last executing test programs:

4m53.348775937s ago: executing program 2 (id=599):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0xdb, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x80000001, 0x8110, r2, 0x7, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @value=r1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xce, 0xce, 0x6, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @datasec={0xa, 0x6, 0x0, 0xf, 0x2, [{0x600, 0x0, 0x2}, {0x4, 0x8a, 0x4}, {0x4, 0x200, 0x7fffffff}, {0x4, 0xfffffff8, 0x9}, {0x3, 0x9, 0x1}, {0x3, 0x1, 0xedb3}], 'HJ'}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x4}, {0xf, 0xa83}, {0x6}, {0xa, 0x4}, {0x6, 0x4}, {0x6, 0x9}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @const={0xe, 0x0, 0x0, 0xa, 0x5}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f00000009c0)=""/146, 0xee, 0x92, 0x0, 0x9, 0x10000, @value=r0}, 0x28)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0xd}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x2e, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lld}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa7}, @ldst={0x1, 0x2, 0x4, 0x1, 0x3, 0x40, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x7, 0x4a, &(0x7f0000000840)=""/74, 0x0, 0x4, '\x00', r4, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x5, 0x2, 0x10001, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[r2, r8, r2], &(0x7f0000000c00)=[{0x1, 0x4, 0x0, 0xc}, {0x2, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x0, 0x7}, {0x1, 0x5, 0x6, 0x4}, {0x0, 0x2, 0x4, 0x2}], 0x10, 0x1000}, 0x94)

4m53.056770846s ago: executing program 2 (id=603):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="0070978c203bf91a810de7000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800fdffffff0000000000000000000091080a6b", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007180000f8ffffffb703000008000005b704000000000000158cf9f5d66717d93487c14585000000f45ad3b495"], 0x0, 0x1, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m52.844705892s ago: executing program 2 (id=605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="180000006600", 0x6}, {&(0x7f0000000180)="1d14fa", 0x3}, {&(0x7f0000000500)="bd53129ee021eca21f6aabb1f8af83", 0xf}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x880)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)

4m52.579663602s ago: executing program 2 (id=609):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$unix(0x1, 0x2, 0x0)
fstat(r6, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, &(0x7f0000000b80)={[{}, {@gid={'gid', 0x3d, r11}}], [{@measure}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'fscontext'}}, {@fowner_lt={'fowner<', r9}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f1, &(0x7f0000000080))
fstat(r2, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmsg$unix(r7, &(0x7f0000002200)={&(0x7f0000000340)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f00000003c0)="a4139bc50f7e34a1e0673d835a77dbe85f98b8615dce374376fc0e001f93", 0x1e}, {&(0x7f0000000400)="3ce0bd905822261de2aa42c008ed7947149d15ed229c40cb11325a32f85ae52a24a6f64d7aedfba26fcb6446c521953b04bc9499aa83000fe2f8ba30e9c05d4fd644b5ae6807f3b76bf04c8b9c5f33aaec0a0b4e9b473bc75bfdb2f65617c2753e2ed61103690a7833664573e1af584acc9f14f9b63f0091fc3acf2587fcf6afffea069fbb29", 0x86}, {&(0x7f00000004c0)="99dd3ea65f0024fa53dbc709d5c0732fd679354fe79a5fd38298dae66e04199ada2c40a86564f25ffe09726faabfc6d87a9326df776b324bc237a8bb93b7ca9705c1289f336c0c3c037ebf995d640729686b44cd4f11efaf12fad9a0e5ebd05182e93d006ad9924764097797874d702561aa43ed3a979b0b57907ac7ff46eb706c65364b8b72714990e9a6b03e887398ceb5863aa895642ac5c080847d296a85c99f69638065aca158d91bcfa775ca6a95e3857c0068d220cd33f3e309255d7559112e670dddbbe8faed23ab58c1512190fd1ad89c", 0xd5}, {&(0x7f0000000600)="f5a62d2cd5f553e9e977ebd20cb1ee9b59532cc0d36ac55c8b32653ee80845e127d58b79cf50bd828452b8a62d6d7b40ddc3e5dc3faead688cca9364299e10b6f2e8ea528398f8acc0511336f70ce6ee5413601cf12462969504be53a128", 0x5e}, {&(0x7f0000000680)="e2c99fb789889c8491006ff198df1fc1a084432e941ee56fbc612a43860f5db5e7a01c2eea09fc82bc6e1438b57be107e000fa3664a46ff6a7c3a013cf56f8e5cd855a5e79f9f6aca80c5d05d229c10797552c5d4c4c76b4b1234d23473b8b8cc879439720cf348928b5ec48499de6182c43c56b2843a46eb2042890e4e1423841585201eda553f47c3ede5d360964432f02e428b9352ee44e0e249d35de0f18cfcdee18c93e9bd712b7ed89741ca52907d8875fce4f38140d1de120879fea", 0xbf}, {&(0x7f0000000740)="9106988c5b978feef9d8928c46f109ce45a9b8101ad15b966d5596746ff7", 0x1e}], 0x6, &(0x7f00000021c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r8, r11}}}, @cred={{0x1c, 0x1, 0x2, {r1, r13, 0xee00}}}], 0x40, 0x20044000}, 0x40005)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x3, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}, {&(0x7f0000000380)={0x1bc, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, "", [@generic="daa3ca88030d0459a01474eefd843ee0e6efaf26d98a63ed619d838a6b016c5a8e3a2ae13bc81a9064dfc66a9b026a40ed8667eba6a577db67f32bcf3a23c4d28987fda08b466443ac3bd5f619783154e74fcaffe00e73cfb6bd844beaf19fb35ee0b61592df80fcfedf04f4dda722181f8e03ea69c5d6c7c1d99cf0a3fed97d868fe38fa4a1afae984ad489da7b3082a768312f98f61fa454900c44acbba8df7afb050e35705ca2e290ecb6d8d3f18eaac079282b1e6dd5709d37b742e511aaa090a32bdf9a86385307e0d6430492eb3c89a573f246502571bd5996a0878eddf41e807dc1", @nested={0xc2, 0x15f, 0x0, 0x1, [@generic="57254d50340d6461afffb9d427f68fe6d0f74b489334e57868654f817a2e854bc23c1d2144a371984ef87a421234de1b75d2ac6609a5ab5fe96ff2c90615976a71134f8d45af9aceefc39fc97153f97e3bd776b19598fb3d32ad25342c968338c5812d7d20c6a18650a78027f36bdee98bd17ba0cb1f510f6dce34fa6a55b93fd822724988df73cefd04972ac9605b444884543456adba9f7e0e23e606e68ca9b6890f03d9f317b25b6006c04809fe569a0a668972b58039a216c762ae68"]}]}, 0x1bc}, {&(0x7f0000000540)={0x10c, 0x3c, 0x100, 0x70bd29, 0x25dfdbff, "", [@typed={0x4, 0x134}, @nested={0x24, 0xc6, 0x0, 0x1, [@typed={0x9, 0x131, 0x0, 0x0, @str='euid<'}, @typed={0x4, 0x85}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=r8}, @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="ef6f968b61e02679b711417d51fbd115c9cb79efa499186c0cb8bca9bfc452aa00128dd7d8fd3aca852a03787098b1de1e3bfdc547714070b97ed5be244708c7dde547d5e8b1abeab30ed78b462a1235428a72b4d304aa3132cd51971d2774a73043ca657dd2eba735378eae7ca83d58d4da6a7614d817ecc497c0574170bd10bb5749abd8c697d2dd5666498126156da0d05c38e03f9bebe338268eaaafb0ec7fb073dd5dbee5540147d77fb8045daf22e3d0e0d4f51918248857e3134f262f5e833f472e74f4ddaf1d7360b2bcf482b424f8"]}, 0x10c}, {&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x134}], 0x4}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

4m51.246250325s ago: executing program 2 (id=615):
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x4, 0x0, 0x8, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x4, 0x0, 0x8, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000046001400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8914b3f677210a5bea7f3bea6c3", 0x0, 0x10012004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8914b3f677210a5bea7f3bea6c3", 0x0, 0x10012004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x24, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0x100000000}]}, 0x20}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x24, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0x100000000}]}, 0x20}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0xe007, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0)

4m47.79273875s ago: executing program 4 (id=621):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
socket$kcm(0x2, 0x1, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000d4000000000900000500000028000000f66cabb89ab6ca6d086989e86cdf7e82985d1b587733d1413d1962065202dd8828f7fd313fd1a1114a8be88d6adf44db2e3da4d1027b56", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a40)=@newtaction={0x1128, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x1114, 0x1, [@m_police={0x1110, 0x1, 0x0, 0x0, {{0xb}, {0x10e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x1, 0x1, 0xff, 0xbd, 0x3, 0xffff, 0x200, 0x0, 0x7fff, 0x5, 0x0, 0xd, 0x3, 0x3, 0x5, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x1, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x3ff, 0x5f24, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0x1d, 0xb1, 0x10, 0x2768, 0x200, 0x1, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0x9, 0x4, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0x7, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x0, 0x3, 0x401, 0xfffffffb, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x3c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x6f41, 0x6, 0x2, 0xa, 0x2, 0xec6e, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x9, 0x6, 0x5, 0x8, 0x2e80, 0x6, 0x4, 0x9, 0x0, 0xffffffab, 0x3, 0x1000, 0x3ff, 0x3ff, 0x3, 0x2e70, 0x8, 0xf3d6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x64a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x470121f0, 0x93d0, 0x9, 0x3, 0xfffffff9, 0xffff, 0x8, 0xf935, 0x7, 0x8, 0x8000, 0x44, 0x4, 0x4, 0x4, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0x1, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x0, 0x80000001, 0x1, 0x0, 0x1000, 0x2, 0x1, 0x5, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x6, 0x14a, 0x1, 0x7aa, 0x9, 0x3ff, 0x10, 0x3ff, 0xb, 0x81, 0xc76, 0x7f, 0x24, 0x5, 0x100, 0x400, 0x8, 0x5, 0x8e, 0x6f7, 0xd9, 0x1000, 0x5, 0x26a2, 0x204, 0x7d, 0x1, 0x6, 0xc, 0x7, 0x2, 0x7d8, 0x7e, 0x7, 0x40000003, 0x6, 0x2, 0x5, 0xe, 0x100, 0x5, 0x0, 0x81, 0x1, 0x4, 0x6, 0x497, 0x8000, 0x3, 0xaf, 0x11, 0x8, 0x3d, 0x1000, 0x9, 0x3, 0x9, 0x80, 0x3, 0x1, 0x6, 0x2, 0xffffffff, 0x4, 0x0, 0x1, 0x0, 0x7fff, 0x200, 0x8, 0xa, 0x80000008, 0x1, 0x9c, 0x5260, 0x8, 0xff, 0x9303, 0x5, 0x0, 0x8, 0x2, 0xeca9, 0x400, 0xfa47, 0x80, 0x1, 0x9, 0x2, 0x10001, 0x4, 0x8d, 0x0, 0x8, 0x6, 0x80000000, 0xe, 0xffffcfbb, 0xb3dc, 0x401, 0xe36e, 0x0, 0x2, 0x3ff, 0x6, 0x401, 0x5, 0x9e, 0x1, 0x0, 0x10001, 0x7ff000, 0xfffffff8, 0x0, 0x1, 0x9, 0xfffffffc, 0x1, 0xdb, 0x0, 0x0, 0x100, 0x5, 0x0, 0x4, 0x7, 0x800, 0x2, 0x3, 0x7, 0x7, 0x5, 0x0, 0xfffffffa, 0x7fffffff, 0xffffff81, 0x6, 0x9, 0x8e, 0x9, 0xf, 0x0, 0x8, 0xe, 0x0, 0xffff8001, 0x0, 0x1ff, 0x1, 0x4, 0x3, 0x3, 0x100, 0x9, 0x7, 0x4, 0x6, 0x5, 0x9, 0x401, 0x1, 0x1, 0xaf53, 0x3, 0x4, 0x1, 0x1222, 0x8, 0xf4, 0x6, 0x9, 0xc, 0xe, 0x6, 0x9, 0x1, 0x345, 0x5fc, 0x7fff, 0x7, 0x5, 0x5, 0x2, 0x81, 0xff, 0x7, 0x1, 0x8000, 0x9, 0x2, 0x5, 0x2, 0x3, 0xa, 0xe8a7, 0x3ffc00, 0xab7, 0x4, 0x8, 0x5, 0xff, 0x1, 0x8ca, 0x4, 0x6eb38b0, 0x5, 0x9, 0x200, 0x7, 0xc, 0x9, 0x80000000, 0x0, 0xbe9d, 0x7, 0x7, 0x0, 0x3, 0xc, 0x0, 0x9, 0x9, 0x7, 0xffffff06, 0xac, 0x3ff, 0xd, 0x80000000, 0x2dfc, 0x75bc, 0x9, 0x5, 0x80000001, 0x10, 0x10000, 0x3ff, 0x1ec, 0x92, 0x7fffffff, 0x40000, 0x0, 0x5, 0xf, 0x9, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7ff, 0xd, 0xecbf, 0xb, 0x8001, 0xe57]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfa}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x1, 0x2, 0x6, 0x9, 0x10001}, {0x3, 0x0, 0x703, 0x2, 0x1, 0x1}, 0x0, 0x2a6, 0x4}}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcf, 0x6, 0xcb69, 0x8, 0x100, 0x9219, 0x1, 0x1, 0x6, 0x8, 0x38, 0x2, 0xa0, 0x3, 0x7, 0x0, 0x9863, 0x1, 0xc, 0xdd1, 0x3, 0x6, 0x9, 0x6, 0x6, 0x7, 0x2, 0x2, 0x7f, 0x7, 0xde, 0xc, 0x2, 0x5, 0xfffffe01, 0x27e6, 0x800, 0x0, 0x3b59, 0x10001, 0x3e70, 0xfffffff0, 0x800, 0x80, 0x0, 0x4, 0xc21, 0x4, 0x1ff, 0x8, 0x1, 0x2, 0x7fffffff, 0x877, 0x2, 0xc9f, 0xf6b56a36, 0x6, 0xb4, 0x9, 0x9, 0x1, 0x7f, 0x40, 0x1, 0x3, 0x0, 0x302, 0x2, 0x9, 0x4, 0x3, 0x9, 0x8, 0x1ff, 0x1, 0x2, 0x80000000, 0x1, 0x9, 0xffffffff, 0x100, 0x4, 0x66, 0x2, 0x0, 0x4, 0x5, 0x0, 0x5, 0x4, 0xfffffff7, 0x6fb, 0x969, 0x8, 0x7, 0x4, 0xffffffff, 0xffffff01, 0x9, 0xc1, 0x0, 0x4, 0x8, 0x3, 0x6, 0x0, 0x4, 0x2, 0x8, 0x0, 0x4, 0xbc, 0x9, 0x4, 0xfffffff6, 0x8, 0x80, 0x6, 0x0, 0xdcd1, 0x2, 0x0, 0x9, 0x76a, 0x4, 0x6, 0x9, 0x6, 0x5, 0x4, 0x3, 0x5, 0x40, 0xd1, 0xff, 0x6, 0x0, 0x1, 0x7, 0x8000, 0x2, 0x5e8, 0xbe3, 0xdd, 0x7, 0x2, 0x37, 0x6, 0x7f, 0x5, 0x6, 0x0, 0x7, 0xa44, 0x9, 0x7, 0x2, 0x6, 0x7, 0x6c93, 0x7f, 0xfffffffe, 0x5, 0x7, 0x64c, 0x7, 0x8000, 0x3, 0x4, 0x9, 0x1, 0x5, 0x5f, 0x7c, 0x97, 0x6, 0xf96, 0x9, 0x3, 0x2, 0x3, 0x40, 0xfffff980, 0x5, 0x6, 0x7ff, 0x0, 0x0, 0x7, 0xfffffffc, 0x2, 0x1, 0x8000, 0x9, 0x8, 0x2, 0xc7ef, 0x100, 0xff, 0x6c, 0x401, 0x4, 0x8, 0xbf, 0x479, 0x3, 0x9, 0x3, 0x9, 0xa4f9, 0x8, 0x5, 0x2, 0x8, 0x5, 0x9, 0x9f60, 0x0, 0x8, 0x2, 0x1ff, 0x451e, 0xff, 0x9, 0xffffffff, 0x63cc, 0x6, 0xffff, 0x3fee, 0x9ce4, 0x1, 0x2eb, 0xfffffff9, 0x2, 0x1ff, 0x8, 0x9, 0x311, 0x7, 0x1, 0x3, 0xfffffffa, 0x5, 0x5931, 0x7, 0x2, 0x4, 0x10001, 0x9, 0x8, 0x1, 0x4, 0xfffff0f6, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6e3, 0x3, 0xdc58, 0xe4ed, 0x6, 0x2, 0x4, 0x7fff, 0x39b7, 0xfffffff8, 0x3, 0xb, 0xa0d, 0x1, 0x7178, 0x0, 0x1000, 0xac, 0x6, 0x0, 0x6, 0x3, 0x7fffffff, 0x9, 0x8ed5, 0x9, 0x0, 0x9, 0x7, 0x8, 0x401, 0x8, 0x10, 0x6, 0x5, 0x1, 0x7, 0x4, 0x1, 0x6, 0x78ca, 0x7, 0x2, 0xda7, 0x5, 0x7, 0x401, 0x9, 0x9, 0xfffffbff, 0x0, 0x1f71, 0xffffffff, 0x9, 0x0, 0xb95, 0x3, 0x2, 0xffffffff, 0x8000, 0x0, 0x4, 0x37b1, 0xfffffbff, 0xcd7, 0x2, 0x4, 0x3, 0xffffffff, 0x76b, 0x5, 0xdf44, 0x80, 0x9, 0x0, 0x45d, 0x9, 0x9, 0x41, 0x0, 0x2, 0x10ac6198, 0x233, 0x8, 0x6, 0x300000, 0x5, 0xf, 0x6, 0x3, 0xfffffffa, 0x3, 0x9, 0x4de248ea, 0xffffffff, 0x8, 0x6, 0xfffff000, 0x4, 0x6, 0x10001, 0x9, 0x80000000, 0x4, 0x4d, 0x0, 0x0, 0x7, 0x4, 0x100, 0x101, 0x3, 0x3, 0x10001, 0x8001, 0x800, 0x9, 0x3ff, 0xfffffff8, 0x5, 0x6, 0x7, 0xa1bd, 0x0, 0x2, 0xfffffffe, 0x80000001, 0x4, 0x4, 0x4, 0x8, 0xfffffffa, 0x3, 0x1, 0x2, 0x4989, 0x8000, 0x10, 0x3, 0x5, 0x8, 0xf, 0x0, 0x9, 0x9, 0x40, 0xe7, 0x8, 0xbde0714e, 0x7, 0x80000, 0xffff, 0xfffffffb, 0x7d88, 0x11, 0x8, 0x0, 0x7f, 0xfffffff5, 0x0, 0xb874, 0x800, 0xe9, 0x4, 0xdc09, 0x0, 0x3ff, 0x800, 0x5, 0x7, 0xffff, 0x3, 0x8, 0x8, 0xa60f, 0x10000, 0xdc2, 0x7, 0x80000001, 0x800, 0x2, 0xa, 0x0, 0x0, 0x401, 0x1, 0x0, 0xffffffff, 0x9, 0xdbe2, 0x3ff, 0x9, 0x7, 0x1, 0x80000000, 0x5, 0x0, 0x800, 0x0, 0x5, 0x4, 0x4, 0xfffffffb, 0x1, 0x1, 0x10000, 0xffff0ca6, 0x1, 0x1, 0x7, 0x100, 0x5, 0x40, 0x8, 0x1, 0x7, 0x8e, 0x9e, 0x49, 0x5, 0x0, 0x1ff, 0x2, 0x6, 0xd, 0xfffffff5, 0x4, 0x10, 0x9, 0xfffffe00, 0x2e, 0x9, 0x100, 0x6, 0x6, 0x401, 0x4, 0x8, 0x6, 0xbb, 0xf995, 0x80000001, 0x3, 0x5, 0x6, 0x1, 0x8, 0xfff, 0xfffffffb, 0xffffffc0, 0x2, 0x9, 0x4, 0x7, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xa8, 0xffffffffffffffff, 0xb, 0xff, 0x5, {0x2c, 0x2, 0x1000, 0x1}, {0x7, 0x2, 0xbe05, 0x3, 0x1, 0x5}, 0x5, 0xb, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1128}, 0x1, 0x0, 0x0, 0x40041}, 0x2400c800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)

4m46.822170765s ago: executing program 4 (id=626):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0)

4m46.541027221s ago: executing program 2 (id=627):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m45.65710377s ago: executing program 4 (id=628):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000016000000b703000000000000850000000c000000b70000000000000095000000000000083c6f7d9ad083f2db87ba64ae7a433d1bdee9ef140146a7ab832113ebf3d9d9d624438c7038f20f66c5e14d44d9bd8e55e0581c96cfc4a6e3707a85e910802622f510ba9386bd5b50bfe9cb1a7f39bc4cf097af9b1c315d92ec4e8690bfc7bcbcb6c43a44d200eb884f836166f42f545c11e8137294495a83ad35380a8319b1a7403a401ca143870065aaa21d04a1737ca27fbb873596734eb2302e5f96e84b63a6d3f15abea684b94219d922fb9fa96db5698736f0f9794c9fa756795b1d2706d91dd415888e6198750000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20044810)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, 0x0, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x9, 0x4, 0x4, 0x204e}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1d, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x0, 0xe, 0x4, 0x7f, 0x68}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x2, 0x1, 0x1, 0x8, 0x2, 0x100, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0xdc, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x2, 0x101, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x10, 0x1af}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80d1, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x143, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
socket$kcm(0x2a, 0xd, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@o_path={&(0x7f00000000c0)='./file0\x00', r6, 0x4000, r3}, 0x18)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xeaae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

4m44.478749047s ago: executing program 4 (id=634):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20201}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000031410002cbd7000fedbdf250900020073797a310000000008004100727865001400330070696d360b39b47abdbdcb1260bea8db861d1dfb726567310000000000080041007369770014003300776c616e3000000000000000000000000000000000000000000000000000001426c257df3bfd931480b2ded5a9e8e99d86efde5f9099efc6177dd1169d9a2effb32f9e480e8e105f656ec0cbe4b7e440005a188a9327a16f06aaff041bbbcfccdbfed0ae7c4ae4a48188b54a987a451a0abecbae17f316e7bc3348fa7e737aee46e328e67f68931564"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880)
r0 = perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x97a4c4e, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x0, 0xff, 0xdc, 0x6, 0x0, 0x3, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x9}, 0x4aa1, 0x1000, 0x1, 0xd, 0x1fe, 0xc, 0x8, 0x0, 0x4a43, 0x0, 0x8})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000000f4ca28d434000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r3}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000005c0)='\'\xa4\x00')
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000000000000085000000bff6ff009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4004000)
r5 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='t', 0x1}], 0x1}, 0x1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000180), 0x43)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4m43.293517268s ago: executing program 4 (id=642):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x2c, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x78, 0x0, 0x1, [@generic='^']}]}, @nested={0xb, 0x7, 0x0, 0x1, [@generic="d6e35ee8e7f7ec"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

4m42.635477834s ago: executing program 4 (id=646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x26, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x520}, 0x107602, 0x6, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x0, 0x8, 0x6, 0x18, 0x4}, @map_fd={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x3, 0x5, 0x0, 0x40, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x2ba0, 0xa0, &(0x7f0000000500)=""/160, 0x41000, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x0, 0x38, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x8001, 0x5, 0x8, 0xb}, {0x3, 0x2, 0xd, 0x8}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x4, 0x0, 0x2}], 0x10, 0x2e3}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000), 0x8)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r3, 0x1}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2000000000000076, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
r6 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x7, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
sendmsg$netlink(r11, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000001900010028bd7000fddbdf252dc447bdf8b40018"], 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044)
close(r11)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r11, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000800000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

4m42.057275368s ago: executing program 32 (id=646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x26, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x520}, 0x107602, 0x6, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x0, 0x8, 0x6, 0x18, 0x4}, @map_fd={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x3, 0x5, 0x0, 0x40, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x2ba0, 0xa0, &(0x7f0000000500)=""/160, 0x41000, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x0, 0x38, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x8001, 0x5, 0x8, 0xb}, {0x3, 0x2, 0xd, 0x8}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x4, 0x0, 0x2}], 0x10, 0x2e3}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000), 0x8)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r3, 0x1}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2000000000000076, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
r6 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x7, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
sendmsg$netlink(r11, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000001900010028bd7000fddbdf252dc447bdf8b40018"], 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044)
close(r11)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r11, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000800000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

4m31.166725052s ago: executing program 33 (id=627):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m33.673189139s ago: executing program 6 (id=1779):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x40, 0x5}, 0x50)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004800070128bd700000000000017c00000c00018003000000800a0000080002"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x24004044)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x20000001}, 0x2a00, 0x20000, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x18, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}]}, 0x20}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff276, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
socket$kcm(0x29, 0xf, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r6}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38)

1m32.989790981s ago: executing program 6 (id=1785):
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x5e, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94)

1m32.826042372s ago: executing program 6 (id=1788):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000", @ANYRES32=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x9, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89a2, 0x0)
sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000000000000007d80000000000000"], 0x18}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x8, 0xd55c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x800000000020}, r6, 0x4, 0xffffffffffffffff, 0x2)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
socketpair(0x3e, 0xa, 0x8001, &(0x7f0000000300))
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000036000100fcff070049d5000001000000060001807d880000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05000500", 0x2c}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

1m31.900104917s ago: executing program 6 (id=1794):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000016c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="9763e469fcd37cd7224936bd9ac6ec1647b121139d14e6b69168a95b47de0454dcf343addf4a3bd265ba2eecbb9de552c80849563c0e154e3029fd51997e073ad9eadd4c2e6841314b9257c42ddb662877356d5fc5933e84c2be50d58a0c93f7dc75e96c3d50f892e20acde515dad6f9e56e9de170adff555ec2d5a176fb1798666df0f5cdade5236623d01d8d44904f3d982322ff364145a401a9c284aa1f819707ed8b930f83d7dca7bfca61c1ac0c7bdf9b247c0858e3d411abbe6d18c44d4aa211f7e3435b746e694dcd14fdbef5c7bbbb731fcf106fa0a5ddaa7ae28c3214c7c295da7919f4b87e4d81e029ddd09ddd8bf3da98c50b4caa64be529ceec104ac73105f41bb27be2e6cbd354f98084b5a40428fc0f3c1ddc8472e89752698579c82cdc4a68b7da52ad5ab4569f4854c4d864b7309466b4153d08739422e", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)='>', 0x1}, {&(0x7f0000000680)="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", 0xec1}], 0x2}, 0x8001)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

1m31.456412498s ago: executing program 6 (id=1796):
socket$inet(0x2, 0x2, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_config_ext={0x8, 0x1}, 0xb002, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x100000, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x20002800)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008030)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0401000034000701fcffffff00000000017c000008000a8004003e80e60008"], 0x104}, 0x1, 0x0, 0x0, 0x488c4}, 0x4000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x16)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'})

1m27.957360991s ago: executing program 6 (id=1804):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000", @ANYRES32=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x9, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89a2, 0x0)
sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000000000000007d80000000000000"], 0x18}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x8, 0xd55c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x800000000020}, r6, 0x4, 0xffffffffffffffff, 0x2)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
socketpair(0x3e, 0xa, 0x8001, &(0x7f0000000300))
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000036000100fcff070049d5000001000000060001807d880000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x5828, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x1, 0x0, 0xfffffffe, 0x0, 0x3d}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05000500", 0x2c}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

1m27.512838537s ago: executing program 34 (id=1804):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000", @ANYRES32=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x9, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89a2, 0x0)
sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000000000000007d80000000000000"], 0x18}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x8, 0xd55c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x800000000020}, r6, 0x4, 0xffffffffffffffff, 0x2)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
socketpair(0x3e, 0xa, 0x8001, &(0x7f0000000300))
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000036000100fcff070049d5000001000000060001807d880000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x5828, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x1, 0x0, 0xfffffffe, 0x0, 0x3d}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05000500", 0x2c}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

5.127577566s ago: executing program 1 (id=2350):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.222903754s ago: executing program 1 (id=2359):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

3.904396274s ago: executing program 1 (id=2366):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

3.7934577s ago: executing program 1 (id=2367):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

3.60499162s ago: executing program 1 (id=2368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0)

2.812969779s ago: executing program 3 (id=2383):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206010400000000000000000700000905000100070000000900020073797a30000000000c0007800800120000000000050005"], 0x5c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

2.625334501s ago: executing program 3 (id=2387):
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)

2.507354375s ago: executing program 3 (id=2389):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xafc7, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.451447117s ago: executing program 1 (id=2390):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @mcast1, 0xffffbffb}, 0x1c, 0x0}, 0x1404c8d4)

2.235217753s ago: executing program 35 (id=2390):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @mcast1, 0xffffbffb}, 0x1c, 0x0}, 0x1404c8d4)

1.908164098s ago: executing program 5 (id=2396):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[{0x10, 0x110, 0x2}], 0x10}, 0x8800)

1.577184604s ago: executing program 5 (id=2398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x98cbdd08856ddb1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8084}, 0x80)

1.46074499s ago: executing program 7 (id=2399):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94)

1.407051209s ago: executing program 5 (id=2400):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50)

1.289088046s ago: executing program 7 (id=2401):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x3f5, 0x88d3f2ff61068caa, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x80)

1.1680886s ago: executing program 7 (id=2402):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000001800000040000005a0c284266ed41a0b728adf527745f9f4e613dc57f61fe0e0fdf56cdba803a428552396464acd4ac2e76b74acf96547fd65b8030d6bff2a2852634080387c22795f6e3a6070000007b04dd4cf693308537761c67ddf6f6cc17bc56e7a4dc68abd172d59b1ff4d110490000000033f6f68f8c391b919d748f81a132e493be0454cb5e90d96b30acb5fd5db0f14958cff96b2c6e3f538237ed96de9d624e5105", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1e3f}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.061607955s ago: executing program 5 (id=2404):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x32}, 0x28)

1.022517258s ago: executing program 0 (id=2405):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

884.328683ms ago: executing program 5 (id=2406):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00}, 0x28)

715.990085ms ago: executing program 0 (id=2407):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x541b, 0xf0ff1f00000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/153}, 0x20)

622.241215ms ago: executing program 5 (id=2408):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3000000000, 0xfffffffffffffffc}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), <r6=>0x0, 0xa1, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711273000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x91c, 0xa3, &(0x7f0000000280)=""/163, 0x41100, 0x10, '\x00', r4, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0x9, 0x81}, 0x10, r6, r1, 0x2, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0x5, 0xa}, {0x1, 0x3, 0x5, 0x5}], 0x10, 0xe}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0400000001000100ce130000010000001c000200", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000100009b48cdcd15953652ac5f49000000000000000000000000000000000000135c61a10000000000000000"], 0x50)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r0}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x7, 0x3, 0x0, 0x5080c, r7, 0x1, '\x00', r4, r8, 0x4, 0x4, 0x4, 0x4, @void, @value, @value=r9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], 0x0}, 0x94)
r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8)
r13 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1)
setsockopt$sock_attach_bpf(r13, 0x1, 0x9, &(0x7f0000000800)=r12, 0x4)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r12)
r15 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956", 0x15}, {&(0x7f0000000380)="622acab2fcfefced", 0x8}], 0x2}, 0x0)
recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x120)

616.332345ms ago: executing program 3 (id=2409):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0)

453.677866ms ago: executing program 0 (id=2410):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd4, 0x0, 0x1}]}}}], 0x18}, 0x804)

354.807821ms ago: executing program 7 (id=2411):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x1c000000)

337.305369ms ago: executing program 3 (id=2412):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x95fc, 0xa18c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xc, 0xd}, 0x808, 0xc8, 0x94a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xd)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x3, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x4, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x201}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000300), 0x3}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000003000), 0x201, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x80000000}, {0xa}, {}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

213.49214ms ago: executing program 0 (id=2413):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

175.656053ms ago: executing program 7 (id=2414):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x3}}], 0x18}, 0x0)

135.313407ms ago: executing program 0 (id=2415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

9.32032ms ago: executing program 0 (id=2416):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x80000000}, {0xa}, {}, {}]}]}}, 0x0, 0x46, 0x0, 0x1}, 0x28)

9.130547ms ago: executing program 7 (id=2417):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x1000, 0x8}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0)

0s ago: executing program 3 (id=2418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

kernel console output (not intermixed with test programs):

 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  235.621993][ T8825] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  235.642507][ T8825] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  235.672914][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.695169][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.725344][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.740430][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.751412][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.779616][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.814616][ T6637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.845157][ T8859] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  235.872455][ T8825] lo speed is unknown, defaulting to 1000
[  235.896702][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.906870][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.934350][ T8825] lo speed is unknown, defaulting to 1000
[  235.977372][ T8825] lo speed is unknown, defaulting to 1000
[  236.004342][ T8763] hsr_slave_0: entered promiscuous mode
[  236.023612][ T8763] hsr_slave_1: entered promiscuous mode
[  236.031977][ T8763] debugfs: 'hsr0' already exists in 'hsr'
[  236.044223][ T8763] Cannot create hsr debugfs directory
[  236.057149][ T8825] lo speed is unknown, defaulting to 1000
[  236.066944][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.123538][ T8825] lo speed is unknown, defaulting to 1000
[  236.244393][ T8866] netlink: 'syz.5.648': attribute type 29 has an invalid length.
[  236.282147][ T8825] lo speed is unknown, defaulting to 1000
[  236.333138][ T8867] netlink: 'syz.5.648': attribute type 21 has an invalid length.
[  236.357770][ T8870] netlink: 'syz.5.648': attribute type 29 has an invalid length.
[  236.392929][ T8825] lo speed is unknown, defaulting to 1000
[  236.412888][ T8866] netlink: 'syz.5.648': attribute type 29 has an invalid length.
[  236.697230][ T8880] netlink: 68 bytes leftover after parsing attributes in process `syz.3.741'.
[  236.950322][ T6637] bridge_slave_1: left allmulticast mode
[  236.976277][ T6637] bridge_slave_1: left promiscuous mode
[  237.005294][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.059989][ T6637] bridge_slave_0: left allmulticast mode
[  237.085771][ T6637] bridge_slave_0: left promiscuous mode
[  237.091899][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.108052][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.764023][ T4929] Bluetooth: hci5: command tx timeout
[  237.862668][ T6637] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  238.154588][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.163924][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.236202][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.271989][ T6637] bond0 (unregistering): Released all slaves
[  238.366956][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  238.486155][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.696043][ T8941] __nla_validate_parse: 1 callbacks suppressed
[  238.696064][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  238.782416][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  238.891924][ T8940] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.899950][ T8940] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[  238.978423][ T8927] lo speed is unknown, defaulting to 1000
[  239.053381][ T8944] siw: device registration error -23
[  239.076396][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  239.091893][ T8953] netlink: 'syz.5.753': attribute type 17 has an invalid length.
[  239.329123][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  239.828478][ T4929] Bluetooth: hci5: command tx timeout
[  240.044419][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.052465][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.307103][   T24] net_ratelimit: 2 callbacks suppressed
[  240.307123][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.338479][ T8953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.356622][ T8953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.742120][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  240.755887][ T6636] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.834896][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'.
[  240.887566][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.107159][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.118728][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.135106][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.376132][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.420078][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.486544][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.202678][ T6637] hsr_slave_0: left promiscuous mode
[  242.219955][ T6637] hsr_slave_1: left promiscuous mode
[  242.239730][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.257350][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.271928][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.286917][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.374058][ T6637] veth0_macvtap: left promiscuous mode
[  242.387717][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.408676][ T6637] veth1_vlan: left promiscuous mode
[  242.418083][ T6637] veth0_vlan: left promiscuous mode
[  243.428505][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.149871][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.228575][ T6637] team0 (unregistering): Port device team_slave_1 removed
[  244.431029][ T6637] team0 (unregistering): Port device team_slave_0 removed
[  244.467882][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.475500][ T8763] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  245.507424][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.561546][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  245.598293][ T8763] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  245.709032][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  245.769893][ T8763] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  245.905399][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  245.960016][ T8763] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  246.199897][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  246.490922][ T9031] lo speed is unknown, defaulting to 1000
[  246.567931][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.872008][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.883314][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.898274][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.324039][ T4929] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[  247.588724][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.629257][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.428094][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.667070][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.987604][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.706965][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.763141][ T9073] netlink: 'syz.3.781': attribute type 12 has an invalid length.
[  250.800578][ T9073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.781'.
[  250.854863][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3
[  251.111349][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'.
[  251.176146][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.274616][ T8763] 8021q: adding VLAN 0 to HW filter on device team0
[  251.334604][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.341985][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.391843][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.399291][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.748174][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.842673][ T9119] netlink: 2 bytes leftover after parsing attributes in process `syz.3.792'.
[  252.261966][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.797'.
[  252.627217][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.642516][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.651432][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.787236][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.977924][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4
[  253.455350][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'.
[  253.456548][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.804'.
[  253.491860][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.547643][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'.
[  253.846089][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.230433][ T9209] netlink: 'syz.3.809': attribute type 10 has an invalid length.
[  254.241932][ T9209] netlink: 128 bytes leftover after parsing attributes in process `syz.3.809'.
[  254.598063][ T9224] xt_hashlimit: max too large, truncated to 1048576
[  254.722942][ T8763] veth0_vlan: entered promiscuous mode
[  254.763397][ T8763] veth1_vlan: entered promiscuous mode
[  254.837377][ T8763] veth0_macvtap: entered promiscuous mode
[  254.867491][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.889621][ T8763] veth1_macvtap: entered promiscuous mode
[  254.893342][ T9230] netlink: 'syz.0.816': attribute type 21 has an invalid length.
[  254.922740][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.816'.
[  255.004861][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.079103][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.133444][ T9238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.819'.
[  255.346658][ T6636] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.356343][ T6636] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.496235][ T6627] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.537518][ T6627] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.667366][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.835096][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  255.844117][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  255.850699][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.908646][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.919069][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.380569][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.412795][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.958047][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.239836][ T9278] __nla_validate_parse: 3 callbacks suppressed
[  257.239858][ T9278] netlink: 136 bytes leftover after parsing attributes in process `syz.1.830'.
[  257.833790][ T9286] netlink: zone id is out of range
[  257.851913][ T9286] netlink: zone id is out of range
[  257.899124][ T9286] netlink: zone id is out of range
[  257.904331][ T9286] netlink: zone id is out of range
[  257.909492][ T9286] netlink: zone id is out of range
[  257.914705][ T9286] netlink: zone id is out of range
[  257.949511][ T4929] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  257.957229][ T4929] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x02
[  257.986834][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.231167][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'.
[  258.262867][ T9306] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  258.321224][ T9308] netlink: 'syz.3.841': attribute type 16 has an invalid length.
[  258.353805][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'.
[  258.391780][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'.
[  258.569062][ T9308] bridge0: port 3(batadv0) entered disabled state
[  258.576323][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.584054][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.658042][ T9308] batman_adv: batadv0: Interface deactivated: dummy0
[  259.273794][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.325555][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.567884][ T5754] lo speed is unknown, defaulting to 1000
[  259.586918][ T9359] netlink: 'syz.6.849': attribute type 12 has an invalid length.
[  259.599911][ T5754] syz0: Port: 1 Link DOWN
[  259.619597][ T9359] netlink: 132 bytes leftover after parsing attributes in process `syz.6.849'.
[  259.649668][ T6628] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.659572][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'.
[  259.680151][ T6628] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.697761][ T9361] netlink: 268 bytes leftover after parsing attributes in process `syz.6.849'.
[  259.712751][ T6628] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.730780][ T6628] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.017324][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'.
[  260.170179][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.851'.
[  261.229817][ T9418] netlink: 76 bytes leftover after parsing attributes in process `syz.3.867'.
[  261.923329][ T4929] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  262.344675][ T9461] netlink: 'syz.1.876': attribute type 39 has an invalid length.
[  263.943659][ T9507] __nla_validate_parse: 2 callbacks suppressed
[  263.943679][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  263.968480][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  264.154642][ T9520] siw: device registration error -23
[  264.209973][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  264.285540][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  264.581170][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'.
[  264.674695][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  264.683615][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  266.194690][ T9568] can: request_module (can-proto-4) failed.
[  266.672823][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'.
[  266.974210][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[  268.067016][ T4929] Bluetooth: hci5: command 0x0406 tx timeout
[  268.693180][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'.
[  268.967474][ T9678] netlink: 'syz.6.934': attribute type 2 has an invalid length.
[  268.998532][ T9678] netlink: 'syz.6.934': attribute type 2 has an invalid length.
[  269.302381][ T9692] netlink: 4336 bytes leftover after parsing attributes in process `syz.6.938'.
[  269.462168][ T9696] netlink: 122 bytes leftover after parsing attributes in process `syz.5.940'.
[  269.962304][ T9715] netlink: 'syz.1.942': attribute type 10 has an invalid length.
[  270.134918][ T9726] netlink: 'syz.6.947': attribute type 16 has an invalid length.
[  270.165936][ T9726] netlink: 'syz.6.947': attribute type 17 has an invalid length.
[  270.193984][ T9726] lo: entered promiscuous mode
[  270.225499][ T9726] tunl0: entered promiscuous mode
[  270.241876][ T9726] gre0: entered promiscuous mode
[  270.265338][ T9726] gretap0: entered promiscuous mode
[  270.286501][ T9726] erspan0: entered promiscuous mode
[  270.320273][ T9726] ip_vti0: entered promiscuous mode
[  270.348846][ T9726] ip6_vti0: entered promiscuous mode
[  270.368238][ T9726] sit0: entered promiscuous mode
[  270.390041][ T9726] ip6tnl0: entered promiscuous mode
[  270.421167][ T9736] nft_compat: unsupported protocol 0
[  270.421194][ T9726] ip6gre0: entered promiscuous mode
[  270.488807][ T9726] syz_tun: entered promiscuous mode
[  270.522119][ T9726] ip6gretap0: entered promiscuous mode
[  270.551859][ T9726] bridge0: entered promiscuous mode
[  270.586753][ T9726] vcan0: entered promiscuous mode
[  270.622256][ T9726] bond0: entered promiscuous mode
[  270.654589][ T9726] bond_slave_0: entered promiscuous mode
[  270.676127][ T9726] bond_slave_1: entered promiscuous mode
[  270.684091][ T9726] team0: entered promiscuous mode
[  270.690134][ T9726] team_slave_0: entered promiscuous mode
[  270.710913][ T9726] team_slave_1: entered promiscuous mode
[  270.724273][ T9726] dummy0: entered promiscuous mode
[  270.754701][ T9726] nlmon0: entered promiscuous mode
[  270.796995][ T9726] batadv0: entered promiscuous mode
[  270.820358][ T9726] vxcan0: entered promiscuous mode
[  270.839381][ T9726] vxcan1: entered promiscuous mode
[  270.846410][ T9726] veth0: entered promiscuous mode
[  270.853384][ T9726] veth1: entered promiscuous mode
[  270.864126][ T9726] wg0: entered promiscuous mode
[  270.871386][ T9726] wg1: entered promiscuous mode
[  270.879030][ T9726] wg2: entered promiscuous mode
[  270.886322][ T9726] veth0_to_bridge: entered promiscuous mode
[  270.896257][ T9726] veth1_to_bridge: entered promiscuous mode
[  270.906576][ T9726] veth0_to_bond: entered promiscuous mode
[  270.917118][ T9726] veth1_to_bond: entered promiscuous mode
[  270.929685][ T9726] veth0_to_team: entered promiscuous mode
[  271.034913][ T9726] veth1_to_team: entered promiscuous mode
[  271.068007][ T9726] veth0_to_batadv: entered promiscuous mode
[  271.094065][ T9726] batadv_slave_0: entered promiscuous mode
[  271.134186][ T9726] veth1_to_batadv: entered promiscuous mode
[  271.152101][ T9726] batadv_slave_1: entered promiscuous mode
[  271.161502][ T9726] xfrm0: entered promiscuous mode
[  271.190585][ T9726] veth0_to_hsr: entered promiscuous mode
[  271.232123][ T9726] veth1_to_hsr: entered promiscuous mode
[  271.281063][ T9726] hsr0: entered promiscuous mode
[  271.340148][ T9726] veth1_virt_wifi: entered promiscuous mode
[  271.390504][ T9726] veth0_virt_wifi: entered promiscuous mode
[  271.463790][ T9726] virt_wifi0: entered promiscuous mode
[  271.513441][ T9726] vlan0: entered promiscuous mode
[  271.552133][ T9726] vlan1: entered promiscuous mode
[  271.579970][ T9726] macvlan0: entered promiscuous mode
[  271.589388][ T9726] macvlan1: entered promiscuous mode
[  271.611993][ T9726] ipvlan0: entered promiscuous mode
[  271.646811][ T9726] ipvlan1: entered promiscuous mode
[  271.686702][ T9726] macvtap0: entered promiscuous mode
[  271.710578][ T9726] macsec0: entered promiscuous mode
[  271.732490][ T9726] geneve0: entered promiscuous mode
[  271.753696][ T9726] geneve1: entered promiscuous mode
[  271.780213][ T9726] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  271.797968][ T9726] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[  271.836331][ T9726] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  271.853705][ T9726] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[  271.879382][ T9726] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  271.897923][ T9726] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode
[  272.374264][ T9760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.955'.
[  272.407826][ T9760] unsupported nlmsg_type 40
[  273.288013][ T5618] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  273.446155][ T9796] netlink: 4336 bytes leftover after parsing attributes in process `syz.3.968'.
[  273.521528][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.969'.
[  274.104632][ T9800] netlink: 'syz.5.970': attribute type 12 has an invalid length.
[  274.133758][ T9800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.970'.
[  274.210672][ T9808] netlink: 'syz.5.970': attribute type 21 has an invalid length.
[  274.666996][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.739680][ T9818] bridge_slave_0 (unregistering): left allmulticast mode
[  274.747840][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.869335][ T9827] netlink: 'syz.5.980': attribute type 16 has an invalid length.
[  274.878308][ T9827] netlink: 'syz.5.980': attribute type 17 has an invalid length.
[  274.907388][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.5.980'.
[  275.033082][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'.
[  275.328785][ T9841] netlink: 4336 bytes leftover after parsing attributes in process `syz.6.982'.
[  275.464806][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'.
[  276.503089][ T9864] netlink: 32 bytes leftover after parsing attributes in process `syz.5.991'.
[  276.662073][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.991'.
[  276.687604][   T30] audit: type=1107 audit(1786460802.685:2): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='
[  276.687604][   T30] ,”aÊÕ×'
[  276.798149][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'.
[  277.068796][ T9876] netlink: 'syz.5.995': attribute type 11 has an invalid length.
[  277.364295][ T9880] FAULT_INJECTION: forcing a failure.
[  277.364295][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  277.439912][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.3.996 Not tainted syzkaller #0 PREEMPT(full) 
[  277.439943][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  277.439961][ T9880] Call Trace:
[  277.439970][ T9880]  <TASK>
[  277.439978][ T9880]  dump_stack_lvl+0xe8/0x150
[  277.440015][ T9880]  should_fail_ex+0x40c/0x560
[  277.440048][ T9880]  _copy_to_user+0x31/0xb0
[  277.440072][ T9880]  simple_read_from_buffer+0xe1/0x170
[  277.440108][ T9880]  proc_fail_nth_read+0x1bb/0x230
[  277.440143][ T9880]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.440179][ T9880]  ? rw_verify_area+0x24a/0x4c0
[  277.440224][ T9880]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.440255][ T9880]  vfs_read+0x213/0xa80
[  277.440279][ T9880]  ? irqentry_exit+0x218/0x8f0
[  277.440310][ T9880]  ? lockdep_hardirqs_on+0x7a/0x110
[  277.440339][ T9880]  ? __pfx_vfs_read+0x10/0x10
[  277.440383][ T9880]  ksys_read+0x150/0x270
[  277.440407][ T9880]  ? __pfx_ksys_read+0x10/0x10
[  277.440424][ T9880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.440456][ T9880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.440480][ T9880]  do_syscall_64+0x174/0x580
[  277.440512][ T9880]  ? clear_bhb_loop+0x70/0xc0
[  277.440538][ T9880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.440560][ T9880] RIP: 0033:0x7f2e3395e90e
[  277.440580][ T9880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  277.440598][ T9880] RSP: 002b:00007f2e34807fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  277.440620][ T9880] RAX: ffffffffffffffda RBX: 00007f2e348086c0 RCX: 00007f2e3395e90e
[  277.440635][ T9880] RDX: 000000000000000f RSI: 00007f2e348080a0 RDI: 0000000000000008
[  277.440648][ T9880] RBP: 00007f2e34808090 R08: 0000000000000000 R09: 0000000000000000
[  277.440660][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.440672][ T9880] R13: 00007f2e33c26038 R14: 00007f2e33c25fa0 R15: 00007ffd576c9f38
[  277.440706][ T9880]  </TASK>
[  277.602215][ T9886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.998'.
[  277.926273][ T9889] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.998'.
[  278.736994][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'.
[  278.935790][ T9907] siw: device registration error -23
[  278.983641][ T5618] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  279.425788][ T5618] Bluetooth: hci3: command 0x0406 tx timeout
[  280.628754][ T9919] netlink: 'syz.0.1007': attribute type 2 has an invalid length.
[  280.845501][ T9929] __nla_validate_parse: 6 callbacks suppressed
[  280.845522][ T9929] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1008'.
[  281.111547][ T9932] FAULT_INJECTION: forcing a failure.
[  281.111547][ T9932] name failslab, interval 1, probability 0, space 0, times 1
[  281.198380][ T9932] CPU: 1 UID: 0 PID: 9932 Comm: syz.3.1010 Not tainted syzkaller #0 PREEMPT(full) 
[  281.198413][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  281.198428][ T9932] Call Trace:
[  281.198437][ T9932]  <TASK>
[  281.198447][ T9932]  dump_stack_lvl+0xe8/0x150
[  281.198487][ T9932]  should_fail_ex+0x40c/0x560
[  281.198524][ T9932]  should_failslab+0xa8/0x100
[  281.198563][ T9932]  __kmalloc_cache_node_noprof+0xaa/0x630
[  281.198600][ T9932]  ? __get_vm_area_node+0x136/0x300
[  281.198626][ T9932]  ? __get_vm_area_node+0x136/0x300
[  281.198654][ T9932]  ? ktime_get+0x45/0x220
[  281.198688][ T9932]  __get_vm_area_node+0x136/0x300
[  281.198714][ T9932]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  281.198750][ T9932]  __vmalloc_node_range_noprof+0x358/0x1730
[  281.198781][ T9932]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  281.198820][ T9932]  ? irqentry_exit+0x218/0x8f0
[  281.198855][ T9932]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  281.198906][ T9932]  ? lockdep_hardirqs_on+0x7a/0x110
[  281.198944][ T9932]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  281.198990][ T9932]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  281.199020][ T9932]  __vmalloc_noprof+0xd2/0x120
[  281.199050][ T9932]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  281.199085][ T9932]  bpf_prog_alloc_no_stats+0x47/0x560
[  281.199115][ T9932]  ? bpf_prog_alloc+0x2a/0x1a0
[  281.199148][ T9932]  bpf_prog_alloc+0x3c/0x1a0
[  281.199181][ T9932]  bpf_prog_load+0x7f8/0x1c20
[  281.199235][ T9932]  ? __pfx_bpf_prog_load+0x10/0x10
[  281.199296][ T9932]  __sys_bpf+0xd0d/0xd90
[  281.199336][ T9932]  ? __pfx___sys_bpf+0x10/0x10
[  281.199368][ T9932]  ? perf_trace_preemptirq_template+0xb2/0x350
[  281.199392][ T9932]  ? irqentry_exit+0x218/0x8f0
[  281.199447][ T9932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.199472][ T9932]  __x64_sys_bpf+0xba/0xd0
[  281.199493][ T9932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.199513][ T9932]  do_syscall_64+0x174/0x580
[  281.199541][ T9932]  ? clear_bhb_loop+0x70/0xc0
[  281.199564][ T9932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.199583][ T9932] RIP: 0033:0x7f2e3399e0d9
[  281.199600][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.199616][ T9932] RSP: 002b:00007f2e34808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  281.199637][ T9932] RAX: ffffffffffffffda RBX: 00007f2e33c25fa0 RCX: 00007f2e3399e0d9
[  281.199651][ T9932] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  281.199663][ T9932] RBP: 00007f2e34808090 R08: 0000000000000000 R09: 0000000000000000
[  281.199674][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.199686][ T9932] R13: 00007f2e33c26038 R14: 00007f2e33c25fa0 R15: 00007ffd576c9f38
[  281.199718][ T9932]  </TASK>
[  281.199791][ T9932] syz.3.1010: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  281.594133][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.3.1010 Not tainted syzkaller #0 PREEMPT(full) 
[  281.594163][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  281.594176][ T9932] Call Trace:
[  281.594184][ T9932]  <TASK>
[  281.594194][ T9932]  dump_stack_lvl+0xe8/0x150
[  281.594231][ T9932]  warn_alloc+0x24c/0x270
[  281.594262][ T9932]  ? __kasan_kmalloc+0x22/0xb0
[  281.594310][ T9932]  ? __pfx_warn_alloc+0x10/0x10
[  281.594354][ T9932]  ? __get_vm_area_node+0x2af/0x300
[  281.594391][ T9932]  __vmalloc_node_range_noprof+0x37d/0x1730
[  281.594421][ T9932]  ? irqentry_exit+0x218/0x8f0
[  281.594454][ T9932]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  281.594507][ T9932]  ? lockdep_hardirqs_on+0x7a/0x110
[  281.594543][ T9932]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  281.594590][ T9932]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  281.594632][ T9932]  __vmalloc_noprof+0xd2/0x120
[  281.594661][ T9932]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  281.594695][ T9932]  bpf_prog_alloc_no_stats+0x47/0x560
[  281.594722][ T9932]  ? bpf_prog_alloc+0x2a/0x1a0
[  281.594754][ T9932]  bpf_prog_alloc+0x3c/0x1a0
[  281.594787][ T9932]  bpf_prog_load+0x7f8/0x1c20
[  281.594833][ T9932]  ? __pfx_bpf_prog_load+0x10/0x10
[  281.594895][ T9932]  __sys_bpf+0xd0d/0xd90
[  281.594933][ T9932]  ? __pfx___sys_bpf+0x10/0x10
[  281.594960][ T9932]  ? perf_trace_preemptirq_template+0xb2/0x350
[  281.594987][ T9932]  ? irqentry_exit+0x218/0x8f0
[  281.595060][ T9932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.595090][ T9932]  __x64_sys_bpf+0xba/0xd0
[  281.595115][ T9932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.595139][ T9932]  do_syscall_64+0x174/0x580
[  281.595170][ T9932]  ? clear_bhb_loop+0x70/0xc0
[  281.595198][ T9932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.595219][ T9932] RIP: 0033:0x7f2e3399e0d9
[  281.595240][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.595257][ T9932] RSP: 002b:00007f2e34808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  281.595279][ T9932] RAX: ffffffffffffffda RBX: 00007f2e33c25fa0 RCX: 00007f2e3399e0d9
[  281.595295][ T9932] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  281.595307][ T9932] RBP: 00007f2e34808090 R08: 0000000000000000 R09: 0000000000000000
[  281.595320][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.595332][ T9932] R13: 00007f2e33c26038 R14: 00007f2e33c25fa0 R15: 00007ffd576c9f38
[  281.595370][ T9932]  </TASK>
[  281.595379][ T9932] Mem-Info:
[  281.796056][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  282.039543][ T9932] active_anon:17157 inactive_anon:0 isolated_anon:0
[  282.039543][ T9932]  active_file:0 inactive_file:56585 isolated_file:0
[  282.039543][ T9932]  unevictable:0 dirty:15 writeback:0
[  282.039543][ T9932]  slab_reclaimable:6682 slab_unreclaimable:102567
[  282.039543][ T9932]  mapped:29584 shmem:7763 pagetables:1503
[  282.039543][ T9932]  sec_pagetables:0 bounce:0
[  282.039543][ T9932]  kernel_misc_reclaimable:0
[  282.039543][ T9932]  free:1148684 free_pcp:20737 free_cma:0
[  282.139420][ T9932] Node 0 active_anon:67328kB inactive_anon:0kB active_file:0kB inactive_file:226204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118336kB dirty:60kB writeback:0kB shmem:29752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13724kB pagetables:5916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  282.247900][ T9932] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  282.328737][ T9932] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.416762][ T9932] lowmem_reserve[]: 0 2488 2489 2489 2489
[  282.437787][ T9916] syz.0.1007 (9916) used greatest stack depth: 19456 bytes left
[  282.457514][ T9932] Node 0 DMA32 free:635284kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61028kB inactive_anon:0kB active_file:0kB inactive_file:226204kB unevictable:0kB writepending:60kB zspages:252kB present:3129332kB managed:2548600kB mlocked:0kB bounce:0kB free_pcp:90932kB local_pcp:47716kB free_cma:0kB
[  282.537007][ T9932] lowmem_reserve[]: 0 0 0 0 0
[  282.603156][ T9932] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.715417][ T9932] lowmem_reserve[]: 0 0 0 0 0
[  282.726042][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'.
[  282.737473][ T9932] Node 1 Normal free:3944504kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.761205][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'.
[  282.803355][ T9932] lowmem_reserve[]: 0 0 0 0 0
[  282.806193][ T9947] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1015'.
[  282.817070][ T9947] veth1_to_bridge: entered allmulticast mode
[  282.830439][ T9932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  282.851631][ T9918] syz.0.1007 (9918) used greatest stack depth: 18608 bytes left
[  282.916716][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'.
[  282.925745][ T9947] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1015'.
[  282.930158][ T9932] Node 0 DMA32: 254*4kB (UME) 167*8kB (UME) 332*16kB (UME) 80*32kB (UME) 45*64kB (UME) 11*128kB (UME) 9*256kB (M) 1*512kB (E) 2*1024kB (UM) 2*2048kB (ME) 151*4096kB (M) = 641968kB
[  283.110767][ T9932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  283.168828][ T9932] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 14*16kB (UM) 5*32kB (UM) 8*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944504kB
[  283.250274][ T9932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  283.327141][ T9932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.403068][ T9932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  283.412759][ T9932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.425988][ T9932] 59445 total pagecache pages
[  283.430739][ T9932] 8 pages in swap cache
[  283.434927][ T9932] Free swap  = 124988kB
[  283.439132][ T9932] Total swap = 124996kB
[  283.529811][ T9964] openvswitch: netlink: IP tunnel dst address not specified
[  283.567610][ T9932] 2097051 pages RAM
[  283.571544][ T9932] 0 pages HighMem/MovableOnly
[  283.588093][ T9932] 428221 pages reserved
[  283.596948][ T9932] 0 pages cma reserved
[  283.608354][ T9965] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1022'.
[  283.706330][ T9964] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1022'.
[  284.431241][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  284.441362][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  284.452380][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  284.474199][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  284.483087][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  285.346136][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1027'.
[  285.541902][ T9995] netlink: 'syz.0.1030': attribute type 33 has an invalid length.
[  286.555743][ T5618] Bluetooth: hci1: command tx timeout
[  286.662934][T10015] __nla_validate_parse: 2 callbacks suppressed
[  286.662957][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'.
[  286.711970][T10016] netlink: 'syz.0.1034': attribute type 10 has an invalid length.
[  286.737947][T10016] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1034'.
[  286.773407][   T47] bridge_slave_1: left allmulticast mode
[  286.820990][   T47] bridge_slave_1: left promiscuous mode
[  286.845208][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.909089][   T47] bridge_slave_0: left allmulticast mode
[  286.925112][   T47] bridge_slave_0: left promiscuous mode
[  286.938044][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.132975][T10027] netlink: 'syz.3.1037': attribute type 1 has an invalid length.
[  287.519646][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.549954][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.562830][   T47] bond0 (unregistering): Released all slaves
[  287.759831][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[  287.854136][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1040'.
[  287.998043][ T9979] lo speed is unknown, defaulting to 1000
[  288.193453][T10060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1045'.
[  288.574211][T10079] netlink: 'syz.6.1048': attribute type 10 has an invalid length.
[  288.626674][ T5618] Bluetooth: hci1: command tx timeout
[  288.703344][T10090] netlink: 'syz.0.1047': attribute type 21 has an invalid length.
[  288.751738][T10090] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1047'.
[  289.138887][   T47] hsr_slave_0: left promiscuous mode
[  289.169292][   T47] hsr_slave_1: left promiscuous mode
[  289.268782][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.362613][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.084463][   T47] team0 (unregistering): Port device team_slave_1 removed
[  290.104559][   T47] team0 (unregistering): Port device team_slave_0 removed
[  290.344215][T10079] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  290.375026][T10090] netlink: 'syz.0.1047': attribute type 4 has an invalid length.
[  290.419248][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[  290.427641][T10136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'.
[  290.661387][T10143] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1053'.
[  290.705882][ T5618] Bluetooth: hci1: command tx timeout
[  290.753898][T10150] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1054'.
[  291.703620][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.711141][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.718966][ T9979] bridge_slave_0: entered allmulticast mode
[  291.727147][ T9979] bridge_slave_0: entered promiscuous mode
[  291.736188][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.743455][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.751372][ T9979] bridge_slave_1: entered allmulticast mode
[  291.760275][ T9979] bridge_slave_1: entered promiscuous mode
[  291.838389][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.906958][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.107084][ T9979] team0: Port device team_slave_0 added
[  292.163783][T10198] netlink: 'syz.1.1062': attribute type 2 has an invalid length.
[  292.190659][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'.
[  292.364211][T10198] : entered promiscuous mode
[  292.374502][ T9979] team0: Port device team_slave_1 added
[  292.457431][T10200] netlink: 'syz.1.1062': attribute type 29 has an invalid length.
[  292.465829][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  292.617050][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.633467][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.673241][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.700107][T10213] netlink: 'syz.6.1065': attribute type 11 has an invalid length.
[  292.710289][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[  292.723653][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.730674][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.757258][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.844968][ T5618] Bluetooth: hci1: command tx timeout
[  292.859416][ T9979] hsr_slave_0: entered promiscuous mode
[  292.866398][ T9979] hsr_slave_1: entered promiscuous mode
[  292.873064][ T9979] debugfs: 'hsr0' already exists in 'hsr'
[  292.879001][ T9979] Cannot create hsr debugfs directory
[  292.943560][T10222] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.1065'.
[  293.392117][T10237] bond0: (slave geneve1): Releasing backup interface
[  293.672090][T10237] geneve1: left promiscuous mode
[  294.097567][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'.
[  294.132488][T10253] netlink: 'syz.3.1072': attribute type 21 has an invalid length.
[  294.177632][T10253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'.
[  294.481856][T10256] syzkaller0: entered promiscuous mode
[  294.498983][T10256] syzkaller0: entered allmulticast mode
[  297.988426][T10276] syzkaller0: entered promiscuous mode
[  297.994584][T10276] syzkaller0: entered allmulticast mode
[  298.110579][T10272] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  298.127518][T10272] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  298.152050][T10272] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  298.215272][T10272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  298.244237][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'.
[  298.357544][T10296] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1081'.
[  298.402744][T10296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1081'.
[  298.690081][T10299] netlink: 'syz.0.1082': attribute type 12 has an invalid length.
[  298.698028][T10299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1082'.
[  298.956477][ T9979] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  299.038597][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  299.069723][ T9979] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  299.121883][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  299.140646][ T9979] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  299.172573][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  299.192307][ T9979] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  299.235016][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  299.498949][T10322] netlink: 4336 bytes leftover after parsing attributes in process `syz.3.1085'.
[  299.619782][ T9979] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.671403][ T9979] 8021q: adding VLAN 0 to HW filter on device team0
[  299.698323][T10334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1090'.
[  299.740054][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.747387][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.750612][T10334] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  299.777641][T10337] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1091'.
[  299.800066][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.807408][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.818774][T10334] netlink: 'syz.0.1090': attribute type 2 has an invalid length.
[  299.878503][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'.
[  300.972927][T10372] netlink: 'syz.0.1098': attribute type 12 has an invalid length.
[  301.047408][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1098'.
[  301.754708][T10396] netlink: 'syz.0.1104': attribute type 13 has an invalid length.
[  301.802388][T10396] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1104'.
[  302.244127][T10396] erspan0: refused to change device tx_queue_len
[  302.413863][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  302.624292][ T9979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.760758][T10442] netlink: 'syz.6.1114': attribute type 12 has an invalid length.
[  303.848221][T10442] __nla_validate_parse: 4 callbacks suppressed
[  303.848243][T10442] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1114'.
[  304.384750][T10457] syz.3.1116 (10457) used obsolete PPPIOCDETACH ioctl
[  304.527504][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'.
[  304.539791][T10463] IPv6: NLM_F_CREATE should be specified when creating new route
[  304.590173][T10468] netlink: 'syz.1.1120': attribute type 6 has an invalid length.
[  304.642646][T10458] netlink: 'syz.6.1118': attribute type 2 has an invalid length.
[  304.662173][ T9979] veth0_vlan: entered promiscuous mode
[  305.013214][T10458] : entered promiscuous mode
[  305.338709][ T9979] veth1_vlan: entered promiscuous mode
[  305.789640][ T9979] veth0_macvtap: entered promiscuous mode
[  305.847483][ T9979] veth1_macvtap: entered promiscuous mode
[  305.982545][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.042590][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.336248][ T6627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.373287][ T6627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.410117][ T6627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.498140][ T1001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.911408][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.930651][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.177993][ T6627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.238368][ T6627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.462883][T10521] netlink: 'syz.0.1132': attribute type 10 has an invalid length.
[  307.828298][T10521] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  308.041807][T10521] team0: Port device wlan0 added
[  308.368521][T10538] netlink: 'syz.5.1135': attribute type 7 has an invalid length.
[  308.559336][ T4929] Bluetooth: hci2: command 0x0406 tx timeout
[  309.409458][T10570] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1141'.
[  309.801300][ T4929] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  310.629184][ T4929] Bluetooth: hci2: command 0x0406 tx timeout
[  311.157132][ T5618] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  311.173725][T10616] netlink: 9727 bytes leftover after parsing attributes in process `syz.1.1153'.
[  311.613603][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1156'.
[  312.286030][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1160'.
[  312.468011][T10653] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1161'.
[  312.731044][T10662] openvswitch: netlink: Actions may not be safe on all matching packets
[  313.259187][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'.
[  313.296877][T10681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1168'.
[  313.510622][T10685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1170'.
[  313.870348][T10691] FAULT_INJECTION: forcing a failure.
[  313.870348][T10691] name failslab, interval 1, probability 0, space 0, times 0
[  313.917910][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.6.1173 Not tainted syzkaller #0 PREEMPT(full) 
[  313.917940][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.917953][T10691] Call Trace:
[  313.917961][T10691]  <TASK>
[  313.917970][T10691]  dump_stack_lvl+0xe8/0x150
[  313.918003][T10691]  should_fail_ex+0x40c/0x560
[  313.918035][T10691]  should_failslab+0xa8/0x100
[  313.918065][T10691]  __kmalloc_cache_node_noprof+0xaa/0x630
[  313.918096][T10691]  ? __get_vm_area_node+0x136/0x300
[  313.918119][T10691]  ? __get_vm_area_node+0x136/0x300
[  313.918151][T10691]  __get_vm_area_node+0x136/0x300
[  313.918180][T10691]  __vmalloc_node_range_noprof+0x358/0x1730
[  313.918207][T10691]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  313.918237][T10691]  ? perf_trace_preemptirq_template+0x26f/0x350
[  313.918287][T10691]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  313.918315][T10691]  ? lockdep_hardirqs_on+0x7a/0x110
[  313.918345][T10691]  ? irqentry_exit+0x218/0x8f0
[  313.918372][T10691]  ? trace_irq_disable+0x3b/0x140
[  313.918405][T10691]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  313.918431][T10691]  __vmalloc_noprof+0xd2/0x120
[  313.918458][T10691]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  313.918488][T10691]  bpf_prog_alloc_no_stats+0x47/0x560
[  313.918514][T10691]  ? bpf_prog_alloc+0x2a/0x1a0
[  313.918543][T10691]  bpf_prog_alloc+0x3c/0x1a0
[  313.918573][T10691]  bpf_prog_load+0x7f8/0x1c20
[  313.918614][T10691]  ? __pfx_bpf_prog_load+0x10/0x10
[  313.918640][T10691]  ? irqentry_exit+0x218/0x8f0
[  313.918667][T10691]  ? trace_irq_disable+0x3b/0x140
[  313.918705][T10691]  ? __sys_bpf+0xcf3/0xd90
[  313.918738][T10691]  __sys_bpf+0xd0d/0xd90
[  313.918774][T10691]  ? __pfx___sys_bpf+0x10/0x10
[  313.918810][T10691]  ? irqentry_exit+0x218/0x8f0
[  313.918875][T10691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.918904][T10691]  __x64_sys_bpf+0xba/0xd0
[  313.918928][T10691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.918952][T10691]  do_syscall_64+0x174/0x580
[  313.918984][T10691]  ? clear_bhb_loop+0x70/0xc0
[  313.919010][T10691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.919031][T10691] RIP: 0033:0x7fd8ecb9e0d9
[  313.919051][T10691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.919069][T10691] RSP: 002b:00007fd8eda65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  313.919090][T10691] RAX: ffffffffffffffda RBX: 00007fd8ece25fa0 RCX: 00007fd8ecb9e0d9
[  313.919105][T10691] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  313.919118][T10691] RBP: 00007fd8eda65090 R08: 0000000000000000 R09: 0000000000000000
[  313.919130][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.919142][T10691] R13: 00007fd8ece26038 R14: 00007fd8ece25fa0 R15: 00007ffdc23705f8
[  313.919174][T10691]  </TASK>
[  313.922380][T10691] syz.6.1173: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  314.285291][ T4929] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  314.288535][T10691] ,cpuset=/,mems_allowed=0-1
[  314.352983][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.6.1173 Not tainted syzkaller #0 PREEMPT(full) 
[  314.353013][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  314.353026][T10691] Call Trace:
[  314.353035][T10691]  <TASK>
[  314.353044][T10691]  dump_stack_lvl+0xe8/0x150
[  314.353080][T10691]  warn_alloc+0x24c/0x270
[  314.353111][T10691]  ? __kasan_kmalloc+0x22/0xb0
[  314.353146][T10691]  ? __pfx_warn_alloc+0x10/0x10
[  314.353188][T10691]  ? __get_vm_area_node+0x2af/0x300
[  314.353224][T10691]  __vmalloc_node_range_noprof+0x37d/0x1730
[  314.353385][T10691]  ? perf_trace_preemptirq_template+0x26f/0x350
[  314.353462][T10691]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  314.353491][T10691]  ? lockdep_hardirqs_on+0x7a/0x110
[  314.353520][T10691]  ? irqentry_exit+0x218/0x8f0
[  314.353548][T10691]  ? trace_irq_disable+0x3b/0x140
[  314.353585][T10691]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  314.353612][T10691]  __vmalloc_noprof+0xd2/0x120
[  314.353638][T10691]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  314.353670][T10691]  bpf_prog_alloc_no_stats+0x47/0x560
[  314.353698][T10691]  ? bpf_prog_alloc+0x2a/0x1a0
[  314.353729][T10691]  bpf_prog_alloc+0x3c/0x1a0
[  314.353763][T10691]  bpf_prog_load+0x7f8/0x1c20
[  314.353811][T10691]  ? __pfx_bpf_prog_load+0x10/0x10
[  314.353840][T10691]  ? irqentry_exit+0x218/0x8f0
[  314.353868][T10691]  ? trace_irq_disable+0x3b/0x140
[  314.353912][T10691]  ? __sys_bpf+0xcf3/0xd90
[  314.353948][T10691]  __sys_bpf+0xd0d/0xd90
[  314.353987][T10691]  ? __pfx___sys_bpf+0x10/0x10
[  314.354018][T10691]  ? irqentry_exit+0x218/0x8f0
[  314.354092][T10691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.354123][T10691]  __x64_sys_bpf+0xba/0xd0
[  314.354149][T10691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.354175][T10691]  do_syscall_64+0x174/0x580
[  314.354207][T10691]  ? clear_bhb_loop+0x70/0xc0
[  314.354238][T10691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.354260][T10691] RIP: 0033:0x7fd8ecb9e0d9
[  314.354282][T10691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.354302][T10691] RSP: 002b:00007fd8eda65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  314.354326][T10691] RAX: ffffffffffffffda RBX: 00007fd8ece25fa0 RCX: 00007fd8ecb9e0d9
[  314.354341][T10691] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  314.354355][T10691] RBP: 00007fd8eda65090 R08: 0000000000000000 R09: 0000000000000000
[  314.354366][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.354397][T10691] R13: 00007fd8ece26038 R14: 00007fd8ece25fa0 R15: 00007ffdc23705f8
[  314.354435][T10691]  </TASK>
[  314.354822][T10691] Mem-Info:
[  314.399271][T10700] netlink: 'syz.0.1174': attribute type 46 has an invalid length.
[  314.405630][T10691] active_anon:10180 inactive_anon:0 isolated_anon:0
[  314.405630][T10691]  active_file:449 inactive_file:56596 isolated_file:0
[  314.405630][T10691]  unevictable:0 dirty:80 writeback:0
[  314.405630][T10691]  slab_reclaimable:6619 slab_unreclaimable:102282
[  314.405630][T10691]  mapped:29690 shmem:528 pagetables:1557
[  314.405630][T10691]  sec_pagetables:0 bounce:0
[  314.405630][T10691]  kernel_misc_reclaimable:0
[  314.405630][T10691]  free:1308422 free_pcp:10613 free_cma:0
[  314.950438][T10691] Node 0 active_anon:40820kB inactive_anon:0kB active_file:1796kB inactive_file:226180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118760kB dirty:520kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13656kB pagetables:5932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  315.050164][T10691] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  315.165768][T10711] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1176'.
[  315.185691][T10691] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  315.240042][T10691] lowmem_reserve[]: 0 2488 2489 2489 2489
[  315.254667][T10691] Node 0 DMA32 free:1274876kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40996kB inactive_anon:0kB active_file:1796kB inactive_file:226180kB unevictable:0kB writepending:520kB zspages:0kB present:3129332kB managed:2548600kB mlocked:0kB bounce:0kB free_pcp:42036kB local_pcp:21064kB free_cma:0kB
[  315.298266][T10691] lowmem_reserve[]: 0 0 0 0 0
[  315.303527][T10691] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  315.336272][T10691] lowmem_reserve[]: 0 0 0 0 0
[  315.341442][T10691] Node 1 Normal free:3944504kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  315.389126][ T4929] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  315.389729][T10691] lowmem_reserve[]: 0 0 0 0 0
[  315.403093][T10691] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  315.416979][T10691] Node 0 DMA32: 4294*4kB (UME) 2332*8kB (UME) 1169*16kB (UME) 801*32kB (UME) 428*64kB (UME) 264*128kB (UME) 174*256kB (UM) 127*512kB (UME) 86*1024kB (UM) 3*2048kB (UME) 227*4096kB (UM) = 1274920kB
[  315.470515][T10691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  315.527565][T10691] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 14*16kB (UM) 5*32kB (UM) 8*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944504kB
[  315.613243][T10691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  315.647877][T10691] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  315.680226][T10691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  315.731233][T10691] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  315.748130][T10691] 57571 total pagecache pages
[  315.753196][T10691] 2 pages in swap cache
[  315.799877][T10691] Free swap  = 124988kB
[  315.817717][T10691] Total swap = 124996kB
[  315.832649][T10691] 2097051 pages RAM
[  315.850660][T10691] 0 pages HighMem/MovableOnly
[  315.870748][T10691] 428221 pages reserved
[  315.887061][T10691] 0 pages cma reserved
[  315.910148][ T4929] Bluetooth: hci1: command 0x0406 tx timeout
[  315.912409][ T5629] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  316.015582][T10731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.037099][T10731] netlink: 'syz.5.1181': attribute type 2 has an invalid length.
[  316.082383][T10731] : entered promiscuous mode
[  316.346254][T10741] netlink: 'syz.5.1184': attribute type 10 has an invalid length.
[  316.424002][T10743] netlink: 'syz.5.1184': attribute type 10 has an invalid length.
[  316.490595][T10741] 8021q: adding VLAN 0 to HW filter on device team0
[  316.499880][T10743] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1184'.
[  316.558471][T10741] bond0: (slave team0): Enslaving as an active interface with an up link
[  316.613156][T10743] team0: entered promiscuous mode
[  316.658128][T10743] team_slave_0: entered promiscuous mode
[  316.700866][T10743] team_slave_1: entered promiscuous mode
[  316.729678][T10743] team0: entered allmulticast mode
[  316.752916][T10743] team_slave_0: entered allmulticast mode
[  316.790500][T10743] team_slave_1: entered allmulticast mode
[  316.877355][T10743] bond0: (slave team0): Releasing backup interface
[  316.946994][T10743] bridge0: port 3(team0) entered blocking state
[  316.959115][T10743] bridge0: port 3(team0) entered disabled state
[  317.283619][T10768] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1189'.
[  317.298187][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  317.305385][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  317.389372][ T5618] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  318.057977][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.406255][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.567090][T10798] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.1195'.
[  318.780046][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.217838][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.660356][ T5618] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  319.717634][T10828] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1202'.
[  320.266090][   T36] bridge_slave_1: left allmulticast mode
[  320.279802][   T36] bridge_slave_1: left promiscuous mode
[  320.292559][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.330027][   T36] bridge_slave_0: left allmulticast mode
[  320.339733][   T36] bridge_slave_0: left promiscuous mode
[  320.346449][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.028987][   T36] team0: Port device bridge0 removed
[  321.046688][T10853] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1208'.
[  321.063749][   T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.083814][   T36] .` (unregistering): Released all slaves
[  321.513207][T10863] netlink: 'syz.6.1209': attribute type 16 has an invalid length.
[  321.578976][T10863] netlink: 'syz.6.1209': attribute type 17 has an invalid length.
[  321.604522][T10862] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1211'.
[  321.814211][T10707] Set syz0 is full, maxelem 65536 reached
[  322.188273][T10880] C: renamed from veth1_to_team
[  322.226738][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  322.242055][T10880] netlink: 'syz.3.1214': attribute type 1 has an invalid length.
[  322.275769][T10880] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  322.469017][T10893] netlink: 'syz.0.1217': attribute type 1 has an invalid length.
[  322.545029][T10893] netlink: 'syz.0.1217': attribute type 2 has an invalid length.
[  324.112124][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.149038][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.195325][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.204101][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.280348][   T36] veth1_macvtap: left promiscuous mode
[  324.301023][   T36] veth0_macvtap: left promiscuous mode
[  324.328052][   T36] veth1_vlan: left promiscuous mode
[  324.355415][   T36] veth0_vlan: left promiscuous mode
[  325.353314][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'.
[  325.369809][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  325.423773][   T36] team0 (unregistering): Port device team_slave_1 removed
[  325.473988][   T36] team0 (unregistering): Port device team_slave_0 removed
[  325.644803][T10952] netlink: 'syz.1.1232': attribute type 12 has an invalid length.
[  326.042866][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[  326.067903][T10932] netlink: 4336 bytes leftover after parsing attributes in process `syz.6.1226'.
[  327.503331][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  327.699821][T11008] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.1243'.
[  327.772422][T11017] netlink: 122 bytes leftover after parsing attributes in process `syz.5.1246'.
[  327.997234][T11027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'.
[  328.103463][T11039] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1250'.
[  328.462107][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[  328.615018][ T5618] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  328.994290][T11069] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1259'.
[  329.061615][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'.
[  329.341009][T11078] netlink: 'syz.5.1263': attribute type 10 has an invalid length.
[  329.424707][T11078] netlink: 'syz.5.1263': attribute type 8 has an invalid length.
[  331.397205][   T30] audit: type=1107 audit(1786460857.405:3): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  331.443104][ T5618] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  331.498434][T11135] netlink: 'syz.3.1273': attribute type 2 has an invalid length.
[  331.603791][T11142] netlink: 122 bytes leftover after parsing attributes in process `syz.0.1274'.
[  332.172633][T11151] netlink: 'syz.0.1278': attribute type 10 has an invalid length.
[  332.202051][T11151] netlink: 'syz.0.1278': attribute type 8 has an invalid length.
[  332.307258][T11156] netlink: 'syz.3.1279': attribute type 1 has an invalid length.
[  332.366541][T11156] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1279'.
[  332.395456][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8
[  333.124116][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  333.311034][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1287'.
[  333.748536][T11195] sit0: entered allmulticast mode
[  333.785540][T11193] netlink: 122 bytes leftover after parsing attributes in process `syz.1.1288'.
[  334.145298][T11209] netlink: 'syz.3.1292': attribute type 21 has an invalid length.
[  334.635569][T11228] netlink: 'syz.5.1296': attribute type 21 has an invalid length.
[  334.643537][T11228] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.1296'.
[  335.141209][ T5618] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  335.413949][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[  335.946625][T11252] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1301'.
[  336.094607][T11267] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1304'.
[  336.524766][T11279] netlink: zone id is out of range
[  336.544857][T11279] netlink: zone id is out of range
[  336.566576][T11279] netlink: zone id is out of range
[  336.582278][T11279] netlink: zone id is out of range
[  336.607414][T11279] netlink: zone id is out of range
[  336.623296][T11279] netlink: zone id is out of range
[  336.848864][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  337.050348][T11307] netlink: 'syz.3.1315': attribute type 10 has an invalid length.
[  337.140763][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  337.150237][T11307] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1315'.
[  337.159973][T11311] netlink: 122 bytes leftover after parsing attributes in process `syz.5.1317'.
[  337.492026][T11321] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1319'.
[  338.128660][ T5618] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  338.770479][T11370] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1333'.
[  338.803467][T11368] ¨à'©ÿˆ: renamed from hsr0 (while UP)
[  339.842611][ T5618] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  339.850249][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1342'.
[  340.093171][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1345'.
[  340.109819][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1344'.
[  340.163024][T11412] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1345'.
[  340.192179][T11412] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1345'.
[  341.436215][ T5618] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  341.883409][T11480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.678423][ T5618] Bluetooth: hci5: ACL packet for unknown connection handle 0
[  343.892511][T11555] __nla_validate_parse: 4 callbacks suppressed
[  343.892550][T11555] netlink: 4336 bytes leftover after parsing attributes in process `syz.3.1385'.
[  345.113414][T11564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1387'.
[  345.955264][ T5618] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  348.683850][ T5618] Bluetooth: hci5: unknown advertising packet type: 0xb3
[  349.238713][ T5618] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  349.490197][T11657] netlink: 'syz.3.1409': attribute type 10 has an invalid length.
[  349.537424][T11657] netlink: 'syz.3.1409': attribute type 8 has an invalid length.
[  349.870811][T11505] Set syz0 is full, maxelem 65536 reached
[  350.307522][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1415'.
[  350.600473][T11684] netlink: 'syz.1.1418': attribute type 10 has an invalid length.
[  350.613245][T11684] netlink: 'syz.1.1418': attribute type 8 has an invalid length.
[  350.732255][ T5618] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  351.079519][T11705] lo speed is unknown, defaulting to 1000
[  351.568594][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1432'.
[  351.676169][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1432'.
[  351.728850][ T5618] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  352.034480][T11743] netlink: 'syz.1.1437': attribute type 10 has an invalid length.
[  352.323491][T11743] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  352.360798][T11743] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  352.373312][T11743] team0: Port device wlan0 added
[  352.410035][T11757] netlink: 'syz.3.1441': attribute type 2 has an invalid length.
[  352.426721][T11757] netlink: 'syz.3.1441': attribute type 2 has an invalid length.
[  352.502568][T11756] netlink: 'syz.0.1443': attribute type 10 has an invalid length.
[  352.776259][T11756] team0: Port device dummy0 added
[  353.327175][ T4929] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  353.841529][T11789] tipc: Enabling of bearer <!{:\> rejected, media not registered
[  353.938201][T11789] netlink: 'syz.6.1452': attribute type 2 has an invalid length.
[  354.852617][T11823] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1461'.
[  354.908209][T11823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.122183][ T5629] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  355.185751][ T5629] Bluetooth: hci5: command 0x0406 tx timeout
[  355.250215][T11835] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1465'.
[  355.881925][T11835] netlink: 'syz.6.1465': attribute type 10 has an invalid length.
[  356.015558][T11860] syzkaller0: entered promiscuous mode
[  356.021122][T11860] syzkaller0: entered allmulticast mode
[  356.048343][T11860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.088534][T11870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1474'.
[  356.793042][T11877] netlink: 'syz.3.1478': attribute type 4 has an invalid length.
[  356.829238][ T5618] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  356.829415][ T5618] Bluetooth: hci2: connection err: -111
[  356.946933][ T5618] Bluetooth: hci0: command 0x0406 tx timeout
[  357.518571][T11884] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1479'.
[  361.738420][T11888] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  362.046704][T11901] netlink: 15906 bytes leftover after parsing attributes in process `syz.0.1484'.
[  362.510729][T11926] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1491'.
[  362.841463][T11935] blkio.reset_stats is deprecated
[  362.912989][T11925] netlink: 4336 bytes leftover after parsing attributes in process `syz.5.1490'.
[  363.390958][T11944] netlink: 'syz.5.1495': attribute type 13 has an invalid length.
[  363.564998][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'.
[  363.730690][T11957] netlink: 'syz.0.1499': attribute type 10 has an invalid length.
[  363.738625][T11957] netlink: 'syz.0.1499': attribute type 8 has an invalid length.
[  364.404374][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1501'.
[  364.700123][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'.
[  364.727420][T11987] netlink: Conntrack attr has 1 unknown bytes
[  364.733615][T11987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.798605][T11990] netlink: 4336 bytes leftover after parsing attributes in process `syz.5.1505'.
[  365.164133][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'.
[  365.178274][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'.
[  365.282567][T12011] siw: device registration error -23
[  365.318140][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'.
[  365.582801][T12017] netlink: 'syz.0.1512': attribute type 10 has an invalid length.
[  365.608628][T12017] netlink: 'syz.0.1512': attribute type 8 has an invalid length.
[  367.370832][T12069] __nla_validate_parse: 5 callbacks suppressed
[  367.370872][T12069] netlink: 4336 bytes leftover after parsing attributes in process `syz.3.1520'.
[  367.596597][ T4929] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  367.716148][T12084] netlink: 'syz.1.1525': attribute type 10 has an invalid length.
[  367.734792][T12084] netlink: 'syz.1.1525': attribute type 8 has an invalid length.
[  367.978617][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'.
[  368.001957][T12091] netlink: 'syz.0.1528': attribute type 4 has an invalid length.
[  368.038612][T12091] netlink: 'syz.0.1528': attribute type 17 has an invalid length.
[  368.279268][T12109] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1531'.
[  368.304521][T12109] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1531'.
[  368.360545][T12109] netlink: 'syz.1.1531': attribute type 10 has an invalid length.
[  368.416972][T12112] netlink: 'syz.1.1531': attribute type 10 has an invalid length.
[  368.920941][T12109] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  368.957960][T12109] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  368.988154][T12109] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  369.007387][T12109] team0: Port device netdevsim1 added
[  369.019263][T12119] netlink: 4336 bytes leftover after parsing attributes in process `syz.5.1532'.
[  369.404861][T12142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1537'.
[  369.443898][T12145] netlink: 'syz.1.1539': attribute type 11 has an invalid length.
[  369.475094][T12142] bond0: (slave bond_slave_0): Releasing backup interface
[  369.523394][T12142] bond_slave_0: entered promiscuous mode
[  369.529785][T12142] bond_slave_0: entered allmulticast mode
[  369.599899][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'.
[  369.972567][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'.
[  370.000784][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'.
[  370.199949][T12172] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1546'.
[  370.330361][T12180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.619093][T12191] netlink: 'syz.0.1550': attribute type 1 has an invalid length.
[  370.667994][T12191] netlink: 'syz.0.1550': attribute type 2 has an invalid length.
[  370.728731][T12190] can: request_module (can-proto-0) failed.
[  373.690487][T12245] __nla_validate_parse: 7 callbacks suppressed
[  373.690511][T12245] netlink: 316 bytes leftover after parsing attributes in process `syz.6.1559'.
[  373.804910][T12248] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1561'.
[  374.024142][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'.
[  374.074276][T12259] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1564'.
[  374.120951][T12263] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1563'.
[  374.138623][   T36] bridge0: port 3(team0) entered disabled state
[  374.183498][T12256] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1563'.
[  374.244412][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'.
[  374.313917][T12266] tipc: Started in network mode
[  374.339650][T12266] tipc: Node identity 805e0004, cluster identity 4711
[  374.371028][T12266] tipc: Node number set to 2153644036
[  374.444643][T12266] netlink: 'syz.0.1567': attribute type 12 has an invalid length.
[  374.457475][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1566'.
[  374.473627][T12266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1567'.
[  374.518837][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1566'.
[  374.658054][T12281] siw: device registration error -23
[  375.113289][T12298] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  376.034499][T12328] sit0: left promiscuous mode
[  376.055703][T12328] sit0: entered allmulticast mode
[  377.113427][T12359] netlink: 'syz.5.1588': attribute type 10 has an invalid length.
[  377.135851][T12359] dummy0: entered promiscuous mode
[  377.141086][T12359] dummy0: entered allmulticast mode
[  377.147195][T12359] bridge0: port 4(dummy0) entered blocking state
[  377.153735][T12359] bridge0: port 4(dummy0) entered disabled state
[  377.292057][T12359] bridge0: port 4(dummy0) entered blocking state
[  377.298631][T12359] bridge0: port 4(dummy0) entered forwarding state
[  377.447671][T12371] siw: device registration error -23
[  378.132451][T12381] syzkaller0: entered promiscuous mode
[  378.173154][T12381] syzkaller0: entered allmulticast mode
[  378.515895][T12405] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  378.710635][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  378.717553][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  378.924645][ T4929] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  382.489556][T12407] lo speed is unknown, defaulting to 1000
[  382.639557][T12442] __nla_validate_parse: 19 callbacks suppressed
[  382.639584][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  382.658200][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'.
[  382.699696][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  382.976999][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'.
[  382.989422][ T4929] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[  383.041903][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  383.065844][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'.
[  383.101444][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  383.506612][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  383.536527][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  384.506703][T12481] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  384.697000][T12494] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1627'.
[  384.801810][ T4929] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  385.041956][T12505] siw: device registration error -23
[  388.639838][T12612] __nla_validate_parse: 9 callbacks suppressed
[  388.639891][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'.
[  388.828687][T12612] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1646'.
[  388.868261][T12612] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1646'.
[  389.382293][T12640] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1651'.
[  389.411969][T12637] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1651'.
[  389.710515][T12645] netlink: 4336 bytes leftover after parsing attributes in process `syz.0.1653'.
[  389.785309][T12652] bridge0: port 4(dummy0) entered disabled state
[  389.851158][T12652] bridge0: port 3(team0) entered disabled state
[  389.920405][T12656] netlink: 'syz.6.1654': attribute type 21 has an invalid length.
[  389.922459][T12652] bridge_slave_1: left allmulticast mode
[  389.933985][T12652] bridge_slave_1: left promiscuous mode
[  389.940179][T12656] IPv6: NLM_F_CREATE should be specified when creating new route
[  389.940317][T12656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  389.940409][T12656] IPv6: NLM_F_CREATE should be set when creating new route
[  390.000715][T12652] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.114182][T12652] bridge_slave_0: left allmulticast mode
[  390.125104][T12652] bridge_slave_0: left promiscuous mode
[  390.137028][T12652] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.180191][T12669] netlink: 'syz.0.1659': attribute type 5 has an invalid length.
[  390.201101][T12667] netlink: 'syz.0.1659': attribute type 5 has an invalid length.
[  390.374405][T12668] sit0: entered allmulticast mode
[  390.383008][T12671] sit0: entered promiscuous mode
[  390.632500][T12678] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1661'.
[  390.646636][T12676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1660'.
[  390.694225][T12676] netlink: 'syz.5.1660': attribute type 16 has an invalid length.
[  390.961881][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'.
[  390.995441][T12693] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1666'.
[  391.397473][T12676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.411695][T12676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.876110][ T3254] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.898076][ T3254] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.963938][ T3254] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.987034][ T3254] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.862899][T12757] openvswitch: netlink: IP tunnel dst address not specified
[  393.803695][T12787] __nla_validate_parse: 12 callbacks suppressed
[  393.803731][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'.
[  394.191675][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  394.322487][T12811] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1696'.
[  394.411227][T12814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1696'.
[  396.394592][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'.
[  396.512499][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  396.851500][T12846] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  397.570333][T12870] netlink: 'syz.6.1708': attribute type 9 has an invalid length.
[  398.362539][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'.
[  398.430039][T12882] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1713'.
[  398.468208][T12882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1713'.
[  401.424944][T12868] netlink: 818 bytes leftover after parsing attributes in process `syz.6.1708'.
[  401.434495][T12867] netlink: 4336 bytes leftover after parsing attributes in process `syz.0.1709'.
[  401.620959][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'.
[  401.678402][T12925] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1725'.
[  401.709813][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1725'.
[  401.816632][T12932] netlink: 'syz.3.1728': attribute type 21 has an invalid length.
[  401.825512][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1724'.
[  401.838170][T12932] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1728'.
[  401.851683][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'.
[  402.110961][T12947] netlink: 4336 bytes leftover after parsing attributes in process `syz.6.1733'.
[  402.284114][T12952] netlink: 'syz.1.1734': attribute type 2 has an invalid length.
[  403.630606][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'.
[  406.477738][T12990] netlink: 4336 bytes leftover after parsing attributes in process `syz.3.1748'.
[  406.487826][T13003] netlink: 4336 bytes leftover after parsing attributes in process `syz.6.1754'.
[  406.879556][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'.
[  407.425044][T13043] netlink: 4336 bytes leftover after parsing attributes in process `syz.6.1767'.
[  407.494951][T13047] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1769'.
[  408.630220][T13084] netlink: 'syz.6.1779': attribute type 1 has an invalid length.
[  408.812487][T13086] netlink: 4336 bytes leftover after parsing attributes in process `syz.0.1781'.
[  409.080490][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'.
[  409.099940][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'.
[  410.081914][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1791'.
[  410.378435][T13120] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1793'.
[  411.576695][ T5618] Bluetooth: hci1: command 0x0406 tx timeout
[  413.839311][ T8763] bond0: (slave syz_tun): Releasing backup interface
[  414.402671][T13145] __nla_validate_parse: 1 callbacks suppressed
[  414.402712][T13145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1803'.
[  414.424110][T13145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1803'.
[  414.453805][T13145] netlink: 'syz.0.1803': attribute type 29 has an invalid length.
[  414.471021][T13145] netlink: 'syz.0.1803': attribute type 29 has an invalid length.
[  414.481777][T13145] netlink: 'syz.0.1803': attribute type 29 has an invalid length.
[  414.921646][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  414.931890][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  414.946135][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  414.954588][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  414.962669][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  414.994960][T13150] netlink: 'syz.0.1806': attribute type 2 has an invalid length.
[  415.020522][T13045] Set syz0 is full, maxelem 65536 reached
[  415.246554][T13167] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1810'.
[  415.265861][T13167] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1810'.
[  415.823280][T13158] lo speed is unknown, defaulting to 1000
[  415.938079][T13184] netlink: 'syz.3.1815': attribute type 2 has an invalid length.
[  417.106057][ T4929] Bluetooth: hci4: command tx timeout
[  417.573336][T13158] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.592641][T13158] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.608951][T13158] bridge_slave_0: entered allmulticast mode
[  417.623602][T13158] bridge_slave_0: entered promiscuous mode
[  417.648460][T13158] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.657338][T13158] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.665024][T13158] bridge_slave_1: entered allmulticast mode
[  417.681706][T13158] bridge_slave_1: entered promiscuous mode
[  417.927401][T13158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.958447][T13158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.134504][T13158] team0: Port device team_slave_0 added
[  418.160785][T13158] team0: Port device team_slave_1 added
[  418.299612][T13158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.307916][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.335504][T13158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.358779][T13158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.368441][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.404767][T13158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.748664][T13158] hsr_slave_0: entered promiscuous mode
[  418.756771][T13158] hsr_slave_1: entered promiscuous mode
[  418.763707][T13158] debugfs: 'hsr0' already exists in 'hsr'
[  418.771263][T13158] Cannot create hsr debugfs directory
[  419.187605][ T4929] Bluetooth: hci4: command tx timeout
[  419.786999][T13228] netlink: 'syz.0.1826': attribute type 10 has an invalid length.
[  419.811549][T13228] netlink: 'syz.0.1826': attribute type 8 has an invalid length.
[  419.843698][T13158] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  419.890029][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.911105][T13158] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  419.943906][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.979323][T13158] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  420.017680][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  420.030190][T13242] FAULT_INJECTION: forcing a failure.
[  420.030190][T13242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  420.055766][T13158] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  420.063389][T13242] CPU: 1 UID: 0 PID: 13242 Comm: syz.3.1830 Not tainted syzkaller #0 PREEMPT(full) 
[  420.063440][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  420.063458][T13242] Call Trace:
[  420.063467][T13242]  <TASK>
[  420.063475][T13242]  dump_stack_lvl+0xe8/0x150
[  420.063613][T13242]  should_fail_ex+0x40c/0x560
[  420.063741][T13242]  _copy_to_user+0x31/0xb0
[  420.063813][T13242]  simple_read_from_buffer+0xe1/0x170
[  420.063875][T13242]  proc_fail_nth_read+0x1bb/0x230
[  420.063915][T13242]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  420.063947][T13242]  ? rw_verify_area+0x24a/0x4c0
[  420.063996][T13242]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  420.064026][T13242]  vfs_read+0x213/0xa80
[  420.064050][T13242]  ? __pfx___mutex_lock+0x10/0x10
[  420.064161][T13242]  ? __pfx_vfs_read+0x10/0x10
[  420.064181][T13242]  ? __fget_files+0x2a/0x420
[  420.064212][T13242]  ? __fget_files+0x3a2/0x420
[  420.064238][T13242]  ? __fget_files+0x2a/0x420
[  420.064275][T13242]  ksys_read+0x150/0x270
[  420.064299][T13242]  ? __pfx_ksys_read+0x10/0x10
[  420.064337][T13242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.064376][T13242]  do_syscall_64+0x174/0x580
[  420.064452][T13242]  ? trace_irq_disable+0x3b/0x140
[  420.064505][T13242]  ? clear_bhb_loop+0x70/0xc0
[  420.064530][T13242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.064555][T13242] RIP: 0033:0x7f2e3395e90e
[  420.064575][T13242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  420.064592][T13242] RSP: 002b:00007f2e34807fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  420.064614][T13242] RAX: ffffffffffffffda RBX: 00007f2e348086c0 RCX: 00007f2e3395e90e
[  420.064628][T13242] RDX: 000000000000000f RSI: 00007f2e348080a0 RDI: 0000000000000004
[  420.064640][T13242] RBP: 00007f2e34808090 R08: 0000000000000000 R09: 0000000000000000
[  420.064652][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.064664][T13242] R13: 00007f2e33c26038 R14: 00007f2e33c25fa0 R15: 00007ffd576c9f38
[  420.064697][T13242]  </TASK>
[  420.296330][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  420.402447][T13246] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.1833'.
[  420.770461][T13158] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.820457][T13158] 8021q: adding VLAN 0 to HW filter on device team0
[  420.840776][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.848023][ T6928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.884029][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.891279][ T6928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.295882][ T4929] Bluetooth: hci4: command tx timeout
[  422.178065][T13298] netlink: 'syz.3.1844': attribute type 11 has an invalid length.
[  422.497613][T13308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.822905][T13317] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1848'.
[  422.843469][T13158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.224603][T13332] FAULT_INJECTION: forcing a failure.
[  423.224603][T13332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.258503][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.1.1852 Not tainted syzkaller #0 PREEMPT(full) 
[  423.258534][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  423.258546][T13332] Call Trace:
[  423.258554][T13332]  <TASK>
[  423.258563][T13332]  dump_stack_lvl+0xe8/0x150
[  423.258598][T13332]  should_fail_ex+0x40c/0x560
[  423.258629][T13332]  _copy_from_user+0x2d/0xb0
[  423.258650][T13332]  ___sys_sendmsg+0x1c6/0x360
[  423.258804][T13332]  ? __lock_acquire+0x683/0x2cf0
[  423.258859][T13332]  ? __pfx____sys_sendmsg+0x10/0x10
[  423.258922][T13332]  ? __fget_files+0x2a/0x420
[  423.258951][T13332]  ? __fget_files+0x3a2/0x420
[  423.258991][T13332]  __x64_sys_sendmsg+0x1b1/0x290
[  423.259020][T13332]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  423.259065][T13332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.259087][T13332]  do_syscall_64+0x174/0x580
[  423.259116][T13332]  ? trace_irq_disable+0x3b/0x140
[  423.259143][T13332]  ? clear_bhb_loop+0x70/0xc0
[  423.259177][T13332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.259198][T13332] RIP: 0033:0x7fd30d79e0d9
[  423.259218][T13332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.259237][T13332] RSP: 002b:00007fd30e67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  423.259259][T13332] RAX: ffffffffffffffda RBX: 00007fd30da25fa0 RCX: 00007fd30d79e0d9
[  423.259274][T13332] RDX: 000000002404c004 RSI: 0000200000000440 RDI: 0000000000000003
[  423.259287][T13332] RBP: 00007fd30e67f090 R08: 0000000000000000 R09: 0000000000000000
[  423.259300][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.259312][T13332] R13: 00007fd30da26038 R14: 00007fd30da25fa0 R15: 00007fff5f889ca8
[  423.259347][T13332]  </TASK>
[  423.460544][ T4929] Bluetooth: hci4: command tx timeout
[  423.619174][T13342] netlink: 'syz.5.1855': attribute type 13 has an invalid length.
[  423.630840][T13342] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1855'.
[  423.641242][T13342] syz_tun: refused to change device tx_queue_len
[  423.648573][T13342] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  423.964610][T13158] veth0_vlan: entered promiscuous mode
[  424.015246][T13158] veth1_vlan: entered promiscuous mode
[  424.123974][T13158] veth0_macvtap: entered promiscuous mode
[  424.180315][T13158] veth1_macvtap: entered promiscuous mode
[  424.214513][T13158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.236027][T13158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.306475][ T6636] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.315646][ T6636] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.346919][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.402781][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.573844][T13372] FAULT_INJECTION: forcing a failure.
[  424.573844][T13372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  424.614636][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.1.1865 Not tainted syzkaller #0 PREEMPT(full) 
[  424.614666][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.614678][T13372] Call Trace:
[  424.614687][T13372]  <TASK>
[  424.614696][T13372]  dump_stack_lvl+0xe8/0x150
[  424.614731][T13372]  should_fail_ex+0x40c/0x560
[  424.614762][T13372]  _copy_from_user+0x2d/0xb0
[  424.614784][T13372]  __copy_msghdr+0x390/0x590
[  424.614816][T13372]  ___sys_sendmsg+0x213/0x360
[  424.614839][T13372]  ? __lock_acquire+0x683/0x2cf0
[  424.614872][T13372]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.614934][T13372]  ? __fget_files+0x2a/0x420
[  424.614962][T13372]  ? __fget_files+0x3a2/0x420
[  424.615002][T13372]  __x64_sys_sendmsg+0x1b1/0x290
[  424.615030][T13372]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.615075][T13372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.615099][T13372]  do_syscall_64+0x174/0x580
[  424.615128][T13372]  ? trace_irq_disable+0x3b/0x140
[  424.615154][T13372]  ? clear_bhb_loop+0x70/0xc0
[  424.615180][T13372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.615201][T13372] RIP: 0033:0x7fd30d79e0d9
[  424.615221][T13372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.615238][T13372] RSP: 002b:00007fd30e67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.615261][T13372] RAX: ffffffffffffffda RBX: 00007fd30da25fa0 RCX: 00007fd30d79e0d9
[  424.615276][T13372] RDX: 000000002404c004 RSI: 0000200000000440 RDI: 0000000000000003
[  424.615290][T13372] RBP: 00007fd30e67f090 R08: 0000000000000000 R09: 0000000000000000
[  424.615304][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.615316][T13372] R13: 00007fd30da26038 R14: 00007fd30da25fa0 R15: 00007fff5f889ca8
[  424.615349][T13372]  </TASK>
[  424.863431][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.871770][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.925670][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.933656][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.096621][T13381] netlink: 'syz.0.1868': attribute type 10 has an invalid length.
[  425.104558][T13381] netlink: 'syz.0.1868': attribute type 8 has an invalid length.
[  425.245641][T13378] netlink: 4336 bytes leftover after parsing attributes in process `syz.7.1805'.
[  425.934585][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1878'.
[  425.975475][T13411] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1878'.
[  426.030047][T13411] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1878'.
[  426.078662][T13419] netlink: 4336 bytes leftover after parsing attributes in process `syz.7.1884'.
[  426.445929][T13426] raw_sendmsg: syz.7.1887 forgot to set AF_INET. Fix it!
[  426.584574][T13430] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.1889'.
[  427.194640][T13452] netlink: 4336 bytes leftover after parsing attributes in process `syz.1.1897'.
[  427.772480][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'.
[  427.924284][T13470] netlink: 'syz.3.1904': attribute type 19 has an invalid length.
[  427.952023][T13470] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.1904'.
[  427.997673][T13477] netlink: 'syz.7.1906': attribute type 1 has an invalid length.
[  428.316338][T13474] netlink: 468 bytes leftover after parsing attributes in process `syz.5.1905'.
[  428.422115][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'.
[  431.123169][T13496] netlink: 'syz.7.1913': attribute type 1 has an invalid length.
[  431.158919][T13496] __nla_validate_parse: 1 callbacks suppressed
[  431.158971][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1913'.
[  431.234238][T13500] netlink: 'syz.0.1915': attribute type 10 has an invalid length.
[  431.257651][T13500] netlink: 'syz.0.1915': attribute type 8 has an invalid length.
[  431.806311][ T4929] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  432.027093][T13529] netlink: 'syz.5.1926': attribute type 22 has an invalid length.
[  432.042509][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1926'.
[  435.300463][T13547] netlink: 'syz.1.1932': attribute type 10 has an invalid length.
[  435.321633][T13547] netlink: 'syz.1.1932': attribute type 8 has an invalid length.
[  435.602443][T13557] netlink: 'syz.1.1937': attribute type 2 has an invalid length.
[  435.694678][T13560] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.1936'.
[  435.752771][ T4929] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  436.464668][T13584] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1947'.
[  436.537214][T13584] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1947'.
[  436.598599][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1947'.
[  436.611055][T13584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1947'.
[  436.627914][T13584] : left promiscuous mode
[  436.762992][ T4929] Bluetooth: hci0: unexpected event 0x06 length: 151 > 3
[  436.994608][T13611] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1954'.
[  437.531957][T13619] netlink: 'syz.3.1958': attribute type 10 has an invalid length.
[  437.556665][T13623] netlink: 'syz.5.1960': attribute type 10 has an invalid length.
[  437.564944][T13623] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1960'.
[  437.566255][T13619] batman_adv: batadv0: Removing interface: dummy0
[  437.609332][T13621] netlink: 'syz.0.1959': attribute type 29 has an invalid length.
[  437.621038][T13619] team0: Port device dummy0 added
[  437.645894][T13623] team0: Port device team_slave_1 removed
[  437.670358][T13623] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  437.703374][T13627] netlink: 'syz.0.1959': attribute type 29 has an invalid length.
[  437.712346][T13621] netlink: 'syz.0.1959': attribute type 29 has an invalid length.
[  437.735767][T13629] netlink: 'syz.7.1962': attribute type 21 has an invalid length.
[  437.743748][T13629] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1962'.
[  437.755366][T13629] netlink: 'syz.7.1962': attribute type 5 has an invalid length.
[  437.764676][T13629] netlink: 'syz.7.1962': attribute type 6 has an invalid length.
[  437.773156][T13629] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1962'.
[  438.792789][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'.
[  439.004905][T13670] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1975'.
[  439.218670][T13679] FAULT_INJECTION: forcing a failure.
[  439.218670][T13679] name failslab, interval 1, probability 0, space 0, times 0
[  439.256587][T13679] CPU: 1 UID: 0 PID: 13679 Comm: syz.3.1978 Not tainted syzkaller #0 PREEMPT(full) 
[  439.256616][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  439.256627][T13679] Call Trace:
[  439.256635][T13679]  <TASK>
[  439.256644][T13679]  dump_stack_lvl+0xe8/0x150
[  439.256680][T13679]  should_fail_ex+0x40c/0x560
[  439.256714][T13679]  should_failslab+0xa8/0x100
[  439.256748][T13679]  __kmalloc_noprof+0xfe/0x720
[  439.256823][T13679]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  439.256979][T13679]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  439.257019][T13679]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  439.257058][T13679]  genl_family_rcv_msg_doit+0xda/0x340
[  439.257094][T13679]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  439.257133][T13679]  ? apparmor_capable+0x126/0x170
[  439.257219][T13679]  ? bpf_lsm_capable+0x9/0x20
[  439.257264][T13679]  ? security_capable+0x7e/0x2c0
[  439.257318][T13679]  genl_rcv_msg+0x614/0x7a0
[  439.257357][T13679]  ? __pfx_genl_rcv_msg+0x10/0x10
[  439.257387][T13679]  ? perf_trace_preemptirq_template+0xb2/0x350
[  439.257413][T13679]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  439.257493][T13679]  ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10
[  439.257549][T13679]  ? __pfx_nl80211_post_doit+0x10/0x10
[  439.257573][T13679]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  439.257608][T13679]  netlink_rcv_skb+0x226/0x4a0
[  439.257635][T13679]  ? __pfx_genl_rcv_msg+0x10/0x10
[  439.257667][T13679]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  439.257708][T13679]  ? __pfx_genl_rcv_msg+0x10/0x10
[  439.257744][T13679]  genl_rcv+0x28/0x40
[  439.257773][T13679]  netlink_unicast+0x7bb/0x940
[  439.257809][T13679]  netlink_sendmsg+0x813/0xb40
[  439.257844][T13679]  ? __pfx_netlink_sendmsg+0x10/0x10
[  439.257874][T13679]  ? aa_sock_msg_perm+0xf1/0x1b0
[  439.257943][T13679]  ? __pfx_netlink_sendmsg+0x10/0x10
[  439.257968][T13679]  sock_sendmsg_nosec+0x13a/0x180
[  439.258002][T13679]  ____sys_sendmsg+0x54e/0x850
[  439.258034][T13679]  ? __pfx_____sys_sendmsg+0x10/0x10
[  439.258069][T13679]  ? import_iovec+0x73/0xa0
[  439.258136][T13679]  ___sys_sendmsg+0x2a5/0x360
[  439.258161][T13679]  ? __lock_acquire+0x683/0x2cf0
[  439.258192][T13679]  ? __pfx____sys_sendmsg+0x10/0x10
[  439.258258][T13679]  ? __fget_files+0x2a/0x420
[  439.258286][T13679]  ? __fget_files+0x3a2/0x420
[  439.258327][T13679]  __x64_sys_sendmsg+0x1b1/0x290
[  439.258355][T13679]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  439.258401][T13679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.258425][T13679]  do_syscall_64+0x174/0x580
[  439.258457][T13679]  ? clear_bhb_loop+0x70/0xc0
[  439.258482][T13679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.258502][T13679] RIP: 0033:0x7f2e3399e0d9
[  439.258531][T13679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.258549][T13679] RSP: 002b:00007f2e34808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  439.258570][T13679] RAX: ffffffffffffffda RBX: 00007f2e33c25fa0 RCX: 00007f2e3399e0d9
[  439.258586][T13679] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[  439.258598][T13679] RBP: 00007f2e34808090 R08: 0000000000000000 R09: 0000000000000000
[  439.258612][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.258624][T13679] R13: 00007f2e33c26038 R14: 00007f2e33c25fa0 R15: 00007ffd576c9f38
[  439.258659][T13679]  </TASK>
[  439.260216][T13678] netlink: 'syz.5.1977': attribute type 5 has an invalid length.
[  440.158129][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  440.164647][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  442.460286][T13746] netlink: 'syz.5.2003': attribute type 39 has an invalid length.
[  442.478546][T13752] __nla_validate_parse: 5 callbacks suppressed
[  442.478577][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'.
[  443.741901][T13788] netlink: 6783 bytes leftover after parsing attributes in process `syz.3.2014'.
[  444.216032][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2015'.
[  444.478005][T13795] syzkaller0: entered promiscuous mode
[  444.517887][T13795] syzkaller0: entered allmulticast mode
[  444.803764][T13804] hsr0: entered allmulticast mode
[  444.808913][T13804] hsr_slave_0: entered allmulticast mode
[  444.814700][T13804] hsr_slave_1: entered allmulticast mode
[  445.597560][   T30] audit: type=1800 audit(1786460971.585:4): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2026" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  445.649854][T13831] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  445.675402][T13831] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  445.695723][T13831] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  446.497254][T13860] validate_nla: 2 callbacks suppressed
[  446.497275][T13860] netlink: 'syz.1.2033': attribute type 22 has an invalid length.
[  446.569331][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  446.710855][T13869] netlink: 'syz.7.2035': attribute type 11 has an invalid length.
[  447.507617][T13878] lo speed is unknown, defaulting to 1000
[  448.097513][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2046'.
[  449.356893][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'.
[  449.650650][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'.
[  450.093272][ T4929] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  450.391368][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2064'.
[  450.480372][T13955] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2064'.
[  452.131572][ T4929] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  452.857373][T14005] netlink: 'syz.0.2078': attribute type 1 has an invalid length.
[  452.999230][T14012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2081'.
[  453.029784][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'.
[  453.144051][T14019] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2084'.
[  453.217518][T14019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'.
[  453.553640][T14026] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2085'.
[  453.651226][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'.
[  454.704437][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'.
[  454.860264][T14057] netlink: zone id is out of range
[  454.873045][T14057] netlink: zone id is out of range
[  454.890014][T14057] netlink: get zone limit has 4 unknown bytes
[  454.917558][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2098'.
[  454.953448][T14061] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2099'.
[  454.992928][T14061] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2099'.
[  455.552116][T14078] netlink: 4336 bytes leftover after parsing attributes in process `syz.0.2100'.
[  456.166594][T14090] netlink: 'syz.5.2103': attribute type 7 has an invalid length.
[  456.461451][ T3254] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.655957][T14094] xt_hashlimit: size too large, truncated to 1048576
[  456.844365][T14094] xt_hashlimit: max too large, truncated to 1048576
[  457.526383][ T3254] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.158865][T14119] netlink: 'syz.0.2106': attribute type 13 has an invalid length.
[  458.180492][T14119] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2106'.
[  458.655250][T14122] netlink: 'syz.3.2110': attribute type 46 has an invalid length.
[  458.757852][T14122] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2110'.
[  459.194767][ T3254] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.837598][ T3254] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.147375][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'.
[  461.558729][T14148] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2117'.
[  461.616025][T14148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2117'.
[  462.989810][T14167] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2123'.
[  463.532728][ T3254] bridge_slave_1: left allmulticast mode
[  463.547427][ T3254] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.826297][ T3254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  464.888738][ T3254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  464.984896][ T3254] bond0 (unregistering): Released all slaves
[  465.539180][ T3254] : left promiscuous mode
[  465.559731][T14202] netlink: 'syz.5.2130': attribute type 10 has an invalid length.
[  465.704884][T14202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2130'.
[  466.745008][T14222] veth0_vlan: entered allmulticast mode
[  466.777998][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  466.814934][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9
[  466.986702][T14231] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2136'.
[  467.046710][T14231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2136'.
[  467.942416][ T3254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.979735][ T3254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.050534][ T3254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.102744][ T3254] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.309918][T14268] netlink: 'syz.3.2146': attribute type 6 has an invalid length.
[  469.455289][T14269] openvswitch: netlink: Duplicate or invalid key (type 0).
[  469.538382][T14269] openvswitch: netlink: Actions may not be safe on all matching packets
[  470.499918][ T3254] team0 (unregistering): Port device team_slave_1 removed
[  470.577653][ T3254] team0 (unregistering): Port device team_slave_0 removed
[  470.982724][T14284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'.
[  471.002830][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10
[  471.683461][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'.
[  471.843420][T14322] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2157'.
[  471.899518][T14324] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2157'.
[  472.421392][T14339] netlink: 4336 bytes leftover after parsing attributes in process `syz.7.2162'.
[  472.754712][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'.
[  472.994035][T14353] netlink: 'syz.3.2166': attribute type 1 has an invalid length.
[  473.017488][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'.
[  473.127130][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'.
[  473.151263][T14350] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2163'.
[  473.469425][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11
[  473.741131][T14379] netlink: 'syz.7.2173': attribute type 4 has an invalid length.
[  473.771190][T14379] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2173'.
[  474.503063][T14379] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  475.103491][T14401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.350583][T14409] openvswitch: netlink: Key type 12706 is out of range max 32
[  476.009972][T14429] __nla_validate_parse: 5 callbacks suppressed
[  476.010012][T14429] netlink: 4336 bytes leftover after parsing attributes in process `syz.5.2189'.
[  476.250661][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2191'.
[  476.281983][T14440] openvswitch: netlink: Message has 4 unknown bytes.
[  476.511612][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'.
[  476.529093][T14446] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2194'.
[  476.539388][T14446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2194'.
[  476.551001][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12
[  476.664979][T14453] netlink: 'syz.7.2195': attribute type 4 has an invalid length.
[  476.917772][T14464] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2197'.
[  477.803346][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2203'.
[  477.813279][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2203'.
[  478.649195][T14517] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2211'.
[  478.802750][T14517] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2211'.
[  480.300693][T14569] netlink: 'syz.7.2222': attribute type 10 has an invalid length.
[  480.448285][T14569] dummy0: entered promiscuous mode
[  480.475343][T14569] dummy0: entered allmulticast mode
[  480.497000][T14569] bridge0: port 3(dummy0) entered blocking state
[  480.503641][T14569] bridge0: port 3(dummy0) entered disabled state
[  480.519829][T14569] bridge0: port 3(dummy0) entered blocking state
[  480.526557][T14569] bridge0: port 3(dummy0) entered forwarding state
[  480.544221][T14577] netlink: 'syz.3.2224': attribute type 10 has an invalid length.
[  480.584688][T14577] netlink: 'syz.3.2224': attribute type 8 has an invalid length.
[  481.319786][T14596] netlink: 'syz.1.2229': attribute type 10 has an invalid length.
[  481.424998][T14596] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  481.443559][T14596] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[  481.483729][T14596] team0: Port device netdevsim1 removed
[  481.508445][T14596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  483.066608][   T30] audit: type=1107 audit(1786461009.075:5): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='
[  483.066608][   T30] ,”aÊÕ×A«#m
[  483.066608][   T30] £'
[  484.048037][T14701] __nla_validate_parse: 3 callbacks suppressed
[  484.048063][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2255'.
[  485.874621][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2270'.
[  485.905291][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2270'.
[  486.263535][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2274'.
[  486.292766][T14774] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  486.319148][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.361885][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.385130][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.438300][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.467378][T14784] netlink: 731 bytes leftover after parsing attributes in process `syz.3.2277'.
[  486.496217][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.551949][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.608088][T14777] netlink: 'syz.1.2275': attribute type 61 has an invalid length.
[  486.667846][T14790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.698880][T14829] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2290'.
[  487.898483][T14836] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2294'.
[  487.934036][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'.
[  487.957878][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'.
[  488.034769][T14838] siw: device registration error -23
[  488.214628][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'.
[  489.767951][T14863] __nla_validate_parse: 3 callbacks suppressed
[  489.768009][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'.
[  489.783758][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2303'.
[  489.815131][T14873] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2303'.
[  489.870611][T14877] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2303'.
[  492.127326][T14933] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2319'.
[  494.320759][ T4929] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  495.300327][T15007] netlink: 'syz.7.2335': attribute type 2 has an invalid length.
[  495.409778][ T5274] veth0_vlan: left promiscuous mode
[  495.471247][ T5612] veth0_vlan: entered promiscuous mode
[  495.849159][T15023] netlink: 4336 bytes leftover after parsing attributes in process `syz.7.2340'.
[  495.899973][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'.
[  496.076018][T15031] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2341'.
[  496.175947][T15030] netlink: 'syz.5.2342': attribute type 1 has an invalid length.
[  496.210199][T15025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2341'.
[  496.237872][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'.
[  498.736450][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2373'.
[  499.174938][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2379'.
[  499.246909][ T6628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.375310][T15134] netlink: 754 bytes leftover after parsing attributes in process `syz.3.2383'.
[  499.576268][T15142] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2386'.
[  499.612855][ T6628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.169284][ T6628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.219633][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  500.232129][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  500.243435][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  500.261095][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  500.269084][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  500.349195][T15146] lo speed is unknown, defaulting to 1000
[  500.459852][ T6628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.096754][T15188] netlink: 'syz.7.2402': attribute type 39 has an invalid length.
[  501.591128][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  501.598170][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  501.751287][ T6628] bridge0: port 3(team0) entered disabled state
[  501.822045][ T6628] bridge_slave_1: left allmulticast mode
[  501.837039][ T6628] bridge_slave_1: left promiscuous mode
[  501.857846][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.894019][ T6628] bridge_slave_0: left allmulticast mode
[  501.899761][ T6628] bridge_slave_0: left promiscuous mode
[  501.927195][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.134919][T15227] 
[  502.137423][T15227] =============================
[  502.142375][T15227] WARNING: suspicious RCU usage
[  502.147382][T15227] syzkaller #0 Not tainted
[  502.151876][T15227] -----------------------------
[  502.156887][T15227] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage!
[  502.165098][T15227] 
[  502.165098][T15227] other info that might help us debug this:
[  502.165098][T15227] 
[  502.175559][T15227] 
[  502.175559][T15227] rcu_scheduler_active = 2, debug_locks = 1
[  502.183676][T15227] 1 lock held by syz.7.2417/15227:
[  502.189265][T15227]  #0: ffff88801207ead0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90
[  502.200384][T15227] 
[  502.200384][T15227] stack backtrace:
[  502.206456][T15227] CPU: 0 UID: 0 PID: 15227 Comm: syz.7.2417 Not tainted syzkaller #0 PREEMPT(full) 
[  502.206488][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  502.206504][T15227] Call Trace:
[  502.206513][T15227]  <TASK>
[  502.206522][T15227]  dump_stack_lvl+0xe8/0x150
[  502.206564][T15227]  lockdep_rcu_suspicious+0x13f/0x1d0
[  502.206605][T15227]  xfrm_nlmsg_multicast+0x1d8/0x1f0
[  502.206640][T15227]  xfrm_send_migrate_state+0x870/0xae0
[  502.206780][T15227]  ? __pfx_xfrm_send_migrate_state+0x10/0x10
[  502.206827][T15227]  ? xfrm_state_migrate_install+0x192/0x630
[  502.206894][T15227]  xfrm_do_migrate_state+0x1703/0x1e50
[  502.206942][T15227]  ? __pfx_xfrm_do_migrate_state+0x10/0x10
[  502.206992][T15227]  ? apparmor_capable+0x126/0x170
[  502.207030][T15227]  ? __nla_parse+0x40/0x60
[  502.207085][T15227]  xfrm_user_rcv_msg+0x7a8/0xf30
[  502.207121][T15227]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  502.207189][T15227]  ? __mutex_trylock_common+0x15f/0x270
[  502.207228][T15227]  ? __pfx___mutex_trylock_common+0x10/0x10
[  502.207266][T15227]  ? rcu_is_watching+0x15/0xb0
[  502.207313][T15227]  ? trace_contention_end+0x3d/0x140
[  502.207343][T15227]  netlink_rcv_skb+0x226/0x4a0
[  502.207375][T15227]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  502.207405][T15227]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  502.207450][T15227]  ? netlink_deliver_tap+0x2e/0x1b0
[  502.207475][T15227]  ? netlink_deliver_tap+0x2e/0x1b0
[  502.207505][T15227]  xfrm_netlink_rcv+0x79/0x90
[  502.207534][T15227]  netlink_unicast+0x7bb/0x940
[  502.207572][T15227]  netlink_sendmsg+0x813/0xb40
[  502.207612][T15227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.207645][T15227]  ? aa_sock_msg_perm+0xf1/0x1b0
[  502.207675][T15227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.207702][T15227]  sock_sendmsg_nosec+0x13a/0x180
[  502.207739][T15227]  ____sys_sendmsg+0x54e/0x850
[  502.207772][T15227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  502.207810][T15227]  ? import_iovec+0x73/0xa0
[  502.207856][T15227]  ___sys_sendmsg+0x2a5/0x360
[  502.207883][T15227]  ? __lock_acquire+0x683/0x2cf0
[  502.207918][T15227]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.207949][T15227]  ? futex_wake+0x51b/0x5f0
[  502.208024][T15227]  ? __fget_files+0x2a/0x420
[  502.208055][T15227]  ? __fget_files+0x3a2/0x420
[  502.208110][T15227]  __x64_sys_sendmsg+0x1b1/0x290
[  502.208140][T15227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  502.208187][T15227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.208210][T15227]  do_syscall_64+0x174/0x580
[  502.208242][T15227]  ? trace_irq_disable+0x3b/0x140
[  502.208269][T15227]  ? clear_bhb_loop+0x70/0xc0
[  502.208296][T15227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.208318][T15227] RIP: 0033:0x7f4d1699e0d9
[  502.208340][T15227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.208359][T15227] RSP: 002b:00007f4d17890028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  502.208383][T15227] RAX: ffffffffffffffda RBX: 00007f4d16c25fa0 RCX: 00007f4d1699e0d9
[  502.208400][T15227] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004
[  502.208414][T15227] RBP: 00007f4d16a35024 R08: 0000000000000000 R09: 0000000000000000
[  502.208427][T15227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  502.208439][T15227] R13: 00007f4d16c26038 R14: 00007f4d16c25fa0 R15: 00007ffe4198a868
[  502.208474][T15227]  </TASK>
[  502.579070][ T4929] Bluetooth: hci2: command tx timeout
[  502.953624][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.019972][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.168115][ T6628] bond0 (unregistering): Released all slaves
[  503.595652][ T6628] : left promiscuous mode
[  504.286797][ T6628] mac80211_hwsim hwsim20 wlan0 (unregistering): left promiscuous mode
[  504.311418][ T6628] team0: Port device wlan0 removed
[  504.402435][ T6628] hsr_slave_0: left promiscuous mode
[  504.408717][ T6628] hsr_slave_1: left promiscuous mode
[  504.426649][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.437179][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.461310][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.470706][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.491019][ T6628] veth1_macvtap: left promiscuous mode
[  504.497098][ T6628] veth0_macvtap: left promiscuous mode
[  504.753835][ T6628] team_slave_1 (unregistering): left promiscuous mode
[  504.760695][ T6628] team_slave_1 (unregistering): left allmulticast mode
[  504.768636][ T6628] team0 (unregistering): Port device team_slave_1 removed
[  504.784256][ T6628] team_slave_0 (unregistering): left promiscuous mode
[  504.799129][ T6628] team_slave_0 (unregistering): left allmulticast mode
[  504.807101][ T6628] team0 (unregistering): Port device team_slave_0 removed
[  505.990387][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  506.296939][ T6628] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.401120][ T6628] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.470107][ T6628] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.571754][ T6628] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.594786][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14
[  506.918328][ T6628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.023002][ T6628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.095218][ T6628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.174967][ T6628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.195369][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15
[  507.384546][ T6628] bridge0: port 3(batadv0) entered disabled state
[  507.395938][ T6628] bridge_slave_1: left allmulticast mode
[  507.402495][ T6628] bridge_slave_1: left promiscuous mode
[  507.410225][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.421228][ T6628] bridge_slave_0: left allmulticast mode
[  507.427741][ T6628] bridge_slave_0: left promiscuous mode
[  507.435427][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.459482][ T6628] bridge0: port 3(dummy0) entered disabled state
[  507.468744][ T6628] bridge_slave_1: left allmulticast mode
[  507.474495][ T6628] bridge_slave_1: left promiscuous mode
[  507.482772][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.502361][ T6628] bridge_slave_0: left allmulticast mode
[  507.508195][ T6628] bridge_slave_0: left promiscuous mode
[  507.514112][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.532794][ T6628] bridge_slave_1: left allmulticast mode
[  507.538764][ T6628] bridge_slave_1: left promiscuous mode
[  507.544784][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.568955][ T6628] 
: left allmulticast mode
[  507.573629][ T6628] 
: left promiscuous mode
[  507.578845][ T6628] bridge0: port 1(
1
) entered disabled state
[  507.888300][ T6628] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.908489][ T6628] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.918777][ T6628] .` (unregistering): Released all slaves
[  508.034347][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.043853][ T6628] bond0 (unregistering): Released all slaves
[  508.175654][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.187070][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.206005][ T6628] bond0 (unregistering): Released all slaves
[  508.358317][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.370886][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.381643][ T6628] bond0 (unregistering): Released all slaves
[  508.402824][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16
[  508.568218][ T6628] tipc: Left network mode
[  509.803202][ T6628] team0: Port device wlan0 removed
[  509.935388][ T6628] hsr_slave_0: left promiscuous mode
[  509.949186][ T6628] hsr_slave_1: left promiscuous mode
[  509.955413][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.965320][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.983359][ T6628] hsr_slave_0: left promiscuous mode
[  509.990128][ T6628] hsr_slave_1: left promiscuous mode
[  509.996610][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.004690][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.017701][ T6628] hsr_slave_0: left promiscuous mode
[  510.024756][ T6628] hsr_slave_1: left promiscuous mode
[  510.037815][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.045321][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.055097][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.062653][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.079284][ T6628] hsr_slave_0: left promiscuous mode
[  510.085296][ T6628] hsr_slave_1: left promiscuous mode
[  510.092132][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.100554][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.109604][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.117180][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.147558][ T6628] veth0_vlan: left promiscuous mode
[  510.152918][ T6628] veth1_macvtap: left promiscuous mode
[  510.158597][ T6628] veth0_macvtap: left promiscuous mode
[  510.164194][ T6628] veth1_vlan: left promiscuous mode
[  510.169555][ T6628] veth0_vlan: left promiscuous mode
[  510.175939][ T6628] veth1_macvtap: left promiscuous mode
[  510.181432][ T6628] veth0_macvtap: left promiscuous mode
[  510.187840][ T6628] veth1_vlan: left promiscuous mode
[  510.436533][ T6628] team0 (unregistering): Port device team_slave_1 removed
[  510.453590][ T6628] team0 (unregistering): Port device team_slave_0 removed
[  510.502047][ T6627] smbdirect: ib_dev[syz1] removed
[  510.574374][ T6628] team0 (unregistering): Port device dummy0 removed
[  510.626810][   T13] smbdirect: ib_dev[syz0] removed
[  510.812525][ T6628] team_slave_0 (unregistering): left promiscuous mode
[  510.820227][ T6628] team_slave_0 (unregistering): left allmulticast mode
[  510.828157][ T6628] team0 (unregistering): Port device team_slave_0 removed
[  511.116537][ T6628] team0 (unregistering): Port device team_slave_1 removed
[  511.132372][ T6628] team0 (unregistering): Port device team_slave_0 removed
[  511.397746][ T6628] team0 (unregistering): Port device team_slave_1 removed
[  511.414846][ T6628] team0 (unregistering): Port device team_slave_0 removed
[  511.537056][ T6628] team0 (unregistering): Port device dummy0 removed
[  511.567670][   T10] infiniband syz1: ib_query_port failed (-19)