last executing test programs:

10m50.376624325s ago: executing program 32 (id=11170):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11ef0, 0x4, 0x2, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f)

10m49.541706605s ago: executing program 33 (id=11185):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)

10m46.894420806s ago: executing program 34 (id=11211):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

10m44.668332501s ago: executing program 35 (id=11226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

10m21.978532683s ago: executing program 36 (id=11288):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)

9m44.089282707s ago: executing program 37 (id=11643):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000085000000230004"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000320015062bbd7000fbdbdf250c"], 0x90}}, 0x0)

9m42.379744239s ago: executing program 38 (id=11647):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa4d, 0x8}, 0x8000}, 0x0, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x53)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7)

9m40.671759858s ago: executing program 39 (id=11661):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})

9m37.292674016s ago: executing program 40 (id=11682):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)

8m57.845095871s ago: executing program 41 (id=11907):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)

7m54.521856351s ago: executing program 42 (id=12604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000001200))

7m45.8595756s ago: executing program 43 (id=12857):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

7m37.692104738s ago: executing program 44 (id=12916):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

7m1.674216674s ago: executing program 45 (id=13152):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000d5aa1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000200)=@ieee802154={0x24, @long={0xa}}, 0x14, 0x0}, 0x0)

6m52.583198729s ago: executing program 46 (id=13257):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote})

6m21.835278832s ago: executing program 47 (id=13630):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11ef0, 0x4, 0x2, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8844)

6m0.139473859s ago: executing program 48 (id=13839):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10)

5m51.623869921s ago: executing program 49 (id=13778):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b12}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x6871, 0x0, 0x8, 0x43fe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1, 0x0, 0xa6ff}, 0x804)

5m16.676903642s ago: executing program 50 (id=14008):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004043}, 0x4000000)

5m15.785072637s ago: executing program 51 (id=14161):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x9, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2, 0x0, 0x84)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x800, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0xa2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4m25.725510726s ago: executing program 52 (id=14493):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

3m59.414280051s ago: executing program 53 (id=14562):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000)

3m36.81928035s ago: executing program 54 (id=14657):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair(0xf, 0x3, 0x2, &(0x7f0000000040))

3m32.6691609s ago: executing program 1 (id=14765):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), 0x0}, 0x20)

3m32.474187652s ago: executing program 1 (id=14769):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x73a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m32.050957986s ago: executing program 1 (id=14771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3m31.858871426s ago: executing program 1 (id=14772):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a3100000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd0000000800014000000014240001800a00010072656469720000001400028008000140000000040800024000e8ff0b0900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

3m31.49754012s ago: executing program 1 (id=14776):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0)

3m27.743235933s ago: executing program 1 (id=14790):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

3m12.615436525s ago: executing program 55 (id=14790):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

2m10.057952813s ago: executing program 9 (id=15334):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x6}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)

2m9.872943689s ago: executing program 9 (id=15335):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000084000000000000000000007ea5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

2m9.785129487s ago: executing program 9 (id=15336):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4)
r2 = getpid()
sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)="c495", 0x2}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x10}, 0xa8d1)
write$cgroup_pid(r0, &(0x7f0000000400), 0x12)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002)

2m9.715287784s ago: executing program 9 (id=15337):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004040)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m9.572243492s ago: executing program 9 (id=15338):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m9.402818515s ago: executing program 9 (id=15339):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19faa, 0x4, 0x98, 0x0, 0x800, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080))

1m54.241228303s ago: executing program 56 (id=15339):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19faa, 0x4, 0x98, 0x0, 0x800, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080))

1m26.887775145s ago: executing program 8 (id=15633):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4d18aa27, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x73fc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000851)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1m26.555672838s ago: executing program 8 (id=15638):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

1m25.915189539s ago: executing program 8 (id=15642):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x40, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0208, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a)

1m25.621083919s ago: executing program 8 (id=15658):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)

1m25.420596445s ago: executing program 8 (id=15652):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

1m24.734578747s ago: executing program 8 (id=15655):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x404c040)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc010)

1m19.020997996s ago: executing program 4 (id=15675):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044)

1m18.364257645s ago: executing program 4 (id=15677):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f59c4ffb6c3420af"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8001)

1m16.992170844s ago: executing program 4 (id=15680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

1m16.84402758s ago: executing program 4 (id=15684):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x80054)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x225451, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

1m16.683275894s ago: executing program 4 (id=15687):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd"], 0xcfa4)

1m16.575130782s ago: executing program 4 (id=15689):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x10ff2, 0x5, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141)
sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001)
recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002040)

1m16.183962839s ago: executing program 57 (id=15689):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x10ff2, 0x5, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141)
sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001)
recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002040)

1m9.684666665s ago: executing program 58 (id=15655):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x404c040)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc010)

45.361119109s ago: executing program 7 (id=15837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

45.075175384s ago: executing program 7 (id=15840):
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000)

44.933027116s ago: executing program 7 (id=15843):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="431e00000000000003"], 0x50)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

44.670082409s ago: executing program 7 (id=15844):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7013a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x7}, 0x1118, 0x5c, 0x4000000, 0x3, 0x3fc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xdffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket(0x840000000002, 0x3, 0xff)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="177c956fd2", 0x5}, {0x0}], 0x2}, 0x4001)
close(0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r1=>r0})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, 0x0, 0x4044000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

44.239544507s ago: executing program 7 (id=15847):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

43.993660688s ago: executing program 7 (id=15851):
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

28.85365393s ago: executing program 59 (id=15851):
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.275688348s ago: executing program 6 (id=16071):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x1c, 0x38, 0x825, 0x70bd2b, 0x25dfdbfb, {0x14}, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x40010)

6.027421566s ago: executing program 6 (id=16074):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

5.380218664s ago: executing program 6 (id=16077):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

4.963634324s ago: executing program 3 (id=16080):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9010a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x32, 0x0, 0x0, 0x3, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, @perf_bp={0x0}, 0x4088, 0x2e, 0xfffffbfb, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/176, 0xb0}], 0x1}, 0x40)

4.658788672s ago: executing program 3 (id=16082):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x9, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7ff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x20}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f08906", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4.479593538s ago: executing program 3 (id=16086):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x2)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4)

4.350264398s ago: executing program 6 (id=16087):
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0)

4.019314308s ago: executing program 6 (id=16090):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x43451)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x100002, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r2, &(0x7f0000000200), 0x43451)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

3.969062491s ago: executing program 3 (id=16091):
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x38000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x5c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c80)=@newsa={0x168, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {}, {0xfffffffe}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2a}, [@algo_auth={0x78, 0x1, {{'rmd160\x00'}, 0x180, "ce4b67087c220e10d02d2eb00d497005009ab9e33e3056704eec0585a04e39eeb51640f76cca01220100000040a10ec3"}}]}, 0x168}}, 0x0)

3.809421806s ago: executing program 6 (id=16092):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd)

3.705693392s ago: executing program 3 (id=16094):
r0 = socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.575465874s ago: executing program 0 (id=16095):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a80ff000f00000000000000140001800d2a79075827"], 0x3c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x48000)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0)

2.663656636s ago: executing program 0 (id=16098):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0xda89}}], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x9, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)

2.533326096s ago: executing program 3 (id=16100):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002c6f160b000000000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0xfffffe15, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0xffdffff9}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

2.362505312s ago: executing program 2 (id=16101):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106)

2.093660146s ago: executing program 2 (id=16102):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000003}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getpid()
syz_open_procfs$namespace(0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xb0240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x2}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.092682761s ago: executing program 0 (id=16112):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.857214081s ago: executing program 0 (id=16104):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)

1.85608059s ago: executing program 2 (id=16105):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

1.770474353s ago: executing program 0 (id=16106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1.761246131s ago: executing program 5 (id=16107):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4)
sendmsg$unix(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ', 0x2}], 0x1, 0x0, 0x0, 0x10}, 0xa8d1)
write$cgroup_pid(r3, &(0x7f0000000400), 0x12)
recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002)

1.502988352s ago: executing program 0 (id=16108):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000ff0000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4084)

1.501031085s ago: executing program 5 (id=16109):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80208000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44004)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x74}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x3a84821, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x8ca49, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x50000, 0x0)

1.018650469s ago: executing program 5 (id=16110):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

520.969309ms ago: executing program 2 (id=16111):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0, 0xffffffffffffffff, 0x1, 0x1c}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x1b, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x0, 0x3, 0x1, 0x7, 0x6, 0x18, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfe1d, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0x7, 0x6, 0x6, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x1, 0x6, 0x1, 0x7, 0xffffffffffffffff, 0x8}]}, &(0x7f0000000700)='GPL\x00', 0x1, 0x1000, &(0x7f0000000740)=""/4096, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0xf, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001800)=[{0x4, 0x5, 0xf, 0x6}], 0x10, 0x7fffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)

422.483473ms ago: executing program 5 (id=16113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)

277.970697ms ago: executing program 5 (id=16114):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r2)

215.743269ms ago: executing program 2 (id=16115):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a)

80.999995ms ago: executing program 5 (id=16116):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4004743b, &(0x7f0000001200))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044)

0s ago: executing program 2 (id=16117):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
close(r3)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

kernel console output (not intermixed with test programs):

ength.
[  897.493678][ T4964] team0: Port device team_slave_0 added
[  897.516127][ T5068] netlink: 'syz.8.13881': attribute type 19 has an invalid length.
[  897.524676][ T5068] netlink: 14536 bytes leftover after parsing attributes in process `syz.8.13881'.
[  897.549222][ T4964] team0: Port device team_slave_1 added
[  897.817833][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  897.824838][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.896242][ T4964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  898.192270][ T3953] hsr_slave_0: left promiscuous mode
[  898.586012][ T5840] Bluetooth: hci3: command tx timeout
[  898.632476][ T3953] hsr_slave_1: left promiscuous mode
[  898.675367][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  898.713601][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  898.802372][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  898.825382][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  898.835512][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  898.844321][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  898.852721][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  898.860477][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  898.886544][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  898.936328][ T3953] veth1_macvtap: left promiscuous mode
[  898.941905][ T3953] veth0_macvtap: left promiscuous mode
[  898.967403][ T3953] veth1_vlan: left promiscuous mode
[  898.972903][ T3953] veth0_vlan: left promiscuous mode
[  900.735184][ T3953] team0 (unregistering): Port device team_slave_1 removed
[  900.765589][ T3953] team0 (unregistering): Port device team_slave_0 removed
[  900.907753][ T5832] Bluetooth: hci5: command tx timeout
[  901.224333][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  901.236042][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  901.300585][ T4964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.331636][ T5084] sch_tbf: peakrate 4 is lower than or equals to rate 5 !
[  901.471261][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13898'.
[  901.681262][ T4964] hsr_slave_0: entered promiscuous mode
[  901.694367][ T4964] hsr_slave_1: entered promiscuous mode
[  901.704076][ T4964] debugfs: 'hsr0' already exists in 'hsr'
[  901.715031][ T4964] Cannot create hsr debugfs directory
[  901.933852][ T5118] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.13902'.
[  902.198092][T26045] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  902.701891][ T3953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.868906][ T3953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.988277][ T5832] Bluetooth: hci5: command tx timeout
[  903.107843][ T3953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.168445][ T5087] chnl_net:caif_netlink_parms(): no params data found
[  903.719795][ T3953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.874684][ T5175] netlink: 'syz.8.13921': attribute type 10 has an invalid length.
[  903.922521][ T5175] team0: Device vxcan1 is of different type
[  904.062168][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.070079][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.092822][ T5087] bridge_slave_0: entered allmulticast mode
[  904.112941][ T5087] bridge_slave_0: entered promiscuous mode
[  904.129247][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.155722][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.169322][ T5087] bridge_slave_1: entered allmulticast mode
[  904.192445][ T5087] bridge_slave_1: entered promiscuous mode
[  904.357083][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  904.442184][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  904.474533][ T4964] 8021q: adding VLAN 0 to HW filter on device bond0
[  904.563909][ T3953] bridge_slave_1: left allmulticast mode
[  904.574414][ T3953] bridge_slave_1: left promiscuous mode
[  904.580902][ T3953] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.635478][ T3953] bridge_slave_0: left allmulticast mode
[  904.646806][ T3953] bridge_slave_0: left promiscuous mode
[  904.666141][ T3953] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.065971][ T5832] Bluetooth: hci5: command tx timeout
[  905.088393][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13936'.
[  905.145707][ T5832] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  905.425067][ T3953] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  905.449152][ T3953] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  905.481588][ T3953] .` (unregistering): (slave team0): Releasing backup interface
[  905.506599][ T3953] .` (unregistering): Released all slaves
[  905.620000][ T5211] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13933'.
[  905.687866][ T5087] team0: Port device team_slave_0 added
[  905.714056][ T5087] team0: Port device team_slave_1 added
[  905.963554][ T4964] 8021q: adding VLAN 0 to HW filter on device team0
[  906.008800][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  906.032592][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.113554][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  906.256715][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  906.295871][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.330591][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  906.347014][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.354239][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  906.372904][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.380098][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state
[  906.488216][ T5249] syzkaller0: entered promiscuous mode
[  906.857339][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13949'.
[  907.145958][ T5832] Bluetooth: hci5: command tx timeout
[  909.131049][ T5087] hsr_slave_0: entered promiscuous mode
[  909.157659][ T5087] hsr_slave_1: entered promiscuous mode
[  909.164842][ T5087] debugfs: 'hsr0' already exists in 'hsr'
[  909.178752][ T5087] Cannot create hsr debugfs directory
[  909.728139][ T3953] hsr_slave_0: left promiscuous mode
[  909.761193][ T3953] hsr_slave_1: left promiscuous mode
[  909.769159][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  909.779236][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  909.793119][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  909.801024][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  909.825542][ T3953] veth1_macvtap: left promiscuous mode
[  909.838784][ T3953] veth0_macvtap: left promiscuous mode
[  909.854919][ T3953] veth1_vlan: left promiscuous mode
[  909.862816][ T3953] veth0_vlan: left promiscuous mode
[  910.203538][ T3953] team0 (unregistering): Port device team_slave_1 removed
[  910.237594][ T3953] team0 (unregistering): Port device team_slave_0 removed
[  910.919514][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0
[  911.019754][ T5087] 8021q: adding VLAN 0 to HW filter on device team0
[  911.043614][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.050846][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  911.109196][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.116412][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  911.631657][ T4964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  912.260253][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  912.318677][ T5353] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13969'.
[  912.393196][ T5353] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13969'.
[  913.124822][ T4964] veth0_vlan: entered promiscuous mode
[  913.179109][ T4964] veth1_vlan: entered promiscuous mode
[  913.308540][ T4964] veth0_macvtap: entered promiscuous mode
[  913.373633][ T4964] veth1_macvtap: entered promiscuous mode
[  913.489049][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  913.534733][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  913.799290][ T5087] veth0_vlan: entered promiscuous mode
[  913.905573][ T5087] veth1_vlan: entered promiscuous mode
[  914.020017][T26045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.049285][T26045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  914.097841][ T5087] veth0_macvtap: entered promiscuous mode
[  914.158955][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.168173][ T5087] veth1_macvtap: entered promiscuous mode
[  914.186005][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  914.335697][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  914.407720][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  914.897963][T26045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.928986][T26045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.130826][T29461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.156686][T29461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.510006][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  916.814140][ T5462] netlink: 'syz.0.13996': attribute type 2 has an invalid length.
[  916.823259][ T5462] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13996'.
[  916.837620][ T5462] netlink: 'syz.0.13996': attribute type 2 has an invalid length.
[  916.848560][ T5462] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13996'.
[  916.876606][ T5463] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.13995'.
[  918.849956][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14013'.
[  920.056813][ T5548] tipc: Enabling of bearer <!{:\> rejected, media not registered
[  921.080022][ T5583] Dead loop on virtual device ip6_vti0, fix it urgently!
[  921.424434][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14036'.
[  925.502834][ T5732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14082'.
[  925.793854][ T5740] netlink: 'syz.0.14086': attribute type 21 has an invalid length.
[  929.172520][ T5856] netlink: 'syz.2.14112': attribute type 9 has an invalid length.
[  929.215920][ T5856] netlink: 'syz.2.14112': attribute type 11 has an invalid length.
[  929.237122][ T5856] netlink: 'syz.2.14112': attribute type 12 has an invalid length.
[  929.262221][ T5856] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.14112'.
[  929.292577][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14112'.
[  930.024239][ T5879] netlink: 'syz.0.14120': attribute type 21 has an invalid length.
[  930.947142][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14131'.
[  931.636499][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  931.645632][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  933.246395][ T5998] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.14152'.
[  933.549204][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  933.563196][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  933.571673][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  933.594732][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  933.604825][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  933.827907][ T3952] bridge_slave_1: left allmulticast mode
[  933.874776][ T3952] bridge_slave_1: left promiscuous mode
[  933.886052][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.906867][ T3952] bridge_slave_0: left allmulticast mode
[  933.912718][ T3952] bridge_slave_0: left promiscuous mode
[  933.921864][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.204536][ T3952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  934.223629][ T3952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  934.268625][ T3952] bond0 (unregistering): Released all slaves
[  934.676567][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  934.706806][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  934.716688][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  934.734528][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  934.744625][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  935.337948][ T3952] hsr_slave_0: left promiscuous mode
[  935.354989][ T3952] hsr_slave_1: left promiscuous mode
[  935.361415][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  935.369297][ T3952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.379767][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  935.392908][ T3952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  935.422203][ T3952] veth1_macvtap: left promiscuous mode
[  935.441114][ T3952] veth0_macvtap: left promiscuous mode
[  935.451202][ T3952] veth1_vlan: left promiscuous mode
[  935.458155][ T3952] veth0_vlan: left promiscuous mode
[  935.628695][ T5840] Bluetooth: hci0: command tx timeout
[  936.265629][ T3952] team0 (unregistering): Port device team_slave_1 removed
[  936.315491][ T3952] team0 (unregistering): Port device team_slave_0 removed
[  936.463565][ T6076] netlink: 232 bytes leftover after parsing attributes in process `syz.2.14186'.
[  936.826076][ T5840] Bluetooth: hci4: command tx timeout
[  937.242289][ T6009] chnl_net:caif_netlink_parms(): no params data found
[  937.384340][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.393325][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.400749][ T6009] bridge_slave_0: entered allmulticast mode
[  937.409238][ T6009] bridge_slave_0: entered promiscuous mode
[  937.420733][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.431728][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.440164][ T6009] bridge_slave_1: entered allmulticast mode
[  937.451122][ T6009] bridge_slave_1: entered promiscuous mode
[  937.487711][ T6099] netlink: 1735 bytes leftover after parsing attributes in process `syz.3.14193'.
[  937.645140][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  937.675010][ T6027] chnl_net:caif_netlink_parms(): no params data found
[  937.708371][ T5840] Bluetooth: hci0: command tx timeout
[  937.727242][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  938.396925][ T6124] netlink: 'syz.0.14197': attribute type 3 has an invalid length.
[  938.415353][ T6124] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.14197'.
[  938.906066][ T5840] Bluetooth: hci4: command tx timeout
[  939.038025][ T6009] team0: Port device team_slave_0 added
[  939.059447][ T6009] team0: Port device team_slave_1 added
[  939.408707][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  939.422123][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  939.460413][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  939.475357][ T6134] syzkaller0: entered allmulticast mode
[  939.579167][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  939.596139][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  939.622347][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  939.685659][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.726021][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.747642][ T6027] bridge_slave_0: entered allmulticast mode
[  939.793525][ T6027] bridge_slave_0: entered promiscuous mode
[  939.809324][ T5840] Bluetooth: hci0: command tx timeout
[  940.096111][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.120887][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.156119][ T6027] bridge_slave_1: entered allmulticast mode
[  940.176741][ T6027] bridge_slave_1: entered promiscuous mode
[  940.291918][ T6027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  940.374390][ T6009] hsr_slave_0: entered promiscuous mode
[  940.407971][ T6009] hsr_slave_1: entered promiscuous mode
[  940.430214][ T6009] debugfs: 'hsr0' already exists in 'hsr'
[  940.448005][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14208'.
[  940.457507][ T6009] Cannot create hsr debugfs directory
[  940.478063][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14208'.
[  940.486345][ T6027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  940.690160][ T6027] team0: Port device team_slave_0 added
[  940.737003][ T6027] team0: Port device team_slave_1 added
[  940.985998][ T5840] Bluetooth: hci4: command tx timeout
[  941.014036][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.048501][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.129889][ T6027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.183485][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.201764][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.269719][ T6027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.639876][ T6027] hsr_slave_0: entered promiscuous mode
[  941.653773][ T6027] hsr_slave_1: entered promiscuous mode
[  941.675485][ T6027] debugfs: 'hsr0' already exists in 'hsr'
[  941.688376][ T6027] Cannot create hsr debugfs directory
[  941.868655][ T5840] Bluetooth: hci0: command tx timeout
[  943.065957][ T5840] Bluetooth: hci4: command tx timeout
[  944.668709][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14219'.
[  944.854013][ T6199] netlink: 'syz.3.14224': attribute type 23 has an invalid length.
[  944.983442][ T6208] netlink: 'syz.0.14225': attribute type 1 has an invalid length.
[  945.001186][ T6208] netlink: 64475 bytes leftover after parsing attributes in process `syz.0.14225'.
[  945.070337][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.177652][ T6009] 8021q: adding VLAN 0 to HW filter on device team0
[  945.275048][  T583] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.282608][  T583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  945.349874][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.357128][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  945.413404][ T6027] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.486580][ T6027] 8021q: adding VLAN 0 to HW filter on device team0
[  945.517962][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.525125][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  945.554217][ T6223] netlink: 'syz.2.14232': attribute type 6 has an invalid length.
[  945.562284][ T6223] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.14232'.
[  945.578148][ T6223] netlink: 'syz.2.14232': attribute type 1 has an invalid length.
[  945.619859][  T583] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.627075][  T583] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.218372][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  946.308153][ T6027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  946.417939][ T6255] netlink: 'syz.0.14240': attribute type 2 has an invalid length.
[  946.434292][ T6255] netlink: 'syz.0.14240': attribute type 1 has an invalid length.
[  946.452986][ T6253] netlink: 'syz.3.14241': attribute type 39 has an invalid length.
[  946.468842][ T6255] netlink: 116 bytes leftover after parsing attributes in process `syz.0.14240'.
[  946.523104][ T6253] hsr_slave_1 (unregistering): left promiscuous mode
[  946.538767][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  946.604751][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14242'.
[  946.631814][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14242'.
[  947.275458][ T6009] veth0_vlan: entered promiscuous mode
[  947.315190][ T6009] veth1_vlan: entered promiscuous mode
[  947.421128][ T6027] veth0_vlan: entered promiscuous mode
[  947.472513][ T6009] veth0_macvtap: entered promiscuous mode
[  947.495584][ T6027] veth1_vlan: entered promiscuous mode
[  947.515010][ T6009] veth1_macvtap: entered promiscuous mode
[  947.585682][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  947.611023][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  947.685131][ T6027] veth0_macvtap: entered promiscuous mode
[  947.822730][ T6027] veth1_macvtap: entered promiscuous mode
[  948.022808][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.034871][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  948.043016][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.090200][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  948.159256][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.189274][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.560228][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.581088][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.668333][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.702827][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  949.324451][ T6318] netlink: 'syz.0.14264': attribute type 21 has an invalid length.
[  949.344445][ T6318] IPv6: NLM_F_CREATE should be specified when creating new route
[  949.387371][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14264'.
[  951.380513][ T6363] IPv6: Can't replace route, no match found
[  953.370338][ T6416] sctp: [Deprecated]: syz.5.14300 (pid 6416) Use of struct sctp_assoc_value in delayed_ack socket option.
[  953.370338][ T6416] Use struct sctp_sack_info instead
[  954.030103][ T5840] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12
[  956.106113][ T5840] Bluetooth: hci1: command tx timeout
[  960.075007][ T6470] netlink: 'syz.3.14323': attribute type 25 has an invalid length.
[  960.096162][ T6470] netlink: 'syz.3.14323': attribute type 28 has an invalid length.
[  960.240264][ T6473] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14325'.
[  960.854364][ T6494] netlink: 'syz.2.14333': attribute type 3 has an invalid length.
[  960.901109][ T6494] netlink: 'syz.2.14333': attribute type 3 has an invalid length.
[  966.232682][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14369'.
[  969.028390][ T6676] syzkaller0: entered promiscuous mode
[  969.034026][ T6676] syzkaller0: entered allmulticast mode
[  969.334689][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  969.493984][ T5840] Bluetooth: hci1: unknown advertising packet type: 0xff
[  969.494045][ T5840] Bluetooth: hci1: unknown advertising packet type: 0x80
[  969.502634][ T5840] Bluetooth: hci1: unknown advertising packet type: 0x09
[  969.509885][ T5840] Bluetooth: hci1: Malformed LE Event: 0x02
[  970.085593][ T6707] netlink: set zone limit has 4 unknown bytes
[  972.053772][ T6739] openvswitch: netlink: Missing valid actions attribute.
[  972.074101][ T6739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  974.983403][ T6787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.871176][T29462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  977.993841][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.630913][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14461'.
[  979.643365][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14461'.
[  980.245610][ T6868] netlink: 64595 bytes leftover after parsing attributes in process `syz.0.14474'.
[  980.981574][ T6877] netlink: 'syz.0.14477': attribute type 8 has an invalid length.
[  980.998926][ T6877] netlink: 'syz.0.14477': attribute type 9 has an invalid length.
[  981.007332][ T6877] netlink: 'syz.0.14477': attribute type 10 has an invalid length.
[  981.015415][ T6877] netlink: 'syz.0.14477': attribute type 11 has an invalid length.
[  981.024667][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14477'.
[  981.293887][ T6884] netlink: 232 bytes leftover after parsing attributes in process `syz.0.14480'.
[  981.435961][ T6886] netlink: 'syz.2.14481': attribute type 21 has an invalid length.
[  981.447988][ T6886] IPv6: NLM_F_CREATE should be specified when creating new route
[  981.494118][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14481'.
[  982.814010][ T6907] netlink: 'syz.0.14489': attribute type 16 has an invalid length.
[  983.777047][T29461] bridge_slave_1: left allmulticast mode
[  983.803260][T29461] bridge_slave_1: left promiscuous mode
[  983.821008][T29461] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.917094][T29461] bridge_slave_0: left allmulticast mode
[  983.922892][T29461] bridge_slave_0: left promiscuous mode
[  983.945177][T29461] bridge0: port 1(bridge_slave_0) entered disabled state
[  984.403936][ T6928] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14497'.
[  984.627424][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  984.640539][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  984.652393][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  984.662574][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  984.680133][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  984.739033][T29461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.818719][T29461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.867428][T29461] bond0 (unregistering): Released all slaves
[  985.111472][ T6939] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.14502'.
[  986.142426][T29461] hsr_slave_0: left promiscuous mode
[  986.151113][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  986.182991][T29461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.193217][ T6963] netlink: 'syz.0.14512': attribute type 3 has an invalid length.
[  986.745945][ T5840] Bluetooth: hci3: command tx timeout
[  988.458258][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  988.475797][T29461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.825913][ T5840] Bluetooth: hci3: command tx timeout
[  989.134084][T29461] veth1_macvtap: left promiscuous mode
[  989.149406][T29461] veth0_macvtap: left promiscuous mode
[  989.165074][T29461] veth1_vlan: left promiscuous mode
[  989.187445][T29461] veth0_vlan: left promiscuous mode
[  989.654846][ T6985] netlink: 'syz.7.14519': attribute type 1 has an invalid length.
[  990.217559][ T6990] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.14522'.
[  990.656944][T29461] team0 (unregistering): Port device team_slave_1 removed
[  990.709383][ T6992] netlink: 'syz.0.14523': attribute type 6 has an invalid length.
[  990.736005][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14523'.
[  990.817806][T29461] team0 (unregistering): Port device team_slave_0 removed
[  990.926431][ T5840] Bluetooth: hci3: command tx timeout
[  991.305361][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14531'.
[  991.789478][ T6932] chnl_net:caif_netlink_parms(): no params data found
[  992.130870][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.145926][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state
[  992.153246][ T6932] bridge_slave_0: entered allmulticast mode
[  992.178645][ T6932] bridge_slave_0: entered promiscuous mode
[  992.209411][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.235955][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state
[  992.243323][ T6932] bridge_slave_1: entered allmulticast mode
[  992.274382][ T6932] bridge_slave_1: entered promiscuous mode
[  992.320167][T29461] bridge_slave_1: left allmulticast mode
[  992.339865][T29461] bridge_slave_1: left promiscuous mode
[  992.345710][T29461] bridge0: port 2(bridge_slave_1) entered disabled state
[  992.385453][T29461] bridge_slave_0: left allmulticast mode
[  992.405848][T29461] bridge_slave_0: left promiscuous mode
[  992.415721][T29461] bridge0: port 1(bridge_slave_0) entered disabled state
[  992.588949][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  992.611591][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  992.623128][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  992.646641][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  992.664040][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  992.986429][ T5840] Bluetooth: hci3: command tx timeout
[  993.067574][T29461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  993.085347][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  993.091948][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  993.157957][T29461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  993.172003][T29461] bond0 (unregistering): Released all slaves
[  993.199781][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  993.218538][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  993.373635][ T6932] team0: Port device team_slave_0 added
[  993.391546][ T6932] team0: Port device team_slave_1 added
[  993.396803][ T7054] netlink: 1195 bytes leftover after parsing attributes in process `syz.7.14545'.
[  993.556938][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  993.578918][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.635845][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  993.686266][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  993.699731][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.764883][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  993.944139][ T6932] hsr_slave_0: entered promiscuous mode
[  993.952573][ T6932] hsr_slave_1: entered promiscuous mode
[  993.959790][ T6932] debugfs: 'hsr0' already exists in 'hsr'
[  993.966123][ T6932] Cannot create hsr debugfs directory
[  994.261567][ T7039] chnl_net:caif_netlink_parms(): no params data found
[  994.762853][ T5840] Bluetooth: hci1: command tx timeout
[  994.845548][T29461] hsr_slave_0: left promiscuous mode
[  994.851771][T29461] hsr_slave_1: left promiscuous mode
[  994.858036][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  994.865653][T29461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  994.875662][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  994.883225][T29461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  994.912932][T29461] veth1_macvtap: left promiscuous mode
[  994.918692][T29461] veth0_macvtap: left promiscuous mode
[  994.924894][T29461] veth1_vlan: left promiscuous mode
[  994.931064][T29461] veth0_vlan: left promiscuous mode
[  995.265635][T29461] team0 (unregistering): Port device team_slave_1 removed
[  995.291359][T29461] team0 (unregistering): Port device team_slave_0 removed
[  995.688391][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.696720][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.704007][ T7039] bridge_slave_0: entered allmulticast mode
[  995.712090][ T7039] bridge_slave_0: entered promiscuous mode
[  995.732637][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.756089][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.785679][ T7039] bridge_slave_1: entered allmulticast mode
[  995.808872][ T7039] bridge_slave_1: entered promiscuous mode
[  995.943868][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  995.972112][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.084867][ T7039] team0: Port device team_slave_0 added
[  996.108984][ T7039] team0: Port device team_slave_1 added
[  996.260390][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.279010][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.307182][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  996.325212][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.332689][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.359534][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.830136][ T5840] Bluetooth: hci1: command tx timeout
[  998.230420][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0
[  998.260433][ T7039] hsr_slave_0: entered promiscuous mode
[  998.281252][ T7039] hsr_slave_1: entered promiscuous mode
[  998.359736][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14568'.
[  998.533126][ T6932] 8021q: adding VLAN 0 to HW filter on device team0
[  998.651548][  T583] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.658822][  T583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  998.792031][T29461] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.799332][T29461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  998.906013][ T5840] Bluetooth: hci1: command tx timeout
[  999.270495][ T7139] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.14573'.
[  999.404050][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.499648][ T7039] 8021q: adding VLAN 0 to HW filter on device team0
[  999.553988][T29461] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.561261][T29461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  999.634022][T29462] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.641244][T29462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  999.871968][ T7150] netlink: 'syz.5.14577': attribute type 9 has an invalid length.
[  999.943845][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1000.263655][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1000.515274][ T6932] veth0_vlan: entered promiscuous mode
[ 1000.542720][ T6932] veth1_vlan: entered promiscuous mode
[ 1000.599341][ T6932] veth0_macvtap: entered promiscuous mode
[ 1000.628492][ T6932] veth1_macvtap: entered promiscuous mode
[ 1000.658640][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1000.679671][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1000.892170][ T7180] netlink: 'syz.2.14582': attribute type 3 has an invalid length.
[ 1000.915292][T29462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1000.960260][T29462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1000.992086][ T5840] Bluetooth: hci1: command tx timeout
[ 1001.048298][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.057799][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.463260][ T7039] veth0_vlan: entered promiscuous mode
[ 1001.473049][ T7188] netlink: 'syz.5.14585': attribute type 9 has an invalid length.
[ 1001.489072][ T7188] netlink: 'syz.5.14585': attribute type 11 has an invalid length.
[ 1001.500824][ T7039] veth1_vlan: entered promiscuous mode
[ 1001.508251][ T7188] netlink: 'syz.5.14585': attribute type 12 has an invalid length.
[ 1001.522641][ T7188] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.14585'.
[ 1001.570157][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14585'.
[ 1001.615146][ T7039] veth0_macvtap: entered promiscuous mode
[ 1001.664759][ T7039] veth1_macvtap: entered promiscuous mode
[ 1001.730387][ T7192] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.14586'.
[ 1001.759964][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1001.801753][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1002.125934][  T583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.148245][  T583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.314481][  T583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.349251][  T583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.471895][ T7209] netlink: 'syz.5.14593': attribute type 3 has an invalid length.
[ 1002.800238][  T583] bridge_slave_1: left allmulticast mode
[ 1002.822557][  T583] bridge_slave_1: left promiscuous mode
[ 1002.830658][  T583] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.842155][ T7218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14596'.
[ 1002.893726][  T583] bridge_slave_0: left allmulticast mode
[ 1002.907356][  T583] bridge_slave_0: left promiscuous mode
[ 1002.923406][  T583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1003.475678][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1003.494534][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1003.505030][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1003.519139][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1003.529883][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1003.583099][  T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1003.641312][  T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1003.696203][  T583] bond0 (unregistering): Released all slaves
[ 1005.630837][ T5840] Bluetooth: hci3: command tx timeout
[ 1007.035868][  T583] hsr_slave_0: left promiscuous mode
[ 1007.041973][  T583] hsr_slave_1: left promiscuous mode
[ 1007.057430][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1007.064916][  T583] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.075323][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1007.084176][  T583] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.100889][  T583] veth1_macvtap: left promiscuous mode
[ 1007.107577][  T583] veth0_macvtap: left promiscuous mode
[ 1007.113169][  T583] veth1_vlan: left promiscuous mode
[ 1007.119143][  T583] veth0_vlan: left promiscuous mode
[ 1007.516430][  T583] team0 (unregistering): Port device team_slave_1 removed
[ 1007.550645][  T583] team0 (unregistering): Port device team_slave_0 removed
[ 1007.707595][ T5840] Bluetooth: hci3: command tx timeout
[ 1008.067926][ T7232] chnl_net:caif_netlink_parms(): no params data found
[ 1008.243018][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.250328][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.258119][ T7232] bridge_slave_0: entered allmulticast mode
[ 1008.268622][ T7232] bridge_slave_0: entered promiscuous mode
[ 1008.277443][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1008.287068][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.294532][ T7232] bridge_slave_1: entered allmulticast mode
[ 1008.304114][ T7232] bridge_slave_1: entered promiscuous mode
[ 1008.348878][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1008.362048][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1008.421418][ T7232] team0: Port device team_slave_0 added
[ 1008.431642][ T7232] team0: Port device team_slave_1 added
[ 1008.492807][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1008.500001][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1008.530189][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1008.543350][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1008.550771][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1008.578254][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1008.699891][ T7232] hsr_slave_0: entered promiscuous mode
[ 1008.717035][ T7232] hsr_slave_1: entered promiscuous mode
[ 1008.723434][ T7232] debugfs: 'hsr0' already exists in 'hsr'
[ 1008.746425][ T7232] Cannot create hsr debugfs directory
[ 1009.088252][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1009.107321][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1009.120046][ T7232] 8021q: adding VLAN 0 to HW filter on device team0
[ 1009.134233][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.141503][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1009.164331][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.171572][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1009.463849][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1009.786074][ T5840] Bluetooth: hci3: command tx timeout
[ 1009.808794][ T7232] veth0_vlan: entered promiscuous mode
[ 1009.824389][ T7232] veth1_vlan: entered promiscuous mode
[ 1009.878990][ T7232] veth0_macvtap: entered promiscuous mode
[ 1009.899464][ T7232] veth1_macvtap: entered promiscuous mode
[ 1009.943301][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1009.971978][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1010.088705][ T3952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1010.099096][ T3952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1010.144011][T29462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1010.152612][T29462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1010.805570][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1010.814377][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14611'.
[ 1010.826777][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1010.835664][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1010.868099][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1010.886092][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1010.895566][ T7285] netlink: 'syz.0.14611': attribute type 1 has an invalid length.
[ 1011.203636][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14614'.
[ 1011.876432][ T5840] Bluetooth: hci3: command tx timeout
[ 1012.750821][  T583] bridge_slave_1: left allmulticast mode
[ 1012.775838][  T583] bridge_slave_1: left promiscuous mode
[ 1012.793159][  T583] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.843574][  T583] bridge_slave_0: left allmulticast mode
[ 1012.856758][  T583] bridge_slave_0: left promiscuous mode
[ 1012.871048][ T7334] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.14624'.
[ 1012.876569][  T583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.987193][ T5840] Bluetooth: hci5: command tx timeout
[ 1013.539218][ T7349] netlink: 'syz.1.14630': attribute type 1 has an invalid length.
[ 1013.614084][  T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1013.628050][  T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1013.644979][  T583] bond0 (unregistering): Released all slaves
[ 1013.923575][ T7358] netlink: 'syz.1.14633': attribute type 9 has an invalid length.
[ 1013.932516][ T7358] netlink: 'syz.1.14633': attribute type 11 has an invalid length.
[ 1013.942805][ T7358] netlink: 'syz.1.14633': attribute type 12 has an invalid length.
[ 1013.951199][ T7358] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.14633'.
[ 1013.961194][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14633'.
[ 1014.008837][ T7283] chnl_net:caif_netlink_parms(): no params data found
[ 1014.538660][  T583] hsr_slave_0: left promiscuous mode
[ 1014.576464][  T583] hsr_slave_1: left promiscuous mode
[ 1014.582644][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.636766][  T583] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.657966][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.665861][  T583] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1014.706999][  T583] veth1_macvtap: left promiscuous mode
[ 1014.712558][  T583] veth0_macvtap: left promiscuous mode
[ 1014.726311][  T583] veth1_vlan: left promiscuous mode
[ 1014.731637][  T583] veth0_vlan: left promiscuous mode
[ 1015.069364][ T5840] Bluetooth: hci5: command tx timeout
[ 1015.782835][  T583] team0 (unregistering): Port device team_slave_1 removed
[ 1015.827720][  T583] team0 (unregistering): Port device team_slave_0 removed
[ 1016.059133][ T7386] netlink: 'syz.2.14645': attribute type 4 has an invalid length.
[ 1017.165415][ T5840] Bluetooth: hci5: command tx timeout
[ 1018.795137][ T7437] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14665'.
[ 1019.227895][ T5840] Bluetooth: hci5: command tx timeout
[ 1020.772866][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1020.805968][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.836028][ T7283] bridge_slave_0: entered allmulticast mode
[ 1020.880853][ T7283] bridge_slave_0: entered promiscuous mode
[ 1020.899972][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1020.915930][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.936990][ T7283] bridge_slave_1: entered allmulticast mode
[ 1020.945067][ T7283] bridge_slave_1: entered promiscuous mode
[ 1021.120428][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.146474][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1021.336970][ T7283] team0: Port device team_slave_0 added
[ 1021.345540][ T7283] team0: Port device team_slave_1 added
[ 1021.431183][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1021.450029][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1021.528348][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1021.539351][ T7474] netlink: 'syz.1.14681': attribute type 9 has an invalid length.
[ 1021.548120][ T7474] netlink: 'syz.1.14681': attribute type 11 has an invalid length.
[ 1021.559812][ T7474] netlink: 'syz.1.14681': attribute type 12 has an invalid length.
[ 1021.568511][ T7474] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.14681'.
[ 1021.608305][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14681'.
[ 1021.629012][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1021.645801][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1021.713959][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1021.736567][  T583] bridge_slave_1: left allmulticast mode
[ 1021.742269][  T583] bridge_slave_1: left promiscuous mode
[ 1021.756007][  T583] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.776812][  T583] bridge_slave_0: left allmulticast mode
[ 1021.782504][  T583] bridge_slave_0: left promiscuous mode
[ 1021.805498][  T583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.620980][  T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1022.682118][  T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1022.734190][  T583] bond0 (unregistering): Released all slaves
[ 1023.055039][ T7283] hsr_slave_0: entered promiscuous mode
[ 1023.062014][ T7283] hsr_slave_1: entered promiscuous mode
[ 1023.075196][ T7283] debugfs: 'hsr0' already exists in 'hsr'
[ 1023.082641][ T7283] Cannot create hsr debugfs directory
[ 1023.234139][ T7507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14702'.
[ 1023.474119][  T583] hsr_slave_0: left promiscuous mode
[ 1023.490117][  T583] hsr_slave_1: left promiscuous mode
[ 1023.509239][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1023.525832][  T583] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1023.542663][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1023.565869][  T583] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1023.615454][  T583] veth1_macvtap: left promiscuous mode
[ 1023.641831][  T583] veth0_macvtap: left promiscuous mode
[ 1023.664750][  T583] veth1_vlan: left promiscuous mode
[ 1023.680572][  T583] veth0_vlan: left promiscuous mode
[ 1025.081965][  T583] team0 (unregistering): Port device team_slave_1 removed
[ 1025.146319][  T583] team0 (unregistering): Port device team_slave_0 removed
[ 1025.813687][ T7578] netlink: 'syz.0.14714': attribute type 10 has an invalid length.
[ 1025.842242][ T7578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14714'.
[ 1025.965351][ T7578] ipvlan1: entered promiscuous mode
[ 1025.974948][ T7578] ipvlan1: entered allmulticast mode
[ 1025.981066][ T7578] veth0_vlan: entered allmulticast mode
[ 1026.005683][ T7578] bridge0: port 3(ipvlan1) entered blocking state
[ 1026.013463][ T7578] bridge0: port 3(ipvlan1) entered disabled state
[ 1026.037759][ T7578] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1026.302153][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.329459][ T7283] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.343500][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.350824][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1026.379205][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.386529][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1026.421864][ T7283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1026.437822][ T7283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1026.654656][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1026.961848][ T7283] veth0_vlan: entered promiscuous mode
[ 1026.975057][ T7283] veth1_vlan: entered promiscuous mode
[ 1027.024013][ T7283] veth0_macvtap: entered promiscuous mode
[ 1027.037775][ T7283] veth1_macvtap: entered promiscuous mode
[ 1027.063514][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1027.080726][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1027.194751][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1027.210905][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1027.262464][ T3953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1027.285890][ T3953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1027.421482][ T7601] netlink: 'syz.9.14607': attribute type 3 has an invalid length.
[ 1027.912484][ T7614] netlink: 'syz.0.14718': attribute type 21 has an invalid length.
[ 1030.772850][ T7634] netlink: 'syz.1.14729': attribute type 3 has an invalid length.
[ 1031.822306][ T7651] syzkaller0: entered promiscuous mode
[ 1031.840674][ T7651] syzkaller0: entered allmulticast mode
[ 1032.033918][ T7664] netlink: 'syz.0.14744': attribute type 3 has an invalid length.
[ 1033.291373][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1033.311949][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1033.322149][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1033.368933][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1033.385151][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1035.465959][ T5840] Bluetooth: hci0: command tx timeout
[ 1037.242473][ T3953] bridge_slave_1: left allmulticast mode
[ 1037.257692][ T3953] bridge_slave_1: left promiscuous mode
[ 1037.276077][ T3953] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1037.300019][ T3953] bridge_slave_0: left allmulticast mode
[ 1037.316368][ T3953] bridge_slave_0: left promiscuous mode
[ 1037.324452][ T3953] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1037.556981][ T5840] Bluetooth: hci0: command tx timeout
[ 1038.224189][ T3953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1038.266626][ T3953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1038.282583][ T3953] bond0 (unregistering): Released all slaves
[ 1038.312636][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1039.628125][ T5840] Bluetooth: hci0: command tx timeout
[ 1039.740967][ T7693] chnl_net:caif_netlink_parms(): no params data found
[ 1040.066519][ T3498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1040.357427][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.364826][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.372665][ T7693] bridge_slave_0: entered allmulticast mode
[ 1040.381278][ T7693] bridge_slave_0: entered promiscuous mode
[ 1040.392091][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.399876][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.417306][ T7693] bridge_slave_1: entered allmulticast mode
[ 1040.428167][ T7693] bridge_slave_1: entered promiscuous mode
[ 1041.263443][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1041.336090][ T3953] hsr_slave_0: left promiscuous mode
[ 1041.446852][ T3953] hsr_slave_1: left promiscuous mode
[ 1041.494234][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.555979][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.711667][ T5840] Bluetooth: hci0: command tx timeout
[ 1042.526983][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1042.534432][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1042.573708][ T3953] veth1_macvtap: left promiscuous mode
[ 1042.588668][ T3953] veth0_macvtap: left promiscuous mode
[ 1042.604907][ T3953] veth1_vlan: left promiscuous mode
[ 1042.611439][ T3953] veth0_vlan: left promiscuous mode
[ 1043.065145][ T7814] netlink: 182 bytes leftover after parsing attributes in process `syz.2.14792'.
[ 1043.581940][ T3953] team0 (unregistering): Port device team_slave_1 removed
[ 1043.696494][ T3953] team0 (unregistering): Port device team_slave_0 removed
[ 1043.977894][ T7824] netlink: 112 bytes leftover after parsing attributes in process `syz.2.14796'.
[ 1044.149869][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1044.262972][ T7806] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.14788'.
[ 1044.564921][ T7693] team0: Port device team_slave_0 added
[ 1044.599460][ T7693] team0: Port device team_slave_1 added
[ 1044.704951][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1044.756013][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1044.794689][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1044.813295][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1044.824572][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1044.855111][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1045.198192][ T7693] hsr_slave_0: entered promiscuous mode
[ 1045.215379][ T7693] hsr_slave_1: entered promiscuous mode
[ 1045.236572][ T7693] debugfs: 'hsr0' already exists in 'hsr'
[ 1045.257544][ T7693] Cannot create hsr debugfs directory
[ 1045.612030][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14807'.
[ 1045.940234][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1045.995986][ T7693] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.023831][T29462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.031042][T29462] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1046.069782][T29462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.077008][T29462] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1046.156859][ T7861] netlink: 'syz.0.14810': attribute type 9 has an invalid length.
[ 1046.600589][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1049.733033][ T7693] veth0_vlan: entered promiscuous mode
[ 1049.762944][ T7693] veth1_vlan: entered promiscuous mode
[ 1049.871507][ T7693] veth0_macvtap: entered promiscuous mode
[ 1049.897199][ T7693] veth1_macvtap: entered promiscuous mode
[ 1049.949939][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1049.992995][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.256926][T29462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.264803][T29462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1050.376384][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.407978][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.068171][ T7950] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.14839'.
[ 1051.117938][ T7950] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14839'.
[ 1054.244032][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14860'.
[ 1054.566493][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.574150][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.442465][ T8057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14881'.
[ 1057.479513][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1057.507912][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1057.525953][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1057.535076][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1057.544961][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1059.531252][ T8100] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.14907'.
[ 1059.538237][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14897'.
[ 1059.628448][ T5832] Bluetooth: hci4: command tx timeout
[ 1059.674876][  T583] bridge_slave_1: left allmulticast mode
[ 1059.682578][  T583] bridge_slave_1: left promiscuous mode
[ 1059.693433][  T583] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.720645][  T583] bridge_slave_0: left allmulticast mode
[ 1059.726952][  T583] bridge_slave_0: left promiscuous mode
[ 1059.732749][  T583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.956056][   T30] audit: type=1107 audit(1771647064.004:9): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1060.128273][ T8117] netlink: 'syz.9.14904': attribute type 4 has an invalid length.
[ 1060.144847][ T8117] netlink: 60939 bytes leftover after parsing attributes in process `syz.9.14904'.
[ 1060.282124][  T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1060.294984][  T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1060.316846][  T583] bond0 (unregistering): Released all slaves
[ 1061.024790][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14910'.
[ 1061.707820][ T5832] Bluetooth: hci4: command tx timeout
[ 1063.785972][ T5832] Bluetooth: hci4: command tx timeout
[ 1064.614185][ T8177] netlink: 'syz.4.14927': attribute type 1 has an invalid length.
[ 1064.622588][ T8177] netlink: 'syz.4.14927': attribute type 3 has an invalid length.
[ 1064.642496][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14927'.
[ 1065.865804][ T5832] Bluetooth: hci4: command tx timeout
[ 1069.720488][  T583] hsr_slave_0: left promiscuous mode
[ 1070.144071][  T583] hsr_slave_1: left promiscuous mode
[ 1070.187127][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1070.208024][  T583] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1070.236287][  T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1070.264088][  T583] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1070.370420][  T583] veth1_macvtap: left promiscuous mode
[ 1070.376567][  T583] veth0_macvtap: left promiscuous mode
[ 1070.382255][  T583] veth1_vlan: left promiscuous mode
[ 1070.399770][  T583] veth0_vlan: left promiscuous mode
[ 1071.261832][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1071.290633][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14957'.
[ 1071.533985][  T583] team0 (unregistering): Port device team_slave_1 removed
[ 1071.591072][  T583] team0 (unregistering): Port device team_slave_0 removed
[ 1071.906937][ T8082] chnl_net:caif_netlink_parms(): no params data found
[ 1072.306219][ T8282] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1073.856833][ T8273] netlink: 'syz.9.14965': attribute type 29 has an invalid length.
[ 1074.108752][ T5832] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1074.280459][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1074.309420][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.318096][ T8082] bridge_slave_0: entered allmulticast mode
[ 1074.326361][ T8082] bridge_slave_0: entered promiscuous mode
[ 1074.337501][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1074.346522][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.353788][ T8082] bridge_slave_1: entered allmulticast mode
[ 1074.362918][ T8082] bridge_slave_1: entered promiscuous mode
[ 1074.469419][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1074.532546][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1074.627083][ T8082] team0: Port device team_slave_0 added
[ 1074.684695][ T8082] team0: Port device team_slave_1 added
[ 1075.051179][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1075.059262][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.086406][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1075.121281][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1075.134069][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.161595][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1075.357185][ T8082] hsr_slave_0: entered promiscuous mode
[ 1075.384851][ T8082] hsr_slave_1: entered promiscuous mode
[ 1075.398605][ T8082] debugfs: 'hsr0' already exists in 'hsr'
[ 1075.406193][ T8082] Cannot create hsr debugfs directory
[ 1075.620861][ T5832] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 1076.296615][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1076.329647][ T8082] 8021q: adding VLAN 0 to HW filter on device team0
[ 1076.367880][  T583] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.375114][  T583] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1076.389489][  T583] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1076.396731][  T583] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1076.859674][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1077.277071][ T8082] veth0_vlan: entered promiscuous mode
[ 1077.331452][ T8082] veth1_vlan: entered promiscuous mode
[ 1078.133172][ T8412] wg2: entered promiscuous mode
[ 1078.148705][ T8412] wg2: entered allmulticast mode
[ 1078.209725][ T8082] veth0_macvtap: entered promiscuous mode
[ 1078.232777][ T8082] veth1_macvtap: entered promiscuous mode
[ 1078.255304][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1078.286734][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1078.485825][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1078.507763][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.586641][T26045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1078.617212][T26045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.620477][   T30] audit: type=1107 audit(1771647082.674:10): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1078.951445][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15029'.
[ 1078.970897][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15029'.
[ 1079.283375][ T8455] netlink: 132 bytes leftover after parsing attributes in process `syz.8.15034'.
[ 1079.434879][   T30] audit: type=1107 audit(1771647083.494:11): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1081.484075][   T30] audit: type=1107 audit(1771647085.544:12): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1084.401081][ T8542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15065'.
[ 1084.421246][   T30] audit: type=1107 audit(1771647088.484:13): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1084.753637][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1084.789073][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1084.824924][ T8549] netlink: 33 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1084.890749][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1084.943937][ T8549] netlink: 33 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1085.607545][   T30] audit: type=1107 audit(1771647089.654:14): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1085.700813][ T8588] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15080'.
[ 1087.007376][ T8612] sctp: [Deprecated]: syz.2.15088 (pid 8612) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1087.007376][ T8612] Use struct sctp_sack_info instead
[ 1087.303891][ T8620] netlink: 830 bytes leftover after parsing attributes in process `syz.9.15091'.
[ 1087.463495][ T8622] -1: renamed from syzkaller0
[ 1088.247688][ T8634] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.15097'.
[ 1089.518561][ T8661] netlink: 'syz.8.15109': attribute type 2 has an invalid length.
[ 1089.568359][ T8661] netlink: 164 bytes leftover after parsing attributes in process `syz.8.15109'.
[ 1089.591066][ T8663] netlink: 'syz.8.15109': attribute type 2 has an invalid length.
[ 1089.614617][ T8663] netlink: 164 bytes leftover after parsing attributes in process `syz.8.15109'.
[ 1089.907665][ T5832] Bluetooth: hci5: Unable to find connection for big 0x00
[ 1091.142595][ T8703] netlink: 'syz.2.15126': attribute type 4 has an invalid length.
[ 1094.210723][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15134'.
[ 1094.378838][ T8737] netlink: 60 bytes leftover after parsing attributes in process `syz.8.15136'.
[ 1094.566541][ T8745] netlink: 'syz.8.15140': attribute type 1 has an invalid length.
[ 1094.596206][ T8745] netlink: 'syz.8.15140': attribute type 4 has an invalid length.
[ 1094.604082][ T8745] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.15140'.
[ 1094.672700][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15141'.
[ 1095.115695][ T8760] netlink: 'syz.0.15146': attribute type 9 has an invalid length.
[ 1095.134211][ T8760] netlink: 'syz.0.15146': attribute type 11 has an invalid length.
[ 1095.142916][ T8760] netlink: 'syz.0.15146': attribute type 12 has an invalid length.
[ 1095.153283][ T8760] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.15146'.
[ 1095.168901][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15146'.
[ 1095.801539][   T30] audit: type=1107 audit(1771647099.864:15): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ècùn´nJ_#óãH6³­ wXÕu ˜í¦š='
[ 1096.005000][ T8796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15162'.
[ 1096.718155][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15170'.
[ 1096.868583][ T8821] netlink: 'syz.0.15174': attribute type 1 has an invalid length.
[ 1096.878088][ T8821] netlink: 'syz.0.15174': attribute type 4 has an invalid length.
[ 1096.887301][ T8821] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15174'.
[ 1098.643124][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15186'.
[ 1100.993332][ T8897] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15200'.
[ 1101.007911][ T8897] ksmbd: Unknown IPC event: 3, ignore.
[ 1102.286399][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1103.046194][ T8963] netlink: 'syz.2.15227': attribute type 10 has an invalid length.
[ 1104.683139][ T8990] netlink: 104 bytes leftover after parsing attributes in process `syz.8.15239'.
[ 1104.946925][ T8997] netlink: zone id is out of range
[ 1104.969113][ T8997] netlink: zone id is out of range
[ 1104.974648][ T8997] netlink: zone id is out of range
[ 1105.021305][ T8997] netlink: zone id is out of range
[ 1105.093031][ T8997] netlink: zone id is out of range
[ 1105.116485][ T8997] netlink: zone id is out of range
[ 1105.180008][ T8997] netlink: zone id is out of range
[ 1105.227364][ T8997] netlink: zone id is out of range
[ 1105.233632][ T8997] netlink: zone id is out of range
[ 1105.295206][ T8997] netlink: zone id is out of range
[ 1108.778728][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15263'.
[ 1110.589655][ T9094] netlink: 'syz.4.15275': attribute type 39 has an invalid length.
[ 1115.957277][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.977256][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.140322][ T9161] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15303'.
[ 1116.350640][ T9167] netlink: 'syz.4.15306': attribute type 1 has an invalid length.
[ 1116.374354][ T9167] netlink: 'syz.4.15306': attribute type 4 has an invalid length.
[ 1116.405469][ T9172] netlink: 'syz.4.15306': attribute type 1 has an invalid length.
[ 1116.418457][ T9167] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15306'.
[ 1116.490516][ T9172] netlink: 'syz.4.15306': attribute type 4 has an invalid length.
[ 1116.529026][ T9172] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15306'.
[ 1117.573484][ T9188] syzkaller0: entered promiscuous mode
[ 1118.026270][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[ 1121.020952][ T9195] net_ratelimit: 30 callbacks suppressed
[ 1121.020982][ T9195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1121.217451][ T9241] syz.2.15342: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1121.277890][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.2.15342 Not tainted syzkaller #0 PREEMPT(full) 
[ 1121.277922][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1121.277943][ T9241] Call Trace:
[ 1121.277962][ T9241]  <TASK>
[ 1121.277982][ T9241]  dump_stack_lvl+0xe8/0x150
[ 1121.278066][ T9241]  warn_alloc+0x249/0x340
[ 1121.278129][ T9241]  ? stack_trace_save+0xa9/0x100
[ 1121.278212][ T9241]  ? __pfx_warn_alloc+0x10/0x10
[ 1121.278346][ T9241]  ? kasan_save_track+0x4f/0x80
[ 1121.278376][ T9241]  ? kasan_save_track+0x3e/0x80
[ 1121.278404][ T9241]  ? __kasan_kmalloc+0x93/0xb0
[ 1121.278432][ T9241]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1121.278461][ T9241]  ? xskq_create+0x56/0x170
[ 1121.278504][ T9241]  ? xsk_setsockopt+0x603/0x990
[ 1121.278537][ T9241]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1121.278577][ T9241]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1121.278613][ T9241]  ? do_syscall_64+0x14d/0xf80
[ 1121.278703][ T9241]  __vmalloc_node_range_noprof+0x132/0x1730
[ 1121.279117][ T9241]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1121.279239][ T9241]  ? __kasan_kmalloc+0x93/0xb0
[ 1121.279360][ T9241]  vmalloc_user_noprof+0xad/0xe0
[ 1121.279413][ T9241]  ? xskq_create+0xbf/0x170
[ 1121.279485][ T9241]  xskq_create+0xbf/0x170
[ 1121.279579][ T9241]  xsk_init_queue+0x8a/0xe0
[ 1121.279671][ T9241]  xsk_setsockopt+0x603/0x990
[ 1121.279763][ T9241]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1121.279824][ T9241]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1121.279919][ T9241]  ? __fget_files+0x2a/0x420
[ 1121.279964][ T9241]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1121.280060][ T9241]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1121.280092][ T9241]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1121.280171][ T9241]  do_sock_setsockopt+0x17c/0x1b0
[ 1121.280287][ T9241]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1121.280406][ T9241]  do_syscall_64+0x14d/0xf80
[ 1121.280451][ T9241]  ? trace_irq_disable+0x3b/0x150
[ 1121.280490][ T9241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.280529][ T9241]  ? clear_bhb_loop+0x40/0x90
[ 1121.280610][ T9241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.280651][ T9241] RIP: 0033:0x7f755c39c629
[ 1121.280696][ T9241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1121.280714][ T9241] RSP: 002b:00007f755d323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1121.280736][ T9241] RAX: ffffffffffffffda RBX: 00007f755c615fa0 RCX: 00007f755c39c629
[ 1121.280751][ T9241] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[ 1121.280765][ T9241] RBP: 00007f755c432b39 R08: 0000000000000004 R09: 0000000000000000
[ 1121.280777][ T9241] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1121.280791][ T9241] R13: 00007f755c616038 R14: 00007f755c615fa0 R15: 00007ffcc8b86a58
[ 1121.281022][ T9241]  </TASK>
[ 1121.285061][ T9241] Mem-Info:
[ 1121.602450][ T9241] active_anon:15226 inactive_anon:0 isolated_anon:0
[ 1121.602450][ T9241]  active_file:20928 inactive_file:40678 isolated_file:0
[ 1121.602450][ T9241]  unevictable:768 dirty:253 writeback:0
[ 1121.602450][ T9241]  slab_reclaimable:12663 slab_unreclaimable:102956
[ 1121.602450][ T9241]  mapped:29218 shmem:1377 pagetables:4024
[ 1121.602450][ T9241]  sec_pagetables:0 bounce:0
[ 1121.602450][ T9241]  kernel_misc_reclaimable:0
[ 1121.602450][ T9241]  free:1273911 free_pcp:23901 free_cma:0
[ 1121.661456][ T9241] Node 0 active_anon:60904kB inactive_anon:0kB active_file:83712kB inactive_file:162508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22664kB dirty:1012kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12988kB pagetables:15932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1121.694523][ T9241] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94208kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1121.735516][ T9241] Node 0 DMA free:11224kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB
[ 1121.794353][ T9241] lowmem_reserve[]: 0 2493 2493 2493 2493
[ 1121.824656][ T9241] Node 0 DMA32 free:1387944kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60904kB inactive_anon:0kB active_file:83712kB inactive_file:162508kB unevictable:1536kB writepending:1012kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:46956kB local_pcp:26052kB free_cma:0kB
[ 1121.884137][ T9241] lowmem_reserve[]: 0 0 0 0 0
[ 1121.893648][ T9241] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[ 1121.933467][ T9241] lowmem_reserve[]: 0 0 0 0 0
[ 1121.939900][ T9241] Node 1 Normal free:3696468kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:48672kB local_pcp:23628kB free_cma:0kB
[ 1121.980119][ T9241] lowmem_reserve[]: 0 0 0 0 0
[ 1121.985171][ T9241] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11224kB
[ 1122.099899][ T9241] Node 0 DMA32: 1284*4kB (UME) 1281*8kB (UME) 3613*16kB (UME) 1535*32kB (UME) 1448*64kB (UME) 1201*128kB (UME) 806*256kB (UME) 459*512kB (UM) 319*1024kB (UME) 124*2048kB (UM) 0*4096kB = 1390664kB
[ 1122.127420][ T9256] netlink: 'syz.0.15346': attribute type 9 has an invalid length.
[ 1122.135409][ T9256] netlink: 'syz.0.15346': attribute type 11 has an invalid length.
[ 1122.143644][ T9241] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1122.157911][ T9256] netlink: 'syz.0.15346': attribute type 12 has an invalid length.
[ 1122.166581][ T9256] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.15346'.
[ 1122.176762][ T9241] Node 1 Normal: 7*4kB (U) 13*8kB (UME) 22*16kB (UME) 11*32kB (UME) 7*64kB (UM) 11*128kB (UM) 10*256kB (UME) 12*512kB (UME) 7*1024kB (UM) 8*2048kB (UE) 894*4096kB (UM) = 3696772kB
[ 1122.195495][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15346'.
[ 1122.209103][ T9241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1122.255186][ T9241] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1122.278713][ T9241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1122.303525][ T9241] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1122.324341][ T9241] 62980 total pagecache pages
[ 1122.334449][ T9241] 1 pages in swap cache
[ 1122.344551][ T9241] Free swap  = 124992kB
[ 1122.353580][ T9241] Total swap = 124996kB
[ 1122.394216][ T9241] 2097051 pages RAM
[ 1122.404227][ T9241] 0 pages HighMem/MovableOnly
[ 1122.433021][ T9241] 427002 pages reserved
[ 1122.439605][ T9241] 0 pages cma reserved
[ 1123.740588][ T9283] veth1_macvtap: left promiscuous mode
[ 1123.747088][ T9283] macsec0: entered promiscuous mode
[ 1123.825620][ T9283] veth1_macvtap: entered promiscuous mode
[ 1123.862534][ T9283] macsec0: entered allmulticast mode
[ 1123.897051][ T9283] veth1_macvtap: entered allmulticast mode
[ 1125.363155][ T9309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15369'.
[ 1125.508554][ T9314] netlink: 'syz.8.15373': attribute type 2 has an invalid length.
[ 1125.517384][ T9314] tipc: Started in network mode
[ 1125.522385][ T9314] tipc: Node identity ffffffff, cluster identity 4711
[ 1125.531476][ T9314] tipc: Node number set to 4294967295
[ 1125.680079][ T9318] mac80211_hwsim hwsim126 : renamed from wlan0 (while UP)
[ 1125.970971][ T9333] netlink: 'syz.0.15381': attribute type 1 has an invalid length.
[ 1125.979191][ T9333] netlink: 'syz.0.15381': attribute type 4 has an invalid length.
[ 1125.987962][ T9333] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15381'.
[ 1126.186257][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1126.195988][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1127.970985][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15392'.
[ 1128.001023][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15392'.
[ 1128.121868][ T9363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15393'.
[ 1128.698669][ T9379] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15398'.
[ 1128.752706][ T5840] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 1129.603254][ T5840] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[ 1130.696505][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15424'.
[ 1132.141540][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15434'.
[ 1132.173441][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15434'.
[ 1133.385947][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[ 1134.035106][ T3498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1136.287807][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1136.309206][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1136.330455][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1136.341942][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1136.356419][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1138.427732][ T5832] Bluetooth: hci3: command tx timeout
[ 1139.686245][ T9480] chnl_net:caif_netlink_parms(): no params data found
[ 1139.843167][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.850785][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.858212][ T9480] bridge_slave_0: entered allmulticast mode
[ 1139.867547][ T9480] bridge_slave_0: entered promiscuous mode
[ 1139.877081][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.884446][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.892527][ T9480] bridge_slave_1: entered allmulticast mode
[ 1139.901912][ T9480] bridge_slave_1: entered promiscuous mode
[ 1139.946703][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1139.960303][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1140.013492][ T9480] team0: Port device team_slave_0 added
[ 1140.023478][ T9480] team0: Port device team_slave_1 added
[ 1140.068357][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1140.083584][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1140.150002][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1140.178678][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1140.192700][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1140.222866][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1140.277032][ T9545] netlink: 'syz.0.15464': attribute type 2 has an invalid length.
[ 1140.285524][ T9545] netlink: 'syz.0.15464': attribute type 2 has an invalid length.
[ 1140.505938][ T5832] Bluetooth: hci3: command tx timeout
[ 1140.807534][ T9480] hsr_slave_0: entered promiscuous mode
[ 1140.815076][ T9480] hsr_slave_1: entered promiscuous mode
[ 1140.821798][ T9480] debugfs: 'hsr0' already exists in 'hsr'
[ 1140.840624][ T9480] Cannot create hsr debugfs directory
[ 1142.586731][ T5832] Bluetooth: hci3: command tx timeout
[ 1142.611855][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15470'.
[ 1142.632802][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1142.744448][ T9480] 8021q: adding VLAN 0 to HW filter on device team0
[ 1142.774910][T26045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1142.782164][T26045] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1142.818917][T26045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.826233][T26045] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1143.177936][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1143.369920][ T9582] bridge0: port 3(veth1_virt_wifi) entered blocking state
[ 1143.407575][ T9582] bridge0: port 3(veth1_virt_wifi) entered disabled state
[ 1143.416164][ T9582] veth1_virt_wifi: entered allmulticast mode
[ 1143.453536][ T9582] veth1_virt_wifi: left allmulticast mode
[ 1143.531597][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15476'.
[ 1143.949936][ T9600] openvswitch: netlink: ct_state flags 020000e0 unsupported
[ 1144.144811][ T9603] netlink: 'syz.2.15481': attribute type 10 has an invalid length.
[ 1144.155862][ T9603] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15481'.
[ 1144.495261][ T9480] veth0_vlan: entered promiscuous mode
[ 1144.542329][ T9480] veth1_vlan: entered promiscuous mode
[ 1144.628693][ T9480] veth0_macvtap: entered promiscuous mode
[ 1144.665843][ T5832] Bluetooth: hci3: command tx timeout
[ 1144.670017][ T9480] veth1_macvtap: entered promiscuous mode
[ 1144.694095][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1144.706434][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1144.760741][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15487'.
[ 1145.073267][ T9624] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1145.169967][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1145.195370][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1145.320292][  T583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1145.335793][  T583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1149.526207][ T9651] netlink: 'syz.0.15498': attribute type 8 has an invalid length.
[ 1149.526472][ T5885] infiniband syz2: ib_query_port failed (-19)
[ 1149.534073][ T9651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15498'.
[ 1150.090697][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15517'.
[ 1151.246710][ T9728] netlink: 'syz.0.15528': attribute type 10 has an invalid length.
[ 1153.738903][ T9728] batman_adv: batadv0: Adding interface: wlan0
[ 1153.745138][ T9728] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1153.788123][ T9728] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[ 1154.016017][ T9737] netlink: 'syz.0.15532': attribute type 2 has an invalid length.
[ 1154.060637][ T9737] : entered promiscuous mode
[ 1154.665650][ T9769] netlink: 'syz.2.15546': attribute type 13 has an invalid length.
[ 1154.674642][ T9769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15546'.
[ 1154.775788][ T9769] syz_tun: refused to change device tx_queue_len
[ 1154.782773][ T9769] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1154.869165][ T9773] netlink: 'syz.6.15548': attribute type 49 has an invalid length.
[ 1155.838117][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15555'.
[ 1155.905301][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15555'.
[ 1156.209232][ T5832] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10
[ 1157.018372][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1157.415230][ T9808] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10
[ 1157.456950][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15569'.
[ 1157.526119][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15569'.
[ 1157.560356][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15569'.
[ 1157.596954][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15569'.
[ 1157.818226][ T9833] pim6reg1: entered allmulticast mode
[ 1157.852458][ T9839] netlink: 'syz.4.15577': attribute type 10 has an invalid length.
[ 1157.891446][ T9839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15577'.
[ 1158.075949][ T9839] batadv0: entered promiscuous mode
[ 1158.081240][ T9839] batadv0: entered allmulticast mode
[ 1158.095537][ T9839] bridge0: port 3(batadv0) entered blocking state
[ 1158.116324][ T9839] bridge0: port 3(batadv0) entered disabled state
[ 1158.130080][ T9839] bridge0: port 3(batadv0) entered blocking state
[ 1158.136744][ T9839] bridge0: port 3(batadv0) entered forwarding state
[ 1158.265932][ T9808] Bluetooth: hci3: command tx timeout
[ 1158.512918][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15581'.
[ 1158.536139][  T583] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1158.545400][  T583] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1158.631986][ T9860] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.15582'.
[ 1159.081078][ T9808] Bluetooth: hci0: command 0x0406 tx timeout
[ 1159.476989][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[ 1160.642598][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15591'.
[ 1160.673084][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15591'.
[ 1160.932352][ T9891] netlink: 'syz.0.15596': attribute type 1 has an invalid length.
[ 1161.030252][ T9896] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.15598'.
[ 1161.250502][ T9902] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1161.259164][ T9902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1161.266580][ T9902] IPv6: NLM_F_CREATE should be set when creating new route
[ 1161.324949][ T9904] netlink: 'syz.4.15602': attribute type 21 has an invalid length.
[ 1161.366107][ T9904] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15602'.
[ 1161.411354][ T9904] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15602'.
[ 1162.128260][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15617'.
[ 1162.390400][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15621'.
[ 1162.411449][ T9947] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1162.820840][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15625'.
[ 1163.368222][ T9979] netlink: 'syz.0.15636': attribute type 39 has an invalid length.
[ 1164.137750][ T9999] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.15644'.
[ 1164.158600][ T9998] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1164.194791][ T9998] syzkaller0: entered promiscuous mode
[ 1164.453200][T10001] syzkaller0: entered promiscuous mode
[ 1164.475924][T10001] syzkaller0: entered allmulticast mode
[ 1164.955021][ T3498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1165.505463][T10031] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15659'.
[ 1170.407536][T10070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15668'.
[ 1173.164435][T10121] netlink: 830 bytes leftover after parsing attributes in process `syz.0.15685'.
[ 1173.338694][ T3498] bridge0: port 3(batadv0) entered disabled state
[ 1173.349373][ T3498] bridge_slave_1: left allmulticast mode
[ 1173.378279][ T3498] bridge_slave_1: left promiscuous mode
[ 1173.384129][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1173.452539][ T3498] bridge_slave_0: left allmulticast mode
[ 1173.462247][ T3498] bridge_slave_0: left promiscuous mode
[ 1173.471021][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.909654][ T9808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1173.926911][ T9808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1173.935192][ T9808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1173.944405][ T9808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1173.955200][ T9808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1174.643956][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1174.718996][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1174.749835][ T3498] bond0 (unregistering): Released all slaves
[ 1174.970346][T10137] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1174.996592][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15696'.
[ 1175.008338][T10137] syzkaller0: linktype set to 769
[ 1175.018041][T10138] syzkaller0: tun_chr_ioctl cmd 2148553947
[ 1175.367017][ T9808] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 1175.577940][T10150] syzkaller0: entered promiscuous mode
[ 1175.588644][T10150] syzkaller0: entered allmulticast mode
[ 1175.656289][ T3498] hsr_slave_0: left promiscuous mode
[ 1175.665772][T10165] netlink: 'syz.6.15703': attribute type 10 has an invalid length.
[ 1175.673829][ T3498] hsr_slave_1: left promiscuous mode
[ 1175.673907][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15703'.
[ 1175.691582][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1175.701074][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1175.718716][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1175.727340][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1175.911955][ T3498] veth1_macvtap: left promiscuous mode
[ 1175.920704][ T3498] veth0_macvtap: left promiscuous mode
[ 1175.935836][ T3498] veth1_vlan: left promiscuous mode
[ 1175.948331][ T3498] veth0_vlan: left promiscuous mode
[ 1176.199913][ T9808] Bluetooth: hci0: command tx timeout
[ 1176.951943][ T3498] team0 (unregistering): Port device team_slave_1 removed
[ 1176.980922][ T3498] team0 (unregistering): Port device team_slave_0 removed
[ 1177.402111][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.416523][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.267391][ T9808] Bluetooth: hci0: command tx timeout
[ 1179.175277][T10165] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1179.185563][T10165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1179.359392][T10174] netlink: 'syz.2.15707': attribute type 11 has an invalid length.
[ 1179.712476][T10135] chnl_net:caif_netlink_parms(): no params data found
[ 1179.910688][T10193] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15712'.
[ 1180.033977][T10185] syzkaller0: entered promiscuous mode
[ 1180.054922][T10185] syzkaller0: entered allmulticast mode
[ 1180.345933][ T9808] Bluetooth: hci0: command tx timeout
[ 1180.499173][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1180.508937][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1180.517669][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1180.527891][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1180.535601][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1180.768535][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15718'.
[ 1182.426042][ T5832] Bluetooth: hci0: command tx timeout
[ 1182.565271][ T3498] bridge_slave_1: left allmulticast mode
[ 1182.573875][ T3498] bridge_slave_1: left promiscuous mode
[ 1182.580111][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.588167][ T5832] Bluetooth: hci5: command tx timeout
[ 1182.610890][ T3498] bridge_slave_0: left allmulticast mode
[ 1182.616906][ T3498] bridge_slave_0: left promiscuous mode
[ 1182.623382][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1182.838675][T10247] netlink: 'syz.0.15728': attribute type 13 has an invalid length.
[ 1182.859257][T10247] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15728'.
[ 1183.092129][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1183.110715][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1183.122817][ T3498] bond0 (unregistering): Released all slaves
[ 1183.149341][T10135] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.158351][T10135] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1183.180408][T10135] bridge_slave_0: entered allmulticast mode
[ 1183.195202][T10135] bridge_slave_0: entered promiscuous mode
[ 1183.207780][T10135] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.215133][T10135] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.222635][T10135] bridge_slave_1: entered allmulticast mode
[ 1183.230724][T10135] bridge_slave_1: entered promiscuous mode
[ 1183.252112][T10247] syz_tun: refused to change device tx_queue_len
[ 1183.261691][T10247] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1183.294112][ T3498] tipc: Left network mode
[ 1183.362285][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1183.438847][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1183.482053][T10257] netlink: 'syz.0.15733': attribute type 6 has an invalid length.
[ 1183.516762][T10257] netlink: 'syz.0.15733': attribute type 7 has an invalid length.
[ 1183.526722][T10257] netlink: 'syz.0.15733': attribute type 8 has an invalid length.
[ 1183.580786][T10260] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.15740'.
[ 1183.682335][T10135] team0: Port device team_slave_0 added
[ 1183.691815][T10135] team0: Port device team_slave_1 added
[ 1183.770762][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1183.795297][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1183.876346][T10271] netlink: 'syz.6.15737': attribute type 21 has an invalid length.
[ 1183.885918][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.159386][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.180565][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1184.214535][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1184.422035][ T3498] hsr_slave_0: left promiscuous mode
[ 1184.439743][ T3498] hsr_slave_1: left promiscuous mode
[ 1184.453020][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1184.469166][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1184.488042][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1184.503266][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1184.541154][ T3498] veth1_macvtap: left promiscuous mode
[ 1184.553867][ T3498] veth0_macvtap: left promiscuous mode
[ 1184.573992][ T3498] veth1_vlan: left promiscuous mode
[ 1184.585041][ T3498] veth0_vlan: left promiscuous mode
[ 1184.665738][ T5832] Bluetooth: hci5: command tx timeout
[ 1185.171830][ T3498] team0 (unregistering): Port device team_slave_1 removed
[ 1185.214775][ T3498] team0 (unregistering): Port device team_slave_0 removed
[ 1185.320983][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15745'.
[ 1185.475175][T10135] hsr_slave_0: entered promiscuous mode
[ 1185.495837][T10135] hsr_slave_1: entered promiscuous mode
[ 1185.513790][T10135] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.523331][T10135] Cannot create hsr debugfs directory
[ 1185.596334][T10202] chnl_net:caif_netlink_parms(): no params data found
[ 1185.854550][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.869356][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.880382][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.891683][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.902373][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.912511][T10305] netlink: 'syz.6.15750': attribute type 39 has an invalid length.
[ 1185.919208][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.942057][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.966476][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.978465][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1185.990187][T10303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1186.745835][ T5832] Bluetooth: hci5: command tx timeout
[ 1188.827836][ T5832] Bluetooth: hci5: command tx timeout
[ 1189.078608][T10202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.097792][T10202] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1189.109939][T10202] bridge_slave_0: entered allmulticast mode
[ 1189.126345][T10202] bridge_slave_0: entered promiscuous mode
[ 1189.179637][T10202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.198560][T10202] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1189.216036][T10202] bridge_slave_1: entered allmulticast mode
[ 1189.231140][T10202] bridge_slave_1: entered promiscuous mode
[ 1189.321730][T10202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1189.349294][T10202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1189.434692][T10202] team0: Port device team_slave_0 added
[ 1189.453906][T10202] team0: Port device team_slave_1 added
[ 1189.568932][T10202] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1189.576730][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1189.630950][T10202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1189.647644][T10202] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1189.654746][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1189.690050][T10202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1189.730248][T10334] bridge0: port 3(syz_tun) entered blocking state
[ 1189.742401][T10334] bridge0: port 3(syz_tun) entered disabled state
[ 1189.749701][T10334] syz_tun: entered allmulticast mode
[ 1189.762473][T10334] syz_tun: entered promiscuous mode
[ 1189.769593][T10334] bridge0: port 3(syz_tun) entered blocking state
[ 1189.776398][T10334] bridge0: port 3(syz_tun) entered forwarding state
[ 1189.871539][T10202] hsr_slave_0: entered promiscuous mode
[ 1189.879510][T10202] hsr_slave_1: entered promiscuous mode
[ 1189.891489][T10202] debugfs: 'hsr0' already exists in 'hsr'
[ 1189.898399][T10202] Cannot create hsr debugfs directory
[ 1190.277391][ T5832] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[ 1190.443492][T10135] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1190.601480][T10135] 8021q: adding VLAN 0 to HW filter on device team0
[ 1190.648628][T29459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1190.655865][T29459] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1190.767461][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1190.774635][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1191.044762][T10202] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1191.108832][T10202] 8021q: adding VLAN 0 to HW filter on device team0
[ 1191.146081][T29459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1191.153324][T29459] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1191.208778][T29461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1191.216046][T29461] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1191.358115][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1191.785265][T10202] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1191.905927][T10377] netlink: 220 bytes leftover after parsing attributes in process `syz.2.15770'.
[ 1192.426771][T10403] netlink: 4832 bytes leftover after parsing attributes in process `syz.6.15776'.
[ 1192.713568][T10400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1192.722855][T10400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1193.173319][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1193.227975][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1193.674183][T10135] veth0_vlan: entered promiscuous mode
[ 1193.731239][T10135] veth1_vlan: entered promiscuous mode
[ 1193.784563][ T5832] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11
[ 1193.862828][T10202] veth0_vlan: entered promiscuous mode
[ 1193.911781][T10135] veth0_macvtap: entered promiscuous mode
[ 1193.929825][T10202] veth1_vlan: entered promiscuous mode
[ 1193.951452][T10135] veth1_macvtap: entered promiscuous mode
[ 1194.024740][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1194.062713][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1194.115602][T10202] veth0_macvtap: entered promiscuous mode
[ 1194.151457][T10202] veth1_macvtap: entered promiscuous mode
[ 1194.303284][T10202] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1194.391484][T10202] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1194.468925][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.496817][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.621250][T29459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.656929][T29459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.770197][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.801168][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.882427][T26045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.891314][T26045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1195.439044][T10449] syzkaller0: entered promiscuous mode
[ 1195.444586][T10449] syzkaller0: entered allmulticast mode
[ 1195.718395][T10469] netlink: 'syz.3.15795': attribute type 16 has an invalid length.
[ 1195.727068][T10469] netlink: 'syz.3.15795': attribute type 17 has an invalid length.
[ 1195.882950][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1199.270388][ T5832] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[ 1200.424772][T10462] syzkaller0: entered promiscuous mode
[ 1200.430418][T10462] syzkaller0: entered allmulticast mode
[ 1200.449906][T10469] net_ratelimit: 14501 callbacks suppressed
[ 1200.449919][T10469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1204.622371][T10572] IPv6: Can't replace route, no match found
[ 1204.737516][ T5832] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1204.870425][T10583] netlink: 'syz.2.15839': attribute type 39 has an invalid length.
[ 1205.057750][T10587] netlink: 'syz.6.15841': attribute type 4 has an invalid length.
[ 1205.105768][T10587] netlink: 152 bytes leftover after parsing attributes in process `syz.6.15841'.
[ 1205.134112][T10591] netlink: 388 bytes leftover after parsing attributes in process `syz.3.15842'.
[ 1205.517309][T10587] .`: renamed from bond0
[ 1205.732529][T10598] netlink: 'syz.3.15846': attribute type 10 has an invalid length.
[ 1205.789366][T10602] netlink: 'syz.2.15848': attribute type 11 has an invalid length.
[ 1205.843091][T10598] team0: Device vxcan1 is of different type
[ 1205.918514][T10606] netlink: 100 bytes leftover after parsing attributes in process `syz.6.15850'.
[ 1205.947672][T10606] netlink: 100 bytes leftover after parsing attributes in process `syz.6.15850'.
[ 1206.399499][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15857'.
[ 1206.408731][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15857'.
[ 1215.007760][T10677] -1: renamed from syzkaller0
[ 1215.988576][T10718] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1216.006108][T10718] syzkaller0: entered promiscuous mode
[ 1216.042934][T10718] syzkaller0: entered allmulticast mode
[ 1217.616697][T10759] netlink: 'syz.6.15904': attribute type 10 has an invalid length.
[ 1217.652491][T10759] batman_adv: batadv0: Adding interface: wlan0
[ 1217.676780][T10759] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1217.743185][T10759] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[ 1220.097669][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15921'.
[ 1220.133938][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15921'.
[ 1220.166266][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15921'.
[ 1220.175406][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15921'.
[ 1221.403833][ T9808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1221.415080][ T9808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1221.426695][ T9808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1221.438460][ T9808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1221.449121][ T9808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1222.081749][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15936'.
[ 1222.091162][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15936'.
[ 1222.302897][T10847] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0xfe ref_ctr_offset(new): 0x0
[ 1222.729500][ T5832] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[ 1223.545864][ T5832] Bluetooth: hci4: command tx timeout
[ 1224.665487][T10875] netlink: 'syz.0.15947': attribute type 39 has an invalid length.
[ 1224.695207][T26045] bridge_slave_1: left allmulticast mode
[ 1224.713148][T26045] bridge_slave_1: left promiscuous mode
[ 1224.718885][T10879] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1224.735029][T26045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1224.752033][T26045] bridge_slave_0: left allmulticast mode
[ 1224.765317][T26045] bridge_slave_0: left promiscuous mode
[ 1224.787282][T26045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1225.239414][T26045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1225.259834][T26045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1225.289366][T26045] bond0 (unregistering): Released all slaves
[ 1225.626639][ T5832] Bluetooth: hci4: command tx timeout
[ 1225.880447][T10907] netlink: 'syz.0.15962': attribute type 10 has an invalid length.
[ 1226.071944][T26045] hsr_slave_0: left promiscuous mode
[ 1226.089720][T26045] hsr_slave_1: left promiscuous mode
[ 1226.101185][T26045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1226.129994][T26045] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1226.516169][T26045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1226.525142][T26045] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1226.540160][T26045] veth1_macvtap: left promiscuous mode
[ 1226.558544][T26045] veth0_macvtap: left promiscuous mode
[ 1226.574347][T26045] veth1_vlan: left promiscuous mode
[ 1226.615947][T26045] veth0_vlan: left promiscuous mode
[ 1226.621442][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15970'.
[ 1226.641347][T10924] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15970'.
[ 1226.829107][T10928] netlink: 'syz.2.15973': attribute type 2 has an invalid length.
[ 1226.877639][T10930] netlink: 'syz.3.15972': attribute type 39 has an invalid length.
[ 1227.710833][ T9808] Bluetooth: hci4: command tx timeout
[ 1228.108128][T26045] team0 (unregistering): Port device team_slave_1 removed
[ 1228.149122][T26045] team0 (unregistering): Port device team_slave_0 removed
[ 1228.632567][T10829] chnl_net:caif_netlink_parms(): no params data found
[ 1228.825846][ T9808] Bluetooth: hci1: command 0x0406 tx timeout
[ 1229.160561][  T583] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1229.294970][T10829] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1229.310782][T10829] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1229.333731][T10829] bridge_slave_0: entered allmulticast mode
[ 1229.372864][T10829] bridge_slave_0: entered promiscuous mode
[ 1229.393882][T10829] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1229.409352][T10829] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1229.432927][T10829] bridge_slave_1: entered allmulticast mode
[ 1229.455421][T10829] bridge_slave_1: entered promiscuous mode
[ 1229.612253][T10829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1229.642182][T10829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1229.718039][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15990'.
[ 1229.772724][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15990'.
[ 1229.787166][T10829] team0: Port device team_slave_0 added
[ 1229.803356][ T5832] Bluetooth: hci4: command tx timeout
[ 1229.811714][T10829] team0: Port device team_slave_1 added
[ 1229.916618][T10829] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1229.955100][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1230.076564][T10829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1230.119228][T10983] netlink: 'syz.6.15994': attribute type 39 has an invalid length.
[ 1230.134097][T10829] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1230.161163][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1230.192106][T10829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1233.111200][T10829] hsr_slave_0: entered promiscuous mode
[ 1233.122752][T10829] hsr_slave_1: entered promiscuous mode
[ 1233.131306][T10829] debugfs: 'hsr0' already exists in 'hsr'
[ 1233.137921][T10829] Cannot create hsr debugfs directory
[ 1233.500063][ T5832] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[ 1233.779292][T11011] syzkaller0: entered promiscuous mode
[ 1233.805700][T11011] syzkaller0: entered allmulticast mode
[ 1234.523077][T11034] netlink: 'syz.3.16012': attribute type 9 has an invalid length.
[ 1234.538894][T11034] netlink: 'syz.3.16012': attribute type 11 has an invalid length.
[ 1234.553136][T11034] netlink: 'syz.3.16012': attribute type 12 has an invalid length.
[ 1234.561782][T11034] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.16012'.
[ 1234.572321][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16012'.
[ 1236.740729][T26045] bridge_slave_1: left allmulticast mode
[ 1236.746805][T26045] bridge_slave_1: left promiscuous mode
[ 1236.752718][T26045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1236.762864][T26045] bridge_slave_0: left allmulticast mode
[ 1236.795806][T26045] bridge_slave_0: left promiscuous mode
[ 1236.801999][T26045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1237.093894][T11070] netlink: 'syz.2.16025': attribute type 10 has an invalid length.
[ 1237.126929][T26045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1237.139048][T26045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1237.159202][T26045] bond0 (unregistering): Released all slaves
[ 1237.179211][T11049] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.16018'.
[ 1237.229609][T11067] syzkaller0: entered promiscuous mode
[ 1237.235344][T11067] syzkaller0: entered allmulticast mode
[ 1239.723844][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.730913][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.016717][T10829] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1240.089961][T10829] 8021q: adding VLAN 0 to HW filter on device team0
[ 1240.160683][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1240.167928][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1240.238505][T26045] hsr_slave_0: left promiscuous mode
[ 1240.260582][T26045] hsr_slave_1: left promiscuous mode
[ 1240.271351][T26045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1240.310465][T26045] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1240.343831][T26045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1240.365771][T26045] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1240.391231][T26045] veth1_macvtap: left promiscuous mode
[ 1240.397467][T26045] veth0_macvtap: left promiscuous mode
[ 1240.405876][T26045] veth1_vlan: left promiscuous mode
[ 1240.411219][T26045] veth0_vlan: left promiscuous mode
[ 1241.578348][T26045] team0 (unregistering): Port device team_slave_1 removed
[ 1241.613308][T26045] team0 (unregistering): Port device team_slave_0 removed
[ 1241.884747][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.892346][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1241.940674][T11106] mac80211_hwsim hwsim135 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1242.147596][T10829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1242.159037][T10829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1242.283852][T11144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1242.695538][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1243.090372][T11177] netlink: 'syz.2.16059': attribute type 10 has an invalid length.
[ 1243.268668][ T5832] Bluetooth: hci0: unknown advertising packet type: 0x07
[ 1243.353915][T11177] batman_adv: batadv0: Adding interface: wlan0
[ 1243.383159][T11177] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1243.414022][T11177] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[ 1243.662134][T11198] netlink: 'syz.6.16071': attribute type 2 has an invalid length.
[ 1243.773933][T10829] veth0_vlan: entered promiscuous mode
[ 1243.846605][T10829] veth1_vlan: entered promiscuous mode
[ 1243.957375][T10829] veth0_macvtap: entered promiscuous mode
[ 1244.074533][T10829] veth1_macvtap: entered promiscuous mode
[ 1244.210188][T10829] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1244.280099][T10829] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1244.670881][ T3952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1244.691346][ T3952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1244.737864][  T583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1244.752845][  T583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1245.602767][T11241] netlink: 'syz.6.16087': attribute type 13 has an invalid length.
[ 1245.612395][T11241] gretap0: refused to change device tx_queue_len
[ 1245.621468][T11241] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1245.649245][T11241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1245.946272][T29461] wlan1: Trigger new scan to find an IBSS to join
[ 1246.192469][T11252] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1246.440093][T11253] syzkaller0: entered promiscuous mode
[ 1246.467238][T11253] syzkaller0: entered allmulticast mode
[ 1247.381208][ T5832] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[ 1249.068274][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1249.472723][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[ 1249.778795][ T9808] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[ 1249.913532][T11309] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[ 1249.916475][ T9808] ==================================================================
[ 1249.931532][ T9808] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2a0
[ 1249.939139][ T9808] Write of size 4 at addr ffff88809126c010 by task kworker/u9:0/9808
[ 1249.947245][ T9808] 
[ 1249.949623][ T9808] CPU: 0 UID: 0 PID: 9808 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1249.949647][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1249.949662][ T9808] Workqueue: hci2 hci_cmd_sync_work
[ 1249.949698][ T9808] Call Trace:
[ 1249.949709][ T9808]  <TASK>
[ 1249.949720][ T9808]  dump_stack_lvl+0xe8/0x150
[ 1249.949751][ T9808]  print_report+0xba/0x230
[ 1249.949777][ T9808]  ? hci_conn_drop+0x34/0x2a0
[ 1249.949796][ T9808]  kasan_report+0x117/0x150
[ 1249.949826][ T9808]  ? hci_conn_drop+0x34/0x2a0
[ 1249.949858][ T9808]  kasan_check_range+0x264/0x2c0
[ 1249.949886][ T9808]  hci_conn_drop+0x34/0x2a0
[ 1249.949905][ T9808]  ? __pfx_le_read_features_complete+0x10/0x10
[ 1249.949937][ T9808]  hci_cmd_sync_work+0x262/0x400
[ 1249.949971][ T9808]  ? process_scheduled_works+0xa25/0x1830
[ 1249.950000][ T9808]  process_scheduled_works+0xb02/0x1830
[ 1249.950068][ T9808]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1249.950102][ T9808]  ? assign_work+0x3d5/0x5e0
[ 1249.950134][ T9808]  worker_thread+0xa50/0xfc0
[ 1249.950194][ T9808]  kthread+0x388/0x470
[ 1249.950215][ T9808]  ? __pfx_worker_thread+0x10/0x10
[ 1249.950240][ T9808]  ? __pfx_kthread+0x10/0x10
[ 1249.950262][ T9808]  ret_from_fork+0x51e/0xb90
[ 1249.950292][ T9808]  ? __pfx_ret_from_fork+0x10/0x10
[ 1249.950317][ T9808]  ? __switch_to+0xc7d/0x1450
[ 1249.950346][ T9808]  ? __pfx_kthread+0x10/0x10
[ 1249.950367][ T9808]  ret_from_fork_asm+0x1a/0x30
[ 1249.950413][ T9808]  </TASK>
[ 1249.950420][ T9808] 
[ 1250.094227][ T9808] Allocated by task 9808:
[ 1250.098570][ T9808]  kasan_save_track+0x3e/0x80
[ 1250.103267][ T9808]  __kasan_kmalloc+0x93/0xb0
[ 1250.107905][ T9808]  __kmalloc_cache_noprof+0x31c/0x660
[ 1250.113295][ T9808]  __hci_conn_add+0x3c4/0x1e00
[ 1250.118164][ T9808]  le_conn_complete_evt+0x706/0x1430
[ 1250.123607][ T9808]  hci_le_enh_conn_complete_evt+0x189/0x490
[ 1250.129627][ T9808]  hci_event_packet+0x7af/0x12c0
[ 1250.134588][ T9808]  hci_rx_work+0x3ee/0x1030
[ 1250.139119][ T9808]  process_scheduled_works+0xb02/0x1830
[ 1250.144684][ T9808]  worker_thread+0xa50/0xfc0
[ 1250.149292][ T9808]  kthread+0x388/0x470
[ 1250.153376][ T9808]  ret_from_fork+0x51e/0xb90
[ 1250.157994][ T9808]  ret_from_fork_asm+0x1a/0x30
[ 1250.162825][ T9808] 
[ 1250.165163][ T9808] Freed by task 11309:
[ 1250.169239][ T9808]  kasan_save_track+0x3e/0x80
[ 1250.173932][ T9808]  kasan_save_free_info+0x46/0x50
[ 1250.178978][ T9808]  __kasan_slab_free+0x5c/0x80
[ 1250.183778][ T9808]  kfree+0x1c1/0x630
[ 1250.187706][ T9808]  device_release+0x9e/0x1d0
[ 1250.192320][ T9808]  kobject_put+0x228/0x560
[ 1250.196761][ T9808]  hci_conn_del+0xc36/0x1230
[ 1250.201371][ T9808]  hci_disconn_complete_evt+0x64e/0x950
[ 1250.206940][ T9808]  hci_event_packet+0x805/0x12c0
[ 1250.211899][ T9808]  hci_rx_work+0x3ee/0x1030
[ 1250.216427][ T9808]  process_scheduled_works+0xb02/0x1830
[ 1250.221994][ T9808]  worker_thread+0xa50/0xfc0
[ 1250.226607][ T9808]  kthread+0x388/0x470
[ 1250.230700][ T9808]  ret_from_fork+0x51e/0xb90
[ 1250.235394][ T9808]  ret_from_fork_asm+0x1a/0x30
[ 1250.240185][ T9808] 
[ 1250.242524][ T9808] The buggy address belongs to the object at ffff88809126c000
[ 1250.242524][ T9808]  which belongs to the cache kmalloc-8k of size 8192
[ 1250.256675][ T9808] The buggy address is located 16 bytes inside of
[ 1250.256675][ T9808]  freed 8192-byte region [ffff88809126c000, ffff88809126e000)
[ 1250.270497][ T9808] 
[ 1250.272844][ T9808] The buggy address belongs to the physical page:
[ 1250.279276][ T9808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888091268000 pfn:0x91268
[ 1250.289379][ T9808] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1250.297985][ T9808] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1250.306518][ T9808] page_type: f5(slab)
[ 1250.310561][ T9808] raw: 00fff00000000240 ffff88813fea9280 ffffea0001fb6610 ffffea0002601410
[ 1250.319168][ T9808] raw: ffff888091268000 0000000000020001 00000000f5000000 0000000000000000
[ 1250.327865][ T9808] head: 00fff00000000240 ffff88813fea9280 ffffea0001fb6610 ffffea0002601410
[ 1250.336640][ T9808] head: ffff888091268000 0000000000020001 00000000f5000000 0000000000000000
[ 1250.345422][ T9808] head: 00fff00000000003 ffffea0002449a01 00000000ffffffff 00000000ffffffff
[ 1250.354114][ T9808] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1250.362798][ T9808] page dumped because: kasan: bad access detected
[ 1250.369236][ T9808] page_owner tracks the page as allocated
[ 1250.374967][ T9808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10357, tgid 10356 (syz.6.15767), ts 1190689026274, free_ts 1190647110151
[ 1250.398264][ T9808]  post_alloc_hook+0x231/0x280
[ 1250.403076][ T9808]  get_page_from_freelist+0x24dc/0x2580
[ 1250.408726][ T9808]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1250.414557][ T9808]  allocate_slab+0x77/0x660
[ 1250.419086][ T9808]  refill_objects+0x331/0x3c0
[ 1250.423791][ T9808]  __pcs_replace_empty_main+0x2b9/0x620
[ 1250.429365][ T9808]  __kmalloc_noprof+0x474/0x760
[ 1250.434241][ T9808]  bpf_test_init+0x9f/0x150
[ 1250.438773][ T9808]  bpf_prog_test_run_xdp+0x529/0x1160
[ 1250.444170][ T9808]  bpf_prog_test_run+0x2c7/0x340
[ 1250.449133][ T9808]  __sys_bpf+0x643/0x950
[ 1250.453400][ T9808]  __x64_sys_bpf+0x7c/0x90
[ 1250.457842][ T9808]  do_syscall_64+0x14d/0xf80
[ 1250.462465][ T9808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1250.468381][ T9808] page last free pid 29459 tgid 29459 stack trace:
[ 1250.474904][ T9808]  __free_frozen_pages+0xc2b/0xdb0
[ 1250.480047][ T9808]  __slab_free+0x263/0x2b0
[ 1250.484488][ T9808]  qlist_free_all+0x97/0x100
[ 1250.489099][ T9808]  kasan_quarantine_reduce+0x148/0x160
[ 1250.494661][ T9808]  __kasan_slab_alloc+0x22/0x80
[ 1250.499532][ T9808]  kmem_cache_alloc_node_noprof+0x384/0x690
[ 1250.505460][ T9808]  __alloc_skb+0x1d0/0x7d0
[ 1250.509903][ T9808]  rtmsg_ifinfo_build_skb+0x84/0x260
[ 1250.515208][ T9808]  rtmsg_ifinfo+0x8c/0x1a0
[ 1250.519645][ T9808]  netif_state_change+0x297/0x3a0
[ 1250.524690][ T9808]  __linkwatch_run_queue+0x572/0x840
[ 1250.530003][ T9808]  linkwatch_event+0x4c/0x60
[ 1250.534622][ T9808]  process_scheduled_works+0xb02/0x1830
[ 1250.540195][ T9808]  worker_thread+0xa50/0xfc0
[ 1250.544904][ T9808]  kthread+0x388/0x470
[ 1250.548999][ T9808]  ret_from_fork+0x51e/0xb90
[ 1250.553621][ T9808] 
[ 1250.555960][ T9808] Memory state around the buggy address:
[ 1250.561614][ T9808]  ffff88809126bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1250.569840][ T9808]  ffff88809126bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1250.577914][ T9808] >ffff88809126c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1250.585992][ T9808]                          ^
[ 1250.590627][ T9808]  ffff88809126c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1250.598706][ T9808]  ffff88809126c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1250.606867][ T9808] ==================================================================
[ 1250.617886][ T3953] wlan1: Trigger new scan to find an IBSS to join
[ 1250.625501][ T9808] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1250.632736][ T9808] CPU: 0 UID: 0 PID: 9808 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1250.642223][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1250.652315][ T9808] Workqueue: hci2 hci_cmd_sync_work
[ 1250.657573][ T9808] Call Trace:
[ 1250.660882][ T9808]  <TASK>
[ 1250.663848][ T9808]  vpanic+0x56c/0xa60
[ 1250.667889][ T9808]  ? __pfx_vpanic+0x10/0x10
[ 1250.672455][ T9808]  panic+0xc5/0xd0
[ 1250.676228][ T9808]  ? __pfx_panic+0x10/0x10
[ 1250.680688][ T9808]  ? preempt_schedule_thunk+0x16/0x30
[ 1250.686118][ T9808]  ? preempt_schedule_thunk+0x16/0x30
[ 1250.691551][ T9808]  ? hci_conn_drop+0x34/0x2a0
[ 1250.696262][ T9808]  check_panic_on_warn+0x89/0xb0
[ 1250.701241][ T9808]  ? hci_conn_drop+0x34/0x2a0
[ 1250.705952][ T9808]  end_report+0x73/0x180
[ 1250.710245][ T9808]  ? hci_conn_drop+0x34/0x2a0
[ 1250.714965][ T9808]  kasan_report+0x128/0x150
[ 1250.719534][ T9808]  ? hci_conn_drop+0x34/0x2a0
[ 1250.724261][ T9808]  kasan_check_range+0x264/0x2c0
[ 1250.729261][ T9808]  hci_conn_drop+0x34/0x2a0
[ 1250.733800][ T9808]  ? __pfx_le_read_features_complete+0x10/0x10
[ 1250.740011][ T9808]  hci_cmd_sync_work+0x262/0x400
[ 1250.745022][ T9808]  ? process_scheduled_works+0xa25/0x1830
[ 1250.750792][ T9808]  process_scheduled_works+0xb02/0x1830
[ 1250.756418][ T9808]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1250.762484][ T9808]  ? assign_work+0x3d5/0x5e0
[ 1250.767123][ T9808]  worker_thread+0xa50/0xfc0
[ 1250.771794][ T9808]  kthread+0x388/0x470
[ 1250.775914][ T9808]  ? __pfx_worker_thread+0x10/0x10
[ 1250.781076][ T9808]  ? __pfx_kthread+0x10/0x10
[ 1250.785705][ T9808]  ret_from_fork+0x51e/0xb90
[ 1250.790344][ T9808]  ? __pfx_ret_from_fork+0x10/0x10
[ 1250.795490][ T9808]  ? __switch_to+0xc7d/0x1450
[ 1250.800220][ T9808]  ? __pfx_kthread+0x10/0x10
[ 1250.804833][ T9808]  ret_from_fork_asm+0x1a/0x30
[ 1250.809642][ T9808]  </TASK>
[ 1250.812842][ T9808] Kernel Offset: disabled
[ 1250.817169][ T9808] Rebooting in 86400 seconds..