last executing test programs:

4.701542403s ago: executing program 1 (id=734):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES32], 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x8000)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x208, 0x33, 0x100, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x1f4, 0xcf, 0x0, 0x1, [@generic="ff739fa851764afeadacf53685210e7955252b18e429456e9e39fc50206cff07babbcf402d42c88471faa4a181435b53aa54de7675b27475027790a4ea3ff23d4bc4b294fc0f7efef6c7cd6256c1f1aaad39e7bb93ca9e06199c63a3fbc3b4420bff81a0c6a67723489a1df2efc5adfc0a3eadc9a092e86f6e8930c984a370143853c38bf49457e42146b639313e3d4a615fc32172365b7e5610c4a5689356fad9555a4cb7ba602fee7ca9600b7597df0f6106b414042c52a1d099be6596a7e89c46533981dba1c2aad23017d4e5192785da49315ab3d0fa4bd3cf5f097080ecbcb85f5e1493b5b3208a48bbad77357ddc5aeea794b2", @typed={0xc, 0xf5, 0x0, 0x0, @u64=0x8a}, @nested={0x4, 0xcf}, @generic="efe337547cdb4c5de35f18b6724b90b427fcf40bee789b0908e42ca3cdad045d773314b57a66132d94a637ef4a36b71ff92a703446cb68d779fbdf7b505aff40bdcdbf750c523cea67ab9fb6b554822a7248b854188d2ec5fea72b8e6411240d19affb1936578218c39e159b9f9213e1b707cc9e9035fadaafb265e69459efef0954820fa78ed30860d75eb19c506e4d683bf77e648d4501aae5fc8638ef8f37bcc1245e35ac7c7aa3110f43a4abe92d4d8e9c1c2b6aa3def9377b60a5e2b19ed508f754cf3a19c3f277bab0373a395fc7e178e41ebdc0af0482c979b2e246c5514aa7c8113ac8c33ec8"]}]}, 0x208}, 0x1, 0x0, 0x0, 0x8}, 0x4000010)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK    \x00'}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7fff, 0x101, 0x1, 0x200, r7, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0xc}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004801}, 0x54885)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4002}, 0x0)

4.459598809s ago: executing program 4 (id=737):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x5}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = syz_clone(0xc220000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x84, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'GPL\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x3, 0x7, 0x8, 0x0, 0xff, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x8000}, 0x204, 0x8300000000000000, 0xc066de7c, 0x2, 0x4, 0x9, 0x1, 0x0, 0xffff, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r0, 0x5)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000001401002dbd7000f65bdfbbfd00ea45b769b2befffbaa7e2af8ff24090041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @local})

4.09888883s ago: executing program 0 (id=740):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2d, 0x0, 0x0, 0x4, 0x6, 0xfffc, 0x0, 0x0, 0x0, 0x862ed}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x20082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000240)}, 0x14105, 0x0, 0xffbffbff, 0x3, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x5, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x3, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x1000000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x3, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x1000000}, 0x94)
socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080))
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x1ff}, 0xfffffffffffffe1a) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x1ff}, 0xfffffffffffffe1a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80a8, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r2, 0x9)
socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x40810) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x40810)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
getpid()
fstat(r3, &(0x7f00000004c0)) (async)
fstat(r3, &(0x7f00000004c0))
fstat(r4, &(0x7f0000000540))
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00'/12, @ANYRES32, @ANYBLOB="907998dcaabb60ed7242", @ANYRES64=0x0], 0x20)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async)
sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000002b40)="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", 0x157}], 0x2}, 0x8400)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0x36, 0x0, &(0x7f0000000180)="0700c06e775346ac987953e586dd2e6baabc18f486b4cbbd5f58c78b3c36170dd6ad4f5e8cb046a5f1b61f2adf25df66d666e587854d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff800}, 0x39)
sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10}, 0x0)

3.676961738s ago: executing program 0 (id=741):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
socket$kcm(0x11, 0xa, 0x300)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x18000}], 0x20}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x1b, 0x800, 0xfecc, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0xfffffffc, 0x0, 0x80000001, 0xfffffffc, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000040), &(0x7f00000001c0)=r1}, 0x20)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x2, 0x0, 0x0, 0x3318, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'w%,\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000002}, 0x90)

3.667275328s ago: executing program 4 (id=743):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00020001ffe72037153e370c04018006041000450000002a560000e7ff0040", 0x2c}, {&(0x7f0000000600)="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", 0x3bf}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85", 0x4a}], 0x3}, 0x10049014)

3.527643996s ago: executing program 2 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.527044115s ago: executing program 1 (id=745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0)

3.20316415s ago: executing program 1 (id=746):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf", 0x4f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x2c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.000390781s ago: executing program 2 (id=747):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66a}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="2e0000003c000511d25a8069ecb0344a0418cb44b0fa0bf4cace8c6394b9027c92b47795140d010000c4d196c6a6", 0x2e}], 0x1b, 0x0, 0x5, 0x39c}, 0x410) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
socket(0x2, 0x800, 0x9) (async)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x11c941, 0x4, 0x0, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0xd, 0xe, 0x2, 0x3, 0x10000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200070f00000a0001"], 0x28}}, 0x4040080) (async)
socket$kcm(0x29, 0x1, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0xffffffffffffffe3, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) (async, rerun: 32)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x7}, 0x40012100) (rerun: 32)

2.78452097s ago: executing program 4 (id=748):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4004)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@private=0xa010100, 0xfffd, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@local, 0x0, 0x3c}, @in6=@local, {0x0, 0x10000000000000b5, 0x2}, {0x0, 0x200000, 0x3, 0xfffffffffffffffd}, {0x40000, 0x0, 0x2c12}, 0x8, 0x0, 0xa, 0x2, 0x0, 0x68}, [@tfcpad={0x8, 0x16, 0x800}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.022797566s ago: executing program 3 (id=749):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r1 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
recvmsg(r1, 0x0, 0x40000000)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x80000001, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.996626309s ago: executing program 4 (id=750):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x10000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0x400b, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x2, &(0x7f0000000200), 0x4)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004891}, 0x8000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0)
close(r4)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random})

1.944371682s ago: executing program 1 (id=751):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r4}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r5], 0x12)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000200850000008600", @ANYRESOCT, @ANYBLOB="60a757428e4f71713239d1bf40d079dd1b07276b753df4430776fe5b01354d1297a85913625e7dcb19a06c254d508e50fbdb7086c387ab5bb2a500f1f1d45136b6f892043388060e5c2e05ef87b60aa20ba59aa00085e775ac37a30eaf95660d9d70935f7aff37d441786ed9cd88fe2e18532c8a5a10a9c0c88d7a64ee7e8b23711a595d109139af48736434ce6c60b9a3cb0d607e0a5e219d3427c940ad808656d26c7fcc87c1617cbf43cee18a64a6f925eb5fd44830"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async)
perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') (async)
mkdir(0x0, 0x101)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000007000000480000000c"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.942579318s ago: executing program 2 (id=752):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7fffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82041, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb8, 0x0, @perf_config_ext={0x20000, 0x1946}, 0x108084, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xa) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) (async)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4315}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async)
r5 = socket$kcm(0x2, 0x1, 0x84) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701f8ffffffb702000008000000b703000004000000850000007100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$NFT_BATCH(r6, 0x0, 0x4004101) (async)
r8 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)}, 0x30000040) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, 0x0, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x240000d1) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x8)

1.940676591s ago: executing program 0 (id=753):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0), 0x10) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x4d31, 0x12804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x401, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000089302000000000000000000020000000900010073797a30000000002c000000080a01010000000000000000020000000900020073797a32000000000900010073797a30"], 0xa0}}, 0x0)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/mnt\x00') (async, rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xeec1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x100)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async, rerun: 32)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000811290040000007195b7fd0000000000f5f7caeea496df0a11e534e51dd5bf0f2b5cd43f9276733930c756e78fb97dcc2af2bd40e8c6444404c714c516e2f94954f0bed271ce19c8de3b79309d1777adc93de52386a23b23866dca6b1431cb5f7ac23abdc36ee1f10400000000000000ef1ef6555db9ed9b580ac3158e8e66d4187b1ed64113d33a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))

1.716606887s ago: executing program 3 (id=754):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94)

1.699901371s ago: executing program 1 (id=755):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180fe", 0x29}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180fe", 0x29}], 0x1}, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x8004) (async)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x8004)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000020000000006139680000000000950000000000000049a5746ee052"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000020000000006139680000000000950000000000000049a5746ee052"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a000140063f0d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)

1.429012927s ago: executing program 2 (id=756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0)

1.267798044s ago: executing program 0 (id=757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.260970178s ago: executing program 3 (id=758):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) (async)
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) (async)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d34, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x102812, 0x0, 0x0, 0x1, 0x8000000, 0xa9, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x8, 0x80, 0x61, 0x2, 0xa0000001}]}, 0x20}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4000801}, 0xd0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x493a426f, 0x7}], "71f4"}, @datasec={0x6, 0x0, 0x0, 0xf, 0x2, [], "200f"}]}, {0x0, [0x5f]}}, &(0x7f0000000840)=""/206, 0x43, 0xce, 0x1, 0x1}, 0x28)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x8000008}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000380)=""/3, 0x2c, 0x3, 0x1}, 0x28) (async)
ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000001200)) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)

972.263015ms ago: executing program 2 (id=759):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0x0, 0x0})
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x37, 0x0, 0x5, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r2, 0x3, 0x0, r2, @void, @value=r6, @void, @void, r3}, 0x20)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x20, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xe32c}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x2, 0x5, 0xe, 0x4, 0x36f0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000280)='GPL\x00', 0xfffffff9, 0x96, &(0x7f0000000400)=""/150, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x16, 0x13fd48b0}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x3, 0x4, 0x3, 0xa}, {0x3, 0x5, 0x8, 0x6}, {0x5, 0x2, 0x8, 0xb}, {0x0, 0x3, 0xa, 0xb}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r7, r1, 0x37, 0x10, 0x0, @void, @value=r8, @void, @void, r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r9 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x1000000200, 0x3, 0x9, 0x0, 0x2401000a, 0xfffc, 0x0, 0x5, 0x0, 0x63}, 0x0, 0x1, r9, 0x0)
r10 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r10, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e24, 0xe, @mcast1, 0x7}, 0x80, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x4, 0x0, 0x400}}, @TCA_CT_ACTION={0x19, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

914.372435ms ago: executing program 1 (id=760):
r0 = syz_clone(0xc220000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef40942", 0x6c}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x8041, 0x4, 0x98, 0x0, 0x2, 0x3ff, 0xfffc, 0x0, 0x3e3a8ca, 0x0, 0x9}, r0, 0xffffffffffffffff, r1, 0x1cccde05e900232e)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4d31, 0x20208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x11211c, 0x2, 0xdc, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r9, 0x29, 0x16, &(0x7f0000000040), 0xcf)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000100040000d21900b84681cb6de95de096aab4ab7e3f52cea7b7025e4cca7255198cee30216e77a934f9debd4591de7ae12c4e7f0f74435e", @ANYRES32=0x0, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1fffffffffffffdf, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)

913.703993ms ago: executing program 0 (id=761):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x42)
write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x4, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94)
socket$kcm(0x29, 0x5, 0x0)

772.611108ms ago: executing program 4 (id=762):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet(0x2, 0xa, 0x400)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x69c6, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

771.600725ms ago: executing program 0 (id=763):
r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x9c7c, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r7}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7fffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r8 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
close(r8)
r11 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)

732.360625ms ago: executing program 3 (id=764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000200), &(0x7f0000000900)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x13, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3189, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
ioctl$TUNSETLINK(r0, 0x400454cc, 0x30a)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x804)

294.775018ms ago: executing program 4 (id=765):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000440))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400008c47c973e10d93924a7f7e03a1203e9a00000b0103000000000000000003000009"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x5e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000"], 0x0, 0x34}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000680)="26c43dddc811", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x41ceb28b7cefffbb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10)
close(r5)
socket$kcm(0xa, 0x2, 0x0)

184.665408ms ago: executing program 3 (id=766):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) (async)

149.281004ms ago: executing program 2 (id=767):
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x1f, 0x0, 0x1c000000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000)

0s ago: executing program 3 (id=768):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\\[$,*\x00') (async)
r2 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f00000013c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) (async, rerun: 32)
r7 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r8 = socket$key(0xf, 0x3, 0x2) (rerun: 64)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100", @ANYBLOB="c8"], 0x68}, 0x1, 0x7}, 0x4000004) (async, rerun: 32)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r7, 0x84, 0x79, &(0x7f0000000000)=r9, 0x8) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={0xffffffffffffffff, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0], <r10=>0x0, 0x3f, &(0x7f0000001740)=[{}, {}], 0x10, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001800)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)}, 0x20) (async)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001a40), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1b, 0x21, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffff7}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0xa, 0x0, 0x1, 0x40, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x0, 0x0, 0x4, 0x2, 0xb, 0x100, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='syzkaller\x00', 0xfffffffa, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x1, '\x00', r6, @fallback=0x7, r9, 0x8, &(0x7f0000001600)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0x6, 0x7, 0x12000}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000001a80)=[r11, r12, 0xffffffffffffffff], 0x0, 0x10, 0x1000}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
[   82.790456][ T5851] cgroup: Unknown subsys name 'net'
[   82.925421][ T5851] cgroup: Unknown subsys name 'cpuset'
[   82.935072][ T5851] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.643889][ T5851] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.383486][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.391557][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.409782][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.431813][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.443032][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.462277][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.481591][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.492402][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.492985][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.509063][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.509087][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.521317][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.524945][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.532355][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.538080][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.551545][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.560050][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.567776][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.568312][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.583033][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.585504][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.598299][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.610898][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.611483][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.618867][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.311635][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   88.342123][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   88.524402][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   88.635959][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   88.668911][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.676550][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.685105][ T5861] bridge_slave_0: entered allmulticast mode
[   88.693270][ T5861] bridge_slave_0: entered promiscuous mode
[   88.753337][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.760565][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.768942][ T5861] bridge_slave_1: entered allmulticast mode
[   88.776919][ T5861] bridge_slave_1: entered promiscuous mode
[   88.792490][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   88.805668][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.812890][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.820051][ T5868] bridge_slave_0: entered allmulticast mode
[   88.828189][ T5868] bridge_slave_0: entered promiscuous mode
[   88.836384][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.843651][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.851056][ T5868] bridge_slave_1: entered allmulticast mode
[   88.858468][ T5868] bridge_slave_1: entered promiscuous mode
[   88.967372][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.995650][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.009308][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.035402][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.098509][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.108497][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.115865][ T5862] bridge_slave_0: entered allmulticast mode
[   89.124169][ T5862] bridge_slave_0: entered promiscuous mode
[   89.149320][ T5861] team0: Port device team_slave_0 added
[   89.192383][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.199624][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.207876][ T5862] bridge_slave_1: entered allmulticast mode
[   89.215500][ T5862] bridge_slave_1: entered promiscuous mode
[   89.238485][ T5861] team0: Port device team_slave_1 added
[   89.296859][ T5868] team0: Port device team_slave_0 added
[   89.306545][ T5868] team0: Port device team_slave_1 added
[   89.359203][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.369666][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.377082][ T5874] bridge_slave_0: entered allmulticast mode
[   89.385878][ T5874] bridge_slave_0: entered promiscuous mode
[   89.411045][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.422020][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.429000][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.455032][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.484542][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.492194][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.499434][ T5874] bridge_slave_1: entered allmulticast mode
[   89.509835][ T5874] bridge_slave_1: entered promiscuous mode
[   89.532802][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.559429][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.566875][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.592943][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.612445][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.619559][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.628224][ T5865] bridge_slave_0: entered allmulticast mode
[   89.632222][ T5871] Bluetooth: hci2: command tx timeout
[   89.639913][ T5863] Bluetooth: hci1: command tx timeout
[   89.641618][ T5865] bridge_slave_0: entered promiscuous mode
[   89.666971][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.674310][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.700700][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.711757][ T5863] Bluetooth: hci0: command tx timeout
[   89.714313][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.717594][ T5863] Bluetooth: hci4: command tx timeout
[   89.724483][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.730338][ T5871] Bluetooth: hci3: command tx timeout
[   89.757224][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.789738][ T5862] team0: Port device team_slave_0 added
[   89.796870][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.805235][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.813322][ T5865] bridge_slave_1: entered allmulticast mode
[   89.820854][ T5865] bridge_slave_1: entered promiscuous mode
[   89.850366][ T5862] team0: Port device team_slave_1 added
[   89.887036][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.903906][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.000195][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.007459][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.033998][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.052638][ T5861] hsr_slave_0: entered promiscuous mode
[   90.059262][ T5861] hsr_slave_1: entered promiscuous mode
[   90.068850][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.081949][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.119551][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.126933][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.153292][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.208530][ T5868] hsr_slave_0: entered promiscuous mode
[   90.215154][ T5868] hsr_slave_1: entered promiscuous mode
[   90.221418][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   90.227303][ T5868] Cannot create hsr debugfs directory
[   90.235624][ T5874] team0: Port device team_slave_0 added
[   90.245674][ T5874] team0: Port device team_slave_1 added
[   90.282310][ T5865] team0: Port device team_slave_0 added
[   90.290932][ T5865] team0: Port device team_slave_1 added
[   90.377593][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.384882][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.411293][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.435880][ T5862] hsr_slave_0: entered promiscuous mode
[   90.442602][ T5862] hsr_slave_1: entered promiscuous mode
[   90.448828][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   90.454699][ T5862] Cannot create hsr debugfs directory
[   90.488502][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.498031][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.524701][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.572610][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.579605][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.605968][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.651768][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.658780][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.688010][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.910274][ T5874] hsr_slave_0: entered promiscuous mode
[   90.918046][ T5874] hsr_slave_1: entered promiscuous mode
[   90.925139][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   90.930908][ T5874] Cannot create hsr debugfs directory
[   90.942605][ T5865] hsr_slave_0: entered promiscuous mode
[   90.949054][ T5865] hsr_slave_1: entered promiscuous mode
[   90.955460][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   90.961322][ T5865] Cannot create hsr debugfs directory
[   91.364257][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.377421][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.409229][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.443193][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.505770][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.529329][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.542017][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.563633][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.659362][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.686122][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.699960][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.711532][ T5871] Bluetooth: hci1: command tx timeout
[   91.712244][ T5863] Bluetooth: hci2: command tx timeout
[   91.733372][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.791965][ T5863] Bluetooth: hci4: command tx timeout
[   91.791972][ T5871] Bluetooth: hci0: command tx timeout
[   91.802063][ T5871] Bluetooth: hci3: command tx timeout
[   91.839985][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.857903][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.869391][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.897299][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.979576][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.050013][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.061889][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.084568][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   92.099834][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.114456][  T981] cfg80211: failed to load regulatory.db
[   92.116058][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.142501][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.152363][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.159743][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.170120][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.177322][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.260355][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   92.318139][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.325314][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.353651][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.360927][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.496059][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.546044][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.585456][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.644207][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   92.660599][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   92.689683][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.696917][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.719663][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   92.754471][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.761708][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.779218][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.786466][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.804019][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.811376][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.845586][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.853011][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.885586][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.892808][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.944075][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.130908][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.149640][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.296736][ T5861] veth0_vlan: entered promiscuous mode
[   93.345048][ T5861] veth1_vlan: entered promiscuous mode
[   93.450944][ T5868] veth0_vlan: entered promiscuous mode
[   93.526413][ T5861] veth0_macvtap: entered promiscuous mode
[   93.564948][ T5861] veth1_macvtap: entered promiscuous mode
[   93.604420][ T5868] veth1_vlan: entered promiscuous mode
[   93.675815][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.688774][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.725405][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.745212][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.794837][ T5871] Bluetooth: hci1: command tx timeout
[   93.794847][ T5863] Bluetooth: hci2: command tx timeout
[   93.819219][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.829727][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839800][ T5868] veth0_macvtap: entered promiscuous mode
[   93.867421][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.877173][ T5871] Bluetooth: hci4: command tx timeout
[   93.882832][ T5871] Bluetooth: hci3: command tx timeout
[   93.882876][ T5871] Bluetooth: hci0: command tx timeout
[   93.904630][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.934976][ T5868] veth1_macvtap: entered promiscuous mode
[   93.946808][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.039328][ T5874] veth0_vlan: entered promiscuous mode
[   94.069129][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.100209][ T5874] veth1_vlan: entered promiscuous mode
[   94.149251][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.192481][ T1117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.205373][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.221880][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.229864][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.260017][ T1117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.268951][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.305542][ T5865] veth0_vlan: entered promiscuous mode
[   94.323552][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.332243][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.369728][ T5865] veth1_vlan: entered promiscuous mode
[   94.380848][ T5874] veth0_macvtap: entered promiscuous mode
[   94.398425][ T5862] veth0_vlan: entered promiscuous mode
[   94.459735][ T5874] veth1_macvtap: entered promiscuous mode
[   94.475731][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.497358][ T5862] veth1_vlan: entered promiscuous mode
[   94.537703][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.546670][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.602754][ T5865] veth0_macvtap: entered promiscuous mode
[   94.649862][ T5865] veth1_macvtap: entered promiscuous mode
[   94.686833][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.707280][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.760059][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.776307][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.790781][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.799712][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.815007][ T5862] veth0_macvtap: entered promiscuous mode
[   94.844014][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.858316][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.907570][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.032336][ T5862] veth1_macvtap: entered promiscuous mode
[   95.090958][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.188794][ T1005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.211149][ T1005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.240979][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.270448][ T1005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.292271][ T1005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.304260][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.323564][ T5989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.349142][ T5989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.371709][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.374237][ T5990] Zero length message leads to an empty skb
[   95.391218][    C0] hrtimer: interrupt took 56933 ns
[   95.430784][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.453014][ T5989] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.463054][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.486492][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.495412][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.515057][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.549886][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.657520][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'.
[   95.815984][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.849761][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.873700][ T5863] Bluetooth: hci2: command tx timeout
[   95.883331][ T5871] Bluetooth: hci1: command tx timeout
[   95.941494][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.964812][ T5863] Bluetooth: hci0: command tx timeout
[   95.970283][ T5863] Bluetooth: hci3: command tx timeout
[   95.975728][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.983215][ T5871] Bluetooth: hci4: command tx timeout
[   96.119830][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.141022][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   96.166428][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.191104][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   96.274538][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.297300][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.504480][ T6010] vcan0 speed is unknown, defaulting to 1000
[   96.621418][ T6010] vcan0 speed is unknown, defaulting to 1000
[   96.657081][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.686772][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.722713][ T6010] vcan0 speed is unknown, defaulting to 1000
[   96.734801][ T6013] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.120072][ T6013] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   98.423401][ T6010] infiniband syz1: set active
[   98.428562][ T6010] infiniband syz1: added vcan0
[   98.437976][ T6010] syz1: rxe_create_cq: returned err = -12
[   98.444536][ T6010] infiniband syz1: Couldn't create ib_mad CQ
[   98.450959][ T6010] infiniband syz1: Couldn't open port 1
[   98.585066][ T6010] RDS/IB: syz1: added
[   98.609947][ T6010] smc: adding ib device syz1 with port count 1
[   98.638611][ T6010] smc:    ib device syz1 port 1 has pnetid 
[   98.690407][ T5983] vcan0 speed is unknown, defaulting to 1000
[   98.747181][ T6025] vcan0 speed is unknown, defaulting to 1000
[   98.862896][ T5932] vcan0 speed is unknown, defaulting to 1000
[   99.007674][ T6035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.159155][   T12] wlan1: Trigger new scan to find an IBSS to join
[   99.586656][ T6010] vcan0 speed is unknown, defaulting to 1000
[   99.848734][ T6043] netlink: 'syz.3.17': attribute type 5 has an invalid length.
[  100.157614][ T6010] vcan0 speed is unknown, defaulting to 1000
[  100.244943][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.803918][ T6010] vcan0 speed is unknown, defaulting to 1000
[  101.122804][ T6010] vcan0 speed is unknown, defaulting to 1000
[  101.365322][ T6010] vcan0 speed is unknown, defaulting to 1000
[  101.637368][ T6010] vcan0 speed is unknown, defaulting to 1000
[  101.855587][ T6076] =======================================================
[  101.855587][ T6076] WARNING: The mand mount option has been deprecated and
[  101.855587][ T6076]          and is ignored by this kernel. Remove the mand
[  101.855587][ T6076]          option from the mount to silence this warning.
[  101.855587][ T6076] =======================================================
[  101.954542][ T6010] vcan0 speed is unknown, defaulting to 1000
[  102.113308][ T1117] wlan1: Trigger new scan to find an IBSS to join
[  102.415564][ T6010] vcan0 speed is unknown, defaulting to 1000
[  104.271687][ T6109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.364704][ T6109] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[  104.402367][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'.
[  104.634302][ T6113] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  105.100788][ T6125] vcan0 speed is unknown, defaulting to 1000
[  105.155061][   T36] wlan1: Creating new IBSS network, BSSID 06:6f:07:1e:01:48
[  105.696058][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'.
[  106.026704][ T6150] netlink: 100 bytes leftover after parsing attributes in process `syz.1.48'.
[  106.363246][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.49'.
[  106.610417][ T6172] netlink: 'syz.0.51': attribute type 10 has an invalid length.
[  106.639752][ T6174] netlink: 164 bytes leftover after parsing attributes in process `syz.2.54'.
[  106.665136][ T6175] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[  106.673297][ T6175] netlink: 168 bytes leftover after parsing attributes in process `syz.0.51'.
[  106.760866][ T6166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.801353][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'.
[  106.847768][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'.
[  106.996224][ T6172] team0: Port device dummy0 added
[  107.134087][ T6184] netlink: 'syz.1.56': attribute type 3 has an invalid length.
[  107.157311][ T6184] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.56'.
[  107.285329][ T6197] netlink: 731 bytes leftover after parsing attributes in process `syz.4.58'.
[  107.458134][ T6202] netlink: 'syz.3.61': attribute type 3 has an invalid length.
[  107.489058][ T6202] netlink: 'syz.3.61': attribute type 1 has an invalid length.
[  107.915885][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.135763][ T6222] vcan0 speed is unknown, defaulting to 1000
[  109.317872][ T6246] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  109.328075][   T30] audit: type=1800 audit(1756145332.156:2): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.72" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  109.349896][ T6246] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  109.360515][ T6246] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  109.617183][ T6246] syz.4.72 (6246) used greatest stack depth: 18672 bytes left
[  109.659641][ T6253] veth1_macvtap: left promiscuous mode
[  109.669290][ T6253] macsec0: entered allmulticast mode
[  109.690545][ T6254] veth1_macvtap: entered promiscuous mode
[  109.706264][ T6254] veth1_macvtap: entered allmulticast mode
[  109.739026][ T6254] macsec0: entered promiscuous mode
[  110.194099][ T6268] netlink: 'syz.2.79': attribute type 33 has an invalid length.
[  110.209613][ T6268] __nla_validate_parse: 5 callbacks suppressed
[  110.209632][ T6268] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.79'.
[  110.734405][ T6284] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.82'.
[  110.748784][ T6288] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[  111.268609][ T6296] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[  111.323116][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'.
[  111.345972][ T6299] netlink: 388 bytes leftover after parsing attributes in process `syz.1.85'.
[  112.185423][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[  112.214335][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[  112.815621][ T6330] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.94'.
[  113.003165][ T6337] netlink: 76 bytes leftover after parsing attributes in process `syz.4.96'.
[  113.598291][ T6309] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.89'.
[  113.611704][ T6309] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  113.717939][ T6321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'.
[  114.032251][ T6343] netlink: 'syz.0.98': attribute type 1 has an invalid length.
[  114.220752][ T6348] netlink: 'syz.3.100': attribute type 10 has an invalid length.
[  114.319414][ T6348] team0: Port device syz_tun added
[  114.337906][ T6346] netlink: 'syz.4.99': attribute type 10 has an invalid length.
[  114.947900][ T6356] netlink: 'syz.0.103': attribute type 5 has an invalid length.
[  115.248843][ T6363] vcan0 speed is unknown, defaulting to 1000
[  115.251731][ T6369] __nla_validate_parse: 1 callbacks suppressed
[  115.251754][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[  115.345325][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.107'.
[  115.719882][ T6382] netlink: 'syz.2.110': attribute type 6 has an invalid length.
[  115.740836][ T6382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.110'.
[  116.011248][ T6388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.112'.
[  116.891044][ T6411] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.115'.
[  117.045182][ T6405] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.115'.
[  117.088230][ T6411] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.115'.
[  117.722893][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'.
[  118.239333][ T6438] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET)
[  118.637282][ T6435] vcan0 speed is unknown, defaulting to 1000
[  118.667559][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[  118.871834][ T6447] netlink: 76 bytes leftover after parsing attributes in process `syz.2.127'.
[  118.959278][ T6447] netlink: 'syz.2.127': attribute type 10 has an invalid length.
[  118.979991][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.988774][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.170582][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.177955][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.186336][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.193632][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.248074][ T6447] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  119.303052][ T6456] netlink: 'syz.2.127': attribute type 3 has an invalid length.
[  119.696319][ T6460] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  119.753009][ T6460] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  120.010726][ T6469] vcan0 speed is unknown, defaulting to 1000
[  120.357559][ T6485] __nla_validate_parse: 2 callbacks suppressed
[  120.357578][ T6485] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.134'.
[  121.103912][ T6497] netlink: 'syz.2.138': attribute type 39 has an invalid length.
[  121.113245][ T6498] netlink: 'syz.0.137': attribute type 21 has an invalid length.
[  121.137738][ T6498] netlink: 156 bytes leftover after parsing attributes in process `syz.0.137'.
[  121.240617][ T6500] netlink: 68 bytes leftover after parsing attributes in process `syz.0.137'.
[  122.844203][ T6512] syz.1.140 (6512) used greatest stack depth: 17864 bytes left
[  122.882986][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'.
[  122.920266][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.141'.
[  122.960066][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.141'.
[  122.966340][ T6519] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.142'.
[  123.682239][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.145'.
[  123.791391][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.145'.
[  124.477658][ T6557] netlink: 'syz.0.152': attribute type 15 has an invalid length.
[  124.620637][ T6567] netlink: 64 bytes leftover after parsing attributes in process `syz.3.154'.
[  125.075866][ T6576] netlink: 'syz.0.155': attribute type 10 has an invalid length.
[  125.124592][ T6576] team0: Device hsr_slave_0 failed to register rx_handler
[  125.268737][ T6571] : renamed from bond0 (while UP)
[  125.681694][ T6582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.157'.
[  126.162155][ T6594] vcan0 speed is unknown, defaulting to 1000
[  126.427288][ T6605] netlink: 14 bytes leftover after parsing attributes in process `syz.3.162'.
[  126.433451][ T6597] netlink: 164 bytes leftover after parsing attributes in process `syz.0.160'.
[  126.457942][ T6605] hsr0: entered promiscuous mode
[  126.508872][ T6605] hsr0: entered allmulticast mode
[  126.551382][ T6605] hsr_slave_0: entered allmulticast mode
[  126.620490][ T6605] hsr_slave_1: entered allmulticast mode
[  126.660978][ T6597] netlink: 164 bytes leftover after parsing attributes in process `syz.0.160'.
[  128.144677][ T6649] delete_channel: no stack
[  128.158777][ T6649] delete_channel: no stack
[  129.128743][ T6672] netlink: 'syz.3.179': attribute type 4 has an invalid length.
[  129.862338][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.0.183'.
[  129.906804][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.0.183'.
[  129.943001][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.0.183'.
[  130.192976][ T6686] netlink: 'syz.1.185': attribute type 1 has an invalid length.
[  131.172029][ T6692] netlink: 'syz.2.186': attribute type 21 has an invalid length.
[  131.213553][ T6692] IPv6: NLM_F_CREATE should be specified when creating new route
[  131.234624][ T6698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'.
[  131.279653][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[  131.477514][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.190'.
[  131.895146][ T6715] netlink: 'syz.3.193': attribute type 10 has an invalid length.
[  132.021876][ T6715] 8021q: adding VLAN 0 to HW filter on device team0
[  132.046299][ T6715] bond0: (slave team0): Enslaving as an active interface with an up link
[  132.066057][ T6721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.151346][ T6719] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  132.570651][ T6744] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.200'.
[  132.811121][ T6755] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.203'.
[  132.896030][ T6746] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.202'.
[  132.918069][ T6746] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  132.978689][ T6746] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  133.075729][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  133.082836][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  133.245443][ T1117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  133.397429][ T6777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.209'.
[  133.423388][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.209'.
[  133.451915][ T6777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.209'.
[  133.605894][ T6774] vcan0 speed is unknown, defaulting to 1000
[  133.839342][ T6782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.870459][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[  134.862245][ T6811] netlink: 'syz.4.220': attribute type 4 has an invalid length.
[  135.776235][ T6831] netlink: 'syz.0.225': attribute type 10 has an invalid length.
[  135.910415][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.983299][ T6834] TCP: TCP_TX_DELAY enabled
[  136.035957][ T6831] : (slave batadv0): Enslaving as an active interface with an up link
[  136.309926][ T6842] __nla_validate_parse: 4 callbacks suppressed
[  136.309953][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'.
[  136.701729][ T6856] netlink: 100 bytes leftover after parsing attributes in process `syz.4.229'.
[  136.926105][ T6843] netlink: 'syz.4.229': attribute type 12 has an invalid length.
[  136.989424][ T6843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.229'.
[  137.061059][ T6860] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  137.095394][ T6861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  137.103011][ T6861] IPv6: NLM_F_CREATE should be set when creating new route
[  137.110266][ T6861] IPv6: NLM_F_CREATE should be set when creating new route
[  137.494079][ T6877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.237'.
[  137.517069][ T6878] sctp: [Deprecated]: syz.2.236 (pid 6878) Use of int in max_burst socket option deprecated.
[  137.517069][ T6878] Use struct sctp_assoc_value instead
[  137.537993][ T6878] syz.2.236: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  137.553976][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.2.236 Not tainted syzkaller #0 PREEMPT(full) 
[  137.554004][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  137.554024][ T6878] Call Trace:
[  137.554032][ T6878]  <TASK>
[  137.554041][ T6878]  dump_stack_lvl+0x189/0x250
[  137.554075][ T6878]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.554104][ T6878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.554136][ T6878]  ? dump_stack+0x9/0x20
[  137.554168][ T6878]  warn_alloc+0x214/0x310
[  137.554202][ T6878]  ? stack_depot_save_flags+0x41b/0x860
[  137.554234][ T6878]  ? __pfx_warn_alloc+0x10/0x10
[  137.554268][ T6878]  ? kasan_save_track+0x4f/0x80
[  137.554295][ T6878]  ? xskq_create+0x56/0x170
[  137.554320][ T6878]  ? xsk_init_queue+0xb0/0x110
[  137.554344][ T6878]  ? xsk_setsockopt+0x57b/0x8d0
[  137.554366][ T6878]  ? do_sock_setsockopt+0x17c/0x1b0
[  137.554398][ T6878]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  137.554429][ T6878]  ? do_syscall_64+0xfa/0x3b0
[  137.554457][ T6878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.554487][ T6878]  __vmalloc_node_range_noprof+0x125/0x12f0
[  137.554554][ T6878]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  137.554586][ T6878]  ? xskq_create+0x56/0x170
[  137.554616][ T6878]  ? __kasan_kmalloc+0x93/0xb0
[  137.554648][ T6878]  vmalloc_user_noprof+0xad/0xf0
[  137.554678][ T6878]  ? xskq_create+0xbf/0x170
[  137.554706][ T6878]  xskq_create+0xbf/0x170
[  137.554750][ T6878]  xsk_init_queue+0xb0/0x110
[  137.554780][ T6878]  xsk_setsockopt+0x57b/0x8d0
[  137.554809][ T6878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.554841][ T6878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.554863][ T6878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.554888][ T6878]  ? do_sock_setsockopt+0x15e/0x1b0
[  137.554923][ T6878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.554950][ T6878]  do_sock_setsockopt+0x17c/0x1b0
[  137.554988][ T6878]  __x64_sys_setsockopt+0x13f/0x1b0
[  137.555028][ T6878]  do_syscall_64+0xfa/0x3b0
[  137.555059][ T6878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.555079][ T6878]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  137.555100][ T6878]  ? clear_bhb_loop+0x60/0xb0
[  137.555126][ T6878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.555147][ T6878] RIP: 0033:0x7f5f6b98ebe9
[  137.555175][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.555193][ T6878] RSP: 002b:00007f5f69bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  137.555214][ T6878] RAX: ffffffffffffffda RBX: 00007f5f6bbb6090 RCX: 00007f5f6b98ebe9
[  137.555230][ T6878] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d
[  137.555242][ T6878] RBP: 00007f5f6ba11e19 R08: 0000000000000004 R09: 0000000000000000
[  137.555254][ T6878] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  137.555267][ T6878] R13: 00007f5f6bbb6128 R14: 00007f5f6bbb6090 R15: 00007ffdb03d9b68
[  137.555301][ T6878]  </TASK>
[  137.555382][ T6878] Mem-Info:
[  137.860260][ T6878] active_anon:5442 inactive_anon:0 isolated_anon:0
[  137.860260][ T6878]  active_file:14333 inactive_file:39846 isolated_file:0
[  137.860260][ T6878]  unevictable:768 dirty:62 writeback:0
[  137.860260][ T6878]  slab_reclaimable:10399 slab_unreclaimable:97947
[  137.860260][ T6878]  mapped:32268 shmem:1401 pagetables:1165
[  137.860260][ T6878]  sec_pagetables:0 bounce:0
[  137.860260][ T6878]  kernel_misc_reclaimable:0
[  137.860260][ T6878]  free:1307469 free_pcp:19665 free_cma:0
[  137.914657][ T6878] Node 0 active_anon:21768kB inactive_anon:0kB active_file:57332kB inactive_file:159180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129072kB dirty:248kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12060kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  137.959862][ T6878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  137.996071][ T6878] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  138.033561][ T6878] lowmem_reserve[]: 0 2497 2499 2499 2499
[  138.040356][ T6878] Node 0 DMA32 free:1321116kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21720kB inactive_anon:0kB active_file:57332kB inactive_file:157604kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:59512kB local_pcp:34112kB free_cma:0kB
[  138.091418][ T6878] lowmem_reserve[]: 0 0 1 1 1
[  138.097018][ T6878] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  138.135655][ T6878] lowmem_reserve[]: 0 0 0 0 0
[  138.141059][ T6878] Node 1 Normal free:3893088kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18980kB local_pcp:9924kB free_cma:0kB
[  138.180236][ T6878] lowmem_reserve[]: 0 0 0 0 0
[  138.186118][ T6878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  138.214943][ T6878] Node 0 DMA32: 1026*4kB (UME) 483*8kB (UM) 259*16kB (UME) 371*32kB (UME) 134*64kB (UME) 70*128kB (UME) 42*256kB (UM) 5*512kB (M) 4*1024kB (ME) 1*2048kB (U) 309*4096kB (M) = 1326640kB
[  138.237200][ T6878] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  138.260909][ T6878] Node 1 Normal: 186*4kB (UME) 47*8kB (UME) 44*16kB (UME) 84*32kB (UME) 23*64kB (UME) 12*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3893088kB
[  138.298705][ T6878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  138.344545][ T6878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.373902][ T6878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  138.384148][ T6878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.394590][ T6878] 55538 total pagecache pages
[  138.404657][ T6878] 0 pages in swap cache
[  138.408869][ T6878] Free swap  = 124996kB
[  138.420574][ T6878] Total swap = 124996kB
[  138.429374][ T6878] 2097051 pages RAM
[  138.435830][ T6878] 0 pages HighMem/MovableOnly
[  138.440640][ T6878] 425654 pages reserved
[  138.500278][ T6878] 0 pages cma reserved
[  138.672654][ T6894] netlink: 360 bytes leftover after parsing attributes in process `syz.0.242'.
[  138.708584][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.243'.
[  138.730182][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.773544][ T6898] bridge_slave_0 (unregistering): left allmulticast mode
[  138.780910][ T6898] bridge_slave_0 (unregistering): left promiscuous mode
[  138.790044][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.333501][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'.
[  139.536479][ T6929] netlink: 'syz.1.251': attribute type 16 has an invalid length.
[  139.548573][ T6916] netlink: 128 bytes leftover after parsing attributes in process `syz.0.248'.
[  139.563207][ T6929] netlink: 156 bytes leftover after parsing attributes in process `syz.1.251'.
[  139.569835][ T6925] netlink: 'syz.3.250': attribute type 10 has an invalid length.
[  139.607150][ T6916] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  139.779365][ T6925] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[  139.984534][ T6934] netlink: 'syz.1.251': attribute type 1 has an invalid length.
[  140.299372][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'.
[  141.290796][ T6983] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  141.483508][ T6985] __nla_validate_parse: 5 callbacks suppressed
[  141.483535][ T6985] netlink: 352 bytes leftover after parsing attributes in process `syz.3.268'.
[  142.023143][ T7000] netlink: 'syz.1.272': attribute type 17 has an invalid length.
[  142.030969][ T7000] netlink: 'syz.1.272': attribute type 16 has an invalid length.
[  142.162693][ T7000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.272'.
[  142.454264][ T7006] netlink: 'syz.2.271': attribute type 21 has an invalid length.
[  143.086437][ T7029] netlink: 'syz.4.278': attribute type 15 has an invalid length.
[  143.106250][ T7029] netlink: 11318 bytes leftover after parsing attributes in process `syz.4.278'.
[  143.189356][ T7028] netlink: 'syz.4.278': attribute type 11 has an invalid length.
[  143.217625][ T7028] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.278'.
[  143.401473][ T7027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.202616][ T7054] netlink: 'syz.3.285': attribute type 4 has an invalid length.
[  144.268734][ T7058] netlink: 'syz.3.285': attribute type 10 has an invalid length.
[  146.279950][ T7058] team0: Port device dummy0 added
[  146.327508][ T7074] netlink: 'syz.4.289': attribute type 1 has an invalid length.
[  146.440823][ T7078] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.290'.
[  146.570227][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[  146.600953][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[  147.203484][ T7108] netlink: 'syz.4.302': attribute type 33 has an invalid length.
[  147.218762][ T7108] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.302'.
[  147.483459][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'.
[  147.509190][ T7121] netlink: 'syz.1.301': attribute type 10 has an invalid length.
[  147.550872][ T7121] netlink: 55 bytes leftover after parsing attributes in process `syz.1.301'.
[  147.646631][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'.
[  147.921599][ T7134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'.
[  147.979947][ T7138] netlink: 'syz.0.309': attribute type 21 has an invalid length.
[  147.998504][ T7138] netlink: 100 bytes leftover after parsing attributes in process `syz.0.309'.
[  148.652535][ T7144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.310'.
[  148.735472][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'.
[  149.376666][ T7145] vcan0 speed is unknown, defaulting to 1000
[  150.033918][ T7180] netlink: 'syz.4.319': attribute type 46 has an invalid length.
[  151.213743][ T7205] netlink: 'syz.0.327': attribute type 2 has an invalid length.
[  151.647078][ T7227] C: renamed from team_slave_0 (while UP)
[  151.869016][ T7227] netlink: 'syz.4.334': attribute type 2 has an invalid length.
[  151.882291][ T7227] __nla_validate_parse: 4 callbacks suppressed
[  151.882399][ T7227] netlink: 148 bytes leftover after parsing attributes in process `syz.4.334'.
[  151.911274][ T7227] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  152.251908][ T7240] netlink: 56 bytes leftover after parsing attributes in process `syz.0.340'.
[  152.809299][ T7248] netlink: 'syz.0.340': attribute type 2 has an invalid length.
[  152.851832][ T7248] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[  152.889178][ T7248] netlink: 152 bytes leftover after parsing attributes in process `syz.0.340'.
[  153.240801][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'.
[  153.340789][ T7259] netlink: 5872 bytes leftover after parsing attributes in process `syz.1.343'.
[  153.456922][ T7263] sit0: entered promiscuous mode
[  153.493418][ T7263] sit0: entered allmulticast mode
[  153.928799][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'.
[  153.984481][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'.
[  154.019516][ T7281] netlink: 830 bytes leftover after parsing attributes in process `syz.0.349'.
[  154.141851][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'.
[  154.292684][ T7288] netlink: 'syz.3.351': attribute type 39 has an invalid length.
[  154.527496][ T7307] netlink: 'syz.2.353': attribute type 1 has an invalid length.
[  155.571269][ T7313] ksmbd: Unknown IPC event: 3, ignore.
[  155.612043][ T7319] sit0: entered allmulticast mode
[  155.691676][ T7319] sit0: entered promiscuous mode
[  155.704933][ T7317] netlink: 'syz.2.359': attribute type 2 has an invalid length.
[  155.712829][ T7317] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.359'.
[  157.556886][ T7347] vcan0 speed is unknown, defaulting to 1000
[  159.403904][ T7389] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.375'.
[  162.707327][ T7483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.397'.
[  162.941898][ T7490] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[  163.025423][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'.
[  163.904361][ T7510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.935400][ T7510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.030263][ T7518] netlink: 'syz.4.408': attribute type 10 has an invalid length.
[  164.333746][ T7518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  164.371776][ T1117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  164.955421][ T7544] netlink: 'syz.1.416': attribute type 2 has an invalid length.
[  165.081634][ T7544] netlink: 'syz.1.416': attribute type 9 has an invalid length.
[  165.215449][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.416'.
[  166.295369][ T7573] netlink: 212256 bytes leftover after parsing attributes in process `syz.2.424'.
[  166.310694][ T7573] netlink: zone id is out of range
[  166.318489][ T7573] netlink: zone id is out of range
[  166.329932][ T7573] netlink: get zone limit has 8 unknown bytes
[  167.482352][ T7600] netlink: 68 bytes leftover after parsing attributes in process `syz.2.435'.
[  168.075256][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'.
[  168.085910][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.439'.
[  168.094979][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.439'.
[  168.147543][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  169.899785][ T7682] netlink: 52 bytes leftover after parsing attributes in process `syz.4.458'.
[  170.033049][ T7685] netlink: 100 bytes leftover after parsing attributes in process `syz.1.459'.
[  170.275400][ T7680] vcan0 speed is unknown, defaulting to 1000
[  170.284011][ T7690] netlink: 64855 bytes leftover after parsing attributes in process `syz.0.460'.
[  171.885552][ T7717] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  171.917937][ T7717] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.467'.
[  172.221778][ T7719] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.469'.
[  172.319093][ T7721] netlink: 'syz.0.470': attribute type 21 has an invalid length.
[  173.039593][ T7728] openvswitch: netlink: IP tunnel dst address not specified
[  173.183318][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.472'.
[  174.246305][ T7732] netlink: 72 bytes leftover after parsing attributes in process `syz.1.473'.
[  174.582883][ T7769] netlink: 'syz.0.483': attribute type 39 has an invalid length.
[  176.264920][ T7816] netlink: 'syz.0.495': attribute type 21 has an invalid length.
[  176.358138][ T7816] lo: entered allmulticast mode
[  176.445396][ T7816] lo: entered promiscuous mode
[  176.468419][ T7816] lo: left allmulticast mode
[  176.844625][ T7830] vcan0 speed is unknown, defaulting to 1000
[  176.873211][ T7838] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.501'.
[  176.913534][ T7838] netlink: 'syz.1.501': attribute type 29 has an invalid length.
[  176.947050][ T7838] netlink: 'syz.1.501': attribute type 29 has an invalid length.
[  176.998860][ T7842] netlink: 'syz.1.501': attribute type 29 has an invalid length.
[  177.031088][ T7843] netlink: 100 bytes leftover after parsing attributes in process `syz.0.502'.
[  177.052159][ T7838] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.501'.
[  177.096128][ T7843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.502'.
[  177.121035][ T7850] netlink: 'syz.4.504': attribute type 21 has an invalid length.
[  177.185188][ T7850] netlink: 132 bytes leftover after parsing attributes in process `syz.4.504'.
[  178.096693][ T7896] netlink: 60 bytes leftover after parsing attributes in process `syz.3.516'.
[  178.181551][ T7896] unsupported nlmsg_type 40
[  178.967137][ T7926] netlink: 'syz.3.524': attribute type 40 has an invalid length.
[  179.052572][ T7928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.130464][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.194075][ T7913] vcan0 speed is unknown, defaulting to 1000
[  179.728054][ T5863] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6
[  179.921529][ T7944] netlink: 68 bytes leftover after parsing attributes in process `syz.0.529'.
[  180.433948][ T7950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.529'.
[  182.568740][ T7958] delete_channel: no stack
[  182.608604][ T7964] netlink: 'syz.2.532': attribute type 10 has an invalid length.
[  182.676078][ T7964] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  182.936100][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.536'.
[  183.939221][ T7994] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  183.968738][ T7955] vcan0 speed is unknown, defaulting to 1000
[  183.985462][ T7998] netlink: 'syz.0.541': attribute type 29 has an invalid length.
[  184.005006][ T7998] netlink: 'syz.0.541': attribute type 29 has an invalid length.
[  184.034874][ T7998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.842405][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'.
[  185.139597][ T8033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.279506][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.557'.
[  185.380324][ T8041] netlink: 'syz.0.558': attribute type 10 has an invalid length.
[  185.926008][ T8063] netlink: 'syz.1.568': attribute type 10 has an invalid length.
[  185.948000][ T8063] team0: Device dummy0 is up. Set it down before adding it as a team port
[  186.210959][ T8078] syzkaller0: create flow: hash 363795391 index 1
[  186.479190][ T1159] syzkaller0: tun_net_xmit 76
[  186.513268][ T1159] syzkaller0: tun_net_xmit 48
[  186.536930][ T8068] syzkaller0: delete flow: hash 363795391 index 1
[  187.524519][ T8135] netlink: 'syz.0.600': attribute type 21 has an invalid length.
[  187.541974][ T8135] netlink: 'syz.0.600': attribute type 6 has an invalid length.
[  187.570159][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  187.611333][ T8135] IPv6: NLM_F_CREATE should be specified when creating new route
[  187.633105][ T8135] IPv6: Can't replace route, no match found
[  187.892202][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  190.009946][ T8181] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.614'.
[  190.100559][ T8184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.615'.
[  191.042414][ T8155] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.607'.
[  191.068777][ T8181] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š•Iöq¯!¾>Ýsó³Îú*Š®!)\S
[  191.438248][ T8218] syzkaller0: tun_chr_ioctl cmd 1074025677
[  191.481439][ T8218] syzkaller0: linktype set to 801
[  191.520403][ T8222] netlink: 'syz.4.623': attribute type 3 has an invalid length.
[  191.536949][ T8222] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.623'.
[  191.692545][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'.
[  191.941551][ T8231] netlink: 180 bytes leftover after parsing attributes in process `syz.3.625'.
[  194.188717][ T8291] netlink: 'syz.0.645': attribute type 21 has an invalid length.
[  194.215151][ T8291] netlink: 156 bytes leftover after parsing attributes in process `syz.0.645'.
[  194.217727][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'.
[  194.236104][ T8294] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  194.244438][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.354800][ T8297] openvswitch: netlink: Message has 11 unknown bytes.
[  194.388825][ T8297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.516783][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  194.523350][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  195.583672][ T8336] netlink: 763 bytes leftover after parsing attributes in process `syz.3.659'.
[  195.743153][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'.
[  195.817939][ T8341] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  196.231919][ T8353] netlink: 'syz.4.667': attribute type 17 has an invalid length.
[  196.274384][ T8353] netlink: 'syz.4.667': attribute type 16 has an invalid length.
[  196.283244][ T8353] netlink: 152 bytes leftover after parsing attributes in process `syz.4.667'.
[  196.607097][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.671'.
[  196.631936][ T8365] netlink: 60 bytes leftover after parsing attributes in process `syz.1.671'.
[  196.671581][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.671'.
[  196.878198][ T8370] netlink: 'syz.0.673': attribute type 4 has an invalid length.
[  196.900220][ T8370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.673'.
[  197.059730][ T8378] netlink: 'syz.1.676': attribute type 39 has an invalid length.
[  197.079652][ T8370] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  197.140485][ T8378] veth0_macvtap: left promiscuous mode
[  197.349306][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'.
[  197.414768][ T8388] netlink: 'syz.2.680': attribute type 10 has an invalid length.
[  197.541649][ T8388] syz_tun: entered promiscuous mode
[  197.622577][ T8388] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  198.007996][ T8411] netlink: 14 bytes leftover after parsing attributes in process `syz.0.686'.
[  198.165687][ T8411] hsr_slave_0: left promiscuous mode
[  198.231908][ T8411] hsr_slave_1: left promiscuous mode
[  198.579939][ T8424] bpf: Bad value for 'mode'
[  198.595231][ T8424] netlink: 'syz.3.690': attribute type 21 has an invalid length.
[  199.043714][ T8436] netlink: 'syz.0.693': attribute type 2 has an invalid length.
[  199.065753][ T8436] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.693'.
[  199.674174][ T8447] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  200.775645][ T8473] veth1_to_bridge: entered allmulticast mode
[  200.852278][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.705'.
[  200.865446][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.521978][ T8480] netlink: 'syz.0.707': attribute type 10 has an invalid length.
[  201.537977][ T8480] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.707'.
[  202.094725][ T8495] netlink: 'syz.1.709': attribute type 4 has an invalid length.
[  202.194234][ T8497] bridge_slave_1: left allmulticast mode
[  202.203745][ T8497] bridge_slave_1: left promiscuous mode
[  202.209797][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.329823][ T8497] bridge_slave_0: left allmulticast mode
[  202.355085][ T8497] bridge_slave_0: left promiscuous mode
[  202.375837][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.508267][ T8497] bond0: (slave bridge0): Releasing backup interface
[  202.723566][ T8504] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  202.964332][ T8518] netlink: 'syz.1.716': attribute type 3 has an invalid length.
[  202.989635][ T8515] netlink: 'syz.2.715': attribute type 39 has an invalid length.
[  203.008143][ T8518] netlink: 156 bytes leftover after parsing attributes in process `syz.1.716'.
[  203.008209][ T8518] netlink: 'syz.1.716': attribute type 3 has an invalid length.
[  203.008230][ T8518] netlink: 156 bytes leftover after parsing attributes in process `syz.1.716'.
[  203.027955][ T8524] netlink: zone id is out of range
[  203.237931][ T8526] netlink: 'syz.2.715': attribute type 39 has an invalid length.
[  203.333163][ T8524] netlink: set zone limit has 4 unknown bytes
[  203.354697][ T8536] netlink: 180 bytes leftover after parsing attributes in process `syz.4.721'.
[  203.522986][ T8544] netlink: 128 bytes leftover after parsing attributes in process `syz.1.722'.
[  204.874155][ T8577] netlink: 'syz.3.730': attribute type 39 has an invalid length.
[  205.155265][ T8577] hsr_slave_0 (unregistering): left promiscuous mode
[  205.263418][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'.
[  205.757089][ T8611] netlink: 'syz.2.739': attribute type 29 has an invalid length.
[  205.783402][ T8610] netlink: 'syz.2.739': attribute type 29 has an invalid length.
[  206.188818][ T8621] netlink: 17 bytes leftover after parsing attributes in process `syz.4.743'.
[  206.210767][ T8621] netlink: zone id is out of range
[  206.292124][ T8621] netlink: zone id is out of range
[  206.297716][ T8621] netlink: zone id is out of range
[  206.361861][ T8621] netlink: zone id is out of range
[  206.376491][ T8621] netlink: zone id is out of range
[  206.413756][ T8621] netlink: zone id is out of range
[  206.466578][ T8621] netlink: zone id is out of range
[  206.495332][ T8621] netlink: zone id is out of range
[  206.541945][ T8621] netlink: zone id is out of range
[  206.547325][ T8621] netlink: zone id is out of range
[  206.942271][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.747'.
[  207.838463][ T8648] netlink: 'syz.4.750': attribute type 3 has an invalid length.
[  207.886237][ T5863] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  207.891583][ T8648] netlink: 'syz.4.750': attribute type 1 has an invalid length.
[  207.923155][ T8648] netlink: 116 bytes leftover after parsing attributes in process `syz.4.750'.
[  207.939510][ T8653] netlink: 731 bytes leftover after parsing attributes in process `syz.2.752'.
[  208.663525][ T8668] netlink: 6 bytes leftover after parsing attributes in process `syz.1.755'.
[  208.967567][ T8690] netlink: 'syz.2.759': attribute type 3 has an invalid length.
[  209.628947][ T8707] netlink: 'syz.2.767': attribute type 4 has an invalid length.
[  209.654761][ T8707] netlink: 17 bytes leftover after parsing attributes in process `syz.2.767'.
[  209.888618][ T5871] ------------[ cut here ]------------
[  209.894616][ T5871] WARNING: CPU: 1 PID: 5871 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0xff/0x290
[  209.904485][ T5871] Modules linked in:
[  209.908569][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  209.918176][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.928350][ T5871] Workqueue: hci0 hci_conn_timeout
[  209.933992][ T5871] RIP: 0010:hci_conn_timeout+0xff/0x290
[  209.939578][ T5871] Code: 48 89 df e8 23 05 09 00 eb 07 e8 0c c3 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 f2 c2 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  209.959929][ T5871] RSP: 0018:ffffc900042afa50 EFLAGS: 00010293
[  209.966316][ T5871] RAX: ffffffff8a76e95e RBX: ffff888033188000 RCX: ffff88807b5a8000
[  209.974418][ T5871] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  209.982452][ T5871] RBP: 00000000ffffffff R08: ffff888033188013 R09: 1ffff11006631002
[  209.990545][ T5871] R10: dffffc0000000000 R11: ffffed1006631003 R12: dffffc0000000000
[  209.998623][ T5871] R13: ffff888021e95a18 R14: ffff888033188948 R15: ffff888033188010
[  210.006679][ T5871] FS:  0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[  210.015914][ T5871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  210.022669][ T5871] CR2: 000000110c3463cc CR3: 00000000763c8000 CR4: 00000000003526f0
[  210.030762][ T5871] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  210.039210][ T5871] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  210.047458][ T5871] Call Trace:
[  210.050769][ T5871]  <TASK>
[  210.053771][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[  210.059530][ T5871]  process_scheduled_works+0xae1/0x17b0
[  210.065207][ T5871]  ? __pfx_process_scheduled_works+0x10/0x10
[  210.071322][ T5871]  worker_thread+0x8a0/0xda0
[  210.075985][ T5871]  kthread+0x711/0x8a0
[  210.080099][ T5871]  ? __pfx_worker_thread+0x10/0x10
[  210.085280][ T5871]  ? __pfx_kthread+0x10/0x10
[  210.089913][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.095224][ T5871]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.100459][ T5871]  ? __pfx_kthread+0x10/0x10
[  210.105115][ T5871]  ret_from_fork+0x3f9/0x770
[  210.109752][ T5871]  ? __pfx_ret_from_fork+0x10/0x10
[  210.115081][ T5871]  ? __switch_to_asm+0x39/0x70
[  210.119898][ T5871]  ? __switch_to_asm+0x33/0x70
[  210.124780][ T5871]  ? __pfx_kthread+0x10/0x10
[  210.129474][ T5871]  ret_from_fork_asm+0x1a/0x30
[  210.134324][ T5871]  </TASK>
[  210.137370][ T5871] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  210.144673][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  210.154154][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  210.164333][ T5871] Workqueue: hci0 hci_conn_timeout
[  210.169507][ T5871] Call Trace:
[  210.172811][ T5871]  <TASK>
[  210.175788][ T5871]  dump_stack_lvl+0x99/0x250
[  210.180465][ T5871]  ? __asan_memcpy+0x40/0x70
[  210.185097][ T5871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.190348][ T5871]  ? __pfx__printk+0x10/0x10
[  210.195018][ T5871]  vpanic+0x281/0x750
[  210.199039][ T5871]  ? __pfx__printk+0x10/0x10
[  210.203758][ T5871]  ? __pfx_vpanic+0x10/0x10
[  210.208306][ T5871]  ? is_bpf_text_address+0x292/0x2b0
[  210.213793][ T5871]  panic+0xb9/0xc0
[  210.217566][ T5871]  ? __pfx_panic+0x10/0x10
[  210.222049][ T5871]  __warn+0x31b/0x4b0
[  210.226068][ T5871]  ? hci_conn_timeout+0xff/0x290
[  210.231180][ T5871]  ? hci_conn_timeout+0xff/0x290
[  210.236245][ T5871]  report_bug+0x2be/0x4f0
[  210.240626][ T5871]  ? hci_conn_timeout+0xff/0x290
[  210.245605][ T5871]  ? hci_conn_timeout+0xff/0x290
[  210.250590][ T5871]  ? hci_conn_timeout+0x101/0x290
[  210.255656][ T5871]  handle_bug+0x84/0x160
[  210.259931][ T5871]  exc_invalid_op+0x1a/0x50
[  210.264475][ T5871]  asm_exc_invalid_op+0x1a/0x20
[  210.269360][ T5871] RIP: 0010:hci_conn_timeout+0xff/0x290
[  210.274937][ T5871] Code: 48 89 df e8 23 05 09 00 eb 07 e8 0c c3 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 f2 c2 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  210.294576][ T5871] RSP: 0018:ffffc900042afa50 EFLAGS: 00010293
[  210.300685][ T5871] RAX: ffffffff8a76e95e RBX: ffff888033188000 RCX: ffff88807b5a8000
[  210.308684][ T5871] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  210.316685][ T5871] RBP: 00000000ffffffff R08: ffff888033188013 R09: 1ffff11006631002
[  210.324768][ T5871] R10: dffffc0000000000 R11: ffffed1006631003 R12: dffffc0000000000
[  210.332764][ T5871] R13: ffff888021e95a18 R14: ffff888033188948 R15: ffff888033188010
[  210.340788][ T5871]  ? hci_conn_timeout+0xfe/0x290
[  210.345771][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[  210.351556][ T5871]  process_scheduled_works+0xae1/0x17b0
[  210.357166][ T5871]  ? __pfx_process_scheduled_works+0x10/0x10
[  210.363196][ T5871]  worker_thread+0x8a0/0xda0
[  210.367853][ T5871]  kthread+0x711/0x8a0
[  210.371965][ T5871]  ? __pfx_worker_thread+0x10/0x10
[  210.377108][ T5871]  ? __pfx_kthread+0x10/0x10
[  210.381738][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.387026][ T5871]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.392439][ T5871]  ? __pfx_kthread+0x10/0x10
[  210.397065][ T5871]  ret_from_fork+0x3f9/0x770
[  210.401690][ T5871]  ? __pfx_ret_from_fork+0x10/0x10
[  210.406839][ T5871]  ? __switch_to_asm+0x39/0x70
[  210.411634][ T5871]  ? __switch_to_asm+0x33/0x70
[  210.416451][ T5871]  ? __pfx_kthread+0x10/0x10
[  210.421182][ T5871]  ret_from_fork_asm+0x1a/0x30
[  210.426013][ T5871]  </TASK>
[  210.429445][ T5871] Kernel Offset: disabled
[  210.433786][ T5871] Rebooting in 86400 seconds..