ T7565] RAX: ffffffffffffffda RBX: 00007fb2325e5fa0 RCX: 00007fb23238eec9
[  164.524413][ T7565] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  164.524423][ T7565] RBP: 00007fb233296090 R08: 0000000000000000 R09: 0000000000000000
[  164.524433][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.524442][ T7565] R13: 00007fb2325e6038 R14: 00007fb2325e5fa0 R15: 00007ffc5354ffc8
[  164.524469][ T7565]  </TASK>
[  164.747714][ T7570] netlink: 'syz.0.366': attribute type 1 has an invalid length.
[  165.066075][ T7576] netlink: 22 bytes leftover after parsing attributes in process `syz.2.368'.
[  165.238133][ T7578] netlink: 'syz.4.369': attribute type 1 has an invalid length.
[  165.279147][ T7578] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.369'.
[  165.431183][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.624867][ T7583] �: port 1(vlan0) entered blocking state
[  165.688416][ T7583] �: port 1(vlan0) entered disabled state
[  165.722747][ T7583] vlan0: entered allmulticast mode
[  165.735082][ T7583] veth0_vlan: entered allmulticast mode
[  165.851261][ T7583] vlan0: entered promiscuous mode
[  166.396983][ T7606] netlink: 'syz.0.376': attribute type 21 has an invalid length.
[  166.431110][ T7608] netlink: 3376 bytes leftover after parsing attributes in process `syz.1.377'.
[  166.468084][ T7606] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.376'.
[  166.480853][ T7609] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.378'.
[  166.493282][ T7609] netlink: 61831 bytes leftover after parsing attributes in process `syz.2.378'.
[  166.738685][ T7606] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.376'.
[  166.843763][ T7616] netlink: 'syz.4.379': attribute type 2 has an invalid length.
[  166.878750][ T7616] netlink: 'syz.4.379': attribute type 1 has an invalid length.
[  166.895987][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.379'.
[  166.904842][ T7616] netlink: 198176 bytes leftover after parsing attributes in process `syz.4.379'.
[  166.944488][ T7616] netlink: 'syz.4.379': attribute type 1 has an invalid length.
[  167.195176][ T7633] netlink: 'syz.4.384': attribute type 10 has an invalid length.
[  167.203086][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.384'.
[  167.493776][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[  168.008780][ T7630] delete_channel: no stack
[  169.676032][ T7651] netlink: 'syz.0.388': attribute type 29 has an invalid length.
[  169.723029][ T7651] netlink: 'syz.0.388': attribute type 29 has an invalid length.
[  169.845085][ T7653] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  169.907516][ T7653] netlink: 'syz.4.389': attribute type 10 has an invalid length.
[  170.398090][ T7665] FAULT_INJECTION: forcing a failure.
[  170.398090][ T7665] name failslab, interval 1, probability 0, space 0, times 0
[  170.443542][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) 
[  170.443566][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  170.443576][ T7665] Call Trace:
[  170.443582][ T7665]  <TASK>
[  170.443590][ T7665]  dump_stack_lvl+0x189/0x250
[  170.443615][ T7665]  ? __pfx____ratelimit+0x10/0x10
[  170.443635][ T7665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.443654][ T7665]  ? __pfx__printk+0x10/0x10
[  170.443681][ T7665]  ? __pfx___might_resched+0x10/0x10
[  170.443700][ T7665]  should_fail_ex+0x414/0x560
[  170.443721][ T7665]  should_failslab+0xa8/0x100
[  170.443739][ T7665]  __kmalloc_noprof+0xcb/0x4f0
[  170.443763][ T7665]  ? security_sk_alloc+0x52/0x390
[  170.443787][ T7665]  security_sk_alloc+0x52/0x390
[  170.443808][ T7665]  sk_prot_alloc+0x101/0x220
[  170.443826][ T7665]  ? sk_alloc+0x24/0x370
[  170.443848][ T7665]  sk_alloc+0x3a/0x370
[  170.443866][ T7665]  ? bpf_ctx_init+0x167/0x1d0
[  170.443886][ T7665]  bpf_prog_test_run_skb+0x313/0x1550
[  170.443912][ T7665]  ? __fget_files+0x2a/0x420
[  170.443934][ T7665]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  170.443954][ T7665]  bpf_prog_test_run+0x2c7/0x340
[  170.443979][ T7665]  __sys_bpf+0x562/0x860
[  170.444001][ T7665]  ? __pfx___sys_bpf+0x10/0x10
[  170.444052][ T7665]  __x64_sys_bpf+0x7c/0x90
[  170.444071][ T7665]  do_syscall_64+0xfa/0x3b0
[  170.444092][ T7665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.444107][ T7665]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  170.444123][ T7665]  ? clear_bhb_loop+0x60/0xb0
[  170.444142][ T7665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.444158][ T7665] RIP: 0033:0x7fdddf98eec9
[  170.444173][ T7665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.444186][ T7665] RSP: 002b:00007fdde0786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  170.444203][ T7665] RAX: ffffffffffffffda RBX: 00007fdddfbe6090 RCX: 00007fdddf98eec9
[  170.444215][ T7665] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  170.444225][ T7665] RBP: 00007fdde0786090 R08: 0000000000000000 R09: 0000000000000000
[  170.444235][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.444244][ T7665] R13: 00007fdddfbe6128 R14: 00007fdddfbe6090 R15: 00007ffee74000e8
[  170.444272][ T7665]  </TASK>
[  171.130693][ T7689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.400'.
[  171.819747][ T7704] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.405'.
[  172.028567][ T7721] netlink: 'syz.3.411': attribute type 4 has an invalid length.
[  172.076268][ T7727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.413'.
[  172.133072][ T7729] netlink: 360 bytes leftover after parsing attributes in process `syz.0.412'.
[  172.338289][ T7725] syzkaller0: entered promiscuous mode
[  172.359410][ T7725] syzkaller0: entered allmulticast mode
[  173.110495][ T7769] netlink: 'syz.0.426': attribute type 6 has an invalid length.
[  173.133796][ T7769] netlink: 'syz.0.426': attribute type 3 has an invalid length.
[  173.154926][ T7769] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.426'.
[  173.284469][ T7775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.427'.
[  175.572694][ T7763] ������: renamed from dummy0 (while UP)
[  175.873818][ T7796] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.430'.
[  176.334012][ T7803] netlink: 'syz.0.433': attribute type 3 has an invalid length.
[  176.346939][ T7803] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.433'.
[  176.865421][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.1.438'.
[  176.975894][ T5185] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  177.119051][ T7821] Driver unsupported XDP return value 0 on prog  (id 423) dev N/A, expect packet loss!
[  177.162547][ T7819] syzkaller1: tun_chr_ioctl cmd 2147767506
[  177.265844][ T7824] netlink: 312 bytes leftover after parsing attributes in process `syz.4.442'.
[  177.293386][ T7824] netlink: 'syz.4.442': attribute type 12 has an invalid length.
[  177.315645][ T7824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.442'.
[  177.429665][ T7825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.442'.
[  177.439645][ T7830] netlink: 64 bytes leftover after parsing attributes in process `syz.0.443'.
[  178.182087][ T7849] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.449'.
[  178.226290][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.450'.
[  178.382093][ T7850] syzkaller0: entered promiscuous mode
[  178.390439][ T7850] syzkaller0: entered allmulticast mode
[  178.422958][ T7856] netlink: 'syz.1.451': attribute type 29 has an invalid length.
[  178.446166][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'.
[  178.455496][ T7859] netlink: 'syz.1.451': attribute type 29 has an invalid length.
[  178.504495][ T7850] netlink: 'syz.1.451': attribute type 29 has an invalid length.
[  178.537070][ T7850] netlink: 'syz.1.451': attribute type 29 has an invalid length.
[  178.687995][ T7860] netlink: 132 bytes leftover after parsing attributes in process `syz.4.452'.
[  178.784229][ T7867] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  182.151647][ T7886] netlink: 'syz.0.461': attribute type 10 has an invalid length.
[  182.243881][ T7890] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  182.348582][ T7886] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  182.364278][ T7886] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  182.505066][ T7897] netlink: 'syz.4.464': attribute type 2 has an invalid length.
[  183.010908][ T7927] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.474'.
[  183.259945][ T7930] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.474'.
[  183.345534][ T7927] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.474'.
[  183.536777][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'.
[  183.697222][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'.
[  184.113264][ T7956] FAULT_INJECTION: forcing a failure.
[  184.113264][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.160697][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.1.483 Not tainted syzkaller #0 PREEMPT(full) 
[  184.160720][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  184.160729][ T7956] Call Trace:
[  184.160736][ T7956]  <TASK>
[  184.160742][ T7956]  dump_stack_lvl+0x189/0x250
[  184.160765][ T7956]  ? __pfx____ratelimit+0x10/0x10
[  184.160919][ T7956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.160941][ T7956]  ? __pfx__printk+0x10/0x10
[  184.160963][ T7956]  ? __might_fault+0xb0/0x130
[  184.160991][ T7956]  should_fail_ex+0x414/0x560
[  184.161014][ T7956]  _copy_from_user+0x2d/0xb0
[  184.161031][ T7956]  __sys_bpf+0x1e3/0x860
[  184.161053][ T7956]  ? __pfx___sys_bpf+0x10/0x10
[  184.161086][ T7956]  ? ksys_write+0x22a/0x250
[  184.161103][ T7956]  ? __pfx_ksys_write+0x10/0x10
[  184.161116][ T7956]  ? rcu_is_watching+0x15/0xb0
[  184.161140][ T7956]  __x64_sys_bpf+0x7c/0x90
[  184.161159][ T7956]  do_syscall_64+0xfa/0x3b0
[  184.161179][ T7956]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.161198][ T7956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.161214][ T7956]  ? clear_bhb_loop+0x60/0xb0
[  184.161234][ T7956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.161249][ T7956] RIP: 0033:0x7f546ad8eec9
[  184.161263][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.161277][ T7956] RSP: 002b:00007f546bc76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  184.161292][ T7956] RAX: ffffffffffffffda RBX: 00007f546afe5fa0 RCX: 00007f546ad8eec9
[  184.161303][ T7956] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002
[  184.161312][ T7956] RBP: 00007f546bc76090 R08: 0000000000000000 R09: 0000000000000000
[  184.161322][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.161331][ T7956] R13: 00007f546afe6038 R14: 00007f546afe5fa0 R15: 00007ffe9d75b918
[  184.161357][ T7956]  </TASK>
[  184.420301][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.3.485'.
[  184.752980][ T7984] netlink: 'syz.1.491': attribute type 21 has an invalid length.
[  184.774339][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.491'.
[  184.860978][ T7987] netlink: 'syz.3.492': attribute type 10 has an invalid length.
[  184.920858][ T7987] team0: Port device wlan1 added
[  185.158078][ T7991] netlink: 'syz.4.493': attribute type 2 has an invalid length.
[  185.240349][ T7991] netlink: 'syz.4.493': attribute type 8 has an invalid length.
[  185.311921][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.493'.
[  185.356657][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'.
[  185.822677][ T8006] netlink: 'syz.3.499': attribute type 41 has an invalid length.
[  186.366191][ T8030] netlink: 'syz.4.506': attribute type 39 has an invalid length.
[  186.506716][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'.
[  186.937604][ T8043] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  187.124604][ T8049] netlink: 'syz.0.511': attribute type 6 has an invalid length.
[  187.139144][ T8052] openvswitch: netlink: Flow key attr not present in new flow.
[  187.149141][ T8052] netlink: 'syz.1.512': attribute type 21 has an invalid length.
[  188.104050][ T8089] __nla_validate_parse: 4 callbacks suppressed
[  188.104070][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'.
[  188.126146][ T8091] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.523'.
[  188.167717][ T8091] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.523'.
[  188.207496][ T8095] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.522'.
[  188.635970][ T8098] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[  188.661475][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'.
[  190.809474][ T8105] debugfs: '!' already exists in 'ieee80211'
[  191.116525][ T8130] xt_l2tp: invalid flags combination: 0
[  191.257509][ T8140] netlink: 'syz.3.536': attribute type 4 has an invalid length.
[  191.272623][ T8138] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.538'.
[  191.646840][ T8147] netlink: 14 bytes leftover after parsing attributes in process `syz.2.540'.
[  192.151951][ T8134] netlink: 830 bytes leftover after parsing attributes in process `syz.0.537'.
[  192.707302][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'.
[  192.854606][ T8170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.544'.
[  192.855806][ T8187] netlink: 'syz.3.552': attribute type 3 has an invalid length.
[  192.952280][ T8194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  193.548057][ T8213] netlink: 'syz.2.560': attribute type 13 has an invalid length.
[  193.597136][ T8213] macvtap0: entered promiscuous mode
[  193.972833][ T8227] __nla_validate_parse: 1 callbacks suppressed
[  193.972868][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'.
[  194.074623][ T8230] netlink: 'syz.3.563': attribute type 3 has an invalid length.
[  194.084766][ T8230] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.563'.
[  194.531798][ T8213] macvtap0: refused to change device tx_queue_len
[  194.963417][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.972754][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.981338][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  195.591909][ T8249] openvswitch: netlink: Flow actions attr not present in new flow.
[  195.967426][ T8246] netlink: 'syz.3.570': attribute type 10 has an invalid length.
[  196.141019][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'.
[  196.504108][ T8246] geneve0: entered promiscuous mode
[  196.566261][ T8246] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  196.751636][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'.
[  196.888982][ T8272] netlink: 'syz.1.577': attribute type 21 has an invalid length.
[  196.896955][ T8272] netlink: 128 bytes leftover after parsing attributes in process `syz.1.577'.
[  197.320828][ T8280] netlink: 'syz.3.581': attribute type 2 has an invalid length.
[  197.364969][ T8280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.581'.
[  197.372323][ T8283] netlink: 'syz.3.581': attribute type 2 has an invalid length.
[  197.406283][ T8283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.581'.
[  197.712425][ T8292] netlink: 'syz.3.585': attribute type 3 has an invalid length.
[  197.729642][ T8292] netlink: 'syz.3.585': attribute type 1 has an invalid length.
[  197.737896][ T8292] netlink: 'syz.3.585': attribute type 3 has an invalid length.
[  197.756673][ T8292] netlink: 'syz.3.585': attribute type 1 has an invalid length.
[  197.775052][ T8292] netlink: 'syz.3.585': attribute type 3 has an invalid length.
[  198.070177][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'.
[  198.086377][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  198.104366][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  198.114518][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  198.142279][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  198.151507][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  200.246644][ T5185] Bluetooth: hci4: command tx timeout
[  200.883741][ T8343] FAULT_INJECTION: forcing a failure.
[  200.883741][ T8343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.912678][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'.
[  200.931516][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) 
[  200.931548][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  200.931557][ T8343] Call Trace:
[  200.931563][ T8343]  <TASK>
[  200.931571][ T8343]  dump_stack_lvl+0x189/0x250
[  200.931594][ T8343]  ? __pfx____ratelimit+0x10/0x10
[  200.931612][ T8343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.931629][ T8343]  ? __pfx__printk+0x10/0x10
[  200.931662][ T8343]  should_fail_ex+0x414/0x560
[  200.931685][ T8343]  _copy_to_user+0x31/0xb0
[  200.931702][ T8343]  simple_read_from_buffer+0xe1/0x170
[  200.931724][ T8343]  proc_fail_nth_read+0x1b3/0x220
[  200.931747][ T8343]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  200.931771][ T8343]  ? rw_verify_area+0x2a6/0x4d0
[  200.931794][ T8343]  ? __lock_acquire+0xab9/0xd20
[  200.931812][ T8343]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  200.931831][ T8343]  vfs_read+0x200/0xa30
[  200.931849][ T8343]  ? fdget_pos+0x247/0x320
[  200.931869][ T8343]  ? __pfx___mutex_lock+0x10/0x10
[  200.931887][ T8343]  ? __pfx_vfs_read+0x10/0x10
[  200.931909][ T8343]  ? __fget_files+0x2a/0x420
[  200.931929][ T8343]  ? __fget_files+0x3a0/0x420
[  200.931944][ T8343]  ? __fget_files+0x2a/0x420
[  200.931966][ T8343]  ksys_read+0x145/0x250
[  200.931981][ T8343]  ? __pfx_ksys_read+0x10/0x10
[  200.931992][ T8343]  ? rcu_is_watching+0x15/0xb0
[  200.932013][ T8343]  ? do_syscall_64+0xbe/0x3b0
[  200.932036][ T8343]  do_syscall_64+0xfa/0x3b0
[  200.932051][ T8343]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.932069][ T8343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.932083][ T8343]  ? clear_bhb_loop+0x60/0xb0
[  200.932102][ T8343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.932117][ T8343] RIP: 0033:0x7fb23238d8dc
[  200.932131][ T8343] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  200.932144][ T8343] RSP: 002b:00007fb233296030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  200.932162][ T8343] RAX: ffffffffffffffda RBX: 00007fb2325e5fa0 RCX: 00007fb23238d8dc
[  200.932174][ T8343] RDX: 000000000000000f RSI: 00007fb2332960a0 RDI: 0000000000000006
[  200.932184][ T8343] RBP: 00007fb233296090 R08: 0000000000000000 R09: 0000000000000000
[  200.932192][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.932200][ T8343] R13: 00007fb2325e6038 R14: 00007fb2325e5fa0 R15: 00007ffc5354ffc8
[  200.932226][ T8343]  </TASK>
[  201.290653][ T8355] raw_sendmsg: syz.2.600 forgot to set AF_INET. Fix it!
[  201.672514][ T8304] chnl_net:caif_netlink_parms(): no params data found
[  201.772395][ T8376] validate_nla: 2 callbacks suppressed
[  201.772412][ T8376] netlink: 'syz.4.608': attribute type 4 has an invalid length.
[  201.912247][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  201.963764][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.980489][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.988103][ T8304] bridge_slave_0: entered allmulticast mode
[  201.998792][ T8304] bridge_slave_0: entered promiscuous mode
[  202.008668][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.016005][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.024963][ T8304] bridge_slave_1: entered allmulticast mode
[  202.032803][ T8304] bridge_slave_1: entered promiscuous mode
[  202.128961][ T8388] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.610'.
[  202.148045][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.162484][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.325264][ T5185] Bluetooth: hci4: command tx timeout
[  202.576851][ T8304] team0: Port device team_slave_0 added
[  202.586305][ T8304] team0: Port device team_slave_1 added
[  202.804052][ T5185] Bluetooth: hci0: ISO packet for unknown connection handle 8
[  202.838300][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.846379][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.873081][ T8304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.890515][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.908343][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.946531][ T8304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.028703][ T8404] netlink: 'syz.2.615': attribute type 2 has an invalid length.
[  203.037089][ T8404] netlink: 'syz.2.615': attribute type 4 has an invalid length.
[  203.055597][ T8404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.615'.
[  203.180471][ T8415] netlink: 14 bytes leftover after parsing attributes in process `syz.2.615'.
[  203.438505][ T8304] hsr_slave_0: entered promiscuous mode
[  203.481111][ T8304] hsr_slave_1: entered promiscuous mode
[  203.488512][ T8304] debugfs: 'hsr0' already exists in 'hsr'
[  203.494451][ T8304] Cannot create hsr debugfs directory
[  204.295948][ T8304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.405594][ T5185] Bluetooth: hci4: command tx timeout
[  204.477581][ T8304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.734568][ T8304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.896918][ T8453] netlink: 'syz.3.626': attribute type 21 has an invalid length.
[  205.156988][ T8304] bond0: (slave netdevsim0): Releasing backup interface
[  205.213345][ T8304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.242562][ T8462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.629'.
[  205.375847][ T8460] netlink: 56 bytes leftover after parsing attributes in process `syz.2.629'.
[  205.930728][ T8484] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.636'.
[  205.950501][ T8484] netlink: zone id is out of range
[  205.957891][ T8484] netlink: get zone limit has 8 unknown bytes
[  206.488636][ T5185] Bluetooth: hci4: command tx timeout
[  206.981717][ T8496] netlink: 'syz.1.638': attribute type 46 has an invalid length.
[  208.244385][ T8503] option changes via remount are deprecated (pid=8500 comm=syz.1.640)
[  208.314006][ T8502] option changes via remount are deprecated (pid=8500 comm=syz.1.640)
[  208.810700][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.824232][ T8487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.839023][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.849129][ T8487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.230434][ T8304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  209.268483][ T8304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  209.320271][ T8304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  209.384429][ T8304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  209.738176][ T8467] infiniband syz!: set active
[  209.749925][ T8467] infiniband syz!: added team_slave_0
[  209.776488][ T8467] syz!: rxe_create_cq: returned err = -12
[  209.782572][ T8467] infiniband syz!: Couldn't create ib_mad CQ
[  209.806714][ T8467] infiniband syz!: Couldn't open port 1
[  209.814487][ T8304] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.898344][ T8304] 8021q: adding VLAN 0 to HW filter on device team0
[  209.938843][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.947023][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.976591][ T8467] RDS/IB: syz!: added
[  209.998950][ T8467] smc: adding ib device syz! with port count 1
[  210.007991][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.015209][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.038244][ T8467] smc:    ib device syz! port 1 has pnetid 
[  210.671836][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'.
[  210.784184][ T8562] netlink: 'syz.3.654': attribute type 2 has an invalid length.
[  210.794519][ T8562] netlink: 'syz.3.654': attribute type 8 has an invalid length.
[  210.818745][ T8562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'.
[  210.961717][ T8304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.248240][ T8304] veth0_vlan: entered promiscuous mode
[  211.361545][ T8304] veth1_vlan: entered promiscuous mode
[  211.370055][ T8578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.659'.
[  211.486410][ T8579] netlink: 'syz.2.658': attribute type 10 has an invalid length.
[  212.404865][ T5870] Bluetooth: hci2: command 0x0406 tx timeout
[  212.411858][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  212.669684][ T8577] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  212.698934][ T8579] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  212.813185][ T8304] veth0_macvtap: entered promiscuous mode
[  212.853117][ T8304] veth1_macvtap: entered promiscuous mode
[  212.952983][ T8304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.977174][ T8304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.998409][ T8595] netlink: 'syz.3.664': attribute type 39 has an invalid length.
[  213.031962][ T8595] veth0_macvtap: left promiscuous mode
[  213.121719][ T8593] netlink: 220 bytes leftover after parsing attributes in process `syz.1.663'.
[  213.305278][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.331390][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.413998][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.443271][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.627769][ T8613] hsr0: entered promiscuous mode
[  213.632881][ T8613] hsr0: entered allmulticast mode
[  213.669942][ T8613] hsr_slave_0: entered allmulticast mode
[  213.695221][ T8613] hsr_slave_1: entered allmulticast mode
[  213.724192][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.732394][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.826245][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.859423][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.946631][ T8622] netlink: 'syz.3.672': attribute type 1 has an invalid length.
[  214.168624][ T8628] netlink: 8184 bytes leftover after parsing attributes in process `syz.2.674'.
[  214.251058][ T8628] openvswitch: netlink: Flow key attr not present in new flow.
[  214.878290][ T8633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.676'.
[  215.255857][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'.
[  215.282795][ T8649] netlink: 'syz.3.679': attribute type 13 has an invalid length.
[  215.404337][ T8648] delete_channel: no stack
[  215.880737][ T8648] delete_channel: no stack
[  216.169168][ T8679] netlink: 'syz.1.687': attribute type 39 has an invalid length.
[  216.262687][ T8678] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.688'.
[  216.500708][ T8689] netlink: 'syz.3.689': attribute type 28 has an invalid length.
[  216.659770][ T8689] netlink: 2 bytes leftover after parsing attributes in process `syz.3.689'.
[  216.746284][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'.
[  217.162380][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.693'.
[  218.775352][ T8735] netlink: 'syz.1.704': attribute type 4 has an invalid length.
[  218.783205][ T8735] netlink: 140 bytes leftover after parsing attributes in process `syz.1.704'.
[  218.886069][ T8733] netlink: 144 bytes leftover after parsing attributes in process `syz.2.703'.
[  218.912600][ T8738] netlink: 144 bytes leftover after parsing attributes in process `syz.2.703'.
[  219.311219][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'.
[  219.312607][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'.
[  219.330578][ T8742] openvswitch: netlink: Flow key attr not present in new flow.
[  219.362810][ T8741] openvswitch: netlink: Flow key attr not present in new flow.
[  219.380563][ T8742] : entered promiscuous mode
[  220.221145][ T8775] delete_channel: no stack
[  220.237222][ T8775] delete_channel: no stack
[  220.810263][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'.
[  221.103479][ T8803] netlink: 56 bytes leftover after parsing attributes in process `syz.2.724'.
[  221.248727][ T8808] netlink: 'syz.0.726': attribute type 3 has an invalid length.
[  221.262841][ T8808] netlink: 'syz.0.726': attribute type 3 has an invalid length.
[  221.471111][ T8812] hsr_slave_1: left promiscuous mode
[  222.403770][ T8838] __nla_validate_parse: 2 callbacks suppressed
[  222.403788][ T8838] netlink: 182 bytes leftover after parsing attributes in process `syz.2.734'.
[  222.429318][ T8841] netlink: 44 bytes leftover after parsing attributes in process `syz.1.733'.
[  222.465316][ T8841] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  222.506501][ T8845] netlink: 'syz.2.734': attribute type 2 has an invalid length.
[  222.521435][ T8845] netlink: 'syz.2.734': attribute type 8 has an invalid length.
[  222.532102][ T8845] netlink: 132 bytes leftover after parsing attributes in process `syz.2.734'.
[  222.658291][ T8852] netlink: 'syz.0.737': attribute type 13 has an invalid length.
[  222.666404][ T8852] netlink: 'syz.0.737': attribute type 17 has an invalid length.
[  222.735073][ T8841] syzkaller0: entered promiscuous mode
[  222.741024][ T8841] syzkaller0: entered allmulticast mode
[  222.990739][ T8867] netlink: 'syz.4.739': attribute type 16 has an invalid length.
[  222.998987][ T8867] netlink: 'syz.4.739': attribute type 17 has an invalid length.
[  223.010011][ T8852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.888442][ T8879] netlink: 'syz.3.741': attribute type 10 has an invalid length.
[  224.668272][ T8867] bridge0: left promiscuous mode
[  224.673404][ T8867] bridge0: left allmulticast mode
[  224.682395][ T8867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.707899][ T8879] vxcan0: entered promiscuous mode
[  224.926827][   T30] audit: type=1107 audit(1759263114.430:3): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ġ�'
[  226.653285][ T8910] netlink: 'syz.2.750': attribute type 10 has an invalid length.
[  226.691811][ T8910] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  226.852607][ T8924] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.752'.
[  226.937239][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.754'.
[  228.174447][ T8971] netlink: 'syz.0.763': attribute type 10 has an invalid length.
[  228.183271][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.191184][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.209874][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.217218][ T8971] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.224818][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.232051][ T8971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.290027][ T8971] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  228.414567][ T8983] netlink: 'syz.1.768': attribute type 2 has an invalid length.
[  228.425488][ T8984] netlink: 'syz.1.768': attribute type 2 has an invalid length.
[  228.436650][ T8987] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  228.479441][ T8991] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.770'.
[  228.673506][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'.
[  228.777096][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'.
[  228.791060][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'.
[  228.800942][ T9005] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.775'.
[  229.068906][ T9017] netlink: 830 bytes leftover after parsing attributes in process `syz.1.777'.
[  229.266067][ T9039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.782'.
[  229.335661][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.784'.
[  229.426454][ T9040] tmpfs: Unknown parameter '�S\'
[  229.593927][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'.
[  230.080744][ T9060] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.789'.
[  230.548791][ T9078] macvlan0: entered promiscuous mode
[  230.555252][ T9078] macvlan0: entered allmulticast mode
[  230.560786][ T9078] veth1_vlan: entered allmulticast mode
[  231.230213][ T9091] syzkaller0: entered promiscuous mode
[  231.506416][ T9115] xt_l2tp: v2 sid > 0xffff: 1114112
[  232.881211][ T9109] netlink: 'syz.2.805': attribute type 14 has an invalid length.
[  233.038921][ T9120] netlink: 'syz.2.807': attribute type 19 has an invalid length.
[  233.920218][ T9141] delete_channel: no stack
[  234.399755][ T9154] netlink: 'syz.2.817': attribute type 22 has an invalid length.
[  234.407903][ T9154] __nla_validate_parse: 6 callbacks suppressed
[  234.407923][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'.
[  234.593153][ T9162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.819'.
[  234.606198][ T9160] netlink: 'syz.4.819': attribute type 10 has an invalid length.
[  234.646508][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[  234.666538][ T9160] geneve0: entered promiscuous mode
[  234.700295][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'.
[  234.883914][ T9168] netlink: 'syz.3.822': attribute type 10 has an invalid length.
[  234.902414][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.912456][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.978437][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.986171][ T9168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.994447][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.002215][ T9168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.069648][ T9168] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  235.153955][ T9183] netlink: 'syz.0.827': attribute type 5 has an invalid length.
[  235.333574][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'.
[  235.361296][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'.
[  235.374412][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.827'.
[  235.428511][ T9191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.828'.
[  235.784067][ T9201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.831'.
[  236.008407][ T9204] netlink: 'syz.1.832': attribute type 2 has an invalid length.
[  236.055005][ T9203] netlink: 'syz.1.832': attribute type 2 has an invalid length.
[  236.113500][ T9204] netlink: 'syz.1.832': attribute type 8 has an invalid length.
[  236.170323][ T9203] netlink: 'syz.1.832': attribute type 8 has an invalid length.
[  236.247192][ T9204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.832'.
[  237.252281][ T9238] sit0: entered allmulticast mode
[  237.306667][ T9241] sit0: entered promiscuous mode
[  241.088003][ T9277] __nla_validate_parse: 3 callbacks suppressed
[  241.088022][ T9277] netlink: 209 bytes leftover after parsing attributes in process `syz.4.847'.
[  241.141672][ T9277] netlink: 14 bytes leftover after parsing attributes in process `syz.4.847'.
[  241.153782][ T9277] hsr_slave_0: left promiscuous mode
[  241.164587][ T9277] hsr_slave_1: left promiscuous mode
[  241.441167][ T9298] validate_nla: 2 callbacks suppressed
[  241.441188][ T9298] netlink: 'syz.4.853': attribute type 1 has an invalid length.
[  242.270646][ T9311] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  242.360237][ T9328] netlink: 'syz.2.863': attribute type 2 has an invalid length.
[  242.404310][ T9328] netlink: 'syz.2.863': attribute type 3 has an invalid length.
[  242.421671][ T9328] netlink: 'syz.2.863': attribute type 4 has an invalid length.
[  242.459238][ T9328] netlink: 'syz.2.863': attribute type 5 has an invalid length.
[  242.481536][ T9328] netlink: 'syz.2.863': attribute type 6 has an invalid length.
[  242.497244][ T9328] netlink: 'syz.2.863': attribute type 8 has an invalid length.
[  242.505558][ T9328] netlink: 194188 bytes leftover after parsing attributes in process `syz.2.863'.
[  242.809335][ T9342] netlink: 'syz.2.867': attribute type 13 has an invalid length.
[  242.829836][ T9342] netlink: 'syz.2.867': attribute type 17 has an invalid length.
[  242.849226][ T9338] netlink: 'syz.0.866': attribute type 5 has an invalid length.
[  242.956636][ T9342] sit0: left promiscuous mode
[  242.963440][ T9342] sit0: left allmulticast mode
[  243.113773][ T9342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.333135][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'.
[  243.371820][ T9341] �: renamed from pim6reg1
[  243.442822][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  243.462561][ T9366] netlink: 144 bytes leftover after parsing attributes in process `syz.3.874'.
[  243.480963][ T9360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'.
[  243.776929][ T9375] veth0_vlan: left promiscuous mode
[  243.792865][ T9375] veth0_vlan: entered promiscuous mode
[  243.812896][ T9375] team0: Device veth0_vlan failed to register rx_handler
[  243.886380][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'.
[  244.010724][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'.
[  244.029753][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'.
[  247.571523][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.601010][ T9408] team0: Port device bond0 added
[  247.793766][ T9428] validate_nla: 6 callbacks suppressed
[  247.793811][ T9428] netlink: 'syz.4.889': attribute type 10 has an invalid length.
[  248.050305][ T9448] ������: renamed from vlan0 (while UP)
[  248.245073][ T5185] Bluetooth: hci3: command 0x0406 tx timeout
[  248.537484][ T9474] __nla_validate_parse: 2 callbacks suppressed
[  248.537504][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.899'.
[  249.222089][ T9511] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  249.469134][ T9516] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.909'.
[  249.983561][ T9525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.914'.
[  250.164091][ T9534] netlink: 'syz.3.915': attribute type 1 has an invalid length.
[  250.195118][ T9534] netlink: 17 bytes leftover after parsing attributes in process `syz.3.915'.
[  250.319434][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[  250.329313][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'.
[  250.342021][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'.
[  250.448379][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'.
[  250.530646][ T9546] can: request_module (can-proto-0) failed.
[  250.736079][ T9544] netlink: 128 bytes leftover after parsing attributes in process `syz.0.918'.
[  250.789688][ T9544] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  250.799308][ T9549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.004969][ T9566] netlink: 'syz.2.922': attribute type 10 has an invalid length.
[  251.196043][ T9567] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.923'.
[  251.342383][ T9555] syzkaller0: entered promiscuous mode
[  251.351121][ T9555] syzkaller0: entered allmulticast mode
[  253.382485][ T9591] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  253.398217][ T9591] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  253.410234][ T9591] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  254.323203][ T9617] __nla_validate_parse: 3 callbacks suppressed
[  254.323220][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.938'.
[  254.344617][ T9619] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.936'.
[  254.379738][ T9622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.937'.
[  254.388924][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.937'.
[  254.522994][ T9627] netlink: 'syz.0.940': attribute type 10 has an invalid length.
[  254.531094][ T9627] veth0_vlan: entered allmulticast mode
[  254.538999][ T9627] veth0_vlan: left promiscuous mode
[  254.546057][ T9627] veth0_vlan: entered promiscuous mode
[  254.554521][ T9627] team0: Device veth0_vlan failed to register rx_handler
[  254.929625][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  254.939580][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  254.948542][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  254.957937][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.967929][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.139440][ T9641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'.
[  255.497018][ T9662] netlink: 'syz.3.947': attribute type 10 has an invalid length.
[  255.646255][ T9663] netlink: 'syz.4.948': attribute type 4 has an invalid length.
[  255.671097][ T9663] netlink: 'syz.4.948': attribute type 17 has an invalid length.
[  256.410360][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  256.417193][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  256.424469][ T9662] team0 (unregistering): Port device team_slave_0 removed
[  256.442963][ T9662] team0 (unregistering): Port device team_slave_1 removed
[  256.457593][ T9662] team0 (unregistering): Port device wlan1 removed
[  256.661080][ T9676] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.951'.
[  256.672017][ T9676] netlink: zone id is out of range
[  256.694939][ T9676] netlink: get zone limit has 8 unknown bytes
[  256.810795][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.953'.
[  256.901424][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  257.047299][ T5185] Bluetooth: hci1: command tx timeout
[  257.710323][ T9698] netlink: 196 bytes leftover after parsing attributes in process `syz.3.955'.
[  257.720082][ T9698] tc_dump_action: action bad kind
[  258.078233][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'.
[  258.493409][ T5185] Bluetooth: hci0: command 0x0406 tx timeout
[  259.125093][ T5869] Bluetooth: hci1: command tx timeout
[  259.879018][ T9635] chnl_net:caif_netlink_parms(): no params data found
[  260.154407][ T9736] delete_channel: no stack
[  260.226979][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.234420][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.241906][ T9635] bridge_slave_0: entered allmulticast mode
[  260.253896][ T9635] bridge_slave_0: entered promiscuous mode
[  260.263553][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.271388][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.278840][ T9635] bridge_slave_1: entered allmulticast mode
[  260.287245][ T9635] bridge_slave_1: entered promiscuous mode
[  260.313076][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.967'.
[  260.341560][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.967'.
[  260.363882][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.418271][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.460433][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.967'.
[  260.534733][ T9635] team0: Port device team_slave_0 added
[  260.542589][ T9635] team0: Port device team_slave_1 added
[  260.581085][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.588270][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.614496][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.630238][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.642129][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.681200][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.682108][ T9750] netlink: 'syz.3.970': attribute type 27 has an invalid length.
[  260.838611][ T9635] hsr_slave_0: entered promiscuous mode
[  260.851852][ T9635] hsr_slave_1: entered promiscuous mode
[  260.865717][ T9635] debugfs: 'hsr0' already exists in 'hsr'
[  260.872248][ T9635] Cannot create hsr debugfs directory
[  260.893064][ T9761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.074186][ T9766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.974'.
[  261.220030][ T5869] Bluetooth: hci1: command tx timeout
[  261.405009][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'.
[  261.414093][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'.
[  261.423466][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'.
[  261.445091][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'.
[  261.483237][ T9776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.976'.
[  261.493189][ T9776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.976'.
[  262.023037][ T9797] netlink: 'syz.4.981': attribute type 10 has an invalid length.
[  262.343307][ T9635] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.807135][ T9797] batman_adv: batadv0: Adding interface: virt_wifi0
[  262.845180][ T9797] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.944889][ T9797] batman_adv: batadv0: Interface activated: virt_wifi0
[  263.070490][ T9635] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.246990][ T9635] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.286816][ T5869] Bluetooth: hci1: command tx timeout
[  263.444907][ T9635] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.514418][ T9825] netlink: 'syz.3.988': attribute type 1 has an invalid length.
[  264.372107][ T9635] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  264.388564][ T9635] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  264.439196][ T9635] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  264.481104][ T9635] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  264.501251][ T9841] netlink: 'syz.3.993': attribute type 21 has an invalid length.
[  264.523914][ T9841] netlink: 'syz.3.993': attribute type 2 has an invalid length.
[  264.694132][ T9850] syzkaller0: entered promiscuous mode
[  264.717829][ T9850] syzkaller0: entered allmulticast mode
[  264.987566][ T9635] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.023436][ T9859] ������: renamed from dummy0 (while UP)
[  265.057877][ T9635] 8021q: adding VLAN 0 to HW filter on device team0
[  265.098138][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.105395][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.157297][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.164546][ T8943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.210833][ T9879] netlink: 'syz.4.1004': attribute type 6 has an invalid length.
[  266.216325][ T9883] __nla_validate_parse: 3 callbacks suppressed
[  266.216345][ T9883] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1006'.
[  266.245012][ T9879] netlink: 'syz.4.1004': attribute type 3 has an invalid length.
[  266.265032][ T9879] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.1004'.
[  266.697320][ T9635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.951016][ T9635] veth0_vlan: entered promiscuous mode
[  267.022588][ T9635] veth1_vlan: entered promiscuous mode
[  267.162564][ T9903] netlink: 'syz.2.1009': attribute type 11 has an invalid length.
[  267.169454][ T9635] veth0_macvtap: entered promiscuous mode
[  267.181993][ T9635] veth1_macvtap: entered promiscuous mode
[  267.224257][ T9903] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1009'.
[  267.224825][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.261097][ T9906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.319785][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.351873][ T6508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.389541][ T8946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.417432][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.441402][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'.
[  267.445619][ T8946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.460511][ T9913] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1011'.
[  267.495791][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'.
[  267.497351][ T8946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.518032][ T9913] netlink: 125920 bytes leftover after parsing attributes in process `syz.0.1011'.
[  267.944126][ T8946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.979256][ T8946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.111746][ T8946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.135637][ T8946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.496566][ T9942] netlink: 'syz.4.1019': attribute type 5 has an invalid length.
[  268.504354][ T9942] netlink: 'syz.4.1019': attribute type 5 has an invalid length.
[  269.064290][ T9963] netlink: 'syz.3.1024': attribute type 2 has an invalid length.
[  269.096363][ T9963] netlink: 'syz.3.1024': attribute type 8 has an invalid length.
[  269.104367][ T9963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1024'.
[  269.113170][ T9957] netlink: 'syz.4.1022': attribute type 1 has an invalid length.
[  269.671797][ T9966] netlink: 'syz.1.1025': attribute type 3 has an invalid length.
[  269.680104][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1025'.
[  270.432542][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'.
[  270.712306][ T9996] netlink: 'syz.2.1033': attribute type 10 has an invalid length.
[  272.214736][ T9996] batadv_slave_1: entered promiscuous mode
[  272.232787][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.251675][ T9996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.260326][ T9996] bridge0: port 3(batadv_slave_1) entered blocking state
[  272.271342][ T9996] bridge0: port 3(batadv_slave_1) entered disabled state
[  272.280824][ T9996] batadv_slave_1: entered allmulticast mode
[  272.303465][ T9996] bridge0: port 3(batadv_slave_1) entered blocking state
[  272.310725][ T9996] bridge0: port 3(batadv_slave_1) entered forwarding state
[  272.764038][T10013] __nla_validate_parse: 2 callbacks suppressed
[  272.764072][T10013] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1039'.
[  273.144429][T10018] netlink: 'syz.0.1041': attribute type 10 has an invalid length.
[  273.171176][T10029] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1044'.
[  273.240283][T10018] 8021q: adding VLAN 0 to HW filter on device team0
[  273.242753][T10032] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1045'.
[  273.262737][T10018] bond0: (slave team0): Enslaving as an active interface with an up link
[  273.459874][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'.
[  273.519667][T10025] syzkaller0: create flow: hash 1069587720 index 1
[  273.621958][T10049] netlink: 'syz.0.1048': attribute type 21 has an invalid length.
[  273.666355][T10049] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1048'.
[  274.115293][T10026] syzkaller0: delete flow: hash 1069587720 index 1
[  275.558496][T10069] netlink: 'syz.2.1054': attribute type 11 has an invalid length.
[  275.566698][T10069] netlink: 'syz.2.1054': attribute type 11 has an invalid length.
[  275.732666][T10074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'.
[  275.742017][T10074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'.
[  276.324285][T10049] netlink: 'syz.0.1048': attribute type 5 has an invalid length.
[  276.332586][T10049] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1048'.
[  276.531976][T10084] mac80211_hwsim hwsim10 .3�c��: renamed from wlan1
[  276.820521][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'.
[  276.994833][T10098] Dead loop on virtual device ip6_vti0, fix it urgently!
[  277.107908][T10102] netlink: 'syz.4.1064': attribute type 11 has an invalid length.
[  277.176197][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'.
[  277.640691][T10131] netlink: 'syz.4.1068': attribute type 21 has an invalid length.
[  278.806664][T10154] __nla_validate_parse: 1 callbacks suppressed
[  278.806681][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'.
[  280.327332][T10131] netlink: 'syz.4.1068': attribute type 6 has an invalid length.
[  280.335663][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1068'.
[  280.504768][T10161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1079'.
[  280.574527][T10167] netlink: 'syz.0.1081': attribute type 5 has an invalid length.
[  280.590105][T10167] netlink: 'syz.0.1081': attribute type 5 has an invalid length.
[  280.657114][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'.
[  280.705299][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'.
[  280.734328][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'.
[  280.795032][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'.
[  280.804387][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'.
[  280.865737][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'.
[  281.533094][T10187] netlink: 'syz.1.1087': attribute type 290 has an invalid length.
[  281.658939][T10187] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1087'.
[  283.446303][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.322751][T10240] netlink: 'syz.4.1098': attribute type 10 has an invalid length.
[  285.202294][T10249] __nla_validate_parse: 6 callbacks suppressed
[  285.202313][T10249] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1100'.
[  285.297149][T10251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1101'.
[  285.798373][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'.
[  286.322284][T10287] netlink: 'syz.1.1110': attribute type 1 has an invalid length.
[  286.440360][T10289] netlink: del zone limit has 4 unknown bytes
[  286.683651][T10300] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1116'.
[  287.345925][T10322] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1120'.
[  287.386413][T10322] netlink: 'syz.4.1120': attribute type 10 has an invalid length.
[  287.402426][T10322] netlink: 'syz.4.1120': attribute type 16 has an invalid length.
[  287.422420][T10322] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1120'.
[  287.672776][T10330] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1121'.
[  289.773291][ T8946] bridge_slave_1: left allmulticast mode
[  289.790049][ T8946] bridge_slave_1: left promiscuous mode
[  289.799221][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.810180][ T8946] bridge_slave_0: left allmulticast mode
[  289.835364][ T8946] bridge_slave_0: left promiscuous mode
[  289.841250][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.866178][T10339] netlink: 'syz.4.1125': attribute type 9 has an invalid length.
[  289.895425][T10338] netlink: 'syz.4.1125': attribute type 4 has an invalid length.
[  290.220096][T10352] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  290.229700][T10352] netlink: 'syz.4.1128': attribute type 4 has an invalid length.
[  290.238360][T10352] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1128'.
[  290.264015][T10352] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  290.278033][T10352] netlink: 'syz.4.1128': attribute type 4 has an invalid length.
[  290.287098][T10352] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1128'.
[  290.469233][ T8946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.481643][ T8946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.492507][ T8946] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  290.506041][ T8946] bond0 (unregistering): Released all slaves
[  290.616072][T10354] netlink: 'syz.3.1130': attribute type 5 has an invalid length.
[  290.853912][ T5869] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  290.895308][T10377] bridge0: port 4(veth1_to_team) entered blocking state
[  290.993143][T10377] bridge0: port 4(veth1_to_team) entered disabled state
[  291.057048][T10377] veth1_to_team: entered allmulticast mode
[  291.125203][T10377] veth1_to_team: entered promiscuous mode
[  291.160320][T10377] bridge0: port 4(veth1_to_team) entered blocking state
[  291.167545][T10377] bridge0: port 4(veth1_to_team) entered forwarding state
[  291.239846][T10386] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.247470][T10386] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.728778][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'.
[  293.272757][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  293.626719][T10424] validate_nla: 2 callbacks suppressed
[  293.626740][T10424] netlink: 'syz.3.1147': attribute type 3 has an invalid length.
[  293.760568][T10424] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1147'.
[  294.792508][T10442] netlink: 'syz.0.1151': attribute type 5 has an invalid length.
[  294.851814][T10442] netlink: 'syz.0.1151': attribute type 5 has an invalid length.
[  295.089110][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'.
[  295.096755][T10447] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1152'.
[  295.448982][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.457027][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.520057][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.560423][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.589589][T10471] netlink: 'syz.1.1158': attribute type 27 has an invalid length.
[  295.619166][T10471] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1158'.
[  295.727445][ T8946] veth1_macvtap: left promiscuous mode
[  295.743717][ T8946] veth0_macvtap: left promiscuous mode
[  295.773964][ T8946] veth1_vlan: left promiscuous mode
[  295.796392][T10477] xt_l2tp: wrong L2TP version: 1
[  295.807453][ T8946] veth0_vlan: left promiscuous mode
[  296.424362][T10487] netlink: 'syz.0.1161': attribute type 10 has an invalid length.
[  296.903890][ T8946] team0 (unregistering): Port device team_slave_1 removed
[  296.954410][ T8946] team0 (unregistering): Port device team_slave_0 removed
[  296.976441][ T5185] Bluetooth: hci4: command 0x0406 tx timeout
[  297.459645][T10487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  297.579486][T10504] netlink: 'syz.2.1167': attribute type 5 has an invalid length.
[  297.587387][T10504] netlink: 'syz.2.1167': attribute type 5 has an invalid length.
[  297.966490][T10514] netlink: 'syz.0.1170': attribute type 21 has an invalid length.
[  298.029634][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  298.088240][T10514] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1170'.
[  298.238248][T10536] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1174'.
[  298.254110][T10536] openvswitch: netlink: Flow key attr not present in new flow.
[  301.696749][T10562] netlink: 'syz.4.1180': attribute type 7 has an invalid length.
[  301.710674][T10562] netlink: 'syz.4.1180': attribute type 6 has an invalid length.
[  301.935558][T10572] netlink: 'syz.0.1183': attribute type 5 has an invalid length.
[  301.943341][T10572] netlink: 'syz.0.1183': attribute type 5 has an invalid length.
[  301.970364][T10580] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1185'.
[  301.981913][T10580] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1185'.
[  301.991800][T10580] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1185'.
[  302.292413][ T8946] bridge_slave_1: left allmulticast mode
[  302.332151][ T8946] bridge_slave_1: left promiscuous mode
[  302.372745][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.966099][ T8946] bridge_slave_0: left allmulticast mode
[  302.972293][ T8946] bridge_slave_0: left promiscuous mode
[  303.004699][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.059661][ T8946] vlan0: left allmulticast mode
[  303.096164][ T8946] veth0_vlan: left allmulticast mode
[  303.101517][ T8946] vlan0: left promiscuous mode
[  303.131358][ T8946] �: port 1(vlan0) entered disabled state
[  303.187323][ T8946] bond_slave_0: left promiscuous mode
[  303.193024][ T8946] bond_slave_1: left promiscuous mode
[  303.312947][T10612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.168031][T10634] netlink: 'syz.0.1198': attribute type 39 has an invalid length.
[  304.423201][T10648] netlink: 'syz.1.1201': attribute type 5 has an invalid length.
[  304.431602][T10648] netlink: 'syz.1.1201': attribute type 5 has an invalid length.
[  304.486896][ T8946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.512891][ T8946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.532711][ T8946] bond0 (unregistering): Released all slaves
[  305.084938][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'.
[  305.214404][T10678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1210'.
[  305.586219][T10683] netlink: 'syz.1.1212': attribute type 2 has an invalid length.
[  305.600308][T10683] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1212'.
[  305.787149][T10689] netlink: 'syz.0.1214': attribute type 27 has an invalid length.
[  305.835531][T10689] netlink: 'syz.0.1214': attribute type 4 has an invalid length.
[  305.855871][T10689] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1214'.
[  306.441999][ T8946] hsr_slave_0: left promiscuous mode
[  306.517984][ T8946] hsr_slave_1: left promiscuous mode
[  306.547506][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.580849][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.791335][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.826444][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.862837][ T8946] veth1_macvtap: left promiscuous mode
[  306.879010][ T8946] veth0_macvtap: left promiscuous mode
[  306.885302][ T8946] veth1_vlan: left promiscuous mode
[  306.891273][ T8946] veth0_vlan: left promiscuous mode
[  306.922880][T10719] delete_channel: no stack
[  306.933531][T10719] delete_channel: no stack
[  307.123235][T10726] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1224'.
[  307.458364][ T8946] team0 (unregistering): Port device team_slave_1 removed
[  307.503124][ T8946] team0 (unregistering): Port device C removed
[  307.974414][T10711] netlink: 'syz.3.1220': attribute type 11 has an invalid length.
[  307.983411][T10729] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1226'.
[  307.988507][T10711] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1220'.
[  308.002335][T10711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.183485][T10736] netlink: 'syz.3.1229': attribute type 21 has an invalid length.
[  308.191989][T10736] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1229'.
[  309.390270][T10759] netlink: 'syz.2.1235': attribute type 8 has an invalid length.
[  309.643733][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1239'.
[  309.729400][T10772] netlink: 'syz.1.1237': attribute type 10 has an invalid length.
[  309.788165][T10764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  309.918274][T10772] team0: Device veth1_macvtap failed to register rx_handler
[  310.183055][T10781] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.1240'.
[  312.468247][T10793] netlink: 'syz.1.1242': attribute type 3 has an invalid length.
[  312.544452][T10793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1242'.
[  312.557283][T10793] netlink: 'syz.1.1242': attribute type 21 has an invalid length.
[  312.564320][T10803] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1244'.
[  312.580378][T10793] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1242'.
[  312.634004][T10808] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1247'.
[  312.707317][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'.
[  312.756838][T10810] netlink: 'syz.0.1248': attribute type 10 has an invalid length.
[  312.842637][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'.
[  312.948167][T10818] netlink: 'syz.4.1251': attribute type 10 has an invalid length.
[  313.158858][T10822] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1252'.
[  313.513500][T10832] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.1256'.
[  313.580413][T10835] netlink: 'syz.3.1257': attribute type 2 has an invalid length.
[  313.659147][T10835] netlink: 'syz.3.1257': attribute type 1 has an invalid length.
[  314.481985][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'.
[  314.494589][T10855] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1261'.
[  315.129567][T10891] netlink: 'syz.4.1273': attribute type 6 has an invalid length.
[  317.272800][T10941] �: entered promiscuous mode
[  317.627316][T10970] __nla_validate_parse: 9 callbacks suppressed
[  317.627335][T10970] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.1294'.
[  317.849007][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  317.856015][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  318.040478][T10982] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1301'.
[  318.470553][T11009] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1309'.
[  318.581624][T11007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1310'.
[  318.593905][T11007] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1310'.
[  318.614538][T11007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'.
[  318.750216][T11015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'.
[  318.762677][T11015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'.
[  318.788087][T11016] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1311'.
[  319.323050][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'.
[  319.742737][T11039] netlink: 'syz.1.1318': attribute type 21 has an invalid length.
[  319.751181][T11039] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.759228][T11039] IPv6: Can't replace route, no match found
[  320.663588][T11030] sit0: entered promiscuous mode
[  320.913835][T11045] netlink: 'syz.1.1322': attribute type 23 has an invalid length.
[  322.741880][T11081] __nla_validate_parse: 5 callbacks suppressed
[  322.741911][T11081] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.1331'.
[  324.190154][T11122] netlink: 'syz.4.1342': attribute type 11 has an invalid length.
[  324.338473][T11129] netlink: 'syz.2.1343': attribute type 3 has an invalid length.
[  324.353933][T11129] netlink: 'syz.2.1343': attribute type 2 has an invalid length.
[  324.375248][T11129] netlink: 130500 bytes leftover after parsing attributes in process `syz.2.1343'.
[  324.707039][T11146] netlink: 'syz.0.1348': attribute type 1 has an invalid length.
[  324.798604][T11143] IPv6: NLM_F_CREATE should be specified when creating new route
[  325.396929][ T5185] Bluetooth: hci4: command 0x0406 tx timeout
[  325.480274][T11154] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.1350'.
[  326.071575][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'.
[  326.110657][T11173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1356'.
[  327.550866][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'.
[  327.639276][T11210] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1367'.
[  327.750031][T11216] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1368'.
[  327.928174][T11221] netlink: 'syz.4.1371': attribute type 10 has an invalid length.
[  327.937201][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1370'.
[  327.980538][T11222] netlink: 'syz.4.1371': attribute type 10 has an invalid length.
[  328.112795][T11230] netlink: 'syz.2.1373': attribute type 10 has an invalid length.
[  328.130117][T11234] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1372'.
[  328.363166][T11243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'.
[  328.383335][T11239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'.
[  328.404346][T11239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'.
[  328.457484][T11251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1378'.
[  328.467953][T11251] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.552959][T11255] netlink: 'syz.4.1378': attribute type 2 has an invalid length.
[  328.687193][T11251] _�Z`Ԁ@S!: entered promiscuous mode
[  328.789476][T11255] k�*�]: entered promiscuous mode
[  328.967672][T11260] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1381'.
[  329.037694][T11272] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.1383'.
[  329.392041][T11276] netlink: 'syz.4.1384': attribute type 1 has an invalid length.
[  332.542866][T11288] netlink: 'syz.1.1388': attribute type 16 has an invalid length.
[  332.554223][T11288] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1388'.
[  334.078141][T11301] netlink: 'syz.3.1393': attribute type 1 has an invalid length.
[  334.086532][T11301] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1393'.
[  334.261513][T11303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1394'.
[  334.364354][T11306] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1396'.
[  335.251392][T11316] netlink: 'syz.1.1397': attribute type 29 has an invalid length.
[  335.285716][T11327] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1400'.
[  335.302669][T11320] netlink: 'syz.1.1397': attribute type 29 has an invalid length.
[  335.380153][T11331] netlink: 'syz.4.1404': attribute type 39 has an invalid length.
[  335.501000][T11334] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.1403'.
[  335.787478][T11356] netlink: 'syz.1.1410': attribute type 19 has an invalid length.
[  336.497897][T11396] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1420'.
[  336.551397][T11398] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1421'.
[  336.985745][T11405] netlink: 'syz.4.1424': attribute type 8 has an invalid length.
[  337.008539][T11408] netlink: zone id is out of range
[  337.030921][T11408] netlink: zone id is out of range
[  337.133815][T11408] netlink: zone id is out of range
[  337.312803][T11408] netlink: zone id is out of range
[  337.415160][T11408] netlink: zone id is out of range
[  337.420580][T11408] netlink: zone id is out of range
[  337.426526][T11408] netlink: zone id is out of range
[  337.432110][T11408] netlink: zone id is out of range
[  337.505223][T11408] netlink: zone id is out of range
[  337.518282][T11408] netlink: zone id is out of range
[  337.537549][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'.
[  338.018267][T11432] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1433'.
[  338.053018][T11436] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1434'.
[  338.332153][T11449] netlink: 'syz.3.1442': attribute type 12 has an invalid length.
[  339.154465][T11470] __nla_validate_parse: 2 callbacks suppressed
[  339.154483][T11470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1447'.
[  339.573777][T11487] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1453'.
[  339.613787][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'.
[  339.644534][T11487] netlink: 'syz.2.1453': attribute type 1 has an invalid length.
[  340.296329][T11502] sctp: [Deprecated]: syz.0.1458 (pid 11502) Use of int in max_burst socket option deprecated.
[  340.296329][T11502] Use struct sctp_assoc_value instead
[  340.769033][T11521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1463'.
[  340.785057][T11522] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  341.495774][T11526] xt_l2tp: missing protocol rule (udp|l2tpip)
[  344.212907][T11545] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1471'.
[  344.222683][T11546] netlink: 'syz.1.1470': attribute type 10 has an invalid length.
[  344.236805][T11545] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1471'.
[  344.535209][T11551] netlink: 'syz.2.1472': attribute type 10 has an invalid length.
[  344.565927][T11551] net_ratelimit: 7 callbacks suppressed
[  344.565945][T11551] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  344.920271][T11546] team0 (unregistering): Port device team_slave_0 removed
[  344.952269][T11546] team0 (unregistering): Port device team_slave_1 removed
[  345.751686][T11594] netlink: 'syz.0.1482': attribute type 5 has an invalid length.
[  345.774339][T11594] netlink: 'syz.0.1482': attribute type 5 has an invalid length.
[  345.851131][T11598] blkio.reset_stats is deprecated
[  346.161646][T11607] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1487'.
[  346.484523][T11627] netlink: 'syz.0.1493': attribute type 5 has an invalid length.
[  346.527781][T11627] netlink: 'syz.0.1493': attribute type 5 has an invalid length.
[  346.628332][T11641] netlink: 'syz.3.1497': attribute type 5 has an invalid length.
[  346.636497][T11641] netlink: 'syz.3.1497': attribute type 5 has an invalid length.
[  346.822150][T11644] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1496'.
[  346.964874][   T30] audit: type=1107 audit(1759263236.460:4): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r���lC��HZ���oL�BZ��#o�z�����a�[�ۜ�u���7�
��}R�8wkzR�XL��Z��OF>*��������?�5	�z���
[  346.964874][   T30] `�J�o�q��a&5�+l�)���_�Sl[=NO/y�F�~@�9U/	��~}f����'ԇPu��h
��30�\2Qȇ��;E��b��0~�ˡ�k��b;/��9x�w'
[  347.128586][T11662] netlink: 'syz.2.1502': attribute type 10 has an invalid length.
[  347.210671][T11640] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1496'.
[  347.234359][T11662] bond0: (slave bond_slave_0): Releasing backup interface
[  347.358528][T11666] netlink: 'syz.0.1503': attribute type 3 has an invalid length.
[  347.369596][T11666] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  347.417328][T11667] netlink: 'syz.0.1503': attribute type 23 has an invalid length.
[  347.420302][T11666] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1503'.
[  347.843668][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  347.916308][T11679] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1507'.
[  348.436693][T11700] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.1511'.
[  348.465394][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'.
[  350.962816][T11730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1520'.
[  351.076534][T11730] validate_nla: 3 callbacks suppressed
[  351.076579][T11730] netlink: 'syz.3.1520': attribute type 10 has an invalid length.
[  351.134862][T11730] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1520'.
[  351.474447][T11736] netlink: 'syz.2.1522': attribute type 5 has an invalid length.
[  351.485779][T11736] netlink: 'syz.2.1522': attribute type 5 has an invalid length.
[  352.012358][T11748] netlink: 'syz.3.1527': attribute type 39 has an invalid length.
[  352.607000][T11760] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1530'.
[  353.171907][T11783] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1537'.
[  353.201134][T11781] netlink: 'syz.0.1535': attribute type 5 has an invalid length.
[  353.209409][T11781] netlink: 'syz.0.1535': attribute type 5 has an invalid length.
[  354.180226][T11803] netlink: 'syz.1.1542': attribute type 1 has an invalid length.
[  354.239471][T11807] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  354.263855][T11807] CPU: 0 UID: 0 PID: 11807 Comm: syz.3.1544 Not tainted syzkaller #0 PREEMPT(full) 
[  354.263884][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  354.263907][T11807] Call Trace:
[  354.263915][T11807]  <TASK>
[  354.263923][T11807]  dump_stack_lvl+0x189/0x250
[  354.263956][T11807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.263978][T11807]  ? __pfx__printk+0x10/0x10
[  354.264009][T11807]  ? kernfs_path_from_node+0x2f/0x290
[  354.264031][T11807]  ? kernfs_path_from_node+0x250/0x290
[  354.264051][T11807]  ? kernfs_path_from_node+0x2f/0x290
[  354.264077][T11807]  sysfs_warn_dup+0x8e/0xa0
[  354.264099][T11807]  sysfs_do_create_link_sd+0xc0/0x110
[  354.264124][T11807]  device_add_class_symlinks+0x1cf/0x240
[  354.264154][T11807]  device_add+0x475/0xb50
[  354.264182][T11807]  wiphy_register+0x1ba6/0x28d0
[  354.264225][T11807]  ? __pfx_wiphy_register+0x10/0x10
[  354.264246][T11807]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  354.264281][T11807]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  354.264311][T11807]  ieee80211_register_hw+0x3484/0x4100
[  354.264346][T11807]  ? ieee80211_register_hw+0x1451/0x4100
[  354.264373][T11807]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  354.264395][T11807]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.264423][T11807]  ? __hrtimer_setup+0x187/0x210
[  354.264449][T11807]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  354.264476][T11807]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  354.264529][T11807]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  354.264547][T11807]  ? trace_kmalloc+0x1f/0xd0
[  354.264561][T11807]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  354.264578][T11807]  ? kstrndup+0xbf/0x160
[  354.264609][T11807]  hwsim_new_radio_nl+0xea4/0x1b10
[  354.264629][T11807]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.264666][T11807]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.264699][T11807]  ? __nla_parse+0x40/0x60
[  354.264724][T11807]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  354.264751][T11807]  genl_family_rcv_msg_doit+0x215/0x300
[  354.264776][T11807]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.264808][T11807]  ? bpf_lsm_capable+0x9/0x20
[  354.264824][T11807]  ? security_capable+0x7e/0x2e0
[  354.264851][T11807]  genl_rcv_msg+0x60e/0x790
[  354.264876][T11807]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.264893][T11807]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.264913][T11807]  ? __asan_memcpy+0x40/0x70
[  354.264935][T11807]  ? __pfx_ref_tracker_free+0x10/0x10
[  354.264966][T11807]  netlink_rcv_skb+0x208/0x470
[  354.264986][T11807]  ? __lock_acquire+0xab9/0xd20
[  354.265012][T11807]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.265030][T11807]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.265074][T11807]  ? down_read+0x1ad/0x2e0
[  354.265100][T11807]  genl_rcv+0x28/0x40
[  354.265114][T11807]  netlink_unicast+0x82c/0x9e0
[  354.265145][T11807]  ? __pfx_netlink_unicast+0x10/0x10
[  354.265167][T11807]  ? netlink_sendmsg+0x642/0xb30
[  354.265185][T11807]  ? skb_put+0x11b/0x210
[  354.265213][T11807]  netlink_sendmsg+0x805/0xb30
[  354.265246][T11807]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.265272][T11807]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.265295][T11807]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.265316][T11807]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.265340][T11807]  __sock_sendmsg+0x219/0x270
[  354.265363][T11807]  ____sys_sendmsg+0x505/0x830
[  354.265394][T11807]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.265438][T11807]  ? import_iovec+0x74/0xa0
[  354.265469][T11807]  ___sys_sendmsg+0x21f/0x2a0
[  354.265497][T11807]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.265564][T11807]  ? __fget_files+0x2a/0x420
[  354.265582][T11807]  ? __fget_files+0x3a0/0x420
[  354.265613][T11807]  __x64_sys_sendmsg+0x19b/0x260
[  354.265640][T11807]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.265677][T11807]  ? rcu_is_watching+0x15/0xb0
[  354.265700][T11807]  ? do_syscall_64+0xbe/0x3b0
[  354.265728][T11807]  do_syscall_64+0xfa/0x3b0
[  354.265747][T11807]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.265766][T11807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.265782][T11807]  ? clear_bhb_loop+0x60/0xb0
[  354.265803][T11807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.265818][T11807] RIP: 0033:0x7f1dbdf8eec9
[  354.265836][T11807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.265852][T11807] RSP: 002b:00007f1dbed57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.265872][T11807] RAX: ffffffffffffffda RBX: 00007f1dbe1e6090 RCX: 00007f1dbdf8eec9
[  354.265886][T11807] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004
[  354.265897][T11807] RBP: 00007f1dbe011f91 R08: 0000000000000000 R09: 0000000000000000
[  354.265908][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.265919][T11807] R13: 00007f1dbe1e6128 R14: 00007f1dbe1e6090 R15: 00007ffc56db92f8
[  354.265951][T11807]  </TASK>
[  354.887018][ T5185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  354.919113][ T5185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  354.957645][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  354.969928][ T5185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  354.977862][ T5185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.024725][T11815] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1546'.
[  355.124540][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'.
[  355.135186][T11815] netlink: 46603 bytes leftover after parsing attributes in process `syz.2.1546'.
[  355.356568][T11817] netlink: 'syz.3.1547': attribute type 3 has an invalid length.
[  355.378225][T11817] netlink: 'syz.3.1547': attribute type 1 has an invalid length.
[  355.409007][T11817] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1547'.
[  355.569574][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'.
[  355.613599][T11828] netlink: 'syz.0.1550': attribute type 5 has an invalid length.
[  356.072768][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1560'.
[  356.237916][T11811] chnl_net:caif_netlink_parms(): no params data found
[  356.354065][T11869] validate_nla: 2 callbacks suppressed
[  356.354105][T11869] netlink: 'syz.3.1561': attribute type 10 has an invalid length.
[  356.619028][T11876] netlink: 'syz.0.1563': attribute type 1 has an invalid length.
[  356.633570][T11875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1561'.
[  356.635235][T11869] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.658016][T11869] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.739171][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'.
[  356.881713][T11887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1562'.
[  357.045230][ T5185] Bluetooth: hci5: command tx timeout
[  357.165120][T11811] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.173977][T11811] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.181369][T11811] bridge_slave_0: entered allmulticast mode
[  357.195807][T11811] bridge_slave_0: entered promiscuous mode
[  357.220778][T11888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1564'.
[  357.233122][T11879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1564'.
[  357.246390][T11889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1564'.
[  357.259772][T11811] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.267631][T11811] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.275272][T11811] bridge_slave_1: entered allmulticast mode
[  357.284030][T11811] bridge_slave_1: entered promiscuous mode
[  357.378727][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.399413][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.423441][T11902] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1567'.
[  357.499345][T11902] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1567'.
[  357.512769][T11911] netlink: 'syz.0.1570': attribute type 10 has an invalid length.
[  357.521296][T11911] team0: Device dummy0 is up. Set it down before adding it as a team port
[  357.546202][T11811] team0: Port device team_slave_0 added
[  357.556237][T11811] team0: Port device team_slave_1 added
[  357.622817][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'.
[  357.673435][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.693791][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.733241][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.797518][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.828510][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.856448][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.995188][T11811] hsr_slave_0: entered promiscuous mode
[  358.016367][T11811] hsr_slave_1: entered promiscuous mode
[  358.033262][T11811] debugfs: 'hsr0' already exists in 'hsr'
[  358.040756][T11811] Cannot create hsr debugfs directory
[  358.604067][T11811] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  358.636696][T11811] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  358.666284][T11811] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  358.705868][T11811] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  359.125227][ T5185] Bluetooth: hci5: command tx timeout
[  359.319304][T11811] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.347941][T11811] 8021q: adding VLAN 0 to HW filter on device team0
[  359.373544][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.380977][ T8946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.447410][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.454718][ T8948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.921846][T11957] netlink: 'syz.0.1584': attribute type 2 has an invalid length.
[  359.973075][T11957] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  359.984977][T11957] nbd: couldn't find device at index 131076
[  359.996197][T11954] netlink: 'syz.0.1584': attribute type 2 has an invalid length.
[  360.004080][T11954] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  360.109469][T11954] nbd: couldn't find device at index 131076
[  360.283809][T11811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.431134][T12011] syzkaller0: entered promiscuous mode
[  360.490947][T12011] syzkaller0: entered allmulticast mode
[  360.603841][T12027] delete_channel: no stack
[  360.624163][T12027] delete_channel: no stack
[  360.903861][T12042] netlink: 'syz.0.1608': attribute type 21 has an invalid length.
[  361.215141][ T5185] Bluetooth: hci5: command tx timeout
[  362.524887][T12038] __nla_validate_parse: 10 callbacks suppressed
[  362.524909][T12038] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1606'.
[  362.746354][T12054] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1609'.
[  362.814305][T11811] veth0_vlan: entered promiscuous mode
[  362.872727][T12054] hsr_slave_0: left promiscuous mode
[  362.904491][T12054] hsr_slave_1: left promiscuous mode
[  363.286893][ T5185] Bluetooth: hci5: command tx timeout
[  363.533042][T12050] netlink: 16239 bytes leftover after parsing attributes in process `syz.0.1610'.
[  363.558659][T11811] veth1_vlan: entered promiscuous mode
[  363.648003][T11811] veth0_macvtap: entered promiscuous mode
[  363.678894][T11811] veth1_macvtap: entered promiscuous mode
[  363.748352][T11811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.773374][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  363.780182][T11811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.803778][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  363.874153][ T8946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.902824][ T8946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.974428][ T8946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.993218][ T8946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.173587][T12083] syzkaller0: tun_chr_ioctl cmd 1074025675
[  364.204828][T12083] syzkaller0: persist disabled
[  364.275829][T12092] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1621'.
[  364.301693][ T8945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.316912][ T8945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.359365][ T8945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.369036][ T8945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.538591][T12102] netlink: 'syz.0.1624': attribute type 2 has an invalid length.
[  364.558445][T12102] netlink: 'syz.0.1624': attribute type 8 has an invalid length.
[  364.571376][T12102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1624'.
[  364.594352][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1541'.
[  364.656510][T12101] netlink: 'syz.0.1624': attribute type 2 has an invalid length.
[  364.666552][T12101] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1624'.
[  365.223143][T12133] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1632'.
[  365.297709][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.068843][T12169] 
��0: renamed from bond_slave_1 (while UP)
[  366.159458][T12171] netlink: 'syz.3.1646': attribute type 10 has an invalid length.
[  368.922967][T12195] netlink: 'syz.5.1652': attribute type 2 has an invalid length.
[  368.972299][T12195] __nla_validate_parse: 4 callbacks suppressed
[  368.972321][T12195] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1652'.
[  369.010904][T12196] netlink: 'syz.2.1653': attribute type 10 has an invalid length.
[  369.031132][T12196] bridge0: port 4(veth1_to_team) entered disabled state
[  369.039365][T12196] bridge0: port 3(batadv_slave_1) entered disabled state
[  369.047432][T12196] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.056331][T12196] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.219250][T12196] bridge0: port 4(veth1_to_team) entered blocking state
[  369.227171][T12196] bridge0: port 4(veth1_to_team) entered forwarding state
[  369.235951][T12196] bridge0: port 3(batadv_slave_1) entered blocking state
[  369.243894][T12196] bridge0: port 3(batadv_slave_1) entered forwarding state
[  369.252745][T12196] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.260736][T12196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.269661][T12196] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.277868][T12196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.553978][T12206] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1655'.
[  369.674066][T12196] team0: Port device bridge0 added
[  369.784848][T12213] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1657'.
[  370.335356][T12209] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  370.345128][T12209] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  370.365685][T12209] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  370.377429][T12219] netlink: 'syz.5.1659': attribute type 10 has an invalid length.
[  370.396843][T12219] netlink: 'syz.5.1659': attribute type 19 has an invalid length.
[  370.406299][T12219] netlink: 14536 bytes leftover after parsing attributes in process `syz.5.1659'.
[  370.582623][T12227] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1662'.
[  370.707863][T12232] netlink: 'syz.0.1663': attribute type 10 has an invalid length.
[  370.882825][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'.
[  371.213079][T12246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.717992][T12232] bond0: (slave team0): Releasing backup interface
[  371.768705][T12232] team0 (unregistering): Port device team_slave_0 removed
[  371.809060][T12232] team0 (unregistering): Port device team_slave_1 removed
[  371.968406][T12255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.990952][T12255] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.523177][T12255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.550464][T12255] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.623900][T12265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'.
[  372.637284][T12268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'.
[  372.651245][T12265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'.
[  372.675332][T12266] netlink: 'syz.1.1671': attribute type 6 has an invalid length.
[  372.683392][T12266] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1671'.
[  373.797709][T12307] netlink: 'syz.5.1683': attribute type 13 has an invalid length.
[  373.814821][T12307] netlink: 'syz.5.1683': attribute type 17 has an invalid length.
[  373.843414][T12307] netlink: 'syz.5.1683': attribute type 27 has an invalid length.
[  374.095065][T12307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.527716][T12323] wg0 speed is unknown, defaulting to 1000
[  374.551543][T12323] wg0 speed is unknown, defaulting to 1000
[  374.607705][T12323] wg0 speed is unknown, defaulting to 1000
[  374.701017][T12331] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1691'.
[  374.790621][T12323] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  374.890516][T12323] wg0 speed is unknown, defaulting to 1000
[  374.907314][T12323] wg0 speed is unknown, defaulting to 1000
[  374.923383][T12323] wg0 speed is unknown, defaulting to 1000
[  374.937084][T12323] wg0 speed is unknown, defaulting to 1000
[  374.950710][T12323] wg0 speed is unknown, defaulting to 1000
[  374.968981][T12323] wg0 speed is unknown, defaulting to 1000
[  375.156771][T12342] netlink: 936 bytes leftover after parsing attributes in process `syz.5.1694'.
[  375.214290][T12342] netlink: 'syz.5.1694': attribute type 1 has an invalid length.
[  375.222473][T12342] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1694'.
[  375.836545][T12368] netlink: 'syz.2.1701': attribute type 39 has an invalid length.
[  375.975850][T12373] netlink: 'syz.1.1704': attribute type 10 has an invalid length.
[  375.998003][T12373] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1704'.
[  376.034248][T12375] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.213437][T12380] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1706'.
[  376.228484][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'.
[  376.251731][T12380] netlink: 'syz.0.1706': attribute type 2 has an invalid length.
[  376.259945][T12380] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.1706'.
[  376.318407][T12380] netlink: 'syz.0.1706': attribute type 1 has an invalid length.
[  376.472918][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'.
[  376.505869][T12395] netlink: 'syz.0.1711': attribute type 10 has an invalid length.
[  376.513866][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'.
[  376.563557][T12394] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1710'.
[  378.036065][T12434] netlink: 'syz.2.1722': attribute type 22 has an invalid length.
[  379.294091][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  379.300941][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  379.934220][T12488] __nla_validate_parse: 3 callbacks suppressed
[  379.934253][T12488] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1738'.
[  379.982582][T12488] openvswitch: netlink: IP tunnel dst address not specified
[  380.336061][T12498] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  380.834986][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1749'.
[  381.365948][ T5185] Bluetooth: hci1: command 0x0406 tx timeout
[  381.481797][T12531] netlink: 'syz.1.1752': attribute type 10 has an invalid length.
[  381.492709][T12531] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1752'.
[  381.642888][T12533] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1753'.
[  381.749582][T12527] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1751'.
[  381.778922][T12527] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1751'.
[  382.108644][T12541] netlink: 'syz.0.1755': attribute type 5 has an invalid length.
[  382.124832][T12541] netlink: 'syz.0.1755': attribute type 5 has an invalid length.
[  382.704426][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'.
[  382.954572][T12564] netlink: 'syz.5.1761': attribute type 10 has an invalid length.
[  383.137316][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1762'.
[  383.852213][T12585] netlink: 'syz.2.1768': attribute type 5 has an invalid length.
[  383.863123][T12585] netlink: 'syz.2.1768': attribute type 5 has an invalid length.
[  383.947291][T12587] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  384.043008][T12578] syzkaller0: entered promiscuous mode
[  384.049031][T12578] syzkaller0: entered allmulticast mode
[  384.175105][T12589] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1769'.
[  384.204731][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  384.323619][T12591] netlink: 'syz.0.1770': attribute type 31 has an invalid length.
[  384.978967][T12594] delete_channel: no stack
[  385.312368][T12606] __nla_validate_parse: 1 callbacks suppressed
[  385.312390][T12606] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1776'.
[  386.922039][T12619] openvswitch: netlink: Missing valid actions attribute.
[  386.932087][T12619] openvswitch: netlink: Actions may not be safe on all matching packets
[  387.028931][T12622] netlink: 'syz.2.1781': attribute type 10 has an invalid length.
[  387.037337][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'.
[  388.325728][T12622] bridge0: port 5(veth0_vlan) entered blocking state
[  388.349174][T12622] bridge0: port 5(veth0_vlan) entered disabled state
[  388.371712][T12622] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  388.800439][T12638] syzkaller0: entered promiscuous mode
[  388.807359][T12638] syzkaller0: entered allmulticast mode
[  389.035492][T12651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1788'.
[  391.100235][T12664] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1791'.
[  391.109890][T12666] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1791'.
[  391.197260][T12668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.296897][T12671] netlink: 'syz.5.1793': attribute type 10 has an invalid length.
[  391.694321][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1796'.
[  391.935757][T12670] netlink: 'syz.0.1792': attribute type 2 has an invalid length.
[  392.549537][T12671] team0 (unregistering): Port device team_slave_0 removed
[  392.614019][T12671] team0 (unregistering): Port device team_slave_1 removed
[  392.869839][T12700] netlink: zone id is out of range
[  392.900259][T12700] netlink: zone id is out of range
[  393.023287][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.059982][T12724] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.122581][T12700] netlink: zone id is out of range
[  393.235828][T12700] netlink: zone id is out of range
[  393.254630][T12700] netlink: zone id is out of range
[  393.471968][T12700] netlink: zone id is out of range
[  393.482953][T12700] netlink: zone id is out of range
[  393.506524][T12700] netlink: set zone limit has 4 unknown bytes
[  393.626824][T12738] netlink: 'syz.0.1808': attribute type 5 has an invalid length.
[  393.637325][T12738] netlink: 'syz.0.1808': attribute type 5 has an invalid length.
[  395.923984][T12749] openvswitch: netlink: IP tunnel dst address not specified
[  395.953209][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1811'.
[  395.964439][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1811'.
[  396.842366][T12774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1821'.
[  396.845687][T12765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1818'.
[  396.862437][T12764] netlink: 'syz.3.1817': attribute type 10 has an invalid length.
[  396.877904][T12764] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1817'.
[  396.887166][T12764] batadv_slave_1: entered promiscuous mode
[  396.893866][T12764] bridge0: port 3(batadv_slave_1) entered blocking state
[  396.958946][T12764] bridge0: port 3(batadv_slave_1) entered disabled state
[  396.976330][T12765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.033244][T12764] batadv_slave_1: entered allmulticast mode
[  397.091584][T12770] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1820'.
[  397.561545][T12785] netlink: 'syz.3.1824': attribute type 5 has an invalid length.
[  397.593696][T12785] netlink: 'syz.3.1824': attribute type 5 has an invalid length.
[  397.888768][T12790] openvswitch: netlink: Key type 29 is not supported
[  398.109522][T12794] ==================================================================
[  398.117812][T12794] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  398.125999][T12794] Read of size 1 at addr ffff888030aa6970 by task syz.3.1828/12794
[  398.133889][T12794] 
[  398.136233][T12794] CPU: 0 UID: 0 PID: 12794 Comm: syz.3.1828 Not tainted syzkaller #0 PREEMPT(full) 
[  398.136256][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  398.136272][T12794] Call Trace:
[  398.136280][T12794]  <TASK>
[  398.136288][T12794]  dump_stack_lvl+0x189/0x250
[  398.136313][T12794]  ? __virt_addr_valid+0x1c8/0x5c0
[  398.136335][T12794]  ? rcu_is_watching+0x15/0xb0
[  398.136353][T12794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.136373][T12794]  ? rcu_is_watching+0x15/0xb0
[  398.136389][T12794]  ? __virt_addr_valid+0x1c8/0x5c0
[  398.136409][T12794]  ? lock_release+0x4b/0x3e0
[  398.136432][T12794]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  398.136454][T12794]  ? __virt_addr_valid+0x1c8/0x5c0
[  398.136475][T12794]  ? __virt_addr_valid+0x4a5/0x5c0
[  398.136497][T12794]  print_report+0xca/0x240
[  398.136514][T12794]  ? __xfrm_state_insert+0x8af/0x1450
[  398.136537][T12794]  kasan_report+0x118/0x150
[  398.136558][T12794]  ? __xfrm_state_insert+0x8af/0x1450
[  398.136588][T12794]  __xfrm_state_insert+0x8af/0x1450
[  398.136618][T12794]  ? xfrm_state_insert+0x44/0x60
[  398.136643][T12794]  xfrm_state_insert+0x54/0x60
[  398.136666][T12794]  ipcomp6_init_state+0x655/0x900
[  398.136696][T12794]  __xfrm_init_state+0xa76/0x13f0
[  398.136713][T12794]  ? __xfrm_init_state+0x7ef/0x13f0
[  398.136734][T12794]  xfrm_add_sa+0x2f5b/0x4070
[  398.136757][T12794]  ? __pfx_xfrm_add_sa+0x10/0x10
[  398.136772][T12794]  ? apparmor_capable+0x137/0x1b0
[  398.136800][T12794]  ? __nla_parse+0x40/0x60
[  398.136824][T12794]  xfrm_user_rcv_msg+0x7a3/0xab0
[  398.136851][T12794]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  398.136901][T12794]  ? __mutex_lock+0xd4c/0x1350
[  398.136930][T12794]  netlink_rcv_skb+0x208/0x470
[  398.136952][T12794]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  398.136971][T12794]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  398.137001][T12794]  ? netlink_deliver_tap+0x2e/0x1b0
[  398.137022][T12794]  ? netlink_deliver_tap+0x2e/0x1b0
[  398.137044][T12794]  xfrm_netlink_rcv+0x79/0x90
[  398.137061][T12794]  netlink_unicast+0x82c/0x9e0
[  398.137086][T12794]  ? __pfx_netlink_unicast+0x10/0x10
[  398.137106][T12794]  ? netlink_sendmsg+0x642/0xb30
[  398.137125][T12794]  ? skb_put+0x11b/0x210
[  398.137150][T12794]  netlink_sendmsg+0x805/0xb30
[  398.137178][T12794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.137202][T12794]  ? aa_sock_msg_perm+0xf1/0x1d0
[  398.137228][T12794]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  398.137249][T12794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.137272][T12794]  __sock_sendmsg+0x219/0x270
[  398.137293][T12794]  ____sys_sendmsg+0x505/0x830
[  398.137321][T12794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  398.137352][T12794]  ? import_iovec+0x74/0xa0
[  398.137379][T12794]  ___sys_sendmsg+0x21f/0x2a0
[  398.137405][T12794]  ? __pfx____sys_sendmsg+0x10/0x10
[  398.137430][T12794]  ? irqentry_exit+0x74/0x90
[  398.137450][T12794]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.137479][T12794]  ? __fget_files+0x2a/0x420
[  398.137507][T12794]  ? __fget_files+0x2a/0x420
[  398.137524][T12794]  ? __fget_files+0x3a0/0x420
[  398.137549][T12794]  __x64_sys_sendmsg+0x19b/0x260
[  398.137574][T12794]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  398.137616][T12794]  do_syscall_64+0xfa/0x3b0
[  398.137638][T12794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.137654][T12794]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.137671][T12794]  ? clear_bhb_loop+0x60/0xb0
[  398.137690][T12794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.137713][T12794] RIP: 0033:0x7f1dbdf8eec9
[  398.137729][T12794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.137745][T12794] RSP: 002b:00007f1dbed78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  398.137763][T12794] RAX: ffffffffffffffda RBX: 00007f1dbe1e5fa0 RCX: 00007f1dbdf8eec9
[  398.137777][T12794] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000009
[  398.137789][T12794] RBP: 00007f1dbe011f91 R08: 0000000000000000 R09: 0000000000000000
[  398.137800][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.137810][T12794] R13: 00007f1dbe1e6038 R14: 00007f1dbe1e5fa0 R15: 00007ffc56db92f8
[  398.137842][T12794]  </TASK>
[  398.137849][T12794] 
[  398.540073][T12794] Allocated by task 11301:
[  398.544474][T12794]  kasan_save_track+0x3e/0x80
[  398.549160][T12794]  __kasan_slab_alloc+0x6c/0x80
[  398.553998][T12794]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  398.559455][T12794]  xfrm_state_alloc+0x24/0x2f0
[  398.564212][T12794]  __find_acq_core+0x8a7/0x1c00
[  398.569058][T12794]  xfrm_find_acq+0x78/0xa0
[  398.573465][T12794]  xfrm_alloc_userspi+0x6b3/0xc90
[  398.578544][T12794]  xfrm_user_rcv_msg+0x7a3/0xab0
[  398.583561][T12794]  netlink_rcv_skb+0x208/0x470
[  398.588341][T12794]  xfrm_netlink_rcv+0x79/0x90
[  398.593064][T12794]  netlink_unicast+0x82c/0x9e0
[  398.597912][T12794]  netlink_sendmsg+0x805/0xb30
[  398.602670][T12794]  __sock_sendmsg+0x219/0x270
[  398.607338][T12794]  ____sys_sendmsg+0x505/0x830
[  398.612108][T12794]  ___sys_sendmsg+0x21f/0x2a0
[  398.616892][T12794]  __x64_sys_sendmsg+0x19b/0x260
[  398.621828][T12794]  do_syscall_64+0xfa/0x3b0
[  398.626327][T12794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.632210][T12794] 
[  398.634521][T12794] Freed by task 6505:
[  398.638836][T12794]  kasan_save_track+0x3e/0x80
[  398.643540][T12794]  kasan_save_free_info+0x46/0x50
[  398.648557][T12794]  __kasan_slab_free+0x5b/0x80
[  398.653310][T12794]  kmem_cache_free+0x18f/0x400
[  398.658067][T12794]  xfrm_state_gc_task+0x52d/0x6b0
[  398.663090][T12794]  process_scheduled_works+0xae1/0x17b0
[  398.668634][T12794]  worker_thread+0x8a0/0xda0
[  398.673213][T12794]  kthread+0x70e/0x8a0
[  398.677272][T12794]  ret_from_fork+0x436/0x7d0
[  398.681851][T12794]  ret_from_fork_asm+0x1a/0x30
[  398.686611][T12794] 
[  398.688952][T12794] The buggy address belongs to the object at ffff888030aa6640
[  398.688952][T12794]  which belongs to the cache xfrm_state of size 928
[  398.702907][T12794] The buggy address is located 816 bytes inside of
[  398.702907][T12794]  freed 928-byte region [ffff888030aa6640, ffff888030aa69e0)
[  398.716698][T12794] 
[  398.719016][T12794] The buggy address belongs to the physical page:
[  398.725430][T12794] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030aa6200 pfn:0x30aa4
[  398.735494][T12794] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  398.743990][T12794] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  398.751535][T12794] page_type: f5(slab)
[  398.755600][T12794] raw: 00fff00000000040 ffff8880202a3a00 dead000000000122 0000000000000000
[  398.764201][T12794] raw: ffff888030aa6200 00000000800f0008 00000000f5000000 0000000000000000
[  398.772778][T12794] head: 00fff00000000040 ffff8880202a3a00 dead000000000122 0000000000000000
[  398.782227][T12794] head: ffff888030aa6200 00000000800f0008 00000000f5000000 0000000000000000
[  398.790973][T12794] head: 00fff00000000002 ffffea0000c2a901 00000000ffffffff 00000000ffffffff
[  398.799633][T12794] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  398.808309][T12794] page dumped because: kasan: bad access detected
[  398.814721][T12794] page_owner tracks the page as allocated
[  398.820424][T12794] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6488, tgid 6487 (syz.3.130), ts 122593897979, free_ts 122335252052
[  398.839605][T12794]  post_alloc_hook+0x240/0x2a0
[  398.844373][T12794]  get_page_from_freelist+0x21e4/0x22c0
[  398.849921][T12794]  __alloc_frozen_pages_noprof+0x181/0x370
[  398.855716][T12794]  alloc_pages_mpol+0x232/0x4a0
[  398.860566][T12794]  allocate_slab+0x8a/0x370
[  398.865146][T12794]  ___slab_alloc+0xbeb/0x1420
[  398.869819][T12794]  kmem_cache_alloc_noprof+0x283/0x3c0
[  398.875296][T12794]  xfrm_state_alloc+0x24/0x2f0
[  398.880054][T12794]  xfrm_add_sa+0x17d1/0x4070
[  398.884645][T12794]  xfrm_user_rcv_msg+0x7a3/0xab0
[  398.889569][T12794]  netlink_rcv_skb+0x208/0x470
[  398.894321][T12794]  xfrm_netlink_rcv+0x79/0x90
[  398.898986][T12794]  netlink_unicast+0x82c/0x9e0
[  398.903740][T12794]  netlink_sendmsg+0x805/0xb30
[  398.908506][T12794]  __sock_sendmsg+0x219/0x270
[  398.913181][T12794]  ____sys_sendmsg+0x505/0x830
[  398.917947][T12794] page last free pid 6443 tgid 6440 stack trace:
[  398.924264][T12794]  __free_frozen_pages+0xbc4/0xd30
[  398.929367][T12794]  __slab_free+0x303/0x3c0
[  398.933772][T12794]  qlist_free_all+0x97/0x140
[  398.938364][T12794]  kasan_quarantine_reduce+0x148/0x160
[  398.943813][T12794]  __kasan_slab_alloc+0x22/0x80
[  398.948825][T12794]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  398.954278][T12794]  taskstats_exit+0x14a/0xa30
[  398.958948][T12794]  do_exit+0x630/0x2300
[  398.963100][T12794]  do_group_exit+0x21c/0x2d0
[  398.967677][T12794]  get_signal+0x1286/0x1340
[  398.972339][T12794]  arch_do_signal_or_restart+0x9a/0x750
[  398.977876][T12794]  exit_to_user_mode_loop+0x75/0x110
[  398.983154][T12794]  do_syscall_64+0x2bd/0x3b0
[  398.987733][T12794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.993628][T12794] 
[  398.995940][T12794] Memory state around the buggy address:
[  399.001552][T12794]  ffff888030aa6800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  399.009601][T12794]  ffff888030aa6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  399.017648][T12794] >ffff888030aa6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  399.025714][T12794]                                                              ^
[  399.033420][T12794]  ffff888030aa6980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  399.041466][T12794]  ffff888030aa6a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  399.049510][T12794] ==================================================================
[  399.057902][T12794] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  399.065111][T12794] CPU: 0 UID: 0 PID: 12794 Comm: syz.3.1828 Not tainted syzkaller #0 PREEMPT(full) 
[  399.074485][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  399.084550][T12794] Call Trace:
[  399.087836][T12794]  <TASK>
[  399.090770][T12794]  dump_stack_lvl+0x99/0x250
[  399.095365][T12794]  ? __asan_memcpy+0x40/0x70
[  399.099976][T12794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  399.105180][T12794]  ? __pfx__printk+0x10/0x10
[  399.109797][T12794]  vpanic+0x281/0x750
[  399.113795][T12794]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  399.120488][T12794]  ? __pfx_vpanic+0x10/0x10
[  399.125043][T12794]  ? irqentry_exit+0x74/0x90
[  399.129670][T12794]  panic+0xb9/0xc0
[  399.133396][T12794]  ? __pfx_panic+0x10/0x10
[  399.137814][T12794]  ? __xfrm_state_insert+0x8af/0x1450
[  399.143217][T12794]  ? __pfx_panic+0x10/0x10
[  399.147642][T12794]  ? __xfrm_state_insert+0x8af/0x1450
[  399.153019][T12794]  check_panic_on_warn+0x89/0xb0
[  399.157966][T12794]  ? __xfrm_state_insert+0x8af/0x1450
[  399.163347][T12794]  end_report+0x78/0x160
[  399.167591][T12794]  kasan_report+0x129/0x150
[  399.172101][T12794]  ? __xfrm_state_insert+0x8af/0x1450
[  399.177491][T12794]  __xfrm_state_insert+0x8af/0x1450
[  399.182705][T12794]  ? xfrm_state_insert+0x44/0x60
[  399.187656][T12794]  xfrm_state_insert+0x54/0x60
[  399.192427][T12794]  ipcomp6_init_state+0x655/0x900
[  399.197469][T12794]  __xfrm_init_state+0xa76/0x13f0
[  399.202502][T12794]  ? __xfrm_init_state+0x7ef/0x13f0
[  399.207753][T12794]  xfrm_add_sa+0x2f5b/0x4070
[  399.212375][T12794]  ? __pfx_xfrm_add_sa+0x10/0x10
[  399.217324][T12794]  ? apparmor_capable+0x137/0x1b0
[  399.222388][T12794]  ? __nla_parse+0x40/0x60
[  399.226836][T12794]  xfrm_user_rcv_msg+0x7a3/0xab0
[  399.231802][T12794]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  399.237332][T12794]  ? __mutex_lock+0xd4c/0x1350
[  399.242126][T12794]  netlink_rcv_skb+0x208/0x470
[  399.246945][T12794]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  399.252523][T12794]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  399.257837][T12794]  ? netlink_deliver_tap+0x2e/0x1b0
[  399.263057][T12794]  ? netlink_deliver_tap+0x2e/0x1b0
[  399.268263][T12794]  xfrm_netlink_rcv+0x79/0x90
[  399.272944][T12794]  netlink_unicast+0x82c/0x9e0
[  399.277729][T12794]  ? __pfx_netlink_unicast+0x10/0x10
[  399.283023][T12794]  ? netlink_sendmsg+0x642/0xb30
[  399.287974][T12794]  ? skb_put+0x11b/0x210
[  399.292233][T12794]  netlink_sendmsg+0x805/0xb30
[  399.297018][T12794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.302315][T12794]  ? aa_sock_msg_perm+0xf1/0x1d0
[  399.307264][T12794]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  399.312563][T12794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.317869][T12794]  __sock_sendmsg+0x219/0x270
[  399.322564][T12794]  ____sys_sendmsg+0x505/0x830
[  399.327359][T12794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  399.332668][T12794]  ? import_iovec+0x74/0xa0
[  399.337186][T12794]  ___sys_sendmsg+0x21f/0x2a0
[  399.341873][T12794]  ? __pfx____sys_sendmsg+0x10/0x10
[  399.347083][T12794]  ? irqentry_exit+0x74/0x90
[  399.351685][T12794]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.356920][T12794]  ? __fget_files+0x2a/0x420
[  399.361528][T12794]  ? __fget_files+0x2a/0x420
[  399.366121][T12794]  ? __fget_files+0x3a0/0x420
[  399.370821][T12794]  __x64_sys_sendmsg+0x19b/0x260
[  399.375772][T12794]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  399.381279][T12794]  do_syscall_64+0xfa/0x3b0
[  399.385795][T12794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.391865][T12794]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  399.398022][T12794]  ? clear_bhb_loop+0x60/0xb0
[  399.402706][T12794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.408598][T12794] RIP: 0033:0x7f1dbdf8eec9
[  399.413454][T12794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.433065][T12794] RSP: 002b:00007f1dbed78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.441487][T12794] RAX: ffffffffffffffda RBX: 00007f1dbe1e5fa0 RCX: 00007f1dbdf8eec9
[  399.449468][T12794] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000009
[  399.457447][T12794] RBP: 00007f1dbe011f91 R08: 0000000000000000 R09: 0000000000000000
[  399.465431][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.473417][T12794] R13: 00007f1dbe1e6038 R14: 00007f1dbe1e5fa0 R15: 00007ffc56db92f8
[  399.481424][T12794]  </TASK>
[  399.484771][T12794] Kernel Offset: disabled
[  399.489086][T12794] Rebooting in 86400 seconds..