last executing test programs:

6m34.238649302s ago: executing program 0 (id=103):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0x20048b4}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB="10000000191411"], 0x10}}, 0x40000)
sendmsg$nl_xfrm(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x8040)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31f50000000900010073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f00000002c0)=r6, 0x8) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f00000002c0)=r6, 0x8)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000200)="ea6c73025dca5ad23dcfb08ac2bf162e8288a8672566eca104b9afe1855da4b09e98f81acbb6e05a323b03dbf94093fc96de9e9954", &(0x7f00000002c0)=""/159, &(0x7f0000000500)="51c25e9b6d4b783227a197c4dd2187ddfa74349032024fb7de9e4c0833a68998c39196eb9ececb562dd317ba27f534ea3688d538f108e6363c0737fb11ab0d5da3cf5b178ce47c41810356b6f7d145575f479eac561674a48f90f9dd487bbae265", &(0x7f0000000580)="f8f6f0cd926470456e54e7957ee5f4b520217c57511f483e9efaad08dca1a2cab0b570737cd3fa00636c53108eefbb3cf18565c7bd4794f73e4c084981e10549159e40c7f363ab5f8d425142792f728d616c2133f69ca7623f48c4ca8e9af3c94770644178ae498dc1dc24cb7b6d0b9befd0", 0x6, r6}, 0x38)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a09040000000000000000020000005c0004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a320000000008000140000000001c0001800900010068617368000000000c00028008000740000000010900010073797a30000000000900020073797a3200005f6d3c93e9cae6d9010000000000000000000000000a"], 0xb0}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a09040000000000000000020000005c0004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a320000000008000140000000001c0001800900010068617368000000000c00028008000740000000010900010073797a30000000000900020073797a3200005f6d3c93e9cae6d9010000000000000000000000000a"], 0xb0}}, 0x0)

6m33.494031058s ago: executing program 0 (id=105):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000002"], 0x30}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x5, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r5, r1, 0x35, 0x10, 0x0, @void, @value=r1}, 0x20)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

6m33.090377121s ago: executing program 0 (id=108):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r1 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={0xffffffffffffffff, 0x0}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x9, 0x8, 0x8, 0x4}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x2, 0x80}, 0xb13, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000037000701fefffffffedbdf25047c00000c0009"], 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})

6m32.577252371s ago: executing program 0 (id=114):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140c, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x7, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'vlan1\x00', @local})
r6 = socket$netlink(0x10, 0x3, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
r7 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010)
recvmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001380)="ff", 0x1}], 0x1, &(0x7f00000017c0)=ANY=[], 0x11f0}, 0x4000844)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f0000000ac0)=""/4084, 0xff4}, {&(0x7f0000000240)=""/132, 0x84}], 0x3}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3fa, 0x200, 0x70bd27, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

6m30.39935997s ago: executing program 0 (id=123):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x0, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x6, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffa, 0xa, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x5, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff0000010003"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)
sendmsg$kcm(r2, 0x0, 0x0)
r4 = getpid()
r5 = perf_event_open(0x0, r4, 0x8, r1, 0xa)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/15], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0x29, 0x7, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x8310}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x6a, 0x6e, 0x0, 0x0)
fstat(r5, &(0x7f0000000240))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x32)
sendmsg$nl_generic(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1210002}, 0xc, &(0x7f0000000140)={0x0}}, 0x840)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

6m29.334817847s ago: executing program 0 (id=131):
syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x62, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0x200400fc)
recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100)
sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="cdaba99e64", 0x5}, {&(0x7f0000000040)}, {&(0x7f0000000080)="d83497c9d6", 0x5}], 0x3}, 0x20000800)

6m28.512695105s ago: executing program 32 (id=131):
syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x62, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0x200400fc)
recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100)
sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="cdaba99e64", 0x5}, {&(0x7f0000000040)}, {&(0x7f0000000080)="d83497c9d6", 0x5}], 0x3}, 0x20000800)

5m17.892159037s ago: executing program 1 (id=654):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0xb8}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)='|', 0x1}], 0x1}, 0x8c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5m17.436223953s ago: executing program 1 (id=660):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1a, 0x3, &(0x7f0000001380)=ANY=[@ANYRESDEC, @ANYRESDEC=r1], &(0x7f0000001200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, r1}, 0x94)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000400700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000280070002"], 0xe0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000090)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x13)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x32}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0280ebff03000080000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

5m16.556309794s ago: executing program 1 (id=666):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000880), 0x12) (async)
write$cgroup_pid(r1, &(0x7f0000000880), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000880), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x44}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

5m16.384064912s ago: executing program 1 (id=667):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080007401b0000010800044000040000080002400000000e08000640fffffff80900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)
r5 = openat$cgroup_pressure(r3, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000017000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5m16.105136537s ago: executing program 1 (id=672):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000200002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)

5m13.543777217s ago: executing program 1 (id=687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x1, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8e30, 0x63}, 0x110, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x3, 0x98, 0x0, 0xffffffffffffffff, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x800000000020}, r2, 0xffffffffffffffff, r3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x1, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xfc, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180b0000000000001000000010000000f417280e83f787d10e60db9c136184e5bde9eb4ad4020000000000000000"], 0x0, 0x2a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x0, 0xa, 0x200}, 0x10}, 0x94)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmsg$NFT_BATCH(r0, 0x0, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)

4m58.518491661s ago: executing program 33 (id=687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x1, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8e30, 0x63}, 0x110, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x3, 0x98, 0x0, 0xffffffffffffffff, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x800000000020}, r2, 0xffffffffffffffff, r3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x1, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xfc, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180b0000000000001000000010000000f417280e83f787d10e60db9c136184e5bde9eb4ad4020000000000000000"], 0x0, 0x2a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x0, 0xa, 0x200}, 0x10}, 0x94)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmsg$NFT_BATCH(r0, 0x0, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)

21.206698514s ago: executing program 3 (id=3204):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000cdda4f6ae7cab08b000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0506, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_config_ext={0x7, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x228782, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r4, 0xff04, 0x0)
socket$kcm(0x10, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50)
socket$kcm(0x10, 0xa, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9000, 0x1, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0200002100010000000000010019e7ef108012e5ac54000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000190211"], 0x27c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a18100", 0x14}, {&(0x7f0000000040)="1f000000d835c95d6795d147", 0xc}], 0x2}, 0x40000)

20.554093393s ago: executing program 3 (id=3212):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0xf4}}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03076003008cb89e17f086dd", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

19.878947186s ago: executing program 3 (id=3217):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f34, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51d8, 0x0, @perf_config_ext={0xb26, 0x8000000000000001}, 0x3938, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92340, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000, 0xffffffff}, 0x50)
r1 = getpid()
perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x9, 0xc, 0x5, 0x81, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7ff}, 0x108286, 0x174, 0xffff8819, 0x1, 0x1400000000000000, 0x401, 0x4, 0x0, 0x1, 0x0, 0x100000001}, r1, 0xffffffffffffffff, r0, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@get={0x130, 0x13, 0x800, 0x70bd25, 0x25dfdbfe, {{'sha1\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x1f9d}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x1d466c5}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x130}, 0x1, 0x0, 0x0, 0x20004094}, 0x4080)

19.143535851s ago: executing program 3 (id=3226):
r0 = syz_clone(0x20000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="f64a49354968ad3a39ea26fcdcc4eaf3cf329084530785e3d4ac59d580926a532e04de54d852a4f5dd4bab122457d82bbbfbd3bd4ccaf7dfc3ac175e141652d3b76f7c143f8f5b4e84339adee99629af15a443729c32ab61cb3213674e2d28b51a077f5aaf55492cd61f800299a90083dad01bf3eeca7fd846fcdf88e909b70d6f0a44773e48a8c763cdeb4c861ddcc0071bfc4c1ac66e053755be546fbca103bce7d674f4e7edc178bfe4")
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000140), 0x0}, 0x20)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x5, 0x5811c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000000040)={0x28, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x402}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000860}, 0x40080)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
unlink(&(0x7f0000000200)='./cgroup\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000500014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0xc220, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0xd731}, 0x12043, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r10, 0x0, 0x0, 0x0}, 0x30)

18.655481082s ago: executing program 3 (id=3230):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x800) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={0x0, 0x14}}, 0x4000) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fffffff, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a3100000000050500050002000000050004000100000011000300687a73683a69702c706f72740000000036bd9d7d0a4aa1a347883714788ed21034689707f4ac060f8febb4451dbbc9eeb1e20d67e61455fbbb1e4b493545544ff94447ed6829502ea3394f2c0d9cc5a53e6b7030e0e067"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

18.323133825s ago: executing program 3 (id=3233):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x8000000}}, {0xc}}}]}]}, 0x44}}, 0x0) (async, rerun: 64)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xc8, 0x7, 0x0, 0x0, 0x0, 0x5, 0x40069, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffc, 0x2, @perf_bp={0x0, 0x7}, 0x400d, 0x0, 0x5, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x800, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000a780)=@newtaction={0x48, 0x31, 0x103, 0x2, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x2000c888)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe80, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r8, &(0x7f00000005c0)="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", &(0x7f0000000700)=""/121, 0x4}, 0x20)

4.132539054s ago: executing program 2 (id=3299):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x18, 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffbf}, 0x2160)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x2, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xb8}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x884)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e4000000020201020000000000000000070000070800094000000007b80003802c00018014000300fe80000000000000000000000000001914000400ff0100000000000000000000000000011400018008000100ac1414bb08000200ac1e000106000340000200002c000180140003002001000000000000000000000000000214000400200100000000000000000000000000002c00018014000300fe80000000000000000000000000001814000400fc0000000000000000000000000000001400018008000100ffffffff08000200ffffffff06c2000740000500000600074000010000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
close(0x3)

2.483371249s ago: executing program 5 (id=3310):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0xffffff7e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000600)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000000880)=""/4087, 0x41000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r2, r1, 0x0, 0x4, &(0x7f0000000200)='GPL\x00'}, 0x30)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400090000007000fcffffff0500"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000048c0)={0x101c, 0x22, 0x100, 0x70bd29, 0x25dfdbfb, {0xc}, [@typed={0x8, 0x45, 0x0, 0x0, @pid=r2}, @generic="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"]}, 0x101c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40890)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x10)
fstat(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000003800)=""/158, 0x9e}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000240)=""/109, 0x6d}], 0x8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

2.363813415s ago: executing program 2 (id=3311):
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, 0x0, 0xff1f)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x3, 0x4, 0x1, 0xb, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0xc, 0x9, 0x2, 0xffffffffffffffc0, 0x10}, @call={0x85, 0x0, 0x0, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x1, 0xbd, &(0x7f0000000200)=""/189, 0x41100, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x92, 0x9}, 0x10, 0x72f7, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000060079fddc0200000023c5ae9a78894f02", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0xd)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async)
setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, 0x0, 0xff1f) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x3, 0x4, 0x1, 0xb, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0xc, 0x9, 0x2, 0xffffffffffffffc0, 0x10}, @call={0x85, 0x0, 0x0, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x1, 0xbd, &(0x7f0000000200)=""/189, 0x41100, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x92, 0x9}, 0x10, 0x72f7, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000060079fddc0200000023c5ae9a78894f02", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x5, 0xd) (async)

2.293616141s ago: executing program 4 (id=3312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x4044044)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004041}, 0x20008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000018000103fefffffff9dbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000)
r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x81, 0x40, 0x9, 0x2, 0x0, 0x0, 0x624eca3e49a6a41d, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x14400, 0x4, 0x10001, 0x4, 0xd, 0x7, 0x140, 0x0, 0x4, 0x0, 0x100}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xcf, &(0x7f0000000500)=""/207}, 0x94)
r4 = socket$kcm(0xa, 0x5, 0x0)
close(0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100)=r5, 0x120)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x81)

2.156738759s ago: executing program 5 (id=3313):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4120}, 0x20) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000dc000000000000007ceb9ae4f6116a61d67394ce5913f546ae09340c4d8120354b97bf4ce192f0a61b3fda4623660d0a0ad518e2a72e11bc4a9eef646044d510d903ffc8dff6"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x3, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0xa4ff) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) (async)
sendmsg$inet(r4, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000) (async)
ioctl$SIOCSIFHWADDR(r0, 0x89a1, 0x0)

1.976047211s ago: executing program 6 (id=3314):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x6b)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2f76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x238}, 0x1, 0x0, 0x0, 0x40084}, 0x8000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008104e00f80ecdb4cb9f207c804a01000000088080efb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

1.975643904s ago: executing program 2 (id=3315):
getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2000001946}, 0x100, 0x9, 0x0, 0x6, 0x1, 0x7fffffff, 0xfffb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000003b0001002abd7008fbdbdf65077b2b1c045ac2b900000020cc54a48f9a8de951aa3d1f36b7441edc85ff8c969c2a9cb95a894e184811e969bb4ac3168be44483f1a2c8a775d1fec12f981d2ccba6c9f9a9640bef3ce300eb2eae175f3efcf554f11aa8fe2e99ea81b2a48f93d0f8864c1687f0e54997777e81e7026e3c0127e2dbf81194e9562432da8f2174f0c7063eaa314a1b69c6ef708bbdcd5bafdf5b607a5aef6e"], 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x10)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x89c67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={0x0, 0xa}, 0x1001c0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff00000000fdfffdff850000002700000018010000646c6c2500000000002020207b1af8ff0000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet(0x2, 0x2, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x3, 0x220104, 0xb, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)="b7", &(0x7f0000000380), 0x2, r4}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000dc0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r4}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000130a01010000000000becd441d136b73fc98e523a6326cf8e09c390d86ce3ed3ecbeb6ecc08a16e2fcf379b598f1caff16b0d72876a9840cb0eff443d8e26b3bc61542b6a013003c0008005a75676c56e06edd3a524d8c3f18e63270fcb564795e33b5d0b00d521159f792e647b51bb8affae0036dfdefafc59e7e746b85311be5762508000340000000060900020073797a3000000000080003400000000700"/176], 0xb0}}, 0x4080)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10)

1.859883026s ago: executing program 6 (id=3316):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802"], 0x0, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000004c0)=r2}, 0x20)
r5 = getpid()
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x80)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0x818)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100020, 0x0)
r9 = perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, <r10=>0x0}, 0x8)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x18, &(0x7f0000001b80)=ANY=[@ANYBLOB="180000000100000000633c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000e13b080010000000850000003600000018280000", @ANYRES32=r4, @ANYBLOB="0000000003000000bf9100b70200000100000000000000be3de2f7b689950005d3c54df8d9a2b93f1f27b3d68d8cb32b141628e2237956751c90bad51766ed59073ae6b3cc60c5ef466d6675cc190c6872a30300000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xe9, &(0x7f0000001a80)=""/233, 0x41100, 0x8, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r8, r4, r8, r8, r3], &(0x7f0000000780)=[{0x3, 0x5, 0xa, 0x7}, {0x3, 0x3, 0x8}, {0x0, 0x5, 0x6}, {0x3, 0x5, 0x1, 0x3}], 0x10, 0x8}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xe, &(0x7f00000022c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, r10, r11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x18)

1.859385537s ago: executing program 4 (id=3317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000001b40), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x1, 0x0, 0x4, 0x800, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x7, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10050, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x13fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xc008910)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00@\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="9fcf7f606f8a6384121f235ca2cee917a745e27b6f3c57f9e2fc74c71ae155dfd0b1bb618b48", @ANYRES32=r5, @ANYBLOB="0000000082040000cc7af8ff0100000018500000050000000000000000000000184b0000f8ffffff0000000000000000186000000e000000000000000400000018220000", @ANYRES32, @ANYBLOB="00000000fbffffff84bb000004000000185b00000c00"/32], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)

1.754213508s ago: executing program 2 (id=3318):
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) (rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0xc000)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x0, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=r4, @ANYBLOB="020000000100"/28], 0x50) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe50f, 0x0, @perf_config_ext={0x2000000000000000, 0xfffffffffffffffc}, 0x0, 0xe87, 0x2, 0x2, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x100, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x401, 0x147ae14, 0x7e, 0x8, 0x81}, 0x2, 0x0, 0x403, 0x6, 0x80000001, 0x12, 0x1a, 0xc, 0x6, 0x7b1b, {0x9, 0x6c2c, 0x1ab2, 0x3, 0x2, 0x72d}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x80)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000600))

1.695936267s ago: executing program 5 (id=3319):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540), 0x0, 0xae, 0x0, 0x0, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xaa, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x0, 0x0}, 0x10) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) (async, rerun: 64)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x10041c, 0x0, 0xfffffffe, 0x6, 0x5, 0x4, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff002b510000830200000000000045"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x1}, 0x94) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x98, 0x0, 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='1\x00'/12, @ANYRES32, @ANYBLOB="4ee311e9fc9e59dad9b54bd1f12beea9c99c1a72bc3c6697d53c087fb1d04633d9cc7e5339a4aba9f53688baf72b2637a7d12e325f257d86e1f75f9f56a1d29b33", @ANYRES64], 0x20) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) (rerun: 64)
r6 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
socket$inet6(0xa, 0x80000, 0x9b20) (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000002800)="c1188e19b95d02ff4284860186dd", 0x0, 0x254, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (rerun: 64)

1.61183881s ago: executing program 6 (id=3320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x10, 0x8, 0x0, 0x8400}, 0x50)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket(0x1, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x3c}}, 0x4004000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x60, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x9300, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180090388bad0000000000000000000081194c00000000000000000000000000a8e9759500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, 0x0, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x64, 0x1, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7272}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3be}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40400d1)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x43, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6fb}, @func={0x85, 0x0, 0x1, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc802}}, @exit, @exit, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xffffffffffffffc0}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r6 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000540)="63537071622ae64a3a23cb8672d04fcb3694d658e5bac900bd71a7c56ef2cd214cf36d51cf02def8a5aece7f44f95ba6dab40ca2954fb308add96ccb66072423076f04edbab7300b30c22d9fbe90bea2f1526aa510aa90b1b1d1f0bcbf4747190aa1ea36c77fcd2fd2d5a959bd7e1f48aadabf692dbfd113ae1adb9d27e680c22f017c887f9480d6eb1ad3a9af685d926975f2bab1ac31e0a7ceb6648297d4e1204391ab190b791cec1bb3cab4ec03d3e9ce660ebd9f2461", &(0x7f0000000600)=""/50, &(0x7f0000000640)="171c4dec2afd6f21ca53aa11ba5d90906e6fdb6f1f2dac56037dc40d6279cc18c19dfbc98c7a63ff35b4a4bf599ccbc25878eb797e88e591c2e64f55d7b5ce0027791cd30fa1ac2963f24428df7de161f78079f29837fed4d51662568b145f5a6823e659ad51eda3f49f4c82a522ec9af1a332e3e78e512b3b81235153fd4795", &(0x7f00000006c0)="9b2e5103f8af1ddd3594c21c322f9ddb0afba4c5310b13808da0b955b3538ccca442c65280c05e8d833b028dd042ca93bb609d25ca8c33c1e171acd33f079dae40dccd0801ea5661371498cd158c59566e1fdcc70fb6334411f55083c0ac61465e99ee3d09b30453fd7b9561d06ae5fbf3fc04f436cd8bec9a3f6ed40a462c24d31a812db93d4f92a3ecd15df1ddd432347bc969a42d37107d711e0b", 0x0, r0}, 0x38)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x9a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)
sendmsg$sock(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}, {&(0x7f0000001440)="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", 0x48f}], 0x2}, 0x4008000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ad5c7268f1e8", 0x6}, {&(0x7f0000000380)="81d3cd94ae91ee11c14a9137a6f904f57508ca3334edb466e184fa69aa37af0d67bc6c105c52b1614f7e013fd44756b6d9781b98e10b5b45730da2682543dc647b54", 0x42}], 0x2, 0x0, 0x0, 0x10000000}, 0x40)
sendmsg$kcm(r3, 0x0, 0x8840)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf092578220", 0x0, 0x8c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1.394886652s ago: executing program 5 (id=3321):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10001, 0x2, 0x2, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200000000000008}, 0x883, 0x6, 0x6, 0x8, 0x10000043fe, 0x54a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffe926}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0xe, 0x0, 0x0, 0x4, 0x0, 0x4}]}, {0x0, [0x76, 0x30, 0x5f, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000640)=""/79, 0x2d, 0x4f, 0x1, 0x4d94}, 0x28)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000801)
r3 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200)=r6, 0x4)
sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854)
recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x40000122)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000001c0)=r7, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x20000000000000fc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x40086602, 0x110e22fffa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002e1ff0000000000440000009500000000000000d4b3f0ff010000009500000b00000000b804cb005d6b1f13b9e89a23ab89b9fe3b979b3c57c037f39c10401f486d9c1503ce0dae8453041b2cbc936f000e82d5070000001ed8ce897759dbb4f560744cd956cacd2e0b835ea8fae225c9e8c50b5fb18001a33389d36c1b5ced94e09d0af93ea662"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0xa7, &(0x7f00000006c0)=""/167, 0x41100, 0x40, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x2, 0x3, 0x2}, 0x10, 0x54ef, 0xffffffffffffffff, 0x1, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r7, r7, r9, r10], &(0x7f0000000a80)=[{0x3, 0x3, 0x0, 0xb}], 0x10, 0x1}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r11=>0xffffffffffffffff})
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

1.393482241s ago: executing program 2 (id=3322):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}}, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf25047c00000404004680040008006507eee5"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c00018006000600894f"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.168087342s ago: executing program 6 (id=3323):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@ethernet={0x6, @multicast}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

1.131727336s ago: executing program 2 (id=3324):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x4201, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, 0x0, 0x0, 0x8}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2ffc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
r7 = openat$cgroup_subtree(r5, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000710091e0090893b3520ba54a07"], 0xfe33)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.128623283s ago: executing program 4 (id=3325):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x0, 0x2, 0x1, 0x4, 0x7, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xc}, 0x94) (async)
r0 = socket$kcm(0xa, 0x3, 0x106)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000000010500000000000000000007000002140005800f00010073616e652d32303030300000140005800f0001006e657462696f732d6e730000739900a7a2ce087de148ba2b0b80425b1b72a465585292c3a59cbcf38abc5d47cced69556f70e7fc55ce61abd517ed83b9606f0d622b595d939ed33ab9447cba16374871e7322a1e259a9932a50866ac83b580e98c9c8949ce"], 0x3c}, 0x1, 0x0, 0x0, 0x88}, 0x4000080)

899.831295ms ago: executing program 4 (id=3326):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)

871.580492ms ago: executing program 6 (id=3327):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000140000b47352352402969100"/28], 0x50) (rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="829a550de4131e000000000000009aff0000b837", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r6, 0x0, &(0x7f0000000300)=""/50}, 0x20) (async, rerun: 32)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (rerun: 32)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, [@alu={0x7, 0x1, 0xb, 0x1, 0x6, 0xfffffffffffffff8, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc967}, @call={0x85, 0x0, 0x0, 0x46}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1b5, 0x99, &(0x7f0000000340)=""/153, 0x41000, 0x14, '\x00', r4, @fallback=0xa, r7, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x1, 0x0, 0xfffffffb}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r6, r8], &(0x7f0000000700)=[{0x3, 0x3, 0xb, 0x6}], 0x10, 0xcd}, 0x94) (async, rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x4, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x31e8, 0x3, 0x0, 0xa, 0x20, 0x0, 0x5c, r4}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {0xfffffffe}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'tgr192\x00'}, 0x0, 0x40000000}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async, rerun: 32)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async, rerun: 32)
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (rerun: 32)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x8004b706, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

709.711293ms ago: executing program 4 (id=3328):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x23)

429.583676ms ago: executing program 6 (id=3329):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000db31500000000000000000018000000e5020000000000e20000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2, 0x0, 0x84)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1801000021004e751078c2701e2b22ac845817010000000000ffdbdf25fc020000000000000000000100000001fe80000000010000000000000000003a63ec196e91b174e8270020256c9440d9000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="00000000000000002c001300fe880000000000000000000000000001ffffffff000000000000000000000000000000000a0000009c001100fc020000000000000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e0a010100000000000000000000000000330000000435000002000200ff010000000000000000000000000001fe880000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20044001}, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x23, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x3, 0x106)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000004c0000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc020)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = getpid()
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x400000200000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x400, 0x2, 0xfffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x73, 0x0}, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

383.15128ms ago: executing program 5 (id=3330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100000001)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x22, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x17}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffeffff}}, @generic={0xee, 0x7, 0x9, 0xb, 0x81}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x6, 0x800, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000440)=[{0xffffff21, 0x5, 0x3, 0xb}, {0x4, 0x3, 0x7, 0x3}, {0x2, 0x3, 0xc, 0xa}], 0x10, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000540)=r4, 0x4) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r5}, 0x8)
recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000680)=""/16, 0x10}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/159, 0x9f}], 0x4, &(0x7f00000008c0)=""/66, 0x42}, 0x10122) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r6, &(0x7f00000009c0), 0x2, 0x0) (async)
r7 = perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x3, 0x6b, 0x1, 0x1, 0x0, 0x0, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1, 0x2}, 0x5, 0x8000, 0x2, 0x1, 0x2, 0x6, 0x0, 0x0, 0x78, 0x0, 0x9}, 0x0, 0xc, r1, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000a80)='hugetlb.2MB.rsvd.usage_in_bytes\x00')
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000ac0)=r2, 0x4) (async)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4ce}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x20008011) (async)
r8 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c40)={r8, r7, 0x0, 0x6, &(0x7f0000000c00)='{(%#{\x00'}, 0x30) (async)
write$cgroup_subtree(r1, &(0x7f0000000c80)={[{0x2b, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'rlimit'}]}, 0x15) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r4, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e40)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000e80)=[0x0], &(0x7f0000000ec0)=[0x0], 0x0, 0x4b, &(0x7f0000000f00)=[{}], 0x8, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x5, &(0x7f0000000cc0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x1, 0x4, 0x4, 0x40, 0xffffffffffffffff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000d00)='GPL\x00', 0xfff, 0xcb, &(0x7f0000000d40)=""/203, 0x40f00, 0x0, '\x00', r9, 0x25, r1, 0x8, &(0x7f0000001140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x3, 0x3, 0x58de, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000011c0)=[{0x1, 0x4, 0x8, 0x5}, {0x4, 0x4, 0x6, 0xa}, {0x2, 0x1, 0xf, 0xb}], 0x10, 0x3667}, 0x94) (async)
openat$cgroup_type(r1, &(0x7f00000012c0), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x140b, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x1)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r1}, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000001440)='net_prio.ifpriomap\x00')
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000025c0)={&(0x7f0000001480)="f4cb", &(0x7f00000014c0)=""/60, &(0x7f0000001500)="ade1bcf73b4c09994c9105b66b0bc3d557eafeab51413f645639dff5fe705950d62c960aa4cbe20c385b67f31115b0d07a4b0b92e5381c6b233a1ff9cf7fa3539f508d133035eae6e11db516921ccd797afdc2c11da7f825a0114e3f5f14de92b658a6df719e4b61618ddc6842ca468c7e86f369149c5d7dd425bec27703b31a5ba2ba9dd00215f26415ee689ab006deea6b103c8f89da01d0b2", &(0x7f00000015c0)="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", 0x5, r10}, 0x38)
socket$nl_xfrm(0x10, 0x3, 0x6)

349.46267ms ago: executing program 4 (id=3331):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
r1 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3aacc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x2003, 0x0, 0x0, 0x8, 0x43fe, 0x7ffffeff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, r1, 0x0, 0xffffffffffffffff, 0x2) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003f000701feffffff00000000027c0000040042800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc044) (async)
close(0xffffffffffffffff)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x15, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) (async)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x10021)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}, {&(0x7f0000000100)}], 0x2}, 0x40000)

0s ago: executing program 5 (id=3332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x5f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)=ANY=[@ANYBLOB="a41100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000078110380741100800c000180060001000d00000008000340"], 0x11a4}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8, 0x1, 0x5, 0x10000}]})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x2, 0x1, 0x8000, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x3, 0x3, 0x2, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x94}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x23aed14d, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x0, 0x11, 0x1000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x4, 0x3, 0x5}, {0x1, 0x3, 0x4, 0xf}, {0x5, 0x5, 0xd, 0xc}, {0x1, 0x4, 0x2, 0x3}, {0x1, 0x4, 0x5, 0xb}, {0x3, 0x5, 0xa, 0xb}, {0x3, 0x3, 0xe, 0xa}], 0x10, 0x80}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r3, 0xffffffffffffffff, 0x24, 0x10, 0x0, @void, @value=r5, @void, @void, r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x32}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

kernel console output (not intermixed with test programs):

360kB
[  240.164722][T10152] Node 0 DMA32: 1673*4kB (UME) 1257*8kB (UME) 388*16kB (UME) 703*32kB (UME) 376*64kB (UME) 191*128kB (UME) 121*256kB (UM) 61*512kB (UM) 26*1024kB (UM) 4*2048kB (ME) 277*4096kB (UM) = 1325580kB
[  240.192475][T10152] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  240.205278][T10152] Node 1 Normal: 216*4kB (UE) 57*8kB (UME) 43*16kB (UME) 83*32kB (UME) 24*64kB (UME) 6*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3888696kB
[  240.225822][T10152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.242726][T10152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.260805][T10152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.270981][T10152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.284295][T10152] 63794 total pagecache pages
[  240.289417][T10152] 0 pages in swap cache
[  240.294804][T10152] Free swap  = 124996kB
[  240.299647][T10152] Total swap = 124996kB
[  240.303806][T10152] 2097051 pages RAM
[  240.333016][T10152] 0 pages HighMem/MovableOnly
[  240.345979][T10152] 424127 pages reserved
[  240.357553][T10152] 0 pages cma reserved
[  240.529133][T10170] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1111'.
[  240.789343][T10163] delete_channel: no stack
[  242.574934][T10181] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1114'.
[  242.759616][T10196] netlink: 'syz.3.1119': attribute type 16 has an invalid length.
[  242.767909][T10196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1119'.
[  242.835726][T10202] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.1120'.
[  243.016343][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1124'.
[  243.060112][T10217] netlink: 'syz.5.1124': attribute type 39 has an invalid length.
[  243.091373][T10217] veth0_macvtap: left promiscuous mode
[  243.236981][T10223] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1127'.
[  243.794568][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1128'.
[  244.409288][T10253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1133'.
[  244.476752][T10252] netlink: 'syz.4.1134': attribute type 16 has an invalid length.
[  244.484664][T10252] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1134'.
[  244.925255][T10262] netlink: 'syz.5.1136': attribute type 11 has an invalid length.
[  245.103851][T10261] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1137'.
[  245.261761][T10225] lo speed is unknown, defaulting to 1000
[  246.088602][T10279] netlink: 'syz.3.1142': attribute type 1 has an invalid length.
[  246.114598][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1142'.
[  248.546657][T10318] netlink: 'syz.4.1151': attribute type 21 has an invalid length.
[  248.582814][T10318] netlink: 'syz.4.1151': attribute type 15 has an invalid length.
[  249.258975][T10322] tap0: tun_chr_ioctl cmd 1074025677
[  249.264617][T10322] tap0: linktype set to 776
[  249.453725][T10327] netlink: 'syz.5.1154': attribute type 2 has an invalid length.
[  250.379120][T10341] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1157'.
[  251.390463][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'.
[  251.538071][T10372] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.1166'.
[  253.436776][T10407] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1176'.
[  253.554865][T10407] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1176'.
[  253.846070][T10412] netlink: 'syz.4.1178': attribute type 32 has an invalid length.
[  253.943564][T10415] net_ratelimit: 150 callbacks suppressed
[  253.943582][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.059757][T10415] netlink: 'syz.6.1179': attribute type 1 has an invalid length.
[  254.080950][T10419] netlink: 46603 bytes leftover after parsing attributes in process `syz.4.1181'.
[  254.358172][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'.
[  254.367618][T10449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.375289][T10444] netlink: 'syz.3.1188': attribute type 29 has an invalid length.
[  254.386577][T10444] netlink: 'syz.3.1188': attribute type 29 has an invalid length.
[  254.393701][T10448] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  254.401108][T10448] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  254.411587][T10444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1188'.
[  254.462112][T10443] delete_channel: no stack
[  254.585274][T10462] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1190'.
[  254.601864][T10451] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1190'.
[  254.728564][   T30] audit: type=1107 audit(1764804732.712:4): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  254.847045][T10474] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  255.531877][T10484] netlink: 'syz.3.1200': attribute type 2 has an invalid length.
[  255.570058][T10484] netlink: 'syz.3.1200': attribute type 8 has an invalid length.
[  255.579028][T10484] __nla_validate_parse: 2 callbacks suppressed
[  255.579043][T10484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1200'.
[  255.662634][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.675717][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.765814][T10490] netlink: 580 bytes leftover after parsing attributes in process `syz.6.1202'.
[  255.801080][T10490] netlink: 580 bytes leftover after parsing attributes in process `syz.6.1202'.
[  256.048239][T10497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.076707][T10503] netlink: 'syz.5.1206': attribute type 10 has an invalid length.
[  256.126606][T10503] mac80211_hwsim hwsim16 wlan1: left promiscuous mode
[  256.144612][T10503] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  256.247152][T10503] team0: Port device wlan1 added
[  256.268279][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1210'.
[  256.300084][T10514] netlink: 'syz.6.1210': attribute type 1 has an invalid length.
[  256.344557][T10514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.514189][T10529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.950781][T10557] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'.
[  257.164613][T10578] netlink: 'syz.5.1230': attribute type 1 has an invalid length.
[  257.230109][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'.
[  258.807613][T10625] netlink: 'syz.5.1242': attribute type 2 has an invalid length.
[  258.887742][T10625] �9: entered promiscuous mode
[  258.904946][T10635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.004649][T10639] netlink: 'syz.6.1246': attribute type 21 has an invalid length.
[  259.012753][T10639] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1246'.
[  259.022531][T10639] netlink: 'syz.6.1246': attribute type 4 has an invalid length.
[  259.226670][T10650] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.1248'.
[  259.534377][T10666] netlink: 'syz.5.1253': attribute type 39 has an invalid length.
[  259.595205][T10672] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1255'.
[  259.870077][T10681] netlink: 'syz.4.1256': attribute type 4 has an invalid length.
[  259.893893][T10681] netlink: 'syz.4.1256': attribute type 10 has an invalid length.
[  259.915932][T10681] macvlan1: entered allmulticast mode
[  260.069911][T10684] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.1257'.
[  260.197131][T10690] netlink: 'syz.4.1259': attribute type 21 has an invalid length.
[  260.707634][T10711] netlink: 'syz.3.1262': attribute type 3 has an invalid length.
[  260.715448][T10711] netlink: 'syz.3.1262': attribute type 1 has an invalid length.
[  260.723164][T10711] __nla_validate_parse: 1 callbacks suppressed
[  260.723178][T10711] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1262'.
[  260.939442][T10713] netlink: zone id is out of range
[  260.955437][T10713] netlink: zone id is out of range
[  260.972997][T10713] netlink: set zone limit has 8 unknown bytes
[  261.023535][T10716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1265'.
[  261.869842][T10737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1271'.
[  261.896106][T10737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1271'.
[  261.908909][T10738] syzkaller0: entered allmulticast mode
[  261.934017][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1271'.
[  261.980592][T10737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1271'.
[  262.232110][ T5832] Bluetooth: hci5: adv larger than maximum supported
[  262.232994][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'.
[  262.261151][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1279'.
[  262.590852][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'.
[  262.629932][T10774] Dead loop on virtual device ip6_vti0, fix it urgently!
[  262.709676][T10777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.256928][T10790] netlink: 'syz.5.1288': attribute type 10 has an invalid length.
[  263.304688][T10792] netlink: 'syz.3.1289': attribute type 21 has an invalid length.
[  263.423698][T10792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1289'.
[  264.453389][T10849] validate_nla: 4 callbacks suppressed
[  264.453407][T10849] netlink: 'syz.2.1305': attribute type 17 has an invalid length.
[  265.010503][T10880] netlink: 'syz.6.1314': attribute type 12 has an invalid length.
[  265.550404][T10895] netlink: 'syz.6.1318': attribute type 3 has an invalid length.
[  265.843860][T10907] __nla_validate_parse: 9 callbacks suppressed
[  265.843880][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1322'.
[  265.903033][T10907] netlink: 'syz.6.1322': attribute type 10 has an invalid length.
[  266.792997][T10907] team0 (unregistering): Port device team_slave_0 removed
[  266.838047][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'.
[  266.863953][T10907] team0 (unregistering): Port device team_slave_1 removed
[  266.894795][T10911] wg0: entered allmulticast mode
[  267.061312][T10934] netlink: 'syz.4.1329': attribute type 27 has an invalid length.
[  267.166724][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.168527][T10941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.422060][T10952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.533419][T10957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1335'.
[  268.380583][   T30] audit: type=1107 audit(1764804746.352:5): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ӏ�a[�0
�'
[  268.773849][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1349'.
[  268.921475][T11018] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1351'.
[  268.962773][T11021] siw: device registration error -23
[  268.971519][T11021] netlink: 'syz.4.1354': attribute type 29 has an invalid length.
[  268.981590][T11021] netlink: 'syz.4.1354': attribute type 29 has an invalid length.
[  268.994056][T11021] netlink: 'syz.4.1354': attribute type 29 has an invalid length.
[  269.237360][T11036] netlink: 'syz.4.1359': attribute type 39 has an invalid length.
[  269.312546][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'.
[  270.042212][T11065] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1367'.
[  270.120933][T11077] C: renamed from team_slave_0
[  270.226541][T11077] netlink: 'syz.2.1371': attribute type 3 has an invalid length.
[  270.234304][T11077] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1371'.
[  270.243904][T11077] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  270.285847][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'.
[  270.707132][T11116] netlink: 'syz.5.1381': attribute type 1 has an invalid length.
[  271.308448][T11157] netlink: 'syz.3.1395': attribute type 27 has an invalid length.
[  271.319087][T11157] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1395'.
[  271.385193][T11163] netlink: 'syz.3.1395': attribute type 27 has an invalid length.
[  271.427343][T11163] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1395'.
[  272.030463][T11181] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1401'.
[  272.080218][T11181] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1401'.
[  272.619615][T11201] netlink: 'syz.3.1409': attribute type 21 has an invalid length.
[  272.645790][T11201] IPv6: NLM_F_CREATE should be specified when creating new route
[  272.687022][T11201] netlink: 'syz.3.1409': attribute type 10 has an invalid length.
[  272.705855][T11201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1409'.
[  272.734226][T11201] batman_adv: batadv0: Adding interface: virt_wifi0
[  272.771925][T11201] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.835505][T11201] batman_adv: batadv0: Interface activated: virt_wifi0
[  272.886513][T11212] netlink: 'syz.5.1410': attribute type 10 has an invalid length.
[  272.894461][T11212] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1410'.
[  272.938332][T11212] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1410'.
[  272.959180][T11212] ksmbd: Unknown IPC event: 1, ignore.
[  273.032589][T11223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1414'.
[  273.074583][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1414'.
[  273.189254][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'.
[  273.423381][T11236] sch_fq: defrate 19 ignored.
[  274.140662][T11256] netlink: 'syz.2.1426': attribute type 5 has an invalid length.
[  274.395847][T11270] netlink: 'syz.5.1430': attribute type 8 has an invalid length.
[  274.703881][T11288] netlink: 'syz.4.1438': attribute type 10 has an invalid length.
[  275.976963][T11320] lo speed is unknown, defaulting to 1000
[  276.470839][T11353] __nla_validate_parse: 9 callbacks suppressed
[  276.470971][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1452'.
[  277.119633][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'.
[  277.494862][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'.
[  279.116617][T11417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.280781][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1479'.
[  280.324728][T11456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1480'.
[  280.405241][T11463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.610426][T11498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1490'.
[  283.694383][   T30] audit: type=1107 audit(1764804761.672:6): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='��v����V ;Wj1q���kG��O�I`��vD~�����k��A65�D]�ԣ�>��.ţm�����1՞����QQ獰������BvR����x�����AqTZO�(fS�&�F�ƹ��'i�A��T�T���G�qs^y8#�F�G�/�>v�{}�ߡ��Ww$P��d��{_&�ש)�j�yڼ61y�X'
[  283.811494][T11510] validate_nla: 1 callbacks suppressed
[  283.811510][T11510] netlink: 'syz.2.1494': attribute type 46 has an invalid length.
[  284.008788][T11514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.783819][T11539] IPv6: NLM_F_CREATE should be specified when creating new route
[  285.813231][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'.
[  285.896804][T11550] openvswitch: netlink: Flow actions attr not present in new flow.
[  286.689795][T11565] lo speed is unknown, defaulting to 1000
[  286.997199][T11596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1517'.
[  287.407582][T11605] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1519'.
[  288.340457][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1520'.
[  288.383971][ T5832] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[  290.955705][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1520'.
[  292.014423][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'.
[  292.029631][T11652] dvmrp1: tun_chr_ioctl cmd 35108
[  292.244050][T11657] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1533'.
[  292.503089][T11671] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1539'.
[  293.358441][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'.
[  293.386950][T11688] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1542'.
[  293.388055][T11691] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1542'.
[  293.420624][T11691] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1542'.
[  293.431646][T11688] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1542'.
[  293.621420][T11709] netlink: 'syz.5.1549': attribute type 10 has an invalid length.
[  293.626298][T11707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1550'.
[  293.631210][T11709] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.653581][T11705] netlink: 'syz.4.1548': attribute type 6 has an invalid length.
[  293.841505][T11709] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.853326][T11709] bridge0: port 2(bridge_slave_1) entered listening state
[  294.410693][T11709] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  294.593181][T11728] netlink: 'syz.2.1554': attribute type 10 has an invalid length.
[  294.751944][T11743] netlink: 'syz.2.1559': attribute type 46 has an invalid length.
[  294.762763][T11744] netlink: 'syz.5.1558': attribute type 21 has an invalid length.
[  294.763789][T11743] netlink: 'syz.2.1559': attribute type 19 has an invalid length.
[  294.795921][T11744] netlink: 'syz.5.1558': attribute type 5 has an invalid length.
[  294.805523][T11744] netlink: 'syz.5.1558': attribute type 6 has an invalid length.
[  295.227813][T11782] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  295.270652][T11778] netlink: 'syz.5.1568': attribute type 10 has an invalid length.
[  295.525829][ T5832] Bluetooth: hci4: unexpected event 0x30 length: 82 > 3
[  295.910157][   T30] audit: type=1107 audit(1764804773.892:7): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='uu�9�lM]�_��:�=�*_;�D�09�pm�z����x2�ܵ��P�� ���е��o ���mض�Y�<�G|�
[  295.910157][   T30] ����MBE�h���t�]Щၪ#wW�����>l��L�ypw0l�n�
�F
[  295.910157][   T30] }v/�v�f!25X�('
[  296.087992][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.142478][T11841] __nla_validate_parse: 17 callbacks suppressed
[  296.142497][T11841] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1587'.
[  296.404300][T11851] netlink: 'syz.4.1592': attribute type 6 has an invalid length.
[  296.735040][T11867] : entered promiscuous mode
[  296.978328][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'.
[  297.213574][T11875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.810145][T11923] netlink: 11160 bytes leftover after parsing attributes in process `syz.5.1610'.
[  298.647060][T11944] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1618'.
[  300.186228][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  300.375684][T11994] netlink: 'syz.3.1630': attribute type 2 has an invalid length.
[  300.383450][T11994] netlink: 'syz.3.1630': attribute type 1 has an invalid length.
[  300.524842][T11999] netlink: 'syz.4.1632': attribute type 14 has an invalid length.
[  300.595757][T11998] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1632'.
[  300.674285][T12007] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  300.772556][T12013] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1636'.
[  301.190424][T12025] netlink: 'syz.3.1639': attribute type 23 has an invalid length.
[  302.029931][T12044] netlink: 'syz.6.1642': attribute type 21 has an invalid length.
[  302.151421][T12044] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1642'.
[  302.196333][T12044] netlink: 'syz.6.1642': attribute type 5 has an invalid length.
[  302.204107][T12044] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1642'.
[  302.654841][T12064] netlink: 'syz.4.1649': attribute type 39 has an invalid length.
[  304.002140][T12105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  304.444738][T12122] netlink: 'syz.3.1662': attribute type 1 has an invalid length.
[  304.916530][T12137] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1666'.
[  305.112353][T12152] netlink: 'syz.5.1670': attribute type 10 has an invalid length.
[  305.220566][T12158] xt_l2tp: missing protocol rule (udp|l2tpip)
[  306.339840][T12162] netlink: 'syz.6.1675': attribute type 6 has an invalid length.
[  306.436779][T12162] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1675'.
[  306.924009][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1679'.
[  307.152978][T12191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1680'.
[  307.195057][T12197] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  307.358579][T12213] netlink: 'syz.5.1684': attribute type 1 has an invalid length.
[  307.415783][T12213] nbd: couldn't find device at index 20
[  307.639214][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'.
[  307.781352][T12219] netlink: 'syz.5.1684': attribute type 4 has an invalid length.
[  307.839111][T12219] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1684'.
[  307.866578][T12220] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1688'.
[  308.352655][T12227] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1691'.
[  308.392990][T12236] IPv6: Can't replace route, no match found
[  308.404978][T12231] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  308.526976][T12227] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode
[  308.582135][T12242] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1695'.
[  308.608492][T12242] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1695'.
[  308.626107][T12242] netlink: 'syz.5.1695': attribute type 5 has an invalid length.
[  308.660219][T12242] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1695'.
[  309.003865][T12258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1697'.
[  309.148942][T12263] netlink: 'syz.3.1700': attribute type 10 has an invalid length.
[  309.157260][T12263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1700'.
[  309.221819][T12263] dummy0: entered promiscuous mode
[  309.231843][T12263] dummy0: entered allmulticast mode
[  309.329341][T12263] bond0: (slave dummy0): Releasing backup interface
[  309.378704][T12263] bridge0: port 3(dummy0) entered blocking state
[  309.397348][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  309.419433][T12263] bridge0: port 3(dummy0) entered disabled state
[  309.997837][T12285] sch_tbf: burst 478 is lower than device veth0_to_bridge mtu (1514) !
[  310.024676][T12291] syz1: rxe_newlink: already configured on bond_slave_0
[  310.280643][T12302] netlink: 'syz.5.1710': attribute type 2 has an invalid length.
[  310.301321][T12302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1710'.
[  313.935204][T12333] __nla_validate_parse: 4 callbacks suppressed
[  313.935221][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1721'.
[  314.082922][T12343] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1723'.
[  314.769865][T12349] netlink: 'syz.5.1725': attribute type 9 has an invalid length.
[  317.102493][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.108893][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.906961][T12405] netlink: 'syz.3.1739': attribute type 2 has an invalid length.
[  317.971103][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'.
[  318.022021][T12407] netlink: 'syz.4.1742': attribute type 10 has an invalid length.
[  318.066714][T12407] bond0: (slave geneve0): Releasing backup interface
[  318.077169][T12407] geneve0 (unregistering): left allmulticast mode
[  318.151469][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'.
[  318.224348][T12416] netlink: 'syz.3.1744': attribute type 21 has an invalid length.
[  318.315907][T12424] netlink: 'syz.2.1743': attribute type 11 has an invalid length.
[  318.451168][T12426] netlink: 'syz.4.1746': attribute type 2 has an invalid length.
[  318.461586][T12426] netlink: 'syz.4.1746': attribute type 1 has an invalid length.
[  318.476811][T12426] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1746'.
[  318.517995][T12426] netlink: 'syz.4.1746': attribute type 21 has an invalid length.
[  318.528511][T12426] netlink: 'syz.4.1746': attribute type 5 has an invalid length.
[  318.539120][T12426] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1746'.
[  319.704885][T12451] bridge_slave_1: Caught tx_queue_len zero misconfig
[  319.814589][T12458] netlink: 'syz.6.1754': attribute type 4 has an invalid length.
[  319.846524][T12458] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1754'.
[  319.875182][T12458] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  319.900706][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  320.067644][T12477] netlink: 'syz.5.1760': attribute type 10 has an invalid length.
[  320.075940][T12477] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1760'.
[  320.099678][T12477] batadv0: entered promiscuous mode
[  320.104928][T12477] batadv0: entered allmulticast mode
[  320.117319][T12477] bridge0: port 3(batadv0) entered blocking state
[  320.150645][T12477] bridge0: port 3(batadv0) entered disabled state
[  320.163832][T12480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1760'.
[  320.166963][T12477] bridge0: port 3(batadv0) entered blocking state
[  320.179501][T12477] bridge0: port 3(batadv0) entered listening state
[  320.214938][T12483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.222654][T12483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.236604][T12483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.260461][T12483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.288226][T12483] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  320.313118][T12483] batman_adv: batadv0: Removing interface: virt_wifi0
[  320.350501][ T7468] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  320.359981][ T7468] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  320.689441][T12503] tmpfs: Bad value for 'uid'
[  320.707082][T12504] tmpfs: Bad value for 'uid'
[  320.718612][T12503] tmpfs: Bad value for 'uid'
[  320.790913][T12504] tmpfs: Bad value for 'uid'
[  320.942025][T12508] syzkaller0: entered promiscuous mode
[  320.949262][T12508] syzkaller0: entered allmulticast mode
[  321.756767][T12530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.238558][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  322.248942][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  322.258054][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  322.267471][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  322.277740][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  323.343338][ T7468] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.911397][T12550] netlink: 'syz.2.1776': attribute type 2 has an invalid length.
[  323.920051][T12550] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1776'.
[  323.948607][ T7468] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.173892][ T7468] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.328126][T12557] pimreg: tun_chr_ioctl cmd 2148553947
[  324.385155][   T52] Bluetooth: hci3: command tx timeout
[  324.430187][T12560] netlink: 'syz.2.1778': attribute type 2 has an invalid length.
[  324.447855][T12560] netlink: 'syz.2.1778': attribute type 8 has an invalid length.
[  324.467802][T12560] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1778'.
[  324.578282][T12537] lo speed is unknown, defaulting to 1000
[  324.755546][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.762834][    C1] bridge0: topology change detected, propagating
[  324.797133][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'.
[  324.957574][ T7468] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.307964][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1784'.
[  325.317913][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1784'.
[  325.336290][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1784'.
[  325.502736][T12537] chnl_net:caif_netlink_parms(): no params data found
[  326.446896][   T52] Bluetooth: hci3: command tx timeout
[  326.682011][T12537] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.699809][T12537] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.714019][T12537] bridge_slave_0: entered allmulticast mode
[  326.731571][T12537] bridge_slave_0: entered promiscuous mode
[  326.776522][T12537] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.794062][T12537] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.814390][T12537] bridge_slave_1: entered allmulticast mode
[  326.833138][T12537] bridge_slave_1: entered promiscuous mode
[  327.102143][T12537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.132408][T12537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.286250][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1790'.
[  328.515438][   T52] Bluetooth: hci3: command tx timeout
[  328.981776][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.010815][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.038842][ T7468] bond0 (unregistering): Released all slaves
[  329.076951][T12537] team0: Port device team_slave_0 added
[  329.089959][T12537] team0: Port device team_slave_1 added
[  329.307229][ T7468] : left promiscuous mode
[  329.331329][T12537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.344272][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.389824][T12537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.413662][T12537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.425609][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.466568][T12537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.595422][   T52] Bluetooth: hci3: command tx timeout
[  330.740123][T12537] hsr_slave_0: entered promiscuous mode
[  330.747549][T12537] hsr_slave_1: entered promiscuous mode
[  330.754082][T12537] debugfs: 'hsr0' already exists in 'hsr'
[  330.795387][T12537] Cannot create hsr debugfs directory
[  331.138939][T12695] netlink: 'syz.4.1807': attribute type 10 has an invalid length.
[  331.220574][T12691] netlink: 'syz.2.1806': attribute type 31 has an invalid length.
[  332.122074][T12728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1817'.
[  332.156574][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'.
[  332.186666][T12731] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1818'.
[  332.396780][ T7468] hsr_slave_0: left promiscuous mode
[  332.433041][ T7468] hsr_slave_1: left promiscuous mode
[  332.453990][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.470821][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.508702][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.523679][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.633012][ T7468] veth1_macvtap: left promiscuous mode
[  332.651229][ T7468] veth0_macvtap: left promiscuous mode
[  332.668134][ T7468] veth1_vlan: left promiscuous mode
[  332.690716][ T7468] veth0_vlan: left promiscuous mode
[  333.470769][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1830'.
[  333.574537][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'.
[  333.601576][T12789] netlink: 'syz.5.1832': attribute type 39 has an invalid length.
[  334.563986][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1834'.
[  335.064871][T12821] netlink: 5356 bytes leftover after parsing attributes in process `syz.5.1841'.
[  335.098634][T12537] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  335.118664][T12823] netlink: 'syz.3.1842': attribute type 27 has an invalid length.
[  335.136414][T12823] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1842'.
[  335.167408][T12537] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  335.202827][T12537] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  335.214623][T12833] netlink: 'syz.2.1844': attribute type 13 has an invalid length.
[  335.227855][T12833] netlink: 'syz.2.1844': attribute type 17 has an invalid length.
[  335.286133][T12537] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  335.358392][T12833] gretap0: refused to change device tx_queue_len
[  335.364780][T12833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  335.541867][T12838] netlink: 'syz.4.1846': attribute type 1 has an invalid length.
[  335.638958][    C0] bridge0: port 3(batadv0) entered learning state
[  335.927948][T12537] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.007279][T12537] 8021q: adding VLAN 0 to HW filter on device team0
[  336.054277][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.061491][ T8667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.132694][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.139911][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.170609][T12864] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1850'.
[  336.461810][T12878] netlink: 'syz.3.1852': attribute type 21 has an invalid length.
[  336.563897][T12537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.638696][T12888] netlink: 'syz.5.1855': attribute type 29 has an invalid length.
[  336.701711][T12886] netlink: 'syz.5.1855': attribute type 29 has an invalid length.
[  336.783808][T12891] netlink: 'syz.3.1856': attribute type 16 has an invalid length.
[  336.792041][T12891] netlink: 'syz.3.1856': attribute type 4 has an invalid length.
[  336.800251][T12891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1856'.
[  336.902258][T12895] netlink: 'syz.5.1858': attribute type 2 has an invalid length.
[  337.329866][T12537] veth0_vlan: entered promiscuous mode
[  337.362888][T12537] veth1_vlan: entered promiscuous mode
[  337.430831][T12537] veth0_macvtap: entered promiscuous mode
[  337.463986][T12537] veth1_macvtap: entered promiscuous mode
[  337.579224][T12537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.622836][T12537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.808196][ T8668] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.825391][ T8668] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.012953][ T8668] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.036813][ T8668] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.098592][T12927] netlink: 'syz.2.1866': attribute type 10 has an invalid length.
[  338.311537][T12945] __nla_validate_parse: 1 callbacks suppressed
[  338.313212][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'.
[  338.985134][T12927] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  339.152543][ T8670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.182890][ T8670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.315133][ T8668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.342812][ T8668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.144970][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1880'.
[  340.196304][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1880'.
[  340.230703][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1880'.
[  340.288890][T12979] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1881'.
[  340.559706][T12991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1885'.
[  340.979600][T13006] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1890'.
[  341.001702][T13006] netlink: 2033 bytes leftover after parsing attributes in process `syz.2.1890'.
[  341.020961][T13006] netlink: 2033 bytes leftover after parsing attributes in process `syz.2.1890'.
[  341.398063][T13014] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1888'.
[  343.063050][T13045] ksmbd: Unknown IPC event: 1, ignore.
[  343.210137][T13054] netlink: 'syz.3.1902': attribute type 6 has an invalid length.
[  343.221942][T13055] netlink: 'syz.6.1901': attribute type 21 has an invalid length.
[  343.250400][T13057] openvswitch: netlink: Invalid MD length 60718 for MD type 0
[  343.295531][T13055] netlink: 'syz.6.1901': attribute type 1 has an invalid length.
[  343.895515][T13057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.136789][T13057] netlink: 'syz.4.1903': attribute type 2 has an invalid length.
[  344.289178][T13061] __nla_validate_parse: 5 callbacks suppressed
[  344.289197][T13061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1903'.
[  344.400183][T13057] !��9: entered promiscuous mode
[  344.406575][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'.
[  345.115564][T13085] tap0: tun_chr_ioctl cmd 1074025677
[  345.121387][T13085] tap0: linktype set to 1
[  345.376830][T13102] netlink: 'syz.3.1914': attribute type 29 has an invalid length.
[  345.601719][T13082] lo speed is unknown, defaulting to 1000
[  345.719895][T13111] netlink: 'syz.6.1917': attribute type 10 has an invalid length.
[  345.994674][T13125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1920'.
[  346.809566][T13111] team0 (unregistering): Port device team_slave_0 removed
[  346.832364][T13111] team0 (unregistering): Port device team_slave_1 removed
[  347.139140][T13153] : renamed from ip6_vti0 (while UP)
[  347.669899][T13167] netlink: 'syz.5.1930': attribute type 10 has an invalid length.
[  347.875182][T13167] hsr_slave_0 (unregistering): left promiscuous mode
[  347.940012][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1935'.
[  347.957454][T13180] openvswitch: netlink: Flow key attr not present in new flow.
[  348.156532][T13186] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1937'.
[  348.558162][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1942'.
[  348.763145][T13217] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1943'.
[  348.791991][T13217] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  350.867511][T13295] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1966'.
[  350.984676][ T8670] tipc: Subscription rejected, illegal request
[  350.994016][T13305] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1967'.
[  351.021050][    C0] bridge0: port 3(batadv0) entered forwarding state
[  351.028620][    C0] bridge0: topology change detected, propagating
[  351.921488][T13340] netlink: 'syz.6.1977': attribute type 1 has an invalid length.
[  351.988186][T13340] netlink: 'syz.6.1977': attribute type 1 has an invalid length.
[  352.027858][T13340] netlink: 'syz.6.1977': attribute type 21 has an invalid length.
[  352.166430][T13348] netlink: 'syz.4.1979': attribute type 1 has an invalid length.
[  352.216892][T13351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1980'.
[  352.301925][T13357] syz.6.1982: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  352.326817][T13357] CPU: 1 UID: 0 PID: 13357 Comm: syz.6.1982 Not tainted syzkaller #0 PREEMPT(full) 
[  352.326844][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.326869][T13357] Call Trace:
[  352.326877][T13357]  <TASK>
[  352.326885][T13357]  dump_stack_lvl+0x189/0x250
[  352.326918][T13357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.326942][T13357]  ? __pfx__printk+0x10/0x10
[  352.326967][T13357]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  352.326991][T13357]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  352.327020][T13357]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  352.327046][T13357]  warn_alloc+0x214/0x310
[  352.327064][T13357]  ? stack_depot_save_flags+0x40/0x860
[  352.327087][T13357]  ? __pfx_warn_alloc+0x10/0x10
[  352.327106][T13357]  ? kasan_save_track+0x3e/0x80
[  352.327121][T13357]  ? __kasan_kmalloc+0x93/0xb0
[  352.327138][T13357]  ? xsk_setsockopt+0x57b/0x8d0
[  352.327161][T13357]  ? do_sock_setsockopt+0x17c/0x1b0
[  352.327183][T13357]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  352.327199][T13357]  ? do_syscall_64+0xfa/0xfa0
[  352.327215][T13357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.327241][T13357]  __vmalloc_node_range_noprof+0x125/0x12d0
[  352.327287][T13357]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  352.327309][T13357]  ? __kasan_kmalloc+0x93/0xb0
[  352.327331][T13357]  vmalloc_user_noprof+0xad/0xf0
[  352.327348][T13357]  ? xskq_create+0xbf/0x170
[  352.327373][T13357]  xskq_create+0xbf/0x170
[  352.327401][T13357]  xsk_init_queue+0xb0/0x110
[  352.327427][T13357]  xsk_setsockopt+0x57b/0x8d0
[  352.327452][T13357]  ? __pfx_xsk_setsockopt+0x10/0x10
[  352.327478][T13357]  ? __pfx_aa_sk_perm+0x10/0x10
[  352.327505][T13357]  ? aa_sock_opt_perm+0xff/0x1b0
[  352.327527][T13357]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  352.327545][T13357]  ? __pfx_xsk_setsockopt+0x10/0x10
[  352.327569][T13357]  do_sock_setsockopt+0x17c/0x1b0
[  352.327593][T13357]  __x64_sys_setsockopt+0x13f/0x1b0
[  352.327618][T13357]  do_syscall_64+0xfa/0xfa0
[  352.327634][T13357]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.327650][T13357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.327667][T13357]  ? clear_bhb_loop+0x60/0xb0
[  352.327687][T13357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.327704][T13357] RIP: 0033:0x7fe61a38f749
[  352.327719][T13357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.327735][T13357] RSP: 002b:00007fe61b153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  352.327754][T13357] RAX: ffffffffffffffda RBX: 00007fe61a5e5fa0 RCX: 00007fe61a38f749
[  352.327766][T13357] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  352.327776][T13357] RBP: 00007fe61a413f91 R08: 0000000000000004 R09: 0000000000000000
[  352.327787][T13357] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  352.327797][T13357] R13: 00007fe61a5e6038 R14: 00007fe61a5e5fa0 R15: 00007fffc539d668
[  352.327828][T13357]  </TASK>
[  352.327936][T13357] Mem-Info:
[  352.649364][T13357] active_anon:21096 inactive_anon:0 isolated_anon:0
[  352.649364][T13357]  active_file:19334 inactive_file:39999 isolated_file:0
[  352.649364][T13357]  unevictable:768 dirty:71 writeback:0
[  352.649364][T13357]  slab_reclaimable:7400 slab_unreclaimable:102281
[  352.649364][T13357]  mapped:29105 shmem:16063 pagetables:1168
[  352.649364][T13357]  sec_pagetables:0 bounce:0
[  352.649364][T13357]  kernel_misc_reclaimable:0
[  352.649364][T13357]  free:1294538 free_pcp:17931 free_cma:0
[  352.803967][T13357] Node 0 active_anon:76848kB inactive_anon:0kB active_file:77336kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116364kB dirty:288kB writeback:0kB shmem:55468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14616kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  352.807096][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'.
[  352.885479][T13375] netlink: 'syz.2.1988': attribute type 3 has an invalid length.
[  352.893862][T13375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1988'.
[  352.931327][T13357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  352.962940][T13357] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  352.998285][T13357] lowmem_reserve[]: 0 2505 2505 2505 2505
[  353.004248][T13357] Node 0 DMA32 free:1277032kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68904kB inactive_anon:0kB active_file:77336kB inactive_file:159800kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2565128kB mlocked:0kB bounce:0kB free_pcp:66224kB local_pcp:30824kB free_cma:0kB
[  353.063705][T13357] lowmem_reserve[]: 0 0 0 0 0
[  353.070621][T13357] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  353.104757][T13357] lowmem_reserve[]: 0 0 0 0 0
[  353.110591][T13357] Node 1 Normal free:3888696kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:8800kB free_cma:0kB
[  353.172149][T13357] lowmem_reserve[]: 0 0 0 0 0
[  353.177769][T13357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  353.191055][T13357] Node 0 DMA32: 1794*4kB (UME) 785*8kB (UME) 201*16kB (UME) 938*32kB (UME) 325*64kB (UME) 326*128kB (UME) 251*256kB (UME) 114*512kB (UM) 41*1024kB (UM) 12*2048kB (UME) 243*4096kB (UM) = 1293728kB
[  353.259259][T13357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  353.315824][T13357] Node 1 Normal: 216*4kB (UE) 57*8kB (UME) 43*16kB (UME) 83*32kB (UME) 24*64kB (UME) 6*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3888696kB
[  353.353480][T13357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  353.363427][T13357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  353.372877][T13357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  353.382860][T13357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  353.392244][T13357] 60713 total pagecache pages
[  353.397365][T13357] 0 pages in swap cache
[  353.401594][T13357] Free swap  = 124996kB
[  353.405855][T13357] Total swap = 124996kB
[  353.410086][T13357] 2097051 pages RAM
[  353.413948][T13357] 0 pages HighMem/MovableOnly
[  353.443514][T13357] 424127 pages reserved
[  353.451286][T13357] 0 pages cma reserved
[  353.490453][T13401] netlink: 'syz.3.1995': attribute type 1 has an invalid length.
[  354.052674][T13421] netlink: 'syz.3.2001': attribute type 10 has an invalid length.
[  354.078489][T13421] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.085940][T13421] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.180172][T13421] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.187464][T13421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.195088][T13421] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.202300][T13421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.224067][T13421] team0: Port device bridge0 added
[  354.743589][T13443] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2007'.
[  355.268477][T13397] lo speed is unknown, defaulting to 1000
[  355.278007][T13425] rdma_rxe: rxe_newlink: failed to add vcan0
[  355.374005][T13463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.536839][T13502] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �&��%�j��ʫ�����}�����	��
[  356.612934][T13504] netlink: get zone limit has 8 unknown bytes
[  357.435117][T13547] dvmrp1: tun_chr_ioctl cmd 1074025677
[  357.466765][T13547] dvmrp1: linktype set to 780
[  357.493117][   T52] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  357.622251][T13535] lo speed is unknown, defaulting to 1000
[  357.674882][T13553] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2042'.
[  357.684219][T13553] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  357.793857][T13557] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2043'.
[  357.842286][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2043'.
[  357.876407][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2047'.
[  357.896926][T13557] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  357.908651][T13557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2043'.
[  357.992510][T13571] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.2048'.
[  358.060964][T13571] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2048'.
[  358.381091][T13586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2052'.
[  359.035106][T13618] netlink: 'syz.2.2063': attribute type 1 has an invalid length.
[  360.501692][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'.
[  360.770115][T13670] netlink: 'syz.3.2078': attribute type 7 has an invalid length.
[  361.069585][T13669] pim6reg0: tun_chr_ioctl cmd 2148553947
[  361.243629][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'.
[  362.083105][T13734] netlink: 'syz.2.2099': attribute type 23 has an invalid length.
[  363.317684][T13745] __nla_validate_parse: 6 callbacks suppressed
[  363.317701][T13745] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2103'.
[  363.513134][T13756] netlink: 'syz.3.2106': attribute type 2 has an invalid length.
[  364.149132][T13780] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2113'.
[  364.310366][T13780] netlink: 'syz.6.2113': attribute type 10 has an invalid length.
[  364.383674][T13783] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2114'.
[  364.410990][T13785] netlink: 'syz.2.2115': attribute type 10 has an invalid length.
[  364.575699][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  364.727743][T13804] 
@�: renamed from bond_slave_0 (while UP)
[  365.395860][T13836] netlink: 182 bytes leftover after parsing attributes in process `syz.5.2129'.
[  366.696659][T13868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'.
[  366.708510][T13865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'.
[  366.728528][T13868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'.
[  367.106127][T13872] cgroup: fork rejected by pids controller in /syz2
[  367.173963][   T52] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  367.251034][T13979] netlink: 'syz.6.2143': attribute type 4 has an invalid length.
[  367.378239][T13986] netlink: 'syz.5.2147': attribute type 29 has an invalid length.
[  367.389033][T13986] netlink: 'syz.5.2147': attribute type 29 has an invalid length.
[  367.739434][T13992] cgroup: fork rejected by pids controller in /syz6
[  367.860371][T14004] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2152'.
[  368.897346][T14217] lo speed is unknown, defaulting to 1000
[  369.038337][T14509] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2165'.
[  369.133841][T14549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2166'.
[  369.243889][T14485] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2164'.
[  369.671220][T14769] cgroup: fork rejected by pids controller in /syz5
[  369.892391][T14925] delete_channel: no stack
[  370.022382][T15026] sch_tbf: burst 478 is lower than device veth0_to_bridge mtu (1514) !
[  370.174659][T15090] openvswitch: netlink: IP tunnel dst address not specified
[  370.598617][T15403] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2187'.
[  370.786894][T15401] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2188'.
[  373.561270][T16111] netlink: 'syz.6.2199': attribute type 2 has an invalid length.
[  373.585113][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2199'.
[  373.752661][T16303] netlink: 'syz.4.2204': attribute type 10 has an invalid length.
[  374.158330][T16339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2203'.
[  376.334623][T18505] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2237'.
[  377.289498][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'.
[  377.346523][T19430] [���: entered promiscuous mode
[  377.822369][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2259'.
[  378.023179][T20065] netlink: 'syz.4.2262': attribute type 1 has an invalid length.
[  378.054420][T20065] netlink: 'syz.4.2262': attribute type 4 has an invalid length.
[  378.109461][T20065] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2262'.
[  378.521363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.535537][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.543789][T20468] netlink: 'syz.4.2266': attribute type 10 has an invalid length.
[  378.594783][T20468] bond0: (slave bond_slave_0): Releasing backup interface
[  378.599607][T20476] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.2268'.
[  378.636159][T20468] bond_slave_0: left promiscuous mode
[  378.642343][T20468] bond_slave_0: left allmulticast mode
[  379.064693][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'.
[  379.627479][T21239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2281'.
[  379.652926][T21239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2281'.
[  379.898823][T21508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2281'.
[  380.465131][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'.
[  380.632692][T22049] netlink: 'syz.4.2296': attribute type 1 has an invalid length.
[  380.678751][T22128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2299'.
[  380.733200][T22049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2296'.
[  380.825241][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'.
[  380.905666][T22250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'.
[  380.914658][T22250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'.
[  381.372492][T22701] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2308'.
[  381.552970][T22982] netlink: 'syz.6.2314': attribute type 1 has an invalid length.
[  381.932048][T23382] netlink: 'syz.6.2322': attribute type 33 has an invalid length.
[  383.079836][   T52] Bluetooth: hci0: Malformed LE Event: 0x0d
[  384.835467][T25802] openvswitch: netlink: EtherType 50a is less than min 600
[  384.858222][T25802] netlink: 'syz.2.2359': attribute type 4 has an invalid length.
[  384.867733][T25802] __nla_validate_parse: 6 callbacks suppressed
[  384.867759][T25802] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2359'.
[  384.896737][T25802] sctp: [Deprecated]: syz.2.2359 (pid 25802) Use of int in maxseg socket option.
[  384.896737][T25802] Use struct sctp_assoc_value instead
[  385.141252][T25865] C: renamed from team_slave_0
[  385.157899][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'.
[  385.503322][T25865] netlink: 'syz.4.2361': attribute type 2 has an invalid length.
[  385.515132][T25865] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2361'.
[  385.526461][T25865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  386.006117][T26528] netlink: 'syz.4.2371': attribute type 1 has an invalid length.
[  386.906784][T27038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.165755][T27445] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2386'.
[  387.540444][T27867] netem: change failed
[  387.551904][T27812] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2392'.
[  388.386584][T28613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2408'.
[  388.405180][T28613] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2408'.
[  388.543969][T28804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2411'.
[  389.728796][T29534] netlink: 'syz.6.2423': attribute type 3 has an invalid length.
[  389.758000][T29534] netlink: 'syz.6.2423': attribute type 3 has an invalid length.
[  389.937839][T29658] sit0: left promiscuous mode
[  389.943090][T29658] sit0: entered allmulticast mode
[  390.902494][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'.
[  390.913244][T29724] sit0: entered promiscuous mode
[  390.968033][T30062] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2433'.
[  391.054720][T30317] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2436'.
[  392.067686][T31106] netlink: 'syz.2.2452': attribute type 1 has an invalid length.
[  392.100757][   T52] Bluetooth: hci2: adv larger than maximum supported
[  392.196942][T31106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'.
[  392.549618][T31336] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2455'.
[  392.915870][T31640] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2462'.
[  392.951671][T31640] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2462'.
[  392.996722][T31640] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2462'.
[  393.034589][T31728] netlink: 'syz.3.2463': attribute type 39 has an invalid length.
[  393.106314][T31730] netlink: 'syz.4.2464': attribute type 304 has an invalid length.
[  393.152548][T31734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2463'.
[  393.170554][T31732] netlink: 'syz.2.2466': attribute type 25 has an invalid length.
[  393.182012][T31730] sch_tbf: peakrate 9 is lower than or equals to rate 13486744097153709158 !
[  393.499716][T32187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2472'.
[  393.544152][T32187] netlink: 'syz.2.2472': attribute type 10 has an invalid length.
[  393.565522][T32010] rdma_rxe: rxe_newlink: failed to add lo
[  393.644129][T32187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.697380][T32187] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  393.739140][T32371] netlink: 'syz.6.2477': attribute type 10 has an invalid length.
[  394.119976][T32600] netlink: 'syz.3.2481': attribute type 10 has an invalid length.
[  394.148758][T32600] macvlan1: entered allmulticast mode
[  394.241401][T32600] veth1_vlan: entered allmulticast mode
[  394.341449][T32600] team0: Port device macvlan1 added
[  395.587802][ T1688] netlink: 'syz.3.2504': attribute type 2 has an invalid length.
[  395.908413][ T1688] netlink: set zone limit has 4 unknown bytes
[  396.377008][ T1845] lo speed is unknown, defaulting to 1000
[  396.736177][ T2324] sctp: [Deprecated]: syz.6.2516 (pid 2324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  396.736177][ T2324] Use struct sctp_sack_info instead
[  397.018425][   T52] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  397.019100][   T52] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  397.123372][ T2448] __nla_validate_parse: 4 callbacks suppressed
[  397.123392][ T2448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2520'.
[  397.182268][ T2448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'.
[  397.462367][ T2739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2527'.
[  397.504834][ T2739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2527'.
[  397.520779][ T2768] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2525'.
[  397.530640][ T2739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2527'.
[  397.546700][ T2739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2527'.
[  398.999833][ T3998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2543'.
[  400.387272][ T4470] netlink: 'syz.4.2555': attribute type 7 has an invalid length.
[  400.395103][ T4470] netlink: 'syz.4.2555': attribute type 8 has an invalid length.
[  401.308714][ T5062] netlink: 'syz.2.2566': attribute type 3 has an invalid length.
[  401.845186][ T5387] netlink: 'syz.2.2574': attribute type 2 has an invalid length.
[  401.888302][ T5387] !��9: entered promiscuous mode
[  401.913052][ T5387] netlink: 'syz.2.2574': attribute type 2 has an invalid length.
[  401.921687][ T5387] !��9: left promiscuous mode
[  402.162694][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'.
[  402.180709][ T5808] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2577'.
[  402.211559][ T5814] netlink: 'syz.2.2578': attribute type 1 has an invalid length.
[  402.215678][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.221449][ T5814] netlink: 'syz.2.2578': attribute type 2 has an invalid length.
[  402.237376][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.256145][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.276738][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.295533][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.326699][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.356291][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.386115][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.395739][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  402.451661][ T5815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  403.160670][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'.
[  403.408803][ T6813] netlink: 'syz.2.2595': attribute type 10 has an invalid length.
[  403.422257][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2595'.
[  404.038202][ T7020] netlink: 'syz.6.2597': attribute type 1 has an invalid length.
[  405.045166][ T7674] netlink: 'syz.6.2608': attribute type 46 has an invalid length.
[  405.501626][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'.
[  405.512327][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'.
[  405.878756][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'.
[  406.235121][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2628'.
[  406.289360][ T8873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2630'.
[  407.077639][ T9438] netlink: 'syz.6.2641': attribute type 10 has an invalid length.
[  407.208624][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'.
[  407.254155][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'.
[  407.646442][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2649'.
[  407.669517][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2649'.
[  407.889106][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'.
[  407.919397][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'.
[  408.088007][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'.
[  409.367325][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2676'.
[  409.794221][T12090] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2682'.
[  410.706972][T12370] netlink: 'syz.2.2685': attribute type 22 has an invalid length.
[  410.715128][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'.
[  411.544614][T13259] option changes via remount are deprecated (pid=13256 comm=syz.3.2700)
[  411.561638][T13261] option changes via remount are deprecated (pid=13256 comm=syz.3.2700)
[  411.746756][T13402] tun0: tun_chr_ioctl cmd 1074025677
[  411.752445][T13402] tun0: linktype set to 822
[  411.770014][T13406] tun0: tun_chr_ioctl cmd 1074025673
[  411.807732][T13456] netlink: 'syz.4.2704': attribute type 1 has an invalid length.
[  411.989890][T13627] netlink: 'syz.4.2708': attribute type 6 has an invalid length.
[  412.524581][T14103] __nla_validate_parse: 5 callbacks suppressed
[  412.524616][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2720'.
[  412.531001][T14104] netlink: 'syz.4.2719': attribute type 15 has an invalid length.
[  412.531030][T14104] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2719'.
[  413.802764][T14583] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2726'.
[  414.190611][T14720] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  414.624245][T15234] netlink: 'syz.4.2738': attribute type 49 has an invalid length.
[  414.689043][T15253] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2742'.
[  414.712891][T15234] netlink: 'syz.4.2738': attribute type 49 has an invalid length.
[  414.772961][T15274] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2740'.
[  416.756045][ T8666] wlan1: Trigger new scan to find an IBSS to join
[  416.776394][T17172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2770'.
[  417.238471][T17619] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.2776'.
[  417.276103][T17620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2774'.
[  418.446088][T18143] netlink: 'syz.3.2786': attribute type 1 has an invalid length.
[  418.454109][T18143] netlink: 'syz.3.2786': attribute type 1 has an invalid length.
[  418.790387][T18638] 
@�: renamed from bond_slave_0 (while UP)
[  419.541126][T19061] netlink: 'syz.4.2799': attribute type 10 has an invalid length.
[  419.582540][T18972] netlink: 'syz.4.2799': attribute type 10 has an invalid length.
[  419.733849][T19184] netlink: 'syz.2.2804': attribute type 40 has an invalid length.
[  419.764908][T19185] delete_channel: no stack
[  419.815121][T19183] syzkaller0: entered promiscuous mode
[  419.821280][T19183] syzkaller0: entered allmulticast mode
[  421.799104][ T8675] wlan1: Trigger new scan to find an IBSS to join
[  422.174645][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2826'.
[  422.318868][T21834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2837'.
[  422.721943][T22250] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2844'.
[  422.745435][ T8666] wlan1: Creating new IBSS network, BSSID 96:c1:d5:66:8f:bc
[  423.510401][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  423.519663][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  423.528554][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  423.538255][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  423.551438][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  423.576094][ T8672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.898516][ T8672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.017703][ T8672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.055637][T22903] lo speed is unknown, defaulting to 1000
[  424.139078][ T8672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.427789][ T8672] bridge_slave_1: left allmulticast mode
[  424.433478][ T8672] bridge_slave_1: left promiscuous mode
[  424.472944][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.489100][ T8672] bridge_slave_0: left promiscuous mode
[  424.495598][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.607284][T23613] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2867'.
[  424.878660][T23818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2869'.
[  425.291453][ T8672] bond0 (unregistering): (slave 
5
@�): Releasing backup interface
[  425.318144][ T8672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.348762][ T8672] bond0 (unregistering): (slave team0): Releasing backup interface
[  425.362078][ T8672] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  425.376990][ T8672] bond0 (unregistering): Released all slaves
[  425.635783][   T52] Bluetooth: hci0: command tx timeout
[  426.584851][T23818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.608138][T23818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.626668][T23818] bond0 (unregistering): Released all slaves
[  426.667080][T22903] chnl_net:caif_netlink_parms(): no params data found
[  426.709744][T12618] syz1: Port: 1 Link DOWN
[  427.027111][T24802] netlink: 'syz.4.2884': attribute type 10 has an invalid length.
[  427.039487][T22903] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.048251][T22903] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.062707][T22903] bridge_slave_0: entered allmulticast mode
[  427.083076][T22903] bridge_slave_0: entered promiscuous mode
[  427.111705][T22903] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.129334][T22903] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.136990][T22903] bridge_slave_1: entered allmulticast mode
[  427.144823][T22903] bridge_slave_1: entered promiscuous mode
[  427.162404][T24851] net_ratelimit: 23 callbacks suppressed
[  427.162434][T24851] openvswitch: netlink: IP tunnel dst address not specified
[  427.282084][T24866] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  427.294059][T24945] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2887'.
[  427.303706][T24945] openvswitch: netlink: Flow key attr not present in new flow.
[  427.321562][T22903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.350755][T22903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.488121][T22903] team0: Port device team_slave_0 added
[  427.516079][T22903] team0: Port device team_slave_1 added
[  427.601109][T25047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'.
[  427.612246][T22903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.626731][T22903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.659094][T22903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.715982][   T52] Bluetooth: hci0: command tx timeout
[  427.741422][T22903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.748559][T22903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.777478][T22903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.922116][T22903] hsr_slave_0: entered promiscuous mode
[  427.936498][T22903] hsr_slave_1: entered promiscuous mode
[  427.943095][T22903] debugfs: 'hsr0' already exists in 'hsr'
[  427.949963][T22903] Cannot create hsr debugfs directory
[  428.208985][T25490] raw_sendmsg: syz.6.2901 forgot to set AF_INET. Fix it!
[  428.209180][T25488] netlink: 'syz.3.2900': attribute type 7 has an invalid length.
[  428.315857][ T8672] hsr_slave_0: left promiscuous mode
[  428.343050][ T8672] hsr_slave_1: left promiscuous mode
[  428.376051][ T8672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.385725][ T8672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.402956][ T8672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.412719][ T8672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.439409][ T8672] veth0_macvtap: left promiscuous mode
[  429.442656][ T8672] team0 (unregistering): Port device team_slave_1 removed
[  429.503574][ T8672] team0 (unregistering): Port device C removed
[  429.600343][T26422] netlink: 'syz.4.2915': attribute type 3 has an invalid length.
[  429.609608][T26422] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.2915'.
[  429.796163][   T52] Bluetooth: hci0: command tx timeout
[  431.221605][T22903] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  431.272328][T22903] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  431.311709][T22903] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  431.329163][T22903] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  431.880416][   T52] Bluetooth: hci0: command tx timeout
[  431.984959][T22903] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.068576][T22903] 8021q: adding VLAN 0 to HW filter on device team0
[  432.093466][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.100669][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.161178][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.168369][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.645125][T27983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  432.982798][T22903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.120242][T28299] netlink: 'syz.6.2945': attribute type 21 has an invalid length.
[  433.447849][T22903] veth0_vlan: entered promiscuous mode
[  433.497777][T22903] veth1_vlan: entered promiscuous mode
[  433.703903][T22903] veth0_macvtap: entered promiscuous mode
[  433.729851][T22903] veth1_macvtap: entered promiscuous mode
[  433.790246][T22903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.821014][T22903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.889682][ T8675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.899879][ T8675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.082520][ T8675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.180936][ T8675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.424557][ T8675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.448127][ T8675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.604083][T28816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.741623][ T8665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.827161][ T8665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.347115][T29226] netlink: 'syz.3.2958': attribute type 3 has an invalid length.
[  438.047124][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  438.059405][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  438.069617][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  438.196677][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  438.215992][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  438.642927][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2971'.
[  438.662400][T29471] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2971'.
[  438.723024][T29475] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2973'.
[  439.050496][T29593] netlink: 'syz.3.2977': attribute type 21 has an invalid length.
[  439.163268][T29593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2977'.
[  439.331643][T29342] chnl_net:caif_netlink_parms(): no params data found
[  439.413162][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'.
[  439.427326][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'.
[  439.437042][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'.
[  439.559837][T29342] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.584747][T29342] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.594912][T29342] bridge_slave_0: entered allmulticast mode
[  439.611809][T29342] bridge_slave_0: entered promiscuous mode
[  439.626204][T29342] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.634096][T29342] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.642700][T29342] bridge_slave_1: entered allmulticast mode
[  439.656955][T29342] bridge_slave_1: entered promiscuous mode
[  440.154337][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  440.160859][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.249563][T29342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.267339][T29342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.278309][   T52] Bluetooth: hci5: command tx timeout
[  440.341884][T29342] team0: Port device team_slave_0 added
[  440.383034][T29342] team0: Port device team_slave_1 added
[  440.440678][T29342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.465664][T29342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.501691][T29342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.537969][T29342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.544952][T29342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.622264][T29939] netlink: 'syz.2.2988': attribute type 6 has an invalid length.
[  440.640787][T29939] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2988'.
[  440.650665][T29342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.979837][T29342] hsr_slave_0: entered promiscuous mode
[  440.998663][T29342] hsr_slave_1: entered promiscuous mode
[  441.213494][T30063] netlink: 'syz.6.2996': attribute type 3 has an invalid length.
[  441.221736][T30063] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2996'.
[  441.456880][T29342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.884788][T30392] netlink: 'syz.4.3007': attribute type 3 has an invalid length.
[  441.925995][T29342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.931838][T30395] netlink: 'syz.6.3008': attribute type 1 has an invalid length.
[  442.064624][T29342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.092199][T30400] netlink: 211604 bytes leftover after parsing attributes in process `syz.6.3009'.
[  442.205802][T30406] netlink: 'syz.3.3013': attribute type 21 has an invalid length.
[  442.220665][T29342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.242381][T30410] sock: sock_timestamping_bind_phc: sock not bind to device
[  442.251559][T30406] netlink: 'syz.3.3013': attribute type 1 has an invalid length.
[  442.356101][   T52] Bluetooth: hci5: command tx timeout
[  442.443437][T29342] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  442.463954][T29342] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  442.484392][T29342] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  442.586971][T29342] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  443.382337][T30686] team0: Port device wlan1 removed
[  443.451467][T30685] delete_channel: no stack
[  443.578641][T30750] netlink: 'syz.6.3022': attribute type 10 has an invalid length.
[  443.594300][T29342] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.613007][T30750] dummy0: entered promiscuous mode
[  443.620233][T30750] dummy0: entered allmulticast mode
[  443.629092][T30750] bridge0: port 3(dummy0) entered blocking state
[  443.636049][T30750] bridge0: port 3(dummy0) entered disabled state
[  443.663560][T30750] bridge0: port 3(dummy0) entered blocking state
[  443.670378][T30750] bridge0: port 3(dummy0) entered forwarding state
[  443.748286][T29342] 8021q: adding VLAN 0 to HW filter on device team0
[  443.777803][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.784999][ T8667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.816391][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.823552][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.981401][ T8667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.047135][T30859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  444.158574][ T8667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.324897][ T8667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.438506][   T52] Bluetooth: hci5: command tx timeout
[  444.598626][ T8667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.800194][T29342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.864002][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  444.876493][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  444.888107][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  444.900797][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  444.909318][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  444.940767][T31000] netlink: 'syz.3.3036': attribute type 9 has an invalid length.
[  445.164774][ T8667] bridge_slave_1: left allmulticast mode
[  445.222741][ T8667] bridge_slave_1: left promiscuous mode
[  445.238989][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.260146][ T8667] bridge_slave_0: left allmulticast mode
[  445.276740][ T8667] bridge_slave_0: left promiscuous mode
[  445.286402][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.516715][ T5832] Bluetooth: hci5: command tx timeout
[  446.550395][ T8667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.562643][ T8667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.574458][ T8667] bond0 (unregistering): Released all slaves
[  446.589184][T31022] netlink: 'syz.4.3042': attribute type 4 has an invalid length.
[  446.617944][T31226] __nla_validate_parse: 1 callbacks suppressed
[  446.617974][T31226] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3045'.
[  446.641496][T31226] 
@�: entered promiscuous mode
[  446.646874][T31226] bond_slave_1: entered promiscuous mode
[  446.764251][T31332] vlan1: entered allmulticast mode
[  446.773399][T31332] veth0_vlan: entered allmulticast mode
[  446.996557][ T5832] Bluetooth: hci0: command tx timeout
[  447.155749][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  449.075760][ T5832] Bluetooth: hci0: command tx timeout
[  450.073595][T31337] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3049'.
[  450.116285][T31337] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3049'.
[  450.142597][T31340] netlink: 'syz.4.3050': attribute type 10 has an invalid length.
[  450.150600][T31340] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3050'.
[  450.217912][T31337] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3049'.
[  450.238404][T31381] netlink: 'syz.3.3052': attribute type 21 has an invalid length.
[  450.625560][T31452] netlink: 'syz.6.3053': attribute type 1 has an invalid length.
[  451.166000][   T52] Bluetooth: hci0: command tx timeout
[  451.949661][T31381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3052'.
[  452.156247][T29342] veth0_vlan: entered promiscuous mode
[  452.204951][T29342] veth1_vlan: entered promiscuous mode
[  452.382756][T31761] netlink: 'syz.3.3058': attribute type 29 has an invalid length.
[  452.399781][ T8667] hsr_slave_0: left promiscuous mode
[  452.406360][ T8667] hsr_slave_1: left promiscuous mode
[  452.414109][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.421735][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.437531][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.445152][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.497297][ T8667] veth1_macvtap: left promiscuous mode
[  452.502874][ T8667] veth0_macvtap: left promiscuous mode
[  452.518554][ T8667] veth1_vlan: left promiscuous mode
[  452.524031][ T8667] veth0_vlan: left promiscuous mode
[  452.603550][T31773] netlink: 'syz.4.3060': attribute type 2 has an invalid length.
[  452.793110][T31875] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3060'.
[  453.240232][   T52] Bluetooth: hci0: command tx timeout
[  453.461220][ T8667] team0 (unregistering): Port device team_slave_1 removed
[  453.508474][ T8667] team0 (unregistering): Port device team_slave_0 removed
[  453.953747][T31766] netlink: 'syz.3.3058': attribute type 29 has an invalid length.
[  454.034748][T30995] chnl_net:caif_netlink_parms(): no params data found
[  454.082418][T31883] netlink: 'syz.3.3063': attribute type 10 has an invalid length.
[  454.413616][T30995] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.423515][T30995] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.431093][T30995] bridge_slave_0: entered allmulticast mode
[  454.439244][T30995] bridge_slave_0: entered promiscuous mode
[  454.448208][T30995] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.457708][T30995] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.465050][T30995] bridge_slave_1: entered allmulticast mode
[  454.473346][T30995] bridge_slave_1: entered promiscuous mode
[  454.550369][T30995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.561941][T29342] veth0_macvtap: entered promiscuous mode
[  454.574280][T29342] veth1_macvtap: entered promiscuous mode
[  454.598812][T30995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.711689][T30995] team0: Port device team_slave_0 added
[  454.721781][T30995] team0: Port device team_slave_1 added
[  454.762898][T30995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.771119][T30995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.815378][T30995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.831576][T29342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.854062][T30995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.871305][T30995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.945898][T30995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.973007][T29342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.037918][T32195] netlink: 'syz.3.3074': attribute type 1 has an invalid length.
[  455.111122][T30995] hsr_slave_0: entered promiscuous mode
[  455.121832][T30995] hsr_slave_1: entered promiscuous mode
[  455.131384][T30995] debugfs: 'hsr0' already exists in 'hsr'
[  455.137569][T30995] Cannot create hsr debugfs directory
[  455.143185][ T8667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.153644][ T8667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.249104][ T8667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.258042][ T8667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.359736][T32325] netlink: 822 bytes leftover after parsing attributes in process `syz.4.3079'.
[  455.481159][ T7468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.521789][ T7468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.593076][ T8665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.614594][ T8665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.662641][T32440] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3084'.
[  455.897846][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3085'.
[  456.107269][T30995] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  456.150797][T30995] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  456.182033][T30995] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  456.199670][T30995] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  456.225113][T32558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3088'.
[  456.243609][T32558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3088'.
[  456.660846][T30995] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.699238][T30995] 8021q: adding VLAN 0 to HW filter on device team0
[  456.740736][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.747934][ T8667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.768756][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.775944][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.944128][T32593] netlink: 'syz.4.3098': attribute type 10 has an invalid length.
[  456.969753][T32593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3098'.
[  457.112435][T32600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3099'.
[  457.171871][T30995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.244794][T32605] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  457.271034][T30995] veth0_vlan: entered promiscuous mode
[  457.302054][T30995] veth1_vlan: entered promiscuous mode
[  457.416095][T30995] veth0_macvtap: entered promiscuous mode
[  457.439989][T30995] veth1_macvtap: entered promiscuous mode
[  457.484907][T30995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.509078][T30995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.530778][ T8667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.549720][ T8667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.569928][ T8667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.595167][ T8667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.714410][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.754779][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.827114][ T8675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.847734][ T8675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.921307][  T367] netlink: 'syz.6.3110': attribute type 13 has an invalid length.
[  457.929445][  T367] macvtap0: entered promiscuous mode
[  457.937122][  T367] macvtap0: refused to change device tx_queue_len
[  458.102391][  T376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3029'.
[  458.125688][  T380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3114'.
[  458.176641][  T380] netlink: 'syz.5.3114': attribute type 10 has an invalid length.
[  458.184514][  T380] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3114'.
[  458.480290][  T493] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3118'.
[  458.540539][  T493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3118'.
[  458.555372][  T493] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3118'.
[  458.564349][  T493] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3118'.
[  458.835578][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  458.844564][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  458.846449][  T605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3122'.
[  458.870369][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  458.890005][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  458.907146][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  458.982496][  T674] netlink: 'syz.3.3123': attribute type 21 has an invalid length.
[  459.422927][ T8675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.712536][ T8675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.798424][ T8665] wlan1: Trigger new scan to find an IBSS to join
[  459.865919][ T8675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.172297][ T8675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.429459][  T961] syz.6.3132: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  460.487870][  T961] CPU: 1 UID: 0 PID: 961 Comm: syz.6.3132 Not tainted syzkaller #0 PREEMPT(full) 
[  460.487894][  T961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  460.487905][  T961] Call Trace:
[  460.487912][  T961]  <TASK>
[  460.487920][  T961]  dump_stack_lvl+0x189/0x250
[  460.487951][  T961]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.487971][  T961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.488016][  T961]  warn_alloc+0x214/0x310
[  460.488043][  T961]  ? __pfx_warn_alloc+0x10/0x10
[  460.488074][  T961]  ? __get_vm_area_node+0x28f/0x300
[  460.488107][  T961]  ? hash_ipmac_create+0x358/0xfe0
[  460.488137][  T961]  __vmalloc_node_range_noprof+0x690/0x12d0
[  460.488190][  T961]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  460.488207][  T961]  ? hash_ipmac_create+0x358/0xfe0
[  460.488234][  T961]  ? rcu_is_watching+0x15/0xb0
[  460.488254][  T961]  ? hash_ipmac_create+0x358/0xfe0
[  460.488275][  T961]  __kvmalloc_node_noprof+0x674/0x910
[  460.488294][  T961]  ? hash_ipmac_create+0x358/0xfe0
[  460.488315][  T961]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  460.488331][  T961]  ? hash_ipmac_create+0x2fe/0xfe0
[  460.488361][  T961]  hash_ipmac_create+0x358/0xfe0
[  460.488403][  T961]  ? __nla_parse+0x40/0x60
[  460.488424][  T961]  ? __pfx_hash_ipmac_create+0x10/0x10
[  460.488451][  T961]  ip_set_create+0xa97/0x1940
[  460.488470][  T961]  ? ip_set_create+0x4a2/0x1940
[  460.488500][  T961]  ? __pfx_ip_set_create+0x10/0x10
[  460.488557][  T961]  nfnetlink_rcv_msg+0xb4d/0x1130
[  460.488577][  T961]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  460.488618][  T961]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  460.488632][  T961]  ? kasan_save_track+0x4f/0x80
[  460.488701][  T961]  netlink_rcv_skb+0x208/0x470
[  460.488718][  T961]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.488738][  T961]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  460.488758][  T961]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  460.488794][  T961]  ? bpf_lsm_capable+0x9/0x20
[  460.488816][  T961]  ? security_capable+0x7e/0x2e0
[  460.488851][  T961]  nfnetlink_rcv+0x282/0x2590
[  460.488872][  T961]  ? __dev_queue_xmit+0x27b/0x3b90
[  460.488897][  T961]  ? __dev_queue_xmit+0x1d91/0x3b90
[  460.488917][  T961]  ? kasan_save_track+0x3e/0x80
[  460.488931][  T961]  ? __kasan_slab_alloc+0x6c/0x80
[  460.488953][  T961]  ? __sock_sendmsg+0x21c/0x270
[  460.488982][  T961]  ? __dev_queue_xmit+0x27b/0x3b90
[  460.489020][  T961]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  460.489038][  T961]  ? __pfx___dev_queue_xmit+0x10/0x10
[  460.489079][  T961]  ? ref_tracker_free+0x63a/0x7d0
[  460.489099][  T961]  ? __asan_memcpy+0x40/0x70
[  460.489123][  T961]  ? __pfx_ref_tracker_free+0x10/0x10
[  460.489161][  T961]  ? skb_clone+0x246/0x3a0
[  460.489187][  T961]  ? __netlink_deliver_tap+0x807/0x850
[  460.489206][  T961]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.489235][  T961]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.489265][  T961]  netlink_unicast+0x82f/0x9e0
[  460.489294][  T961]  ? __pfx_netlink_unicast+0x10/0x10
[  460.489313][  T961]  ? __sanitizer_cov_trace_pc+0x3c/0x70
[  460.489347][  T961]  netlink_sendmsg+0x805/0xb30
[  460.489379][  T961]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.489410][  T961]  ? aa_sock_msg_perm+0xf1/0x1d0
[  460.489432][  T961]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  460.489451][  T961]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.489473][  T961]  __sock_sendmsg+0x21c/0x270
[  460.489503][  T961]  ____sys_sendmsg+0x505/0x830
[  460.489533][  T961]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.489567][  T961]  ? import_iovec+0x74/0xa0
[  460.489596][  T961]  ___sys_sendmsg+0x21f/0x2a0
[  460.489620][  T961]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.489689][  T961]  ? __fget_files+0x2a/0x420
[  460.489707][  T961]  ? __fget_files+0x3a0/0x420
[  460.489740][  T961]  __x64_sys_sendmsg+0x19b/0x260
[  460.489765][  T961]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  460.489806][  T961]  ? do_syscall_64+0xbe/0xfa0
[  460.489829][  T961]  do_syscall_64+0xfa/0xfa0
[  460.489848][  T961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.489864][  T961]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.489881][  T961]  ? clear_bhb_loop+0x60/0xb0
[  460.489904][  T961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.489930][  T961] RIP: 0033:0x7fe61a38f749
[  460.489948][  T961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.489963][  T961] RSP: 002b:00007fe61b153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.489983][  T961] RAX: ffffffffffffffda RBX: 00007fe61a5e5fa0 RCX: 00007fe61a38f749
[  460.489996][  T961] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  460.490008][  T961] RBP: 00007fe61a413f91 R08: 0000000000000000 R09: 0000000000000000
[  460.490019][  T961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.490030][  T961] R13: 00007fe61a5e6038 R14: 00007fe61a5e5fa0 R15: 00007fffc539d668
[  460.490066][  T961]  </TASK>
[  460.490764][  T961] Mem-Info:
[  460.567053][ T1095] netlink: 'syz.2.3139': attribute type 10 has an invalid length.
[  460.995434][ T5832] Bluetooth: hci4: command tx timeout
[  460.997412][  T961] active_anon:6324 inactive_anon:0 isolated_anon:0
[  460.997412][  T961]  active_file:20295 inactive_file:40051 isolated_file:0
[  460.997412][  T961]  unevictable:768 dirty:82 writeback:0
[  460.997412][  T961]  slab_reclaimable:7687 slab_unreclaimable:104016
[  460.997412][  T961]  mapped:29158 shmem:1356 pagetables:1135
[  460.997412][  T961]  sec_pagetables:0 bounce:0
[  460.997412][  T961]  kernel_misc_reclaimable:0
[  460.997412][  T961]  free:1291416 free_pcp:32650 free_cma:0
[  461.121221][  T961] Node 0 active_anon:25296kB inactive_anon:0kB active_file:81180kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116632kB dirty:328kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14576kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  461.226853][  T961] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  461.262963][  T961] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  461.314207][  T961] lowmem_reserve[]: 0 2505 2505 2505 2505
[  461.323052][  T961] Node 0 DMA32 free:1261608kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25296kB inactive_anon:0kB active_file:81180kB inactive_file:160000kB unevictable:1536kB writepending:328kB zspages:0kB present:3129332kB managed:2565128kB mlocked:0kB bounce:0kB free_pcp:111676kB local_pcp:24292kB free_cma:0kB
[  461.358751][ T1108] netlink: 'syz.3.3141': attribute type 1 has an invalid length.
[  461.367194][ T1109] netlink: 'syz.3.3141': attribute type 1 has an invalid length.
[  461.377752][ T1108] netlink: 'syz.3.3141': attribute type 3 has an invalid length.
[  461.394419][  T961] lowmem_reserve[]: 0 0 0 0 0
[  461.422842][  T961] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  461.432375][ T1109] netlink: 'syz.3.3141': attribute type 3 has an invalid length.
[  461.453178][  T961] lowmem_reserve[]: 0 0 0 0 0
[  461.469330][  T961] Node 1 Normal free:3888696kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:8800kB free_cma:0kB
[  461.513669][  T961] lowmem_reserve[]: 0 0 0 0 0
[  461.521642][  T961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  461.540337][  T961] Node 0 DMA32: 802*4kB (UM) 968*8kB (UME) 673*16kB (UME) 2592*32kB (UME) 1570*64kB (UME) 590*128kB (UME) 375*256kB (UME) 186*512kB (UME) 39*1024kB (UME) 14*2048kB (M) 176*4096kB (M) = 1261400kB
[  461.563651][  T961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  461.583750][  T961] Node 1 Normal: 216*4kB (UE) 57*8kB (UME) 43*16kB (UME) 83*32kB (UME) 24*64kB (UME) 6*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3888696kB
[  461.695588][  T961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  461.706342][  T961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  461.717159][  T961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  461.754573][  T961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  461.817945][  T961] 61698 total pagecache pages
[  461.823361][  T961] 0 pages in swap cache
[  461.831539][  T961] Free swap  = 124996kB
[  461.841695][  T961] Total swap = 124996kB
[  461.861129][  T961] 2097051 pages RAM
[  461.866953][  T961] 0 pages HighMem/MovableOnly
[  461.916239][  T961] 424127 pages reserved
[  461.923564][  T961] 0 pages cma reserved
[  462.592458][ T8675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.613721][ T8675] bond_slave_1: left promiscuous mode
[  462.620970][ T8675] bond_slave_1: left allmulticast mode
[  462.630402][ T8675] bond0 (unregistering): Released all slaves
[  462.700915][  T604] chnl_net:caif_netlink_parms(): no params data found
[  462.768578][ T8675] : left promiscuous mode
[  462.975346][ T8675] : left promiscuous mode
[  463.076929][ T8675] !��9: left promiscuous mode
[  463.083035][ T5832] Bluetooth: hci4: command tx timeout
[  463.260553][  T604] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.283047][ T1572] __nla_validate_parse: 7 callbacks suppressed
[  463.283064][ T1572] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3159'.
[  463.285355][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.309664][  T604] bridge_slave_0: entered allmulticast mode
[  463.338041][  T604] bridge_slave_0: entered promiscuous mode
[  463.464849][  T604] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.466554][ T1601] netlink: 'syz.5.3160': attribute type 1 has an invalid length.
[  463.472628][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.523572][  T604] bridge_slave_1: entered allmulticast mode
[  463.535747][  T604] bridge_slave_1: entered promiscuous mode
[  463.613815][ T1572] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3159'.
[  463.667576][  T604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.701246][  T604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.751907][ T1705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3163'.
[  463.761357][ T1705] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3163'.
[  463.772762][ T1705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3163'.
[  463.785057][ T1705] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3163'.
[  463.796607][ T1705] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3163'.
[  463.805869][ T7468] wlan1: Trigger new scan to find an IBSS to join
[  463.873784][  T604] team0: Port device team_slave_0 added
[  463.902036][  T604] team0: Port device team_slave_1 added
[  464.058189][  T604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.067155][  T604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.093814][  T604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.119075][  T604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.126368][  T604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.153871][  T604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.221029][ T1817] netlink: 'syz.6.3167': attribute type 21 has an invalid length.
[  464.414023][ T1817] netlink: 'syz.6.3167': attribute type 1 has an invalid length.
[  464.423806][ T1817] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3167'.
[  464.770416][ T7468] wlan1: Creating new IBSS network, BSSID de:1f:27:8c:a4:fa
[  464.934242][  T604] hsr_slave_0: entered promiscuous mode
[  464.941274][  T604] hsr_slave_1: entered promiscuous mode
[  464.948795][  T604] debugfs: 'hsr0' already exists in 'hsr'
[  464.955226][  T604] Cannot create hsr debugfs directory
[  465.030834][ T1938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'.
[  465.077375][ T1936] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3171'.
[  465.086953][ T1936] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  465.155474][ T5832] Bluetooth: hci4: command tx timeout
[  465.301703][ T1940] �a���: renamed from bond_slave_0 (while UP)
[  465.794525][ T8675] hsr_slave_1: left promiscuous mode
[  465.808619][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.846685][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.011158][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.026388][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.090968][ T2296] netlink: 'syz.6.3187': attribute type 2 has an invalid length.
[  467.099895][ T2296] netlink: 'syz.6.3187': attribute type 8 has an invalid length.
[  467.242019][ T5832] Bluetooth: hci4: command tx timeout
[  468.424154][ T2435] netlink: 'syz.2.3196': attribute type 13 has an invalid length.
[  468.465663][ T2435] netlink: 'syz.2.3196': attribute type 17 has an invalid length.
[  468.548031][ T2435] gretap0: refused to change device tx_queue_len
[  468.554893][ T2435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  468.625073][ T2446] __nla_validate_parse: 1 callbacks suppressed
[  468.625105][ T2446] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3199'.
[  468.833086][  T604] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  468.855099][  T604] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  468.931124][  T604] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  468.971580][  T604] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  469.177416][ T2718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3204'.
[  469.290241][ T2718] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.432927][ T2718] bridge_slave_1 (unregistering): left allmulticast mode
[  469.444966][ T2718] bridge_slave_1 (unregistering): left promiscuous mode
[  469.452888][ T2718] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.563500][ T2736] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode
[  469.663190][  T604] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.729726][ T2864] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3209'.
[  469.760791][  T604] 8021q: adding VLAN 0 to HW filter on device team0
[  469.809388][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.816903][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.856285][ T2864] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3209'.
[  469.868762][ T2864] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  469.903556][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.910814][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.916441][ T2877] netlink: 'syz.5.3213': attribute type 21 has an invalid length.
[  469.931013][ T2877] netlink: 'syz.5.3213': attribute type 1 has an invalid length.
[  470.193762][ T2877] ��
: port 1(veth0_to_bridge) entered blocking state
[  470.217091][ T2877] ��
: port 1(veth0_to_bridge) entered disabled state
[  470.233182][ T2877] veth0_to_bridge: entered allmulticast mode
[  470.326194][ T2877] veth0_to_bridge: entered promiscuous mode
[  470.444124][ T2989] netlink: 8752 bytes leftover after parsing attributes in process `syz.6.3215'.
[  470.593455][  T604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.777762][ T3002] block nbd1: not configured, cannot reconfigure
[  471.176789][ T3123] netlink: 774 bytes leftover after parsing attributes in process `syz.5.3225'.
[  471.261583][ T3149] netlink: 'syz.3.3226': attribute type 5 has an invalid length.
[  471.311928][  T604] veth0_vlan: entered promiscuous mode
[  471.329605][  T604] veth1_vlan: entered promiscuous mode
[  471.416714][  T604] veth0_macvtap: entered promiscuous mode
[  471.429505][  T604] veth1_macvtap: entered promiscuous mode
[  471.457766][  T604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.472829][  T604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.499332][ T7468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.509055][ T7468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.521138][ T7468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.531478][ T7468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.688617][ T3343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3230'.
[  471.703100][ T7468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.720645][ T7468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.758790][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.768185][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.843503][ T5832] Bluetooth: hci5: unexpected subevent 0x0c length: 150 > 5
[  472.082503][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3235'.
[  472.114877][ T3466] netlink: 'syz.4.3115': attribute type 39 has an invalid length.
[  472.181056][ T3470] netlink: 'syz.2.3234': attribute type 21 has an invalid length.
[  472.197031][ T3470] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3234'.
[  472.880836][ T3693] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3243'.
[  472.898343][ T3693] hsr_slave_0: left promiscuous mode
[  472.918678][ T3693] hsr_slave_1: left promiscuous mode
[  473.025654][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  473.037001][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  473.046194][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  473.058508][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  473.066323][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  473.292052][ T8675] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.430741][ T8675] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.479856][ T3821] netlink: 'syz.4.3250': attribute type 2 has an invalid length.
[  473.596716][ T8675] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.722972][ T3914] netlink: 'syz.5.3251': attribute type 39 has an invalid length.
[  473.743654][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  473.776574][ T3925] __nla_validate_parse: 1 callbacks suppressed
[  473.776591][ T3925] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3251'.
[  473.806336][ T3925] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3251'.
[  473.820189][ T3929] netlink: 'syz.6.3254': attribute type 21 has an invalid length.
[  473.833636][ T3925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3251'.
[  473.848918][ T8675] netdevsim netdevsim3 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.940294][ T3932] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3255'.
[  473.960777][ T4024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3255'.
[  474.165834][ T4038] netlink: 'syz.2.3256': attribute type 10 has an invalid length.
[  474.179419][ T4038] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3256'.
[  474.324284][ T8675] bridge0: port 3(dummy0) entered disabled state
[  474.358760][ T8675] bridge_slave_0: left allmulticast mode
[  474.378263][ T8675] bridge_slave_0: left promiscuous mode
[  474.415133][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.904336][ T8675] team0: Port device bridge0 removed
[  474.989598][ T3729] chnl_net:caif_netlink_parms(): no params data found
[  475.161224][ T5832] Bluetooth: hci1: command tx timeout
[  475.214700][ T8675] [���: left promiscuous mode
[  475.272910][ T4191] netlink: 'syz.4.3267': attribute type 1 has an invalid length.
[  475.430860][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.446031][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.463510][ T3729] bridge_slave_0: entered allmulticast mode
[  475.483708][ T3729] bridge_slave_0: entered promiscuous mode
[  477.269618][ T5832] Bluetooth: hci1: command tx timeout
[  478.462329][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.474113][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.505516][ T3729] bridge_slave_1: entered allmulticast mode
[  478.517825][ T3729] bridge_slave_1: entered promiscuous mode
[  479.323554][ T5832] Bluetooth: hci1: command tx timeout
[  479.864893][ T3729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.875397][ T4206] dvmrp1: tun_chr_ioctl cmd 1074025684
[  479.886454][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3275'.
[  479.943509][ T3729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.148159][ T3729] team0: Port device team_slave_0 added
[  480.197355][ T3729] team0: Port device team_slave_1 added
[  480.480923][ T4526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3278'.
[  480.520565][ T4648] netlink: 'syz.5.3281': attribute type 46 has an invalid length.
[  480.761864][ T3729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.775145][ T3729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.827206][ T3729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.874220][ T3729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.903073][ T3729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.991670][ T3729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.316002][ T3729] hsr_slave_0: entered promiscuous mode
[  481.323324][ T3729] hsr_slave_1: entered promiscuous mode
[  481.331689][ T3729] debugfs: 'hsr0' already exists in 'hsr'
[  481.338190][ T3729] Cannot create hsr debugfs directory
[  481.415654][ T5832] Bluetooth: hci1: command tx timeout
[  482.068416][ T4885] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3293'.
[  482.496009][ T4902] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  483.143340][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'.
[  486.297360][ T5022] netlink: 'syz.5.3301': attribute type 10 has an invalid length.
[  486.339182][ T5022] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3301'.
[  486.574158][ T5096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3299'.
[  486.648632][ T5116] netlink: 'syz.5.3303': attribute type 10 has an invalid length.
[  486.801675][ T5116] geneve0: entered promiscuous mode
[  486.901585][ T5116] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  486.909821][ T5143] netlink: 'syz.6.3306': attribute type 21 has an invalid length.
[  486.919192][ T5143] IPv6: NLM_F_CREATE should be specified when creating new route
[  486.927196][ T5143] IPv6: Can't replace route, no match found
[  486.940817][ T8675] hsr_slave_0: left promiscuous mode
[  486.947052][ T8675] hsr_slave_1: left promiscuous mode
[  486.963233][ T8675] veth1_macvtap: left promiscuous mode
[  486.969631][ T8675] veth0_macvtap: left promiscuous mode
[  486.976573][ T8675] veth1_vlan: left allmulticast mode
[  486.981930][ T8675] veth1_vlan: left promiscuous mode
[  486.987416][ T8675] veth0_vlan: left promiscuous mode
[  487.177255][ T8675] team0 (unregistering): Port device macvlan1 removed
[  487.415181][ T8675] team0 (unregistering): Port device team_slave_1 removed
[  487.485039][ T8667] smc: removing ib device syz1
[  487.820007][ T5262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3310'.
[  487.847781][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3310'.
[  487.939723][ T5262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3310'.
[  487.958503][ T5262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3310'.
[  488.380129][ T5449] xt_bpf: check failed: parse error
[  488.387948][ T5449] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3315'.
[  488.532038][ T3729] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  488.561106][ T3729] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  488.598306][ T5487] netlink: 'syz.4.3317': attribute type 10 has an invalid length.
[  488.617087][ T5487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3317'.
[  488.624740][ T3729] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  488.648675][ T3729] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  488.760847][ T5487] batman_adv: batadv0: Adding interface: virt_wifi0
[  488.814365][ T5487] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.849422][ T5487] batman_adv: batadv0: Interface activated: virt_wifi0
[  489.003224][ T5515] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3322'.
[  489.028298][ T5515] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  489.191736][ T5517] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3323'.
[  489.207859][ T3729] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.259691][ T3729] 8021q: adding VLAN 0 to HW filter on device team0
[  489.302874][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.310111][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.359404][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.366608][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.557237][ T5528] netlink: 'syz.2.3324': attribute type 10 has an invalid length.
[  490.142543][ T5689] netlink: 'syz.4.3331': attribute type 1 has an invalid length.
[  490.222019][ T3729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.346714][ T8675] ------------[ cut here ]------------
[  490.352508][ T8675] WARNING: CPU: 0 PID: 8675 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0
[  490.363395][ T8675] Modules linked in:
[  490.368568][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: kworker/u8:62 Not tainted syzkaller #0 PREEMPT(full) 
[  490.378706][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  490.389171][ T8675] Workqueue: netns cleanup_net
[  490.393966][ T8675] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  490.400076][ T8675] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 7a 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 5e 1a f8 e8 24 66 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 66 d4 f7 90 0f 0b 90 e9 60 fe ff ff
[  490.403696][ T3729] veth0_vlan: entered promiscuous mode
[  490.420592][ T8675] RSP: 0018:ffffc90004baf878 EFLAGS: 00010293
[  490.432293][ T8675] RAX: ffffffff89eba0bc RBX: ffff888031e98000 RCX: ffff88801df8bc80
[  490.441079][ T8675] RDX: 0000000000000000 RSI: ffffffff8d8f5a0a RDI: ffff88801df8bc80
[  490.450253][ T8675] RBP: ffffc90004baf990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce
[  490.459391][ T8675] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffffff8f3c6e80
[  490.468700][ T8675] R13: 1ffff92000975f3c R14: ffff888031e994c0 R15: dffffc0000000000
[  490.477572][ T8675] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  490.484273][ T5761] netlink: 'syz.5.3332': attribute type 22 has an invalid length.
[  490.487002][ T8675] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  490.501653][ T8675] CR2: 00007f5ec19edf98 CR3: 0000000063478000 CR4: 00000000003526f0
[  490.502761][ T3729] veth1_vlan: entered promiscuous mode
[  490.510151][ T8675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  490.524639][ T8675] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  490.533608][ T8675] Call Trace:
[  490.537459][ T8675]  <TASK>
[  490.540414][ T8675]  xfrm_net_exit+0x2d/0x70
[  490.544843][ T8675]  ops_undo_list+0x49a/0x990
[  490.550563][ T8675]  ? __pfx_ops_undo_list+0x10/0x10
[  490.556277][ T8675]  ? do_raw_spin_unlock+0x122/0x240
[  490.562634][ T8675]  cleanup_net+0x4d8/0x820
[  490.568022][ T8675]  ? __pfx_cleanup_net+0x10/0x10
[  490.573457][ T8675]  ? _raw_spin_unlock_irq+0x23/0x50
[  490.579411][ T8675]  ? process_scheduled_works+0x9ef/0x17b0
[  490.580072][ T3729] veth0_macvtap: entered promiscuous mode
[  490.585143][ T8675]  ? process_scheduled_works+0x9ef/0x17b0
[  490.585170][ T8675]  process_scheduled_works+0xae1/0x17b0
[  490.599020][ T3729] veth1_macvtap: entered promiscuous mode
[  490.603360][ T8675]  ? __pfx_process_scheduled_works+0x10/0x10
[  490.616346][ T8675]  worker_thread+0x8a0/0xda0
[  490.620989][ T8675]  kthread+0x711/0x8a0
[  490.625099][ T8675]  ? __pfx_worker_thread+0x10/0x10
[  490.628051][ T3729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.630752][ T8675]  ? __pfx_kthread+0x10/0x10
[  490.642756][ T8675]  ? _raw_spin_unlock_irq+0x23/0x50
[  490.648429][ T3729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.656354][ T8675]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.662610][ T8675]  ? __pfx_kthread+0x10/0x10
[  490.662741][ T8666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.668465][ T8675]  ret_from_fork+0x4bc/0x870
[  490.681709][ T8675]  ? __pfx_ret_from_fork+0x10/0x10
[  490.687438][ T8675]  ? __switch_to_asm+0x39/0x70
[  490.688044][ T8666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.692649][ T8675]  ? __switch_to_asm+0x33/0x70
[  490.692668][ T8675]  ? __pfx_kthread+0x10/0x10
[  490.712025][ T8675]  ret_from_fork_asm+0x1a/0x30
[  490.717294][ T8675]  </TASK>
[  490.720321][ T8675] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  490.727589][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: kworker/u8:62 Not tainted syzkaller #0 PREEMPT(full) 
[  490.737335][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  490.747401][ T8675] Workqueue: netns cleanup_net
[  490.752172][ T8675] Call Trace:
[  490.755442][ T8675]  <TASK>
[  490.758367][ T8675]  dump_stack_lvl+0x99/0x250
[  490.762971][ T8675]  ? __asan_memcpy+0x40/0x70
[  490.767575][ T8675]  ? __pfx_dump_stack_lvl+0x10/0x10
[  490.772765][ T8675]  ? __pfx__printk+0x10/0x10
[  490.777372][ T8675]  vpanic+0x237/0x6d0
[  490.781375][ T8675]  ? __pfx_vpanic+0x10/0x10
[  490.785879][ T8675]  panic+0xb9/0xc0
[  490.789594][ T8675]  ? __pfx_panic+0x10/0x10
[  490.794014][ T8675]  __warn+0x31b/0x4b0
[  490.798012][ T8675]  ? xfrm_state_fini+0x26d/0x2f0
[  490.802949][ T8675]  ? xfrm_state_fini+0x26d/0x2f0
[  490.807893][ T8675]  report_bug+0x2be/0x4f0
[  490.812215][ T8675]  ? xfrm_state_fini+0x26d/0x2f0
[  490.817149][ T8675]  ? xfrm_state_fini+0x26d/0x2f0
[  490.822082][ T8675]  ? xfrm_state_fini+0x26f/0x2f0
[  490.827034][ T8675]  handle_bug+0x84/0x160
[  490.831301][ T8675]  exc_invalid_op+0x1a/0x50
[  490.835799][ T8675]  asm_exc_invalid_op+0x1a/0x20
[  490.840640][ T8675] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  490.846187][ T8675] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 7a 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 5e 1a f8 e8 24 66 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 66 d4 f7 90 0f 0b 90 e9 60 fe ff ff
[  490.865786][ T8675] RSP: 0018:ffffc90004baf878 EFLAGS: 00010293
[  490.871849][ T8675] RAX: ffffffff89eba0bc RBX: ffff888031e98000 RCX: ffff88801df8bc80
[  490.879811][ T8675] RDX: 0000000000000000 RSI: ffffffff8d8f5a0a RDI: ffff88801df8bc80
[  490.887777][ T8675] RBP: ffffc90004baf990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce
[  490.895744][ T8675] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffffff8f3c6e80
[  490.903715][ T8675] R13: 1ffff92000975f3c R14: ffff888031e994c0 R15: dffffc0000000000
[  490.911696][ T8675]  ? xfrm_state_fini+0x26c/0x2f0
[  490.916644][ T8675]  ? xfrm_state_fini+0x26c/0x2f0
[  490.921579][ T8675]  xfrm_net_exit+0x2d/0x70
[  490.925990][ T8675]  ops_undo_list+0x49a/0x990
[  490.930585][ T8675]  ? __pfx_ops_undo_list+0x10/0x10
[  490.935687][ T8675]  ? do_raw_spin_unlock+0x122/0x240
[  490.940887][ T8675]  cleanup_net+0x4d8/0x820
[  490.945297][ T8675]  ? __pfx_cleanup_net+0x10/0x10
[  490.950226][ T8675]  ? _raw_spin_unlock_irq+0x23/0x50
[  490.955415][ T8675]  ? process_scheduled_works+0x9ef/0x17b0
[  490.961122][ T8675]  ? process_scheduled_works+0x9ef/0x17b0
[  490.966827][ T8675]  process_scheduled_works+0xae1/0x17b0
[  490.972386][ T8675]  ? __pfx_process_scheduled_works+0x10/0x10
[  490.978375][ T8675]  worker_thread+0x8a0/0xda0
[  490.982982][ T8675]  kthread+0x711/0x8a0
[  490.987140][ T8675]  ? __pfx_worker_thread+0x10/0x10
[  490.992327][ T8675]  ? __pfx_kthread+0x10/0x10
[  490.997009][ T8675]  ? _raw_spin_unlock_irq+0x23/0x50
[  491.002199][ T8675]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.007391][ T8675]  ? __pfx_kthread+0x10/0x10
[  491.011975][ T8675]  ret_from_fork+0x4bc/0x870
[  491.016739][ T8675]  ? __pfx_ret_from_fork+0x10/0x10
[  491.021967][ T8675]  ? __switch_to_asm+0x39/0x70
[  491.026762][ T8675]  ? __switch_to_asm+0x33/0x70
[  491.031519][ T8675]  ? __pfx_kthread+0x10/0x10
[  491.036111][ T8675]  ret_from_fork_asm+0x1a/0x30
[  491.040883][ T8675]  </TASK>
[  491.044247][ T8675] Kernel Offset: disabled
[  491.048561][ T8675] Rebooting in 86400 seconds..