last executing test programs:

5m54.491293763s ago: executing program 4 (id=152):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x140, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10f9c6, 0x637}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6a, 0x0, 0x0, 0x0}, 0x90)

5m53.61621232s ago: executing program 4 (id=156):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x11}}], 0x18}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80820}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5m53.365665509s ago: executing program 4 (id=158):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m52.108678747s ago: executing program 4 (id=162):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000840)="8e", 0x1}], 0x1}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=')', 0x1}], 0x1}, 0x1bd6188c5048bd48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8)

5m51.844151366s ago: executing program 4 (id=165):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x118d046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

5m51.500151491s ago: executing program 4 (id=168):
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000e"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0)

5m36.4170246s ago: executing program 32 (id=168):
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000e"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0)

4m52.521081431s ago: executing program 5 (id=444):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
close(r0)

4m52.370198247s ago: executing program 5 (id=449):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r1)

4m52.130777477s ago: executing program 5 (id=450):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}, 0x1f8c8, 0xc8, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0xa)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x10040)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

4m51.993075437s ago: executing program 5 (id=454):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x2d, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(r4)

4m50.885042186s ago: executing program 5 (id=463):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

4m50.407775312s ago: executing program 5 (id=469):
socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71f4}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

4m35.253439022s ago: executing program 33 (id=469):
socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71f4}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m22.951757866s ago: executing program 3 (id=1370):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

2m21.9800419s ago: executing program 3 (id=1378):
r0 = socket$kcm(0xa, 0x3, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8408, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e000709fefffffffcffffff01fc0000040042801c000180100004800c000f00900000000000000006000b00bd0a0000040002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)
write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4"], 0xfe33)

2m21.495849967s ago: executing program 3 (id=1382):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5b}, 0x28)
r4 = socket$kcm(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2m20.751670273s ago: executing program 3 (id=1386):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e4894f"], 0x280)
socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)

2m17.81017327s ago: executing program 3 (id=1400):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {@in6=@mcast1, 0x4d6, 0x2, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m17.507181864s ago: executing program 3 (id=1405):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, 0x0}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x20, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0)

2m2.382398008s ago: executing program 34 (id=1405):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, 0x0}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x20, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0)

15.325519603s ago: executing program 6 (id=2038):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x10001, 0x8, 0x3fe, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001200050100000100000000000500190000"], 0x40}}, 0x90)

15.102124171s ago: executing program 6 (id=2042):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100008, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)

11.887453547s ago: executing program 6 (id=2052):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb4}}, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, 0x24, 0x101, 0x70bd28, 0xfffffffc, {0xb}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9d6}, 0x800)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x40010)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

11.224238297s ago: executing program 6 (id=2059):
r0 = getpid()
r1 = perf_event_open(0x0, r0, 0xd, 0xffffffffffffffff, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x32}, 0x28)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

10.509757324s ago: executing program 6 (id=2066):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

9.17319726s ago: executing program 0 (id=2076):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000640)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {r5, 0x2}}]}, 0x158}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r5, 0x25, 0x0, @void}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080300000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef1d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

7.106986973s ago: executing program 0 (id=2081):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

6.976229394s ago: executing program 6 (id=2083):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040001)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x2, 0x5, 0x84)
unlink(&(0x7f0000000080)='./cgroup.net/devices.allow\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x200000d4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="1400000039000bfb", 0x8}], 0x1}, 0x0)

6.643020237s ago: executing program 7 (id=2085):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8)
sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x2a8, 0x20, 0x0, 0x70bd2c, 0x25dfdbfb, {0x16}, [@generic="2c1ba2cc894dac4446ba29726264b2bc6b783a8f9fa47cb8d6c760b380c9032ba5ae514d9d2cd9b96f1e962af844f4063f8f36a1d65be5babfee065214d76428cf31b216ee65e22f26779739c557ea8f5ef35d0f953f3fb651659ba977731d7276ed230329caa52439056dae9fda05703dcb06bc31806d1e26c71b7d5632489d79da03565d130b7a5fa420b1cd12c590afb3f811ecdda583fb655ebcc0dba1a5ec9e8a09bc1cca7f683dbbdbec0776bdf1ec9f2998", @generic="20f14da4b4522f37757fee3f3b0c1fb25ef9660b45b443cda720928f617a", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x6}, @generic="2c5f7723057beef19e4d1c67e4703257a04b0079ed28cc86b300cb68ad70b065c9ef30ce22c7a06e2a270604c895f89bc00de0fae5db59b2a5507fb57bcbdb86f9e728f09d9623b8776387269593c1065e4ed25ac8526986129819ca9ef1e3b3fa2265cf1315f23342ab2d80b0df514619a3c7498b71d25072049ed4ffaf66489a36e360fb8b77ce663612026706fc5cc481412458e5279f73f32bf67b", @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x5, 0x25, 0x0, 0x0, @str='\x00'}, @generic="424d9c67ff3f28da874a98839eb440931f99878f7414ce25ef59802a721fb6a608f7760360cc22f2f0db4700841ef1db28453cf617464850cc44f04bca50145dc9e222352f142d7c760b1983636601cf8b401c6daf553eb27f44f6bdacaa4b8af6d6e470cb548b4d0e556eb6abe58849031290d23b4992f705a5dfe61a658372eb832cafe327c59086ce481d0803270f214122598a5450528e31b1f326ca114b97cdbe015224cb7e0e3563e6b6f678ab53d2914c5e14081b32c2784c04dc959a10351ff6db20ef9aa281251a8c3ae1de8cc0326fa8b7e51bd5c2c445a741a6bc4ec2602bb99876579d8c97f755c021ef5adffc02", @typed={0x6, 0xa3, 0x0, 0x0, @str='(\x00'}, @typed={0x4, 0xcb}, @typed={0x8, 0xae, 0x0, 0x0, @uid}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x48840}, 0xc854)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

6.149254122s ago: executing program 1 (id=2086):
socket$nl_crypto(0x10, 0x3, 0x15)
socketpair(0x1f, 0x1, 0xfffffff3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x84)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x23, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb}, @jmp={0x5, 0x0, 0xcef0126210bb8bad, 0x9, 0x8, 0xffffffffffffffe0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x109}, 0x94)

5.624823485s ago: executing program 2 (id=2087):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x34000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, r0, 0x1, 0xffffffffffffffff, 0x0)
close(r5)

5.348654136s ago: executing program 2 (id=2088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000e00000028"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe1e6}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, 0x23, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0xc80, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d4d4955cfe211f9ab8c79f03d1c4e6ba1c72fd1a700bf3629959a81e3d83ea07873ceb0604794f53429f0eee6996d71fc76da3a89ad44025a959f1ceaa358a03"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x39fd5066, 0x0, r3}, 0x48)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.076367259s ago: executing program 7 (id=2089):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004d80)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000005000)={&(0x7f0000004dc0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x10, &(0x7f0000004f80), 0x0, 0x0, 0x0, 0x48810}, 0x2004c8c4)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
perf_event_open$cgroup(&(0x7f0000001200)={0x5, 0x80, 0x3, 0xe8, 0xe1, 0x1, 0x0, 0x80000000, 0x1218, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x5, 0x3, 0x5c, 0x6, 0xf, 0x0, 0x3}, r2, 0xf, r3, 0x2)
close(0x3)

4.010899522s ago: executing program 0 (id=2090):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r1, 0xe, 0x1, 0x5236, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000180)=""/69)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

3.943410289s ago: executing program 2 (id=2091):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40408c0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)

3.925551301s ago: executing program 1 (id=2092):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x9, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x3, 0x0, 0x2, 0xffffffffffffffff}, {0x7ff, 0x9ff, 0x6, 0x800000004000000}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x200400c5}, 0x0)
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x114, 0x1000}], 0x10}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd48e0050000003a00008877fbac141516e000000107080511b180008944040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

3.537633918s ago: executing program 0 (id=2093):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x18)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

3.160787171s ago: executing program 7 (id=2094):
mkdir(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000002400010125bd7000fcffffff576f00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0)

2.967057482s ago: executing program 1 (id=2095):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x1, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x104828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000)

1.562861792s ago: executing program 2 (id=2096):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000012c0)='ns/time_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000001e40)='ns/time_for_children\x00')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x20000020)
sendmsg$kcm(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\a'}]}], {0x14}}, 0xc0}}, 0x0)

1.479788027s ago: executing program 1 (id=2097):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
close(r4)

1.478979579s ago: executing program 0 (id=2098):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1400000010000100000000000000e03e0200000a78000000060a0b0400000000000000000200fffe4c0004802800018008000100666962001c000280080003400000000608000240000000010800014000000009200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xb4}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpid()
close(r1)
sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4014}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f9, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)

1.431760539s ago: executing program 7 (id=2099):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x9}]}]}}, &(0x7f0000000040)=""/5, 0x2e, 0x5, 0x1, 0x10}, 0x28)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38)

1.360211053s ago: executing program 2 (id=2100):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

921.006143ms ago: executing program 1 (id=2101):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x3d}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

902.073518ms ago: executing program 7 (id=2102):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x108, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004c818)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8)
setsockopt$sock_attach_bpf(r6, 0x6, 0x5, &(0x7f00000003c0), 0x4)

846.185801ms ago: executing program 0 (id=2103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

790.012867ms ago: executing program 2 (id=2104):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x2000, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x54, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000b80)='rcu_utilization\x00', r2}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x20040000)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4050)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040)

407.451791ms ago: executing program 1 (id=2105):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40010040)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

0s ago: executing program 7 (id=2106):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, 0x0, 0x20000000)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x8001, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

kernel console output (not intermixed with test programs):

ridge_slave_0) entered disabled state
[   93.200778][ T5862] bridge_slave_0: entered allmulticast mode
[   93.208348][ T5862] bridge_slave_0: entered promiscuous mode
[   93.216906][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   93.261009][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.268366][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.275791][ T5862] bridge_slave_1: entered allmulticast mode
[   93.283738][ T5862] bridge_slave_1: entered promiscuous mode
[   93.396036][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.403364][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.410700][ T5871] bridge_slave_0: entered allmulticast mode
[   93.418573][ T5871] bridge_slave_0: entered promiscuous mode
[   93.459388][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.467083][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.474390][ T5871] bridge_slave_1: entered allmulticast mode
[   93.481682][ T5871] bridge_slave_1: entered promiscuous mode
[   93.499674][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.550464][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.614080][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.621387][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.629037][ T5861] bridge_slave_0: entered allmulticast mode
[   93.638004][ T5861] bridge_slave_0: entered promiscuous mode
[   93.706426][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.717344][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.725501][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.733228][ T5861] bridge_slave_1: entered allmulticast mode
[   93.740975][ T5861] bridge_slave_1: entered promiscuous mode
[   93.750491][ T5862] team0: Port device team_slave_0 added
[   93.773780][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.780995][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.792197][ T5867] bridge_slave_0: entered allmulticast mode
[   93.799607][ T5867] bridge_slave_0: entered promiscuous mode
[   93.810738][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.850702][ T5862] team0: Port device team_slave_1 added
[   93.870850][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.878068][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.886373][ T5863] bridge_slave_0: entered allmulticast mode
[   93.893982][ T5863] bridge_slave_0: entered promiscuous mode
[   93.901181][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.908704][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.916128][ T5867] bridge_slave_1: entered allmulticast mode
[   93.924320][ T5867] bridge_slave_1: entered promiscuous mode
[   93.991669][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.017423][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.025337][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.033496][ T5863] bridge_slave_1: entered allmulticast mode
[   94.041851][ T5863] bridge_slave_1: entered promiscuous mode
[   94.068023][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.079576][ T5871] team0: Port device team_slave_0 added
[   94.089313][ T5871] team0: Port device team_slave_1 added
[   94.098285][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.114014][ T5876] Bluetooth: hci1: command tx timeout
[   94.126269][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.133280][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.160086][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.182531][ T5873] Bluetooth: hci0: command tx timeout
[   94.187132][ T5876] Bluetooth: hci3: command tx timeout
[   94.198676][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.237100][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.244562][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.257470][ T5876] Bluetooth: hci2: command tx timeout
[   94.270967][ T5873] Bluetooth: hci4: command tx timeout
[   94.277300][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.295408][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.335576][ T5861] team0: Port device team_slave_0 added
[   94.342567][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.349636][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.376477][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.398287][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.424169][ T5861] team0: Port device team_slave_1 added
[   94.432529][ T5867] team0: Port device team_slave_0 added
[   94.439511][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.446666][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.474126][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.514009][ T5867] team0: Port device team_slave_1 added
[   94.573223][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.580240][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.606749][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.620040][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.627607][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.654547][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.694108][ T5863] team0: Port device team_slave_0 added
[   94.707960][ T5862] hsr_slave_0: entered promiscuous mode
[   94.714662][ T5862] hsr_slave_1: entered promiscuous mode
[   94.756162][ T5863] team0: Port device team_slave_1 added
[   94.793197][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.800421][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.826746][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.869086][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.876708][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.903371][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.925267][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.932784][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.959033][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.997178][ T5871] hsr_slave_0: entered promiscuous mode
[   95.004022][ T5871] hsr_slave_1: entered promiscuous mode
[   95.010284][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   95.016533][ T5871] Cannot create hsr debugfs directory
[   95.030939][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.038062][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.064857][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.156375][ T5861] hsr_slave_0: entered promiscuous mode
[   95.164271][ T5861] hsr_slave_1: entered promiscuous mode
[   95.170593][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   95.176597][ T5861] Cannot create hsr debugfs directory
[   95.250276][ T5867] hsr_slave_0: entered promiscuous mode
[   95.257177][ T5867] hsr_slave_1: entered promiscuous mode
[   95.264404][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   95.270299][ T5867] Cannot create hsr debugfs directory
[   95.408089][ T5863] hsr_slave_0: entered promiscuous mode
[   95.414704][ T5863] hsr_slave_1: entered promiscuous mode
[   95.420843][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   95.426719][ T5863] Cannot create hsr debugfs directory
[   95.902302][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.915699][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.941353][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.965705][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.026360][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.037966][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.050789][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.062104][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.170844][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.177733][ T5873] Bluetooth: hci1: command tx timeout
[   96.189958][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.211947][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.227075][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.252954][ T5873] Bluetooth: hci3: command tx timeout
[   96.258516][ T5873] Bluetooth: hci0: command tx timeout
[   96.332378][ T5876] Bluetooth: hci2: command tx timeout
[   96.339021][ T5873] Bluetooth: hci4: command tx timeout
[   96.395545][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.407016][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.420584][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.441888][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.471896][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.584496][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.597958][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.611796][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.627889][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   96.640306][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.655859][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.720190][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   96.732308][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.739697][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.755292][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.762505][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.787296][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.794813][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.825916][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.857842][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.865160][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.958101][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   97.006559][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.013959][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.027147][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.034371][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.081224][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.158173][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   97.198640][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.237153][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.244371][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.269396][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.276602][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.389177][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   97.448803][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.456253][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.510029][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.564956][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.572183][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.680118][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.758551][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.845165][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.974044][ T5862] veth0_vlan: entered promiscuous mode
[   98.014052][ T5871] veth0_vlan: entered promiscuous mode
[   98.028512][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.050476][ T5871] veth1_vlan: entered promiscuous mode
[   98.079875][ T5862] veth1_vlan: entered promiscuous mode
[   98.091175][ T5861] veth0_vlan: entered promiscuous mode
[   98.127858][ T5861] veth1_vlan: entered promiscuous mode
[   98.201492][ T5871] veth0_macvtap: entered promiscuous mode
[   98.229598][ T5871] veth1_macvtap: entered promiscuous mode
[   98.252254][ T5873] Bluetooth: hci1: command tx timeout
[   98.267126][ T5862] veth0_macvtap: entered promiscuous mode
[   98.292598][ T5862] veth1_macvtap: entered promiscuous mode
[   98.309195][ T5867] veth0_vlan: entered promiscuous mode
[   98.325580][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.333766][ T5873] Bluetooth: hci0: command tx timeout
[   98.339215][ T5876] Bluetooth: hci3: command tx timeout
[   98.370480][ T5867] veth1_vlan: entered promiscuous mode
[   98.387128][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.398459][ T5861] veth0_macvtap: entered promiscuous mode
[   98.408785][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.416077][ T5876] Bluetooth: hci4: command tx timeout
[   98.416560][ T5873] Bluetooth: hci2: command tx timeout
[   98.429133][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.459474][ T5861] veth1_macvtap: entered promiscuous mode
[   98.481112][ T2964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.501637][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.528826][ T2964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.546976][ T2964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.588686][ T2964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.598360][ T2964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.671191][ T2964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.695238][ T5867] veth0_macvtap: entered promiscuous mode
[   98.713365][ T2964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.745700][ T5867] veth1_macvtap: entered promiscuous mode
[   98.768093][ T2964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.783203][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.801939][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.869188][   T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.878679][   T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.913754][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.927473][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.940594][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.949749][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.975013][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.019276][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.075799][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.084893][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.089034][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.093389][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.141223][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.151382][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.180907][ T5863] veth0_vlan: entered promiscuous mode
[   99.221905][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.245529][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.256264][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.270571][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.286601][ T5863] veth1_vlan: entered promiscuous mode
[   99.332008][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.339971][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.423017][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.447329][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.459160][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.538024][ T5863] veth0_macvtap: entered promiscuous mode
[   99.591949][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.600496][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.608354][ T5863] veth1_macvtap: entered promiscuous mode
[   99.741288][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.778768][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.794908][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.804650][ T5873] Bluetooth: hci1: Dropping invalid advertising data
[   99.812412][ T5873] Bluetooth: hci1: unknown advertising packet type: 0xff
[   99.812442][ T5873] Bluetooth: hci1: Malformed LE Event: 0x02
[   99.829440][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.829454][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.860587][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.900235][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.902051][    C0] hrtimer: interrupt took 87931 ns
[   99.933734][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.333305][ T5873] Bluetooth: hci1: command tx timeout
[  100.378130][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.426118][ T5873] Bluetooth: hci3: command tx timeout
[  100.426166][ T5876] Bluetooth: hci0: command tx timeout
[  100.449505][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.501284][ T5876] Bluetooth: hci2: command tx timeout
[  100.501341][ T5873] Bluetooth: hci4: command tx timeout
[  100.722680][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.754494][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.302188][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  102.378689][ T6030] cgroup: fork rejected by pids controller in /syz1
[  102.579392][ T6036] Zero length message leads to an empty skb
[  103.230033][ T6045] netlink: 'syz.4.21': attribute type 10 has an invalid length.
[  105.508986][ T6045] veth0_vlan: left promiscuous mode
[  105.520075][ T6045] veth0_vlan: entered promiscuous mode
[  105.531051][ T6045] team0: Device veth0_vlan failed to register rx_handler
[  107.037668][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.258782][ T6078] netlink: 'syz.2.33': attribute type 21 has an invalid length.
[  107.358417][ T6078] IPv6: NLM_F_CREATE should be specified when creating new route
[  107.621009][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.830894][ T6083] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.957598][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.966370][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.976665][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.989661][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.000506][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.014804][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.215173][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'.
[  108.305423][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.648736][ T6106] netlink: 211 bytes leftover after parsing attributes in process `syz.3.45'.
[  109.181881][ T6119] Illegal XDP return value 12 on prog  (id 34) dev N/A, expect packet loss!
[  109.826525][   T36] bridge_slave_1: left allmulticast mode
[  109.870845][   T36] bridge_slave_1: left promiscuous mode
[  109.878202][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.958551][   T36] bridge_slave_0: left allmulticast mode
[  109.982435][   T36] bridge_slave_0: left promiscuous mode
[  109.988996][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.092439][ T5873] Bluetooth: hci1: command tx timeout
[  111.113415][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.173937][ T5873] Bluetooth: hci1: command tx timeout
[  113.389485][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.612979][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.646881][   T36] bond0 (unregistering): Released all slaves
[  114.257669][ T5873] Bluetooth: hci1: command tx timeout
[  114.651384][ T6088] chnl_net:caif_netlink_parms(): no params data found
[  115.824053][ T6241] syzkaller0: entered promiscuous mode
[  115.829873][ T6241] syzkaller0: entered allmulticast mode
[  116.332265][ T5873] Bluetooth: hci1: command tx timeout
[  116.706044][   T36] hsr_slave_0: left promiscuous mode
[  116.738105][   T36] hsr_slave_1: left promiscuous mode
[  116.745900][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.758989][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.773996][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.790459][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.851804][   T36] veth1_macvtap: left promiscuous mode
[  116.870599][   T36] veth0_macvtap: left promiscuous mode
[  116.888698][   T36] veth1_vlan: left promiscuous mode
[  116.910037][   T36] veth0_vlan: left promiscuous mode
[  119.451165][   T36] team0 (unregistering): Port device team_slave_1 removed
[  119.501691][   T36] team0 (unregistering): Port device team_slave_0 removed
[  120.500798][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.508249][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.519370][ T6088] bridge_slave_0: entered allmulticast mode
[  120.529872][ T6088] bridge_slave_0: entered promiscuous mode
[  120.633109][ T6317] syzkaller0: entered promiscuous mode
[  120.638734][ T6317] syzkaller0: entered allmulticast mode
[  121.812702][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.819977][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.827554][ T6088] bridge_slave_1: entered allmulticast mode
[  121.835506][ T6088] bridge_slave_1: entered promiscuous mode
[  124.483253][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.522370][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.737640][ T6362] netlink: 'syz.4.136': attribute type 4 has an invalid length.
[  124.782827][ T6362] netlink: 'syz.4.136': attribute type 1 has an invalid length.
[  124.821496][ T6362] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.136'.
[  125.076639][ T6088] team0: Port device team_slave_0 added
[  125.106590][ T6088] team0: Port device team_slave_1 added
[  126.526586][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.549306][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.603825][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.638593][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.664426][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.744966][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.836100][ T6400] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.147'.
[  127.144454][ T6404] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.148'.
[  127.252495][ T6088] hsr_slave_0: entered promiscuous mode
[  127.259405][ T6088] hsr_slave_1: entered promiscuous mode
[  129.594066][ T6088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  129.638474][ T6088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  129.699980][ T6088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  129.768191][ T6088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  129.994130][ T6466] =======================================================
[  129.994130][ T6466] WARNING: The mand mount option has been deprecated and
[  129.994130][ T6466]          and is ignored by this kernel. Remove the mand
[  129.994130][ T6466]          option from the mount to silence this warning.
[  129.994130][ T6466] =======================================================
[  130.283820][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.311920][ T6088] 8021q: adding VLAN 0 to HW filter on device team0
[  132.826271][ T6502] netlink: 'syz.3.180': attribute type 2 has an invalid length.
[  132.834077][ T6502] netlink: 'syz.3.180': attribute type 8 has an invalid length.
[  132.841892][ T6502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.180'.
[  134.042583][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.049750][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.194596][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.201797][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.991132][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.085491][ T6088] veth0_vlan: entered promiscuous mode
[  137.127052][ T6088] veth1_vlan: entered promiscuous mode
[  137.198028][ T6088] veth0_macvtap: entered promiscuous mode
[  137.221868][ T6088] veth1_macvtap: entered promiscuous mode
[  137.229918][ T6543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  137.265369][ T6543] netlink: 'syz.3.195': attribute type 1 has an invalid length.
[  137.291431][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.304371][ T6543] netlink: 144 bytes leftover after parsing attributes in process `syz.3.195'.
[  137.348490][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.382751][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.413388][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.505225][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.525256][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.712517][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.720472][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.897490][ T6554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.199'.
[  138.102374][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.110287][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.181624][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.189166][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  139.930210][ T6612] cgroup: fork rejected by pids controller in /syz0
[  141.289522][ T6639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.219'.
[  143.429317][ T6645] netlink: 'syz.1.222': attribute type 39 has an invalid length.
[  143.626748][ T6593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.815217][ T6593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.004617][ T6593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.296231][ T6593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.738214][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.748578][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.763943][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.781522][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.790013][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  145.229952][ T6593] bridge_slave_1: left allmulticast mode
[  145.252317][ T6593] bridge_slave_1: left promiscuous mode
[  145.279137][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.325503][ T6593] bridge_slave_0: left allmulticast mode
[  145.331217][ T6593] bridge_slave_0: left promiscuous mode
[  145.367912][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.049709][ T6691] cgroup: fork rejected by pids controller in /syz2
[  146.149874][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.159152][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.169775][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.178301][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.192373][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.454356][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.469007][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.487972][ T6593] bond0 (unregistering): Released all slaves
[  146.646812][ T6697] delete_channel: no stack
[  146.892336][ T5873] Bluetooth: hci0: command tx timeout
[  146.927359][ T6593] hsr_slave_0: left promiscuous mode
[  146.937984][ T6593] hsr_slave_1: left promiscuous mode
[  146.947830][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.959917][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.970536][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.988363][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.011858][ T6593] veth1_macvtap: left promiscuous mode
[  147.021684][ T6593] veth0_macvtap: left promiscuous mode
[  147.028683][ T6593] veth1_vlan: left promiscuous mode
[  147.038305][ T6593] veth0_vlan: left promiscuous mode
[  147.504242][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  147.520683][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  147.536217][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  147.547760][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  147.558432][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.669722][ T6593] team0 (unregistering): Port device team_slave_1 removed
[  147.707504][ T6593] team0 (unregistering): Port device team_slave_0 removed
[  148.256853][ T5876] Bluetooth: hci2: command tx timeout
[  148.333751][ T6668] chnl_net:caif_netlink_parms(): no params data found
[  148.984426][ T5876] Bluetooth: hci0: command tx timeout
[  149.480327][ T6693] chnl_net:caif_netlink_parms(): no params data found
[  149.549638][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.569461][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.596704][ T6668] bridge_slave_0: entered allmulticast mode
[  149.643450][ T6668] bridge_slave_0: entered promiscuous mode
[  149.654726][ T5876] Bluetooth: hci4: command tx timeout
[  149.740914][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.758690][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.771276][ T6668] bridge_slave_1: entered allmulticast mode
[  149.781845][ T6668] bridge_slave_1: entered promiscuous mode
[  150.110510][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.334623][ T5876] Bluetooth: hci2: command tx timeout
[  150.486465][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.815197][ T6668] team0: Port device team_slave_0 added
[  150.959027][ T6593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.052319][ T5876] Bluetooth: hci0: command tx timeout
[  151.209067][ T6668] team0: Port device team_slave_1 added
[  151.242889][ T6744] netlink: 'syz.1.259': attribute type 4 has an invalid length.
[  151.301724][ T6593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.335209][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.343235][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.350499][ T6693] bridge_slave_0: entered allmulticast mode
[  151.359157][ T6693] bridge_slave_0: entered promiscuous mode
[  151.437314][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.458372][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.487972][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.527116][ T6704] chnl_net:caif_netlink_parms(): no params data found
[  151.619726][ T6593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.638631][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.646355][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.654046][ T6693] bridge_slave_1: entered allmulticast mode
[  151.662285][ T6693] bridge_slave_1: entered promiscuous mode
[  151.669920][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.678559][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.711266][ T5876] Bluetooth: hci4: command tx timeout
[  151.711266][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.823926][ T6593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.968487][ T6759] netlink: 'syz.3.264': attribute type 10 has an invalid length.
[  151.977701][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.264'.
[  151.995379][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.072354][ T6759] veth0_vlan: entered allmulticast mode
[  152.079204][ T6759] bridge0: port 3(veth0_vlan) entered blocking state
[  152.120570][ T6759] bridge0: port 3(veth0_vlan) entered disabled state
[  152.139288][ T6759] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  152.203669][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.228463][ T6668] hsr_slave_0: entered promiscuous mode
[  152.259590][ T6668] hsr_slave_1: entered promiscuous mode
[  152.267611][ T6668] debugfs: 'hsr0' already exists in 'hsr'
[  152.274236][ T6668] Cannot create hsr debugfs directory
[  152.418142][ T5876] Bluetooth: hci2: command tx timeout
[  152.538065][ T6693] team0: Port device team_slave_0 added
[  152.558695][ T6693] team0: Port device team_slave_1 added
[  152.583785][ T6771] netlink: 34 bytes leftover after parsing attributes in process `syz.1.268'.
[  152.979978][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.995105][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.003323][ T6704] bridge_slave_0: entered allmulticast mode
[  153.018615][ T6704] bridge_slave_0: entered promiscuous mode
[  153.049823][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.059986][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.087649][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.131325][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.138920][ T5876] Bluetooth: hci0: command tx timeout
[  153.145835][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.153615][ T6704] bridge_slave_1: entered allmulticast mode
[  153.161820][ T6704] bridge_slave_1: entered promiscuous mode
[  153.202803][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.209801][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.248964][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.353510][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.376782][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.553211][ T6593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.601834][ T6704] team0: Port device team_slave_0 added
[  153.615874][ T6704] team0: Port device team_slave_1 added
[  153.645074][ T6693] hsr_slave_0: entered promiscuous mode
[  153.651659][ T6693] hsr_slave_1: entered promiscuous mode
[  153.659483][ T6693] debugfs: 'hsr0' already exists in 'hsr'
[  153.665615][ T6693] Cannot create hsr debugfs directory
[  153.686671][ T6593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.750766][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.758734][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.787049][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.798403][ T5876] Bluetooth: hci4: command tx timeout
[  153.823454][ T6593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.858835][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.866329][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.895204][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.952976][ T6593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.103700][ T6704] hsr_slave_0: entered promiscuous mode
[  154.110447][ T6704] hsr_slave_1: entered promiscuous mode
[  154.117734][ T6704] debugfs: 'hsr0' already exists in 'hsr'
[  154.125685][ T6704] Cannot create hsr debugfs directory
[  154.334824][ T6593] bridge_slave_1: left allmulticast mode
[  154.340697][ T6593] bridge_slave_1: left promiscuous mode
[  154.346813][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.368032][ T6593] bridge_slave_0: left allmulticast mode
[  154.374087][ T6593] bridge_slave_0: left promiscuous mode
[  154.379852][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.391891][ T6593] bridge_slave_1: left allmulticast mode
[  154.398389][ T6593] bridge_slave_1: left promiscuous mode
[  154.404433][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.415728][ T6593] bridge_slave_0: left allmulticast mode
[  154.421509][ T6593] bridge_slave_0: left promiscuous mode
[  154.428260][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.492978][ T5876] Bluetooth: hci2: command tx timeout
[  154.768393][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.782196][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.792923][ T6593] bond0 (unregistering): Released all slaves
[  155.022997][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.034984][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.045221][ T6593] bond0 (unregistering): Released all slaves
[  155.291052][ T6693] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  155.333611][ T6693] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  155.357822][ T6693] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  155.373011][ T6693] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  155.527667][ T6668] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.540238][ T6668] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  155.593027][ T6593] hsr_slave_0: left promiscuous mode
[  155.599072][ T6593] hsr_slave_1: left promiscuous mode
[  155.606138][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.615971][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.625864][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.633618][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.649201][ T6593] hsr_slave_0: left promiscuous mode
[  155.655898][ T6593] hsr_slave_1: left promiscuous mode
[  155.661855][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.671738][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.680696][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.689538][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.720755][ T6593] veth1_macvtap: left promiscuous mode
[  155.726497][ T6593] veth0_macvtap: left promiscuous mode
[  155.733016][ T6593] veth1_vlan: left promiscuous mode
[  155.738405][ T6593] veth0_vlan: left promiscuous mode
[  155.746702][ T6593] veth1_macvtap: left promiscuous mode
[  155.752780][ T6593] veth0_macvtap: left promiscuous mode
[  155.758407][ T6593] veth1_vlan: left promiscuous mode
[  155.852420][ T5876] Bluetooth: hci4: command tx timeout
[  156.237537][ T6593] team0 (unregistering): Port device team_slave_1 removed
[  156.276440][ T6593] team0 (unregistering): Port device team_slave_0 removed
[  156.925598][ T6593] team0 (unregistering): Port device team_slave_1 removed
[  156.961636][ T6593] team0 (unregistering): Port device team_slave_0 removed
[  157.309914][ T6668] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  157.322815][ T6668] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  157.535965][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.576013][ T6693] 8021q: adding VLAN 0 to HW filter on device team0
[  157.619904][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.627125][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.650130][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.657345][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.705438][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.768509][ T6668] 8021q: adding VLAN 0 to HW filter on device team0
[  157.815421][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.822746][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.869130][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.876376][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.889559][ T6704] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  157.917117][ T6704] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  157.929600][ T6704] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  157.962186][ T6704] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  158.237240][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.259341][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.308109][ T6704] 8021q: adding VLAN 0 to HW filter on device team0
[  158.330202][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.337455][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.364948][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.372256][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.519138][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.625030][ T6668] veth0_vlan: entered promiscuous mode
[  158.659346][ T6668] veth1_vlan: entered promiscuous mode
[  158.729629][ T6668] veth0_macvtap: entered promiscuous mode
[  158.767565][ T6668] veth1_macvtap: entered promiscuous mode
[  158.835006][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.853980][ T6693] veth0_vlan: entered promiscuous mode
[  158.871287][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.885464][ T6693] veth1_vlan: entered promiscuous mode
[  158.899277][ T2964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.909543][ T2964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.929170][ T2964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.939841][ T2964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.969662][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.014498][ T6693] veth0_macvtap: entered promiscuous mode
[  159.041764][ T6693] veth1_macvtap: entered promiscuous mode
[  159.105083][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.121804][ T6704] veth0_vlan: entered promiscuous mode
[  159.135583][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.149462][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.164377][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.198735][ T6704] veth1_vlan: entered promiscuous mode
[  159.213759][ T6585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.221867][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.231233][ T6585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.266362][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.315285][ T6704] veth0_macvtap: entered promiscuous mode
[  159.337666][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.348434][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.379213][ T6704] veth1_macvtap: entered promiscuous mode
[  159.476766][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.499876][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.530528][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.554501][ T6593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.557077][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.578725][ T6593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.590915][ T2964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.611003][ T2964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.621344][ T2964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.644881][ T2964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.830938][ T6585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.873034][ T6585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.988192][ T6593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.010851][ T6593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.110404][ T6836] syz.2.248 uses obsolete (PF_INET,SOCK_PACKET)
[  164.179143][ T5234] udevd[5234]: worker [5922] terminated by signal 33 (Unknown signal 33)
[  164.196001][ T5234] udevd[5234]: worker [5922] failed while handling '/devices/virtual/block/loop3'
[  166.560656][ T6936] netlink: 276 bytes leftover after parsing attributes in process `syz.3.319'.
[  169.672374][ T5876] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  171.385275][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[  171.394801][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[  178.774338][ T7107] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.385'.
[  179.073268][ T7118] netlink: 'syz.5.391': attribute type 10 has an invalid length.
[  179.081564][ T7118] netlink: 40 bytes leftover after parsing attributes in process `syz.5.391'.
[  179.100103][ T7118] batadv0: entered promiscuous mode
[  179.116206][ T7118] batadv0: entered allmulticast mode
[  179.129563][ T7118] bridge0: port 3(batadv0) entered blocking state
[  179.158216][ T7118] bridge0: port 3(batadv0) entered disabled state
[  179.196253][ T7118] bridge0: port 3(batadv0) entered blocking state
[  179.203346][ T7118] bridge0: port 3(batadv0) entered forwarding state
[  179.471045][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.399'.
[  179.704323][ T6598] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  179.714200][ T6598] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  181.242445][ T7165] syzkaller0: entered promiscuous mode
[  181.251493][ T7165] syzkaller0: entered allmulticast mode
[  181.299651][ T7169] netlink: 192 bytes leftover after parsing attributes in process `syz.2.412'.
[  181.989420][ T7178] ªªªªªª: renamed from dummy0 (while UP)
[  182.231164][ T7187] netlink: 'syz.3.417': attribute type 13 has an invalid length.
[  187.937844][ T7204] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[  188.110041][ T7224] ªªªªªª: renamed from dummy0 (while UP)
[  189.639454][ T7275] netlink: 80 bytes leftover after parsing attributes in process `syz.3.451'.
[  189.703464][ T7275] netlink: 80 bytes leftover after parsing attributes in process `syz.3.451'.
[  191.063748][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.288805][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.519738][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.717705][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.273978][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.285217][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.295739][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.309336][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.327895][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.412393][ T5876] Bluetooth: hci0: command tx timeout
[  194.996163][   T13] bridge_slave_1: left allmulticast mode
[  195.022111][   T13] bridge_slave_1: left promiscuous mode
[  195.028132][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.064615][   T13] bridge_slave_0: left allmulticast mode
[  195.090076][   T13] bridge_slave_0: left promiscuous mode
[  195.101658][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.090170][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.106060][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.125564][   T13] bond0 (unregistering): Released all slaves
[  196.487161][ T5876] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  196.494704][ T5873] Bluetooth: hci0: command tx timeout
[  197.166239][   T13] hsr_slave_0: left promiscuous mode
[  197.197747][   T13] hsr_slave_1: left promiscuous mode
[  197.204900][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.222564][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.241098][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.259638][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.308342][   T13] veth1_macvtap: left promiscuous mode
[  197.325012][   T13] veth0_macvtap: left promiscuous mode
[  197.330754][   T13] veth1_vlan: left promiscuous mode
[  197.352837][   T13] veth0_vlan: left promiscuous mode
[  198.572381][ T5876] Bluetooth: hci0: command tx timeout
[  198.876268][   T13] team0 (unregistering): Port device team_slave_1 removed
[  199.009532][   T13] team0 (unregistering): Port device team_slave_0 removed
[  199.629658][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  199.639658][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  200.033451][ T7321] chnl_net:caif_netlink_parms(): no params data found
[  200.657856][ T5876] Bluetooth: hci0: command tx timeout
[  201.711820][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.732867][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.744952][ T7321] bridge_slave_0: entered allmulticast mode
[  201.787963][ T7321] bridge_slave_0: entered promiscuous mode
[  201.818486][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.854055][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.922562][ T7321] bridge_slave_1: entered allmulticast mode
[  201.963712][ T7321] bridge_slave_1: entered promiscuous mode
[  202.449544][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.497837][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.607099][ T7321] team0: Port device team_slave_0 added
[  202.629081][ T7321] team0: Port device team_slave_1 added
[  202.811655][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.832879][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.860481][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.908399][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.928553][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.005161][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.147111][ T7321] hsr_slave_0: entered promiscuous mode
[  203.159629][ T7321] hsr_slave_1: entered promiscuous mode
[  203.169689][ T7321] debugfs: 'hsr0' already exists in 'hsr'
[  203.199556][ T7321] Cannot create hsr debugfs directory
[  203.886397][ T7463] netlink: 'syz.1.519': attribute type 29 has an invalid length.
[  203.976654][ T7463] netlink: 'syz.1.519': attribute type 29 has an invalid length.
[  207.278126][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.296836][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.307916][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.317317][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.325916][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.106815][ T7321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  208.141813][ T7321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  208.161310][ T7321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  208.180646][ T7321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  208.221621][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.301773][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.418174][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.504876][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.535137][ T7478] chnl_net:caif_netlink_parms(): no params data found
[  208.565795][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.658328][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.665788][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.674244][ T7478] bridge_slave_0: entered allmulticast mode
[  208.681763][ T7478] bridge_slave_0: entered promiscuous mode
[  208.690447][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.697889][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.705603][ T7478] bridge_slave_1: entered allmulticast mode
[  208.713984][ T7478] bridge_slave_1: entered promiscuous mode
[  208.765499][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.778171][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.789786][ T7321] 8021q: adding VLAN 0 to HW filter on device team0
[  208.853687][ T7478] team0: Port device team_slave_0 added
[  208.875855][ T7478] team0: Port device team_slave_1 added
[  208.887500][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.894682][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.906453][   T36] bridge0: port 3(batadv0) entered disabled state
[  208.916549][   T36] bridge_slave_1: left allmulticast mode
[  208.923083][   T36] bridge_slave_1: left promiscuous mode
[  208.928812][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.940309][   T36] bridge_slave_0: left allmulticast mode
[  208.946283][   T36] bridge_slave_0: left promiscuous mode
[  208.953035][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.251489][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.264207][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.274677][   T36] bond0 (unregistering): Released all slaves
[  209.335657][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.342916][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.356808][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.364483][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.373374][ T5868] Bluetooth: hci2: command tx timeout
[  209.401024][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.414208][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.421301][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.447864][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.560027][ T7478] hsr_slave_0: entered promiscuous mode
[  209.569584][ T7478] hsr_slave_1: entered promiscuous mode
[  209.577536][ T7478] debugfs: 'hsr0' already exists in 'hsr'
[  209.583613][ T7478] Cannot create hsr debugfs directory
[  209.719850][   T36] hsr_slave_0: left promiscuous mode
[  209.731444][   T36] hsr_slave_1: left promiscuous mode
[  209.738544][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.748290][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.758756][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.766435][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.793408][   T36] veth1_macvtap: left promiscuous mode
[  209.799014][   T36] veth0_macvtap: left promiscuous mode
[  209.806144][   T36] veth1_vlan: left promiscuous mode
[  209.811502][   T36] veth0_vlan: left promiscuous mode
[  210.359718][   T36] team0 (unregistering): Port device team_slave_1 removed
[  210.397252][   T36] team0 (unregistering): Port device team_slave_0 removed
[  210.963654][ T7478] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  210.982659][ T7478] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  211.001867][ T7478] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  211.031679][ T7478] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  211.051643][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.146881][ T7321] veth0_vlan: entered promiscuous mode
[  211.165707][ T7321] veth1_vlan: entered promiscuous mode
[  211.215019][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.234056][ T7321] veth0_macvtap: entered promiscuous mode
[  211.249585][ T7321] veth1_macvtap: entered promiscuous mode
[  211.274051][ T7478] 8021q: adding VLAN 0 to HW filter on device team0
[  211.285962][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.306562][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.318418][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.325599][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.343453][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.350671][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.361637][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.378369][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.399005][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.408351][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.452368][ T5868] Bluetooth: hci2: command tx timeout
[  211.516660][ T6591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.538424][ T6591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.589283][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.601185][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.753878][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.837935][ T7539] netlink: 14 bytes leftover after parsing attributes in process `syz.2.536'.
[  213.540916][ T5868] Bluetooth: hci2: command tx timeout
[  214.006929][ T7572] netlink: 'syz.2.540': attribute type 23 has an invalid length.
[  215.229818][ T7478] veth0_vlan: entered promiscuous mode
[  215.261841][ T7478] veth1_vlan: entered promiscuous mode
[  215.308900][ T7478] veth0_macvtap: entered promiscuous mode
[  215.319837][ T7478] veth1_macvtap: entered promiscuous mode
[  215.346772][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.363100][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.386049][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.396782][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.408177][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.421614][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.478535][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.487763][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.517191][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.526031][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.613343][ T5876] Bluetooth: hci2: command tx timeout
[  217.059564][ T5876] Bluetooth: hci3: command 0x0406 tx timeout
[  219.905906][ T7654] netlink: 'syz.3.569': attribute type 1 has an invalid length.
[  222.594733][ T7681] netlink: 'syz.0.581': attribute type 23 has an invalid length.
[  223.877413][ T7695] netlink: 14 bytes leftover after parsing attributes in process `syz.6.588'.
[  226.251199][ T7732] netlink: 'syz.0.608': attribute type 49 has an invalid length.
[  226.585025][ T5868] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  227.532302][   T10] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec
[  227.724714][ T7767] netlink: 'syz.3.613': attribute type 23 has an invalid length.
[  227.756416][ T7768] netlink: 'syz.1.611': attribute type 13 has an invalid length.
[  228.569363][ T7782] netlink: 182 bytes leftover after parsing attributes in process `syz.0.618'.
[  228.919241][ T7800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.621'.
[  229.054719][ T5868] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10
[  230.047129][ T7815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.629'.
[  231.132291][ T5868] Bluetooth: hci3: command 0x0406 tx timeout
[  232.049695][ T7832] netlink: 204 bytes leftover after parsing attributes in process `syz.0.636'.
[  232.413868][ T5868] Bluetooth: hci1: command 0x0406 tx timeout
[  232.516700][ T7845] netlink: 'syz.6.642': attribute type 2 has an invalid length.
[  233.987268][ T7883] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.656'.
[  234.073623][ T7883] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.656'.
[  234.122398][ T7883] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.656'.
[  234.507239][ T7905] netlink: 'syz.6.663': attribute type 23 has an invalid length.
[  235.289476][ T7915] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[  235.504053][ T5876] Bluetooth: hci0: SCO packet for unknown connection handle 255
[  236.575720][ T7953] netlink: 22 bytes leftover after parsing attributes in process `syz.1.683'.
[  237.534205][ T7960] netlink: 'syz.3.687': attribute type 2 has an invalid length.
[  237.812431][ T7976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.691'.
[  239.035392][ T8018] netlink: 'syz.3.712': attribute type 3 has an invalid length.
[  239.062226][ T8018] netlink: 'syz.3.712': attribute type 6 has an invalid length.
[  239.069930][ T8018] netlink: 'syz.3.712': attribute type 8 has an invalid length.
[  239.110512][ T8018] netlink: 'syz.3.712': attribute type 10 has an invalid length.
[  239.137344][ T8018] netlink: 'syz.3.712': attribute type 11 has an invalid length.
[  239.168291][ T8018] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.712'.
[  240.118028][ T5876] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  240.252659][ T8051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.726'.
[  241.008296][ T8072] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.733'.
[  241.759247][ T8091] netlink: 'syz.1.742': attribute type 10 has an invalid length.
[  241.773458][ T8091] netlink: 'syz.1.742': attribute type 11 has an invalid length.
[  241.787732][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'.
[  242.802681][ T8115] netlink: 'syz.6.751': attribute type 10 has an invalid length.
[  242.863337][ T8115] netlink: 40 bytes leftover after parsing attributes in process `syz.6.751'.
[  242.896325][ T8115] batadv0: entered promiscuous mode
[  242.930754][ T8115] batadv0: entered allmulticast mode
[  242.951234][ T8115] bridge0: port 3(batadv0) entered blocking state
[  242.970728][ T8115] bridge0: port 3(batadv0) entered disabled state
[  243.004596][ T8115] bridge0: port 3(batadv0) entered blocking state
[  243.011730][ T8115] bridge0: port 3(batadv0) entered forwarding state
[  243.232710][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  243.244697][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  244.179870][ T5876] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  244.465218][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'.
[  244.561797][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'.
[  245.941621][ T5876] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  246.147276][ T8195] netlink: 'syz.6.782': attribute type 39 has an invalid length.
[  247.252603][ T8231] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  247.295876][ T8231] netlink: 'syz.2.795': attribute type 2 has an invalid length.
[  247.352632][ T8231] netlink: 'syz.2.795': attribute type 7 has an invalid length.
[  247.413732][ T8231] netlink: 37 bytes leftover after parsing attributes in process `syz.2.795'.
[  247.478314][ T8231] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  247.533088][ T8231] netlink: 'syz.2.795': attribute type 2 has an invalid length.
[  247.540815][ T8231] netlink: 130076 bytes leftover after parsing attributes in process `syz.2.795'.
[  248.020675][ T5876] Bluetooth: hci3: command 0x0406 tx timeout
[  248.932130][ T5876] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  249.081782][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.803'.
[  249.157215][ T8252] netlink: zone id is out of range
[  249.187234][ T8252] netlink: zone id is out of range
[  249.202419][ T8252] netlink: zone id is out of range
[  249.207907][ T8252] netlink: zone id is out of range
[  249.221540][ T8252] netlink: zone id is out of range
[  249.238743][ T8252] netlink: zone id is out of range
[  249.260512][ T8252] netlink: zone id is out of range
[  249.287825][ T8252] netlink: zone id is out of range
[  249.307161][ T8252] netlink: zone id is out of range
[  249.321779][ T8252] netlink: zone id is out of range
[  250.275733][ T8277] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.448092][ T8280] syzkaller0: entered promiscuous mode
[  250.471840][ T8280] syzkaller0: entered allmulticast mode
[  251.630988][ T8306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.639051][ T8306] IPv6: NLM_F_CREATE should be set when creating new route
[  251.646596][ T8306] IPv6: NLM_F_CREATE should be set when creating new route
[  251.654021][ T8306] IPv6: NLM_F_CREATE should be set when creating new route
[  257.875917][ T8358] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.843'.
[  258.453854][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.846'.
[  260.570082][ T8404] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.860'.
[  260.779469][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.861'.
[  260.823174][ T8412] netlink: 'syz.3.864': attribute type 10 has an invalid length.
[  260.841684][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.864'.
[  260.872686][ T8412] batman_adv: batadv0: Adding interface: virt_wifi0
[  260.879375][ T8412] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.921596][ T8412] batman_adv: batadv0: Interface activated: virt_wifi0
[  261.089428][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  261.096073][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  261.313761][ T8433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.873'.
[  261.340115][ T8431] netlink: 'syz.2.872': attribute type 2 has an invalid length.
[  261.379294][ T8431] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.872'.
[  261.664758][ T8444] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.876'.
[  262.029817][ T8459] netlink: 277 bytes leftover after parsing attributes in process `syz.6.883'.
[  262.057106][ T8455] can: request_module (can-proto-0) failed.
[  262.124128][ T8455] netlink: 128 bytes leftover after parsing attributes in process `syz.1.882'.
[  262.140095][ T8455] net_ratelimit: 745 callbacks suppressed
[  262.140114][ T8455] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  263.251826][ T5876] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  265.079581][ T8519] syzkaller0: entered promiscuous mode
[  265.128251][ T8519] syzkaller0: entered allmulticast mode
[  265.292094][ T5876] Bluetooth: hci0: command tx timeout
[  266.010433][ T8550] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  267.091804][ T5876] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12
[  267.849194][ T8567] netlink: 46603 bytes leftover after parsing attributes in process `syz.2.923'.
[  268.374910][ T5876] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  269.132402][ T5876] Bluetooth: hci2: command tx timeout
[  275.194574][ T8633] netlink: 'syz.1.948': attribute type 13 has an invalid length.
[  275.898162][ T8651] syzkaller0: entered promiscuous mode
[  275.904003][ T8651] syzkaller0: entered allmulticast mode
[  276.484820][ T8673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'.
[  277.538680][ T8682] netlink: 'syz.2.968': attribute type 6 has an invalid length.
[  277.562175][ T8682] netlink: 168 bytes leftover after parsing attributes in process `syz.2.968'.
[  278.963089][ T5876] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  280.825620][ T5876] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  281.783757][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  281.801068][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  281.812678][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  281.831190][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  281.850211][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  282.291662][ T8760] chnl_net:caif_netlink_parms(): no params data found
[  282.661820][ T5876] Bluetooth: hci0: Unable to find connection for big 0x00
[  282.694849][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.712383][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.719691][ T8760] bridge_slave_0: entered allmulticast mode
[  282.753273][ T8760] bridge_slave_0: entered promiscuous mode
[  282.763093][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.773302][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.782438][ T8760] bridge_slave_1: entered allmulticast mode
[  282.812734][ T8760] bridge_slave_1: entered promiscuous mode
[  283.416600][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.448678][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.626646][ T8760] team0: Port device team_slave_0 added
[  283.651616][ T8760] team0: Port device team_slave_1 added
[  283.848282][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.866859][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.904397][ T8760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.933107][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.940110][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.998521][ T8760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.037389][ T5876] Bluetooth: hci4: command tx timeout
[  284.267205][ T8760] hsr_slave_0: entered promiscuous mode
[  284.280190][ T8760] hsr_slave_1: entered promiscuous mode
[  284.287271][ T8760] debugfs: 'hsr0' already exists in 'hsr'
[  284.297966][ T8760] Cannot create hsr debugfs directory
[  285.052922][ T5876] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  285.215043][ T8760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.463970][ T8760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.556060][ T5876] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  285.564080][ T5876] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  285.575917][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  285.575946][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  285.575961][ T5876] Workqueue: hci3 hci_rx_work
[  285.576003][ T5876] Call Trace:
[  285.576012][ T5876]  <TASK>
[  285.576022][ T5876]  dump_stack_lvl+0x189/0x250
[  285.576056][ T5876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.576083][ T5876]  ? __pfx__printk+0x10/0x10
[  285.576122][ T5876]  ? kernfs_path_from_node+0x250/0x290
[  285.576149][ T5876]  ? kernfs_path_from_node+0x2f/0x290
[  285.576180][ T5876]  sysfs_create_dir_ns+0x259/0x280
[  285.576211][ T5876]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  285.576241][ T5876]  ? do_raw_spin_unlock+0x122/0x240
[  285.576274][ T5876]  kobject_add_internal+0x59f/0xb40
[  285.576317][ T5876]  kobject_add+0x155/0x220
[  285.576355][ T5876]  ? __pfx_kobject_add+0x10/0x10
[  285.576384][ T5876]  ? _raw_spin_unlock+0x28/0x50
[  285.576412][ T5876]  ? get_device_parent+0x366/0x3a0
[  285.576449][ T5876]  device_add+0x408/0xb50
[  285.576482][ T5876]  hci_conn_add_sysfs+0xd5/0x1e0
[  285.576512][ T5876]  le_conn_complete_evt+0xc3a/0x1220
[  285.576549][ T5876]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  285.576571][ T5876]  ? __pfx_bt_warn+0x10/0x10
[  285.576585][ T5876]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  285.576615][ T5876]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  285.576637][ T5876]  ? skb_pull_data+0xfb/0x200
[  285.576660][ T5876]  hci_le_conn_complete_evt+0x187/0x450
[  285.576689][ T5876]  hci_event_packet+0x78f/0x1200
[  285.576710][ T5876]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  285.576733][ T5876]  ? __pfx_hci_event_packet+0x10/0x10
[  285.576753][ T5876]  ? kcov_remote_start+0x4d3/0x7f0
[  285.576777][ T5876]  ? lockdep_hardirqs_on+0x90/0x150
[  285.576800][ T5876]  ? hci_send_to_monitor+0xe2/0x570
[  285.576825][ T5876]  hci_rx_work+0x46a/0xe80
[  285.576851][ T5876]  ? process_scheduled_works+0x9ef/0x17b0
[  285.576870][ T5876]  process_scheduled_works+0xae1/0x17b0
[  285.576916][ T5876]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.576951][ T5876]  worker_thread+0x8a0/0xda0
[  285.577009][ T5876]  kthread+0x70e/0x8a0
[  285.577037][ T5876]  ? __pfx_worker_thread+0x10/0x10
[  285.577054][ T5876]  ? __pfx_kthread+0x10/0x10
[  285.577077][ T5876]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.577095][ T5876]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.577114][ T5876]  ? __pfx_kthread+0x10/0x10
[  285.577136][ T5876]  ret_from_fork+0x436/0x7d0
[  285.577157][ T5876]  ? __pfx_ret_from_fork+0x10/0x10
[  285.577181][ T5876]  ? __switch_to_asm+0x39/0x70
[  285.577200][ T5876]  ? __switch_to_asm+0x33/0x70
[  285.577220][ T5876]  ? __pfx_kthread+0x10/0x10
[  285.577242][ T5876]  ret_from_fork_asm+0x1a/0x30
[  285.577280][ T5876]  </TASK>
[  285.577319][ T5876] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  285.865452][ T5876] Bluetooth: hci3: failed to register connection device
[  286.091775][ T8760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.092244][ T5876] Bluetooth: hci4: command tx timeout
[  286.208470][ T8760] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.550992][ T8760] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  286.574245][ T8760] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  286.586236][ T8760] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  286.590219][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  286.606438][ T8876] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1039'.
[  286.621777][ T8876] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1039'.
[  286.771475][ T5876] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6
[  287.121084][ T8760] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  287.652247][ T8891] syzkaller0: entered promiscuous mode
[  288.191186][ T5876] Bluetooth: hci4: command tx timeout
[  290.256766][ T5876] Bluetooth: hci4: command tx timeout
[  290.615593][ T8921] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  290.808305][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.879647][ T8931] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  290.893877][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'.
[  290.898358][ T8760] 8021q: adding VLAN 0 to HW filter on device team0
[  290.976009][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.983299][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.072680][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.079891][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.870438][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.261345][ T8760] veth0_vlan: entered promiscuous mode
[  292.300377][ T8760] veth1_vlan: entered promiscuous mode
[  292.364460][ T8760] veth0_macvtap: entered promiscuous mode
[  292.413344][ T8760] veth1_macvtap: entered promiscuous mode
[  292.471619][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.485044][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.580709][ T2964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.601834][ T2964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.617694][ T2964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.628009][ T2964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.682394][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.690259][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.725107][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.734904][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.865346][ T8973] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1069'.
[  294.787537][ T9009] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  294.791038][ T5876] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  294.795648][ T9009] netlink: 'syz.1.1081': attribute type 4 has an invalid length.
[  294.795947][ T5876] Bluetooth: hci3: connection err: -111
[  294.817845][ T9009] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1081'.
[  295.571042][ T9021] syzkaller0: entered promiscuous mode
[  295.578678][ T9021] syzkaller0: entered allmulticast mode
[  297.267117][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  299.865683][ T5876] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  299.984592][ T9087] syzkaller0: entered promiscuous mode
[  300.027912][ T9087] syzkaller0: entered allmulticast mode
[  300.248684][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'.
[  303.830771][ T9174] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1142'.
[  304.189436][ T9188] netlink: 'syz.1.1146': attribute type 1 has an invalid length.
[  304.602337][ T9196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1150'.
[  305.252906][ T9204] netlink: 'syz.1.1155': attribute type 3 has an invalid length.
[  305.265933][ T9204] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1155'.
[  305.338746][ T9208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1156'.
[  305.690542][ T9222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1163'.
[  306.013041][ T5868] Bluetooth: hci1: command 0x0406 tx timeout
[  306.772898][ T9262] syzkaller0: entered promiscuous mode
[  306.781816][ T9262] syzkaller0: entered allmulticast mode
[  308.538891][ T9300] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.1193'.
[  308.555020][ T9300] netlink: 61831 bytes leftover after parsing attributes in process `syz.2.1193'.
[  309.748698][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1196'.
[  310.067748][ T9272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1183'.
[  310.078393][ T9308] bridge_slave_1: left allmulticast mode
[  310.091483][ T9308] bridge_slave_1: left promiscuous mode
[  310.106380][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.129919][ T9308] bridge_slave_0: left allmulticast mode
[  310.150788][ T9308] bridge_slave_0: left promiscuous mode
[  310.174533][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.783119][ T9326] netlink: 'syz.6.1202': attribute type 10 has an invalid length.
[  310.791593][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1202'.
[  313.273844][ T9328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1203'.
[  313.276632][ T9326] batman_adv: batadv0: Adding interface: hsr_slave_1
[  313.300508][ T9326] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.343364][ T9329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1203'.
[  313.354514][ T9326] batman_adv: batadv0: Interface activated: hsr_slave_1
[  314.140183][ T9357] netlink: 'syz.2.1213': attribute type 2 has an invalid length.
[  314.149324][ T9357] netlink: 'syz.2.1213': attribute type 1 has an invalid length.
[  314.158696][ T9357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'.
[  315.239092][ T5876] Bluetooth: hci0: unexpected event 0x09 length: 151 > 3
[  316.433387][ T9396] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1226'.
[  319.446592][ T9480] netlink: 'syz.6.1256': attribute type 2 has an invalid length.
[  319.456186][ T5876] Bluetooth: hci0: command 0x0406 tx timeout
[  319.465560][ T9480] netlink: 'syz.6.1256': attribute type 1 has an invalid length.
[  319.477751][ T9480] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1256'.
[  319.520201][ T5876] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  319.531536][ T5876] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff
[  320.045690][ T9496] sctp: [Deprecated]: syz.0.1263 (pid 9496) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.045690][ T9496] Use struct sctp_sack_info instead
[  320.166046][ T9502] netlink: 'syz.3.1264': attribute type 10 has an invalid length.
[  321.524617][ T9542] netlink: 'syz.1.1280': attribute type 10 has an invalid length.
[  321.560123][ T9542] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1280'.
[  322.502482][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  322.508853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  322.585106][ T5868] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11
[  322.660999][ T9574] netlink: 'syz.0.1292': attribute type 10 has an invalid length.
[  322.661025][ T9574] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1292'.
[  323.030333][ T9582] bridge0: port 3(veth1_to_team) entered blocking state
[  323.053505][ T9582] bridge0: port 3(veth1_to_team) entered disabled state
[  323.086343][ T9582] veth1_to_team: entered allmulticast mode
[  323.110688][ T9582] veth1_to_team: entered promiscuous mode
[  323.140902][ T9582] bridge0: port 3(veth1_to_team) entered blocking state
[  323.148244][ T9582] bridge0: port 3(veth1_to_team) entered forwarding state
[  325.267375][ T9606] syz_tun: refused to change device tx_queue_len
[  325.498325][ T9608] : entered promiscuous mode
[  325.866567][ T9623] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1310'.
[  326.383048][ T9623] xt_time: unknown flags 0xf4
[  326.725484][ T9646] netlink: ct family unspecified
[  326.730518][ T9646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.415833][ T9651] syzkaller0: create flow: hash 3953258829 index 1
[  327.760419][ T9648] syzkaller0: delete flow: hash 3953258829 index 1
[  328.156913][ T9665] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1325'.
[  329.704033][ T5868] Bluetooth: hci2: command 0x0406 tx timeout
[  330.637316][ T9665] batadv_slave_1: entered promiscuous mode
[  330.876025][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'.
[  332.090034][ T5873] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  333.329881][   T12] bridge_slave_1: left allmulticast mode
[  333.384699][   T12] bridge_slave_1: left promiscuous mode
[  333.420571][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.494055][   T12] bridge_slave_0: left allmulticast mode
[  333.510075][   T12] bridge_slave_0: left promiscuous mode
[  333.551629][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.760583][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1346'.
[  334.564998][ T5873] Bluetooth: hci2: unexpected event 0x3c length: 151 > 7
[  334.784893][ T9738] openvswitch: netlink: IP tunnel dst address not specified
[  335.684330][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.696857][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.708940][   T12] bond0 (unregistering): Released all slaves
[  336.234334][ T5873] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  336.242320][ T5873] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  336.318100][   T12] hsr_slave_0: left promiscuous mode
[  336.396024][   T12] hsr_slave_1: left promiscuous mode
[  336.408843][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.417806][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.447066][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.466802][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.594794][   T12] veth1_macvtap: left promiscuous mode
[  336.600503][   T12] veth0_macvtap: left promiscuous mode
[  336.622633][   T12] veth1_vlan: left promiscuous mode
[  336.636486][   T12] veth0_vlan: left promiscuous mode
[  337.695975][ T9779] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1366'.
[  337.840010][ T9783] netlink: 'syz.1.1368': attribute type 10 has an invalid length.
[  338.045809][   T12] team0 (unregistering): Port device team_slave_1 removed
[  338.090713][   T12] team0 (unregistering): Port device team_slave_0 removed
[  338.811329][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'.
[  338.827019][ T9790] Unknown options in mask b7f2
[  338.842929][ T9787] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  338.850732][ T9787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.103090][ T9795] netlink: 'syz.0.1374': attribute type 10 has an invalid length.
[  339.110986][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1374'.
[  339.136662][ T9797] netlink: 'syz.6.1372': attribute type 28 has an invalid length.
[  339.186262][ T9797] netlink: 'syz.6.1372': attribute type 4 has an invalid length.
[  339.207528][ T9795] team0: entered promiscuous mode
[  339.212856][ T9795] team_slave_0: entered promiscuous mode
[  339.219122][ T9795] team_slave_1: entered promiscuous mode
[  339.225334][ T9795] team0: entered allmulticast mode
[  339.254691][ T9797] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1372'.
[  339.293492][ T9795] team_slave_0: entered allmulticast mode
[  339.316459][ T9795] team_slave_1: entered allmulticast mode
[  339.341837][ T9795] bridge0: port 3(team0) entered blocking state
[  339.367481][ T9795] bridge0: port 3(team0) entered disabled state
[  339.406446][ T9795] bridge0: port 3(team0) entered blocking state
[  339.413227][ T9795] bridge0: port 3(team0) entered forwarding state
[  339.874747][ T9809] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058)
[  340.000284][ T9809] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1378'.
[  340.182763][ T9814] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1380'.
[  340.225510][ T9817] netlink: 'syz.3.1382': attribute type 33 has an invalid length.
[  340.241916][ T9814] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1380'.
[  340.262555][ T9817] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1382'.
[  340.596217][ T9821] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1383'.
[  340.670431][ T9821] hsr_slave_0: left promiscuous mode
[  340.743857][ T9821] hsr_slave_1: left promiscuous mode
[  341.164587][ T9826] netlink: 'syz.2.1385': attribute type 17 has an invalid length.
[  341.182175][ T9826] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1385'.
[  341.266517][ T5868] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  341.413376][ T9837] netlink: 'syz.2.1389': attribute type 2 has an invalid length.
[  341.444571][ T9837] netlink: 'syz.2.1389': attribute type 8 has an invalid length.
[  341.458141][ T9837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'.
[  341.858759][ T9853] netlink: 'syz.0.1395': attribute type 10 has an invalid length.
[  343.740498][ T9853] batadv0: entered promiscuous mode
[  343.755241][ T9853] batadv0: entered allmulticast mode
[  343.771586][ T9853] bridge0: port 4(batadv0) entered blocking state
[  343.792465][ T9853] bridge0: port 4(batadv0) entered disabled state
[  343.817070][ T9853] bridge0: port 4(batadv0) entered blocking state
[  343.823762][ T9853] bridge0: port 4(batadv0) entered forwarding state
[  344.203910][ T6598] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  344.213888][ T6598] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  344.453482][ T5868] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  344.891603][ T9882] __nla_validate_parse: 2 callbacks suppressed
[  344.891628][ T9882] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1407'.
[  346.288016][ T9894] netlink: 'syz.0.1413': attribute type 28 has an invalid length.
[  346.837122][ T9903] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1415'.
[  346.949981][ T9903] xt_time: unknown flags 0xf4
[  346.956837][ T9905] netlink: 211576 bytes leftover after parsing attributes in process `syz.6.1416'.
[  347.074279][ T5868] Bluetooth: hci0: ISO packet for unknown connection handle 255
[  347.082255][ T5868] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  349.570441][ T5868] Bluetooth: hci0: unexpected event 0x0b length: 151 > 11
[  349.754858][ T9944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'.
[  349.796538][ T9946] bridge0: port 3(batadv0) entered disabled state
[  350.643873][ T9946] bridge_slave_1: left allmulticast mode
[  350.650025][ T9946] bridge_slave_1: left promiscuous mode
[  350.660464][ T9946] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.754103][ T9946] bridge_slave_0: left allmulticast mode
[  350.772075][ T9946] bridge_slave_0: left promiscuous mode
[  350.781381][ T9946] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.933180][ T9953] netlink: 'syz.0.1435': attribute type 39 has an invalid length.
[  351.551431][ T9962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1437'.
[  351.689967][ T9963] netlink: 'syz.1.1438': attribute type 1 has an invalid length.
[  352.235157][ T9976] netlink: 'syz.6.1443': attribute type 1 has an invalid length.
[  353.596342][ T5868] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  353.597254][ T9980] ÿ: renamed from bond_slave_0 (while UP)
[  354.714663][ T9996] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  355.803804][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1455'.
[  355.850272][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1455'.
[  359.940151][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  359.949935][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  359.963730][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  359.972539][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  359.981834][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.418684][T10078] chnl_net:caif_netlink_parms(): no params data found
[  360.980001][ T5868] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  361.116182][ T5868] Bluetooth: hci0: Malformed LE Event: 0x0b
[  361.387702][ T5868] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  361.490806][T10078] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.535235][T10078] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.551514][T10078] bridge_slave_0: entered allmulticast mode
[  361.574540][T10078] bridge_slave_0: entered promiscuous mode
[  361.590077][T10078] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.606600][T10078] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.620667][T10078] bridge_slave_1: entered allmulticast mode
[  361.639201][T10123] netlink: 'syz.2.1498': attribute type 8 has an invalid length.
[  361.671594][T10078] bridge_slave_1: entered promiscuous mode
[  362.022447][ T5868] Bluetooth: hci5: command tx timeout
[  362.640889][T10135] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1502'.
[  362.870926][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1505'.
[  364.093674][ T5868] Bluetooth: hci5: command tx timeout
[  365.050885][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.076596][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.198361][T10165] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1511'.
[  365.868666][T10165] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1511'.
[  366.172161][ T5868] Bluetooth: hci5: command tx timeout
[  368.262133][ T5868] Bluetooth: hci5: command tx timeout
[  370.077325][T10200] netlink: 'syz.1.1524': attribute type 1 has an invalid length.
[  370.594875][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1525'.
[  372.110944][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'.
[  372.180863][T10078] team0: Port device team_slave_0 added
[  372.197024][T10078] team0: Port device team_slave_1 added
[  372.477382][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.489151][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.529708][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.549270][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.557923][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.591680][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.755559][T10078] hsr_slave_0: entered promiscuous mode
[  372.790247][T10078] hsr_slave_1: entered promiscuous mode
[  373.307857][T10233] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1537'.
[  373.746964][T10078] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  373.818457][T10078] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  373.889247][T10078] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  373.941071][T10078] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  373.952963][T10243] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1541'.
[  374.140703][T10232] syz.0.1536 (10232) used greatest stack depth: 14456 bytes left
[  374.267447][T10078] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.360431][T10078] 8021q: adding VLAN 0 to HW filter on device team0
[  374.401784][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.409069][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.499203][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.506497][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.095660][T10276] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1550'.
[  375.170540][T10278] netlink: 'syz.6.1551': attribute type 11 has an invalid length.
[  375.177662][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.207328][T10278] netlink: 'syz.6.1551': attribute type 11 has an invalid length.
[  375.800654][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  376.015991][T10300] netlink: 'syz.1.1559': attribute type 23 has an invalid length.
[  376.112239][T10078] veth0_vlan: entered promiscuous mode
[  376.143034][T10078] veth1_vlan: entered promiscuous mode
[  376.235836][T10078] veth0_macvtap: entered promiscuous mode
[  376.267153][T10078] veth1_macvtap: entered promiscuous mode
[  376.320715][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.388366][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.455493][ T6593] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.497935][ T6593] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.520091][ T1147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.538162][ T1147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.880909][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'.
[  377.182677][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.202892][T10327] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1567'.
[  377.205448][T10329] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  377.224777][T10329] netlink: 'syz.6.1568': attribute type 21 has an invalid length.
[  377.234636][T10329] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1568'.
[  377.324526][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.327639][T10329] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  377.349975][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.374165][T10329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  377.557721][ T6593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.580217][ T6593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.781449][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1483'.
[  378.793275][T10355] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1577'.
[  378.829753][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1483'.
[  378.936187][T10353] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1483'.
[  379.208202][ T5868] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  380.727149][ T5868] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  380.973327][ T5873] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[  382.782759][ T5873] Bluetooth: hci2: command 0x0406 tx timeout
[  383.944885][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  383.951372][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  384.800104][T10429] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1605'.
[  385.060318][ T6598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.166083][ T5868] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  385.985396][ T6598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.176954][ T6598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.313118][ T6598] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.346461][T10448] netlink: 'syz.7.1612': attribute type 10 has an invalid length.
[  386.370873][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1612'.
[  386.573112][T10448] batman_adv: batadv0: Adding interface: hsr_slave_1
[  386.584729][T10448] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.636975][T10448] batman_adv: batadv0: Interface activated: hsr_slave_1
[  386.904566][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'.
[  387.213494][ T5868] Bluetooth: hci4: command tx timeout
[  387.620082][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1620'.
[  387.635322][ T6598] bridge_slave_1: left allmulticast mode
[  387.641478][ T6598] bridge_slave_1: left promiscuous mode
[  387.664383][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.683958][ T6598] bridge_slave_0: left promiscuous mode
[  387.690356][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.912998][T10478] delete_channel: no stack
[  388.580732][T10506] netlink: 'syz.6.1631': attribute type 1 has an invalid length.
[  389.164167][ T6598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.187310][ T6598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.202654][ T6598] bond0 (unregistering): Released all slaves
[  390.058737][T10528] netlink: 'syz.2.1639': attribute type 13 has an invalid length.
[  390.086730][T10528] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1639'.
[  390.131363][T10528] erspan0: refused to change device tx_queue_len
[  390.182387][T10528] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  390.208909][ T5868] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  390.707640][ T6598] hsr_slave_0: left promiscuous mode
[  390.750882][ T6598] hsr_slave_1: left promiscuous mode
[  390.785072][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.832244][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.894835][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.939239][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.998797][ T6598] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  391.016635][ T6598] batman_adv: batadv0: Removing interface: virt_wifi0
[  391.043087][ T6598] veth1_macvtap: left promiscuous mode
[  391.048857][ T6598] veth0_macvtap: left promiscuous mode
[  391.056134][ T6598] veth1_vlan: left promiscuous mode
[  391.558150][ T6598] team0 (unregistering): Port device team_slave_1 removed
[  391.602620][ T6598] team0 (unregistering): Port device team_slave_0 removed
[  392.602351][ T5868] Bluetooth: hci5: unexpected event 0x09 length: 15 > 3
[  393.744099][T10584] netlink: 'syz.6.1662': attribute type 13 has an invalid length.
[  394.735436][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1667'.
[  395.771550][T10615] cgroup: Unknown subsys name 'uid'
[  396.022521][T10620] žÿ: renamed from team_slave_1 (while UP)
[  396.852159][T10640] xt_l2tp: missing protocol rule (udp|l2tpip)
[  397.238648][T10646] syzkaller0: entered promiscuous mode
[  397.244900][T10646] syzkaller0: entered allmulticast mode
[  401.633310][ T5868] Bluetooth: hci1: unknown advertising packet type: 0x0c
[  401.643108][T10695] lo: entered allmulticast mode
[  401.689904][T10695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.039961][T10715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.583317][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'.
[  404.862974][T10751] netlink: 'syz.0.1724': attribute type 4 has an invalid length.
[  404.960332][T10751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1724'.
[  405.359184][T10751] .a: renamed from bond0 (while UP)
[  405.494173][T10756] syzkaller0: entered allmulticast mode
[  405.608945][T10760] syzkaller0: entered promiscuous mode
[  405.621076][T10760] syzkaller0: left allmulticast mode
[  405.630868][T10761] syzkaller0: left promiscuous mode
[  405.677958][T10768] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1729'.
[  406.564842][ T5873] Bluetooth: hci4: command 0x0406 tx timeout
[  407.608454][T10802] netlink: 'syz.0.1738': attribute type 21 has an invalid length.
[  408.739690][T10815] netlink: 'syz.6.1744': attribute type 33 has an invalid length.
[  408.750570][T10815] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1744'.
[  408.750671][T10813] netlink: 211576 bytes leftover after parsing attributes in process `syz.2.1743'.
[  409.468478][T10822] cgroup: Unknown subsys name 'uid'
[  409.676211][ T5868] Bluetooth: hci4: Malformed LE Event: 0x0d
[  410.735798][T10802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1738'.
[  410.752935][T10816] netlink: 'syz.6.1744': attribute type 2 has an invalid length.
[  410.769784][T10816] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.1744'.
[  410.808919][T10829] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1749'.
[  410.857368][ T5868] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  411.199322][T10840] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1754'.
[  411.508743][T10854] netlink: 'syz.2.1758': attribute type 10 has an invalid length.
[  412.718915][ T5868] Bluetooth: hci5: unexpected event 0x3d length: 15 > 14
[  414.877890][ T5868] Bluetooth: hci1: Malformed LE Event: 0x0d
[  416.343303][T10938] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode
[  417.745771][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  417.786600][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  418.556271][ T5868] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  419.186719][T10994] 
: port 1(gretap0) entered blocking state
[  419.238661][T10994] 
: port 1(gretap0) entered disabled state
[  419.263078][T10994] gretap0: entered allmulticast mode
[  419.338766][T10994] gretap0: entered promiscuous mode
[  420.119426][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1817'.
[  420.590683][T11020] netlink: 'syz.0.1822': attribute type 10 has an invalid length.
[  420.605060][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1822'.
[  420.620514][T11018] netlink: 'syz.2.1821': attribute type 11 has an invalid length.
[  420.651157][T11018] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1821'.
[  420.721353][T11016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.854281][T11003] delete_channel: no stack
[  421.320700][T11037] syzkaller0: entered promiscuous mode
[  421.378832][T11037] syzkaller0: entered allmulticast mode
[  421.411191][T11041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1830'.
[  421.508202][T11049] xt_l2tp: missing protocol rule (udp|l2tpip)
[  422.216351][T11058] netlink: 'syz.6.1834': attribute type 10 has an invalid length.
[  422.238197][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1834'.
[  424.524718][T11058] batman_adv: batadv0: Adding interface: vlan1
[  424.530941][T11058] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.572823][T11058] batman_adv: batadv0: Interface activated: vlan1
[  424.621032][T11068] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1839'.
[  425.473323][T11086] netlink: 162 bytes leftover after parsing attributes in process `syz.2.1844'.
[  426.393034][ T5868] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  428.440786][T11146] netlink: 'syz.0.1865': attribute type 29 has an invalid length.
[  428.509094][T11150] netlink: 'syz.0.1865': attribute type 29 has an invalid length.
[  428.548863][T11146] netlink: 'syz.0.1865': attribute type 29 has an invalid length.
[  428.601243][T11146] netlink: 'syz.0.1865': attribute type 29 has an invalid length.
[  429.068592][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'.
[  429.338975][ T5873] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  430.262526][ T5873] Bluetooth: hci5: adv larger than maximum supported
[  430.271571][ T5873] Bluetooth: hci5: Unknown advertising packet type: 0x18
[  430.278772][ T5873] Bluetooth: hci5: Malformed LE Event: 0x0d
[  430.343847][T11182] netlink: 'syz.2.1877': attribute type 2 has an invalid length.
[  430.400069][T11180] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1876'.
[  431.570269][ T5873] Bluetooth: hci5: unexpected event 0x09 length: 15 > 3
[  432.189789][T11216] netlink: 'syz.7.1888': attribute type 10 has an invalid length.
[  432.269589][T11217] xt_l2tp: missing protocol rule (udp|l2tpip)
[  432.289186][T11216] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  432.299827][T11216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  432.352014][T11216] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  433.113549][ T5873] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4
[  434.404481][T11250] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1901'.
[  434.717888][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1902'.
[  434.744846][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1902'.
[  434.746449][T11254] xt_l2tp: missing protocol rule (udp|l2tpip)
[  434.815378][T11252] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1902'.
[  434.937719][T11252] bridge_slave_0: entered allmulticast mode
[  434.944613][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1902'.
[  434.956530][T11252] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1902'.
[  437.003495][T11281] mac80211_hwsim hwsim29 wlan1: left promiscuous mode
[  437.010726][T11281] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  437.304882][T11291] netlink: 'syz.6.1917': attribute type 10 has an invalid length.
[  437.313634][T11291] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1917'.
[  437.345715][T11291] batman_adv: batadv0: Interface deactivated: vlan1
[  438.032895][ T5873] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  438.288938][T11291] batman_adv: batadv0: Removing interface: vlan1
[  439.227552][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1913'.
[  440.270170][T11332] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1929'.
[  441.033297][T11354] netlink: 'syz.6.1937': attribute type 2 has an invalid length.
[  441.074476][T11354] netlink: 'syz.6.1937': attribute type 1 has an invalid length.
[  441.133552][T11354] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1937'.
[  441.152206][T11354] nbd: illegal input index -404748436
[  441.186678][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'.
[  441.351023][T11364] netlink: 'syz.0.1940': attribute type 21 has an invalid length.
[  441.377112][T11364] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1940'.
[  441.393283][T11364] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1940'.
[  442.864274][T11395] xt_l2tp: invalid flags combination: 0
[  445.325565][T11429] siw: device registration error -23
[  445.382325][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  445.388706][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  446.997426][T11442] syzkaller0: entered allmulticast mode
[  447.285747][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1968'.
[  447.321991][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1968'.
[  447.352036][T11455] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1968'.
[  448.748363][ T5873] Bluetooth: hci1: adv larger than maximum supported
[  449.271104][T11499] netlink: 'syz.2.1982': attribute type 10 has an invalid length.
[  451.015499][T11499] geneve0: entered promiscuous mode
[  451.061519][T11499] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  451.271372][T11511] netlink: 'syz.6.1983': attribute type 16 has an invalid length.
[  451.302134][T11511] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1983'.
[  455.092462][T11530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1991'.
[  455.165789][T11536] Ÿë
: port 1(veth0_to_bridge) entered blocking state
[  455.173552][T11536] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  455.191038][T11536] veth0_to_bridge: entered allmulticast mode
[  455.203444][T11536] veth0_to_bridge: entered promiscuous mode
[  455.219609][T11536] Ÿë
: port 2(veth0_to_team) entered blocking state
[  455.226746][T11536] Ÿë
: port 2(veth0_to_team) entered disabled state
[  455.233919][T11536] veth0_to_team: entered allmulticast mode
[  455.292938][T11536] veth0_to_team: entered promiscuous mode
[  455.699728][T11545] syzkaller0: entered promiscuous mode
[  455.736313][T11545] syzkaller0: entered allmulticast mode
[  457.000590][T11570] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2003'.
[  458.630884][ T5873] Bluetooth: hci5: unexpected event 0x0f length: 15 > 4
[  460.461572][T11608] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2024'.
[  462.027776][T11633] syzkaller0: entered promiscuous mode
[  462.041576][T11633] syzkaller0: entered allmulticast mode
[  462.663506][ T5873] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  462.672883][ T5873] Bluetooth: hci5: Injecting HCI hardware error event
[  462.681285][ T5873] Bluetooth: hci5: hardware error 0x00
[  463.890551][T11662] netlink: 'syz.0.2040': attribute type 39 has an invalid length.
[  464.327155][T11669] netlink: 'syz.2.2032': attribute type 32 has an invalid length.
[  464.367464][T11668] netlink: 'syz.1.2033': attribute type 22 has an invalid length.
[  464.377359][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  464.815925][ T5873] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  466.402927][T11683] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2038'.
[  468.838330][T11707] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  469.688272][T11694] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2043'.
[  469.896283][ T5873] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9
[  469.939198][T11712] syzkaller0: entered promiscuous mode
[  469.952233][T11712] syzkaller0: entered allmulticast mode
[  470.213914][T11728] netlink: 'syz.0.2057': attribute type 23 has an invalid length.
[  470.749884][T11734] cgroup: fork rejected by pids controller in /syz6
[  471.269186][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2067'.
[  471.469394][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'.
[  472.173408][T11767] netlink: 182 bytes leftover after parsing attributes in process `syz.7.2072'.
[  474.727248][T11794] netlink: 'syz.2.2082': attribute type 3 has an invalid length.
[  474.750791][T11785] delete_channel: no stack
[  474.761996][T11794] netlink: 'syz.2.2082': attribute type 1 has an invalid length.
[  474.777961][T11791] syzkaller0: entered allmulticast mode
[  474.784368][T11794] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.2082'.
[  475.567113][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  475.577945][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  475.587705][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  475.600554][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  475.608900][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  476.091345][T11810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2087'.
[  477.632114][T11814] netlink: 'syz.2.2088': attribute type 2 has an invalid length.
[  477.640497][T11814] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2088'.
[  477.702373][ T5873] Bluetooth: hci2: command tx timeout
[  477.894226][T11824] syzkaller0: entered promiscuous mode
[  477.900265][T11824] syzkaller0: entered allmulticast mode
[  478.154383][T11832] netlink: 'syz.0.2093': attribute type 13 has an invalid length.
[  478.166736][T11832] netlink: 'syz.0.2093': attribute type 17 has an invalid length.
[  479.772719][ T5873] Bluetooth: hci2: command tx timeout
[  479.992732][T11806] chnl_net:caif_netlink_parms(): no params data found
[  480.067310][T11832] 8021q: adding VLAN 0 to HW filter on device .a
[  480.080951][T11832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  480.747050][T11806] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.763777][T11806] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.771351][T11806] bridge_slave_0: entered allmulticast mode
[  480.784135][T11806] bridge_slave_0: entered promiscuous mode
[  480.794309][T11806] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.801655][T11806] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.809860][T11806] bridge_slave_1: entered allmulticast mode
[  480.828179][T11806] bridge_slave_1: entered promiscuous mode
[  480.965471][T11806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.038190][T11806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.101444][T11865] netlink: 'syz.2.2104': attribute type 22 has an invalid length.
[  481.194663][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'.
[  483.648228][ T5873] Bluetooth: hci2: command tx timeout
[  484.979221][T11872] 
[  484.981639][T11872] =====================================
[  484.987212][T11872] WARNING: bad unlock balance detected!
[  484.992789][T11872] syzkaller #0 Not tainted
[  484.997355][T11872] -------------------------------------
[  485.002921][T11872] syz.7.2106/11872 is trying to release lock (&sighand->siglock) at:
[  485.011138][T11872] [<ffffffff8182daf3>] copy_process+0x2793/0x3c00
[  485.017692][T11872] but there are no more locks to release!
[  485.023526][T11872] 
[  485.023526][T11872] other info that might help us debug this:
[  485.031696][T11872] 1 lock held by syz.7.2106/11872:
[  485.036845][T11872]  #0: ffffffff8e171890 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x212a/0x3c00
[  485.047293][T11872] 
[  485.047293][T11872] stack backtrace:
[  485.053223][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.7.2106 Not tainted syzkaller #0 PREEMPT(full) 
[  485.053248][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  485.053269][T11872] Call Trace:
[  485.053278][T11872]  <TASK>
[  485.053286][T11872]  dump_stack_lvl+0x189/0x250
[  485.053315][T11872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  485.053339][T11872]  ? __pfx__printk+0x10/0x10
[  485.053372][T11872]  ? copy_process+0x2793/0x3c00
[  485.053393][T11872]  print_unlock_imbalance_bug+0xdc/0xf0
[  485.053415][T11872]  lock_release+0x269/0x3e0
[  485.053444][T11872]  ? copy_process+0x2793/0x3c00
[  485.053467][T11872]  _raw_spin_unlock+0x16/0x50
[  485.053490][T11872]  copy_process+0x2793/0x3c00
[  485.053521][T11872]  ? copy_process+0x97f/0x3c00
[  485.053547][T11872]  ? __pfx_copy_process+0x10/0x10
[  485.053576][T11872]  kernel_clone+0x21e/0x840
[  485.053603][T11872]  ? __pfx_kernel_clone+0x10/0x10
[  485.053631][T11872]  ? __lock_acquire+0xab9/0xd20
[  485.053665][T11872]  __se_sys_clone3+0x256/0x2d0
[  485.053689][T11872]  ? __might_fault+0xb0/0x130
[  485.053710][T11872]  ? __pfx___se_sys_clone3+0x10/0x10
[  485.053750][T11872]  ? _copy_to_user+0x8a/0xb0
[  485.053777][T11872]  ? do_user_addr_fault+0xc8a/0x1390
[  485.053800][T11872]  ? do_syscall_64+0xbe/0x3b0
[  485.053829][T11872]  do_syscall_64+0xfa/0x3b0
[  485.053854][T11872]  ? lockdep_hardirqs_on+0x9c/0x150
[  485.053878][T11872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.053898][T11872]  ? clear_bhb_loop+0x60/0xb0
[  485.053920][T11872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.053945][T11872] RIP: 0033:0x7f70935c3609
[  485.053963][T11872] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[  485.053982][T11872] RSP: 002b:00007fffbc044c78 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  485.054002][T11872] RAX: ffffffffffffffda RBX: 00007f70935459f0 RCX: 00007f70935c3609
[  485.054018][T11872] RDX: 00007f70935459f0 RSI: 0000000000000058 RDI: 00007fffbc044cc0
[  485.054031][T11872] RBP: 00007f70944eb6c0 R08: 00007f70944eb6c0 R09: 00007fffbc044da7
[  485.054045][T11872] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8
[  485.054059][T11872] R13: 000000000000000b R14: 00007fffbc044cc0 R15: 00007fffbc044da8
[  485.054082][T11872]  </TASK>
[  485.295250][T11872] ------------[ cut here ]------------
[  485.300796][T11872] pvqspinlock: lock 0xffff888025235340 has corrupted value 0x0!
[  485.309857][T11872] WARNING: CPU: 1 PID: 11872 at kernel/locking/qspinlock_paravirt.h:506 __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.322609][T11872] Modules linked in:
[  485.326656][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.7.2106 Not tainted syzkaller #0 PREEMPT(full) 
[  485.336356][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  485.346643][T11872] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.353848][T11872] Code: b8 24 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 13 98 05 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 10 c6 00 8e 4c 89 f6 4c 89 fa e8 0a aa
[  485.373533][T11872] RSP: 0018:ffffc9000e24f8c0 EFLAGS: 00010246
[  485.379653][T11872] RAX: 88c6a9dd7aa49d00 RBX: ffff888025235340 RCX: ffff8880265d0000
[  485.387689][T11872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  485.395996][T11872] RBP: 1ffff11004a46a69 R08: 0000000000000003 R09: 0000000000000004
[  485.404111][T11872] R10: dffffc0000000000 R11: fffffbfff1bfa23c R12: dffffc0000000000
[  485.412229][T11872] R13: dffffc0000000000 R14: ffff888025235350 R15: ffff888025235348
[  485.420478][T11872] FS:  0000555581294500(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000
[  485.429905][T11872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  485.436722][T11872] CR2: 00005555838145c8 CR3: 000000002f0ae000 CR4: 00000000003526f0
[  485.444962][T11872] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  485.453112][T11872] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  485.461252][T11872] Call Trace:
[  485.464783][T11872]  <TASK>
[  485.467747][T11872]  __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30
[  485.475710][T11872]  .slowpath+0x9/0x18
[  485.479964][T11872]  do_raw_spin_unlock+0x122/0x240
[  485.485047][T11872]  _raw_spin_unlock+0x1e/0x50
[  485.489854][T11872]  copy_process+0x2793/0x3c00
[  485.494606][T11872]  ? copy_process+0x97f/0x3c00
[  485.499493][T11872]  ? __pfx_copy_process+0x10/0x10
[  485.504642][T11872]  kernel_clone+0x21e/0x840
[  485.509179][T11872]  ? __pfx_kernel_clone+0x10/0x10
[  485.514548][T11872]  ? __lock_acquire+0xab9/0xd20
[  485.519779][T11872]  __se_sys_clone3+0x256/0x2d0
[  485.524885][T11872]  ? __might_fault+0xb0/0x130
[  485.529629][T11872]  ? __pfx___se_sys_clone3+0x10/0x10
[  485.535314][T11872]  ? _copy_to_user+0x8a/0xb0
[  485.539969][T11872]  ? do_user_addr_fault+0xc8a/0x1390
[  485.545334][T11872]  ? do_syscall_64+0xbe/0x3b0
[  485.550149][T11872]  do_syscall_64+0xfa/0x3b0
[  485.554731][T11872]  ? lockdep_hardirqs_on+0x9c/0x150
[  485.560153][T11872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.566313][T11872]  ? clear_bhb_loop+0x60/0xb0
[  485.571055][T11872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.577177][T11872] RIP: 0033:0x7f70935c3609
[  485.581635][T11872] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[  485.601317][T11872] RSP: 002b:00007fffbc044c78 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  485.609914][T11872] RAX: ffffffffffffffda RBX: 00007f70935459f0 RCX: 00007f70935c3609
[  485.618088][T11872] RDX: 00007f70935459f0 RSI: 0000000000000058 RDI: 00007fffbc044cc0
[  485.626697][T11872] RBP: 00007f70944eb6c0 R08: 00007f70944eb6c0 R09: 00007fffbc044da7
[  485.635415][T11872] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8
[  485.643769][T11872] R13: 000000000000000b R14: 00007fffbc044cc0 R15: 00007fffbc044da8
[  485.651858][T11872]  </TASK>
[  485.654997][T11872] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  485.662391][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.7.2106 Not tainted syzkaller #0 PREEMPT(full) 
[  485.671822][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  485.682121][T11872] Call Trace:
[  485.685454][T11872]  <TASK>
[  485.688426][T11872]  dump_stack_lvl+0x99/0x250
[  485.693095][T11872]  ? __asan_memcpy+0x40/0x70
[  485.697760][T11872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  485.702993][T11872]  ? __pfx__printk+0x10/0x10
[  485.707632][T11872]  vpanic+0x281/0x750
[  485.711658][T11872]  ? __pfx__printk+0x10/0x10
[  485.716460][T11872]  ? __pfx_vpanic+0x10/0x10
[  485.720997][T11872]  ? is_bpf_text_address+0x26/0x2b0
[  485.726236][T11872]  panic+0xb9/0xc0
[  485.729984][T11872]  ? __pfx_panic+0x10/0x10
[  485.734447][T11872]  __warn+0x31b/0x4b0
[  485.738574][T11872]  ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.745198][T11872]  ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.751740][T11872]  report_bug+0x2be/0x4f0
[  485.756207][T11872]  ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.762807][T11872]  ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.769270][T11872]  ? __pv_queued_spin_unlock_slowpath+0x200/0x2a0
[  485.775718][T11872]  handle_bug+0x84/0x160
[  485.780000][T11872]  exc_invalid_op+0x1a/0x50
[  485.784550][T11872]  asm_exc_invalid_op+0x1a/0x20
[  485.789441][T11872] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0
[  485.796685][T11872] Code: b8 24 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 13 98 05 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 10 c6 00 8e 4c 89 f6 4c 89 fa e8 0a aa
[  485.816673][T11872] RSP: 0018:ffffc9000e24f8c0 EFLAGS: 00010246
[  485.822952][T11872] RAX: 88c6a9dd7aa49d00 RBX: ffff888025235340 RCX: ffff8880265d0000
[  485.830949][T11872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  485.838947][T11872] RBP: 1ffff11004a46a69 R08: 0000000000000003 R09: 0000000000000004
[  485.846947][T11872] R10: dffffc0000000000 R11: fffffbfff1bfa23c R12: dffffc0000000000
[  485.855005][T11872] R13: dffffc0000000000 R14: ffff888025235350 R15: ffff888025235348
[  485.863104][T11872]  __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30
[  485.870778][T11872]  .slowpath+0x9/0x18
[  485.874795][T11872]  do_raw_spin_unlock+0x122/0x240
[  485.879854][T11872]  _raw_spin_unlock+0x1e/0x50
[  485.884654][T11872]  copy_process+0x2793/0x3c00
[  485.889465][T11872]  ? copy_process+0x97f/0x3c00
[  485.894345][T11872]  ? __pfx_copy_process+0x10/0x10
[  485.899413][T11872]  kernel_clone+0x21e/0x840
[  485.904099][T11872]  ? __pfx_kernel_clone+0x10/0x10
[  485.909159][T11872]  ? __lock_acquire+0xab9/0xd20
[  485.914050][T11872]  __se_sys_clone3+0x256/0x2d0
[  485.918850][T11872]  ? __might_fault+0xb0/0x130
[  485.923661][T11872]  ? __pfx___se_sys_clone3+0x10/0x10
[  485.929023][T11872]  ? _copy_to_user+0x8a/0xb0
[  485.933664][T11872]  ? do_user_addr_fault+0xc8a/0x1390
[  485.938993][T11872]  ? do_syscall_64+0xbe/0x3b0
[  485.943945][T11872]  do_syscall_64+0xfa/0x3b0
[  485.948484][T11872]  ? lockdep_hardirqs_on+0x9c/0x150
[  485.953722][T11872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.959996][T11872]  ? clear_bhb_loop+0x60/0xb0
[  485.964807][T11872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.970827][T11872] RIP: 0033:0x7f70935c3609
[  485.975405][T11872] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[  485.995131][T11872] RSP: 002b:00007fffbc044c78 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  486.003651][T11872] RAX: ffffffffffffffda RBX: 00007f70935459f0 RCX: 00007f70935c3609
[  486.011664][T11872] RDX: 00007f70935459f0 RSI: 0000000000000058 RDI: 00007fffbc044cc0
[  486.019722][T11872] RBP: 00007f70944eb6c0 R08: 00007f70944eb6c0 R09: 00007fffbc044da7
[  486.027826][T11872] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8
[  486.035915][T11872] R13: 000000000000000b R14: 00007fffbc044cc0 R15: 00007fffbc044da8
[  486.044009][T11872]  </TASK>
[  486.047424][T11872] Kernel Offset: disabled
[  486.051765][T11872] Rebooting in 86400 seconds..