last executing test programs:

6m43.843114027s ago: executing program 3 (id=349):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x70, 0x36, 0x107, 0x0, 0x25dfdbfc, {0x15, 0x7c}, [@nested={0x5a, 0x1, 0x0, 0x1, [@generic="4a3fe688f35020558675c8e2515da03c8e020d6f8b1eefd58a9cd02fcc5bdef9455d3568ec7a7c115cc4e92bda0f3832ead992f8fb2a1457cbceebe4c00cef9d260bbeac419f01a490eaa6dec123d505af121fb01438"]}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c010}, 0x2400a844)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000"], 0xb0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000060a09040000000000000000020000050900018073797a30000000000900020073797a32000000000500074075000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

6m43.378063721s ago: executing program 1 (id=352):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2)
socketpair(0x22, 0xa, 0x10, &(0x7f0000001600))
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x88, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4})

6m43.12628203s ago: executing program 1 (id=358):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b140100"], 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x40810)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(0x0, 0x20)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe, 0x66c}, 0x104481, 0x6ff, 0x0, 0x4, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe0b0000000000000001010000000000000000001f00000000000000000000eadae3b196803c7e1d085d8a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100"/20], 0xb8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6m43.108661056s ago: executing program 3 (id=359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x2000000, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

6m42.841178378s ago: executing program 3 (id=362):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000003006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
write$cgroup_devices(r0, 0x0, 0xffdd)

6m42.840523846s ago: executing program 1 (id=363):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r2, r1, 0x7}, 0x10)

6m42.757919806s ago: executing program 2 (id=365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000002060102000000000000000000000a000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)

6m42.659144718s ago: executing program 1 (id=366):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

6m42.6009358s ago: executing program 2 (id=368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000108000a40000000000900020073797a32000000000900010073797a30000000000800054000000008fc0300000c0a010300000000000000000100000008000440000000000900010073797a3000000000d4030380d003008004000180080003"], 0x480}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x7, 0x80000000, 0x400c1, 0xffffffffffffffff, 0x1ab, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, &(0x7f0000002780)=""/4120}, 0x20)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0xf, &(0x7f0000000680)=@raw=[@generic={0x7, 0x4, 0x8, 0x1, 0xff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0xa}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], &(0x7f0000000780)='GPL\x00', 0x80000001, 0xbe, &(0x7f00000007c0)=""/190, 0x41000, 0x1d, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x8, 0x40, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r2], &(0x7f0000000980)=[{0x5, 0x2, 0x7, 0x2}], 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50)

6m42.438810303s ago: executing program 1 (id=369):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
r4 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000880)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x6)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000001000)="5df44b4b03b6d6", 0x7}], 0x2}, 0x80)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='(pu&00\t&&')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010)

6m42.215215619s ago: executing program 3 (id=371):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$kcm(0x21, 0x2, 0x2)
close(r5)

6m42.15113442s ago: executing program 3 (id=373):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000023800000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6m42.140586967s ago: executing program 2 (id=374):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000700))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f00000004c0), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48)

6m41.837748939s ago: executing program 3 (id=375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x80000001, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000001040)={0x12b4, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x101}, 0xe, 0x8, 0xb62, 0xf53b, 0xb, 'syz1\x00', "5c6435da6588542da127f8b0289d7b7c69855257b3662ec0c97f94143d1ff0e6", "f10d98603e01c2057b72f59f969b9366f1dfb9ba0d05b291ddfadf117f6a9c94", [{0x1, 0x7, {0x1, 0xd7}}, {0x0, 0x5, {0x0, 0x2f}}, {0x1, 0x6, {0x1, 0x6}}, {0x101, 0xff, {0x3, 0x54}}, {0x5, 0x2, {0x2, 0xfff0}}, {0x0, 0x7, {0x1, 0x6}}, {0xdf75, 0x7fff, {0x0, 0x9f96dc2}}, {0xfff7, 0x1, {0xe24c3c5d94c7703e, 0xffffffff}}, {0x0, 0x6, {0x0, 0xce}}, {0x75, 0x100, {0x0, 0x9}}, {0x800, 0x800, {0x1, 0x3ff}}, {0x200, 0x8000, {0x1}}, {0xc, 0x0, {0x2, 0x137}}, {0x0, 0x3, {0x1, 0x7}}, {0xfffc, 0x8000, {0x1, 0xa}}, {0x7, 0x8, {0x1, 0x5}}, {0x9, 0x30, {0x2, 0x5}}, {0x4, 0x101, {0x2, 0x66}}, {0xa, 0x2, {0x2, 0x6}}, {0x2, 0x6, {0x1, 0xffffff39}}, {0x40, 0x54, {0x2, 0x9}}, {0x2, 0x8000, {0x2, 0xfff}}, {0x8, 0x1, {0x0, 0x1c}}, {0x7, 0x8, {0x3, 0x1}}, {0x7, 0x8, {0x3, 0x9}}, {0x3, 0x4, {0x0, 0x4d}}, {0x2, 0x6, {0x2}}, {0xf471, 0x80, {0x2, 0x5}}, {0x6, 0x4, {0x0, 0x4}}, {0xb91, 0x3, {0x1, 0xffffffff}}, {0x8001, 0xe, {0x2, 0x5}}, {0x3, 0x9, {0x2, 0x4}}, {0x6, 0xfffe, {0x3, 0x200}}, {0xab9, 0xf21e, {0x1, 0x9}}, {0x0, 0xffff, {0x2, 0x5}}, {0x7f, 0x3, {0x16525c2313b5d396, 0x27}}, {0x0, 0x10, {0x2, 0x6}}, {0x7, 0x0, {0x2, 0x1400}}, {0x5, 0xfc82, {0x0, 0xe1}}, {0x8, 0x6, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffffc}, 0xa4, 0x2, 0xc, 0x508a, 0x24, 'syz1\x00', "8bcddf27984bc51a2c482ad0b7414c4f7d27ee177183f963381c986fdf28168f", "676c42e57b20ff401d4475c7a34d606b61bf83a587054fd28ba3f548f0a3bd14", [{0x9, 0xfda, {0x2, 0x80000001}}, {0x6, 0xb61d, {0x3, 0xadf}}, {0x9, 0x6, {0x3, 0x3}}, {0x1f8, 0x6, {0x0, 0x613b}}, {0xe1c, 0x8, {0x2, 0x2}}, {0x1, 0x10, {0x0, 0x4}}, {0x9, 0x4, {0x0, 0x8000}}, {0x6, 0x5, {0x1, 0x800}}, {0x2, 0x8, {0x1, 0x3}}, {0x3ff, 0x8, {0x2, 0x1ff}}, {0x8, 0x376, {0x0, 0xffff}}, {0x0, 0x8f96, {0x0, 0x9}}, {0x800, 0x8, {0x0, 0x8}}, {0x6, 0xd, {0x3, 0x4}}, {0x3, 0x0, {0x0, 0x5}}, {0xcc11, 0x1, {0x3, 0x9ab}}, {0x8, 0x6, {0x2, 0x101}}, {0x8, 0x7, {0x0, 0x61c}}, {0x8, 0x0, {0x2, 0x3}}, {0x9, 0x1f, {0x0, 0x8}}, {0x1, 0x4, {0x0, 0x9}}, {0x0, 0x100, {0x3, 0xf3}}, {0x3, 0x8, {0x2, 0xa}}, {0x7, 0x38, {0x0, 0x2}}, {0x4, 0x4, {0x2, 0x6}}, {0x1, 0x4aa, {0x0, 0x80000000}}, {0x3, 0x5, {0x0, 0xd}}, {0x0, 0x0, {0x2, 0x10}}, {0x400, 0x100, {0x3, 0x10}}, {0x2, 0x0, {0x2, 0x6}}, {0x0, 0x8000, {0x1, 0xfb75}}, {0x200, 0x9, {0x1, 0x7}}, {0x7, 0x3, {0x0, 0x6}}, {0x9, 0x7, {0x1, 0x101}}, {0xcb63, 0xa69, {0x3, 0x80000000}}, {0x1, 0x3554, {0x1}}, {0xfffc, 0x7ff, {0x3, 0x80000000}}, {0x9, 0x1, {0x1, 0x7}}, {0x7, 0x2, {0x2, 0x800}}, {0xd3, 0xf, {0x3, 0x3131}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x6, 0x2, 0xc7b8, 0x2, 0x2, 'syz1\x00', "4205c688f78b26168dcf98517e65150ec03adf8e3d5f050913ea639231565b5b", "e0a3f2901f7bc4ecb06471b22734135bcaa63cdf6c2c156f463078714348cd21", [{0x7, 0x800, {0x2, 0xff}}, {0x5a87, 0x3, {0x2, 0x6}}, {0xe88, 0x6, {0x1, 0x7f8b6a19}}, {0x6, 0x7, {0x3}}, {0x1ff, 0x4, {0x1, 0x2}}, {0xa, 0x3, {0x2, 0x8}}, {0xfffb, 0x6d00, {0x2, 0xce}}, {0xffff, 0x0, {0x3, 0xa}}, {0x0, 0xa, {0x1, 0xfffffffe}}, {0x3, 0xed, {0x2, 0x369}}, {0x9, 0xff80, {0x3, 0x4}}, {0x9, 0xfffd, {0x1}}, {0x2, 0x9, {0x3, 0x1}}, {0xfffe, 0x7, {0x3, 0x200}}, {0x1, 0x0, {0x0, 0x36}}, {0x9, 0x4, {0x0, 0xe65}}, {0x0, 0x9, {0x0, 0x6}}, {0x1, 0x3, {0x1, 0x7}}, {0x2, 0x7ff, {0x1, 0x5}}, {0x6, 0x8, {0x3, 0x6fca000}}, {0x8001, 0x7, {0x3, 0x9}}, {0x0, 0x5, {0x3, 0x6}}, {0x5, 0xd, {0x2, 0x1680}}, {0x5, 0x2a0, {0x0, 0x101}}, {0x4, 0x3, {0x3, 0x4}}, {0xc, 0x38, {0x1, 0x7}}, {0xfff7, 0x3, {0x2, 0x3}}, {0x1, 0x0, {0x1, 0x8}}, {0x29, 0x8, {0x2, 0x6}}, {0x0, 0x9, {0x2, 0x3}}, {0x0, 0x100, {0x2, 0x380}}, {0x5, 0x2, {0x3, 0x3ff}}, {0xe8, 0x101, {0x3, 0x3}}, {0x7fff, 0x72b, {0x0, 0xfff}}, {0xc1e, 0x0, {0x1, 0x6}}, {0xac88, 0x3, {0x2, 0x7}}, {0x68d, 0x2, {0x0, 0xcdd}}, {0x7, 0x7, {0x1, 0x7}}, {0x4, 0x7f, {0x1, 0x4}}, {0x7f9, 0x0, {0x2, 0x1000}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x4, 0x3, 0x9, 0x10, 0x27, 'syz0\x00', "c88089232232262557b50bf256212cd72f13bdb672f789e9c9133a80324aaafb", "a7725c4f17a1735e882a6349a7b7b42160a934959e998373bfaf9226ef906904", [{0xfff7, 0x0, {0x2, 0x3}}, {0x6, 0x31c4, {0x1, 0x9}}, {0x2, 0x1, {0x3, 0xa}}, {0x3b4, 0xd, {0x1, 0x5}}, {0x3, 0x7, {0x1, 0x9c9}}, {0xf62, 0x6, {0x0, 0xdd}}, {0x81, 0x4, {0x1, 0x7}}, {0xd5, 0x4, {0x1, 0x179e}}, {0x1, 0x1, {0x2, 0xc6}}, {0xb5, 0x1000, {0x3}}, {0x100, 0x8, {0x3, 0x10000}}, {0x5, 0x1, {0x0, 0x40}}, {0x5, 0xe, {0x3, 0x54}}, {0x9, 0x7, {0x1, 0xffff}}, {0x401, 0x9, {0x3, 0x8000}}, {0x2, 0xa, {0x3, 0x6}}, {0x6, 0xe, {0x0, 0x6}}, {0x8, 0xd8, {0x1, 0x3}}, {0x1, 0x100, {0x3, 0x2}}, {0x1, 0x6, {0x0, 0x1}}, {0x8, 0x1ff, {0x1, 0x9}}, {0xf1c8, 0x8, {0x2, 0x8}}, {0x3, 0x8, {0x2, 0xd36}}, {0x1, 0x1, {0x3, 0xffffff30}}, {0x4, 0x8, {0x2}}, {0x9d, 0x9, {0x0, 0xb3}}, {0x4, 0x5, {0x2, 0x81}}, {0x9, 0x1, {0x0, 0x80000001}}, {0xd, 0x8, {0x1, 0x77}}, {0x35, 0xe4, {0x3, 0x8}}, {0xd, 0x3, {0x2, 0xbe}}, {0x1, 0x7, {0x3, 0x80000000}}, {0x4, 0x1, {0x1, 0xffffff7f}}, {0x200, 0x40, {0x1, 0x9}}, {0x9, 0xfffa, {0x0, 0x2}}, {0xd, 0x8000, {0x0, 0x4d}}, {0xff, 0xd8, {0x0, 0x9}}, {0x9, 0x81, {0x0, 0x4}}, {0xe0d, 0x3, {0x2, 0xfffffffe}}, {0xa, 0x9, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2}, 0xc0, 0xd, 0x5, 0xc5, 0x17, 'syz0\x00', "272f5df4c8528f3e9107b9e6054e5530bd9441781682d57e8c582cc6496edd56", "001f379a201f770dd87bca9eb25b35ebcfc83fcfa5e6604a280c5578716b5cdf", [{0x4000, 0x1, {0x0, 0x3}}, {0x7fff, 0x1, {0x1}}, {0x6, 0x3ff, {0x3, 0x7ff}}, {0x2, 0x7f, {0x0, 0x5}}, {0x3, 0x5}, {0x6, 0x4, {0x1, 0x6}}, {0x6, 0x2, {0x3, 0xec}}, {0x7, 0xbae, {0x0, 0x8}}, {0x5, 0x6, {0x1, 0x2}}, {0x7f00, 0x200, {0x0, 0x9}}, {0xee3, 0x0, {0x3, 0x10000}}, {0xab0, 0x7, {0x1, 0x6}}, {0xb035, 0x7, {0x1, 0x9}}, {0x7, 0x5, {0x3, 0x1}}, {0x8d9, 0x7ff, {0x0, 0x51}}, {0x3, 0xa, {0x1, 0x8000}}, {0x2, 0xd00, {0x3, 0x6}}, {0x101, 0xd0, {0x2, 0x3}}, {0x56c4, 0x5, {0x1, 0x6}}, {0x2, 0x2, {0x0, 0x5ebf}}, {0x2, 0x5, {0x1, 0x3ff}}, {0x4, 0x3ff, {0x2}}, {0xc, 0xffff, {0x0, 0xfffff6e0}}, {0x1, 0x5, {0x1, 0x269}}, {0xd7, 0x6, {0x3, 0x2}}, {0xa, 0xffff, {0x2, 0x8000}}, {0x3f35, 0x9, {0x2, 0x10001}}, {0xc1, 0x2, {0x3, 0x8}}, {0x9, 0x0, {0x1, 0xffffffff}}, {0x0, 0x8001, {0x0, 0x6}}, {0x6, 0x7, {0x0, 0xa9e000}}, {0x5, 0x3, {0x1, 0x80}}, {0x40, 0x5, {0x1, 0x2}}, {0x9, 0x180, {0x3, 0x9e0}}, {0x3, 0x6, {0x0, 0x3}}, {0x3, 0x7d6, {0x3, 0x2f}}, {0xe, 0x7ff, {0x2, 0x7e54}}, {0x7, 0x4, {0x2, 0xfffffffd}}, {0x7, 0x9, {0x3, 0x4}}, {0x7, 0x9, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x29}, 0x5, 0x1, 0xb2, 0x6, 0x4, 'syz1\x00', "eac12093b565352ecc8acad2cb62bf51088b51a46a3e2759e9b5334a1785c7b9", "ffc3a2b71178270c15a1f26d49095d6aeb83b4ae0335c77d1ded763222f9cdfd", [{0x8, 0x2, {0x1, 0x80}}, {0xdca5, 0x0, {0x2, 0x5}}, {0x5, 0x8, {0x0, 0x3}}, {0x101, 0xc, {0x2, 0xfffffff9}}, {0xc784, 0x2, {0x2, 0x7f}}, {0x413, 0xc, {0x3}}, {0xf, 0x5, {0x3, 0x6}}, {0x38, 0x0, {0x3}}, {0x1000, 0xf, {0x2, 0x2}}, {0x6, 0x0, {0x1, 0xf960}}, {0x7, 0x8bbe, {0x1, 0x2}}, {0x3ff, 0x76e6, {0x1}}, {0x200, 0x4, {0x0, 0x5}}, {0xcafe, 0x8, {0x2}}, {0x712e, 0x6, {0x2, 0x1}}, {0x1, 0xfdbe, {0x3, 0x2}}, {0xd, 0xbb1, {0x0, 0x80000001}}, {0x8, 0x370, {0x0, 0x4}}, {0x7, 0x2, {0x3, 0x300000}}, {0xc, 0x53, {0x3, 0x4}}, {0x1, 0x0, {0x1, 0x4}}, {0x8, 0xfffa, {0x2, 0x80}}, {0xffff, 0x800, {0x3, 0xe76}}, {0x4e2, 0x9, {0x1, 0x77}}, {0x1, 0xd0, {0x3, 0x4}}, {0xa, 0xd, {0x2, 0x6}}, {0x3a09, 0xfff9, {0x1, 0x2}}, {0x7, 0x3, {0x1, 0x6}}, {0xd, 0x3, {0x1, 0x9}}, {0x8e9, 0x6, {0x2}}, {0x5, 0x0, {0x0, 0xfff}}, {0x0, 0x9, {0x0, 0x5}}, {0x4, 0x4, {0x1, 0x7fff}}, {0x0, 0x2, {0x0, 0x9}}, {0xa728, 0xb, {0x2, 0x5}}, {0x9, 0x10, {0x1, 0xfffffffa}}, {0xfff, 0xfffd, {0x3, 0x4}}, {0xfffa, 0x5, {0x3, 0x4}}, {0x0, 0x8, {0x1, 0x1e8}}, {0x7ff, 0x0, {0x2, 0x260}}]}}}, {{0x254, 0x1, {{0x0, 0x1b6}, 0x7, 0xec, 0xfff8, 0x7, 0x14, 'syz0\x00', "3ea331ac9302a500e2d2cafe719a617f63e2743ff6195f24e32110efd2ec29b4", "f21424b0c6385668329d14276329d1f400b52f8c86ccedb53e83c9be0d79263d", [{0xfffc, 0x800, {0x2, 0xe6f}}, {0x2, 0x3, {0x3, 0x2}}, {0x1, 0xd, {0x0, 0x8}}, {0x4, 0x40, {0x0, 0x80000000}}, {0x401, 0x5b, {0x0, 0x8}}, {0x9, 0x1, {0x1, 0x1}}, {0x4, 0x7, {0x0, 0x1}}, {0x667, 0x95d, {0x1, 0x2}}, {0x40, 0x9, {0x3, 0x4}}, {0x7, 0x6, {0x2, 0x9}}, {0x4d1, 0x1, {0x2, 0x6}}, {0x8, 0x9, {0x2, 0xc4df}}, {0x7, 0x3, {0x2, 0x6}}, {0x8e, 0x2, {0x3, 0x4}}, {0x1, 0x4, {0x0, 0x84a}}, {0x5, 0x3, {0x1, 0x80}}, {0x6, 0xcb, {0x1, 0x6}}, {0x80, 0xa69, {0x3, 0x2442}}, {0x5, 0x2, {0x1}}, {0x101, 0xfffb, {0x3, 0x979}}, {0x7, 0x7fff, {0x2, 0x1}}, {0x81, 0x1, {0x0, 0xffff}}, {0x9, 0xca, {0x0, 0x3}}, {0x7ff, 0x4, {0x0, 0x401}}, {0x1, 0x3, {0x0, 0x4}}, {0x3, 0x3, {0x0, 0x9}}, {0x7, 0xfffa, {0x3, 0xfffffff8}}, {0x40, 0x4, {0x1, 0x1}}, {0x81, 0x7, {0x0, 0x3}}, {0x46, 0xfff, {0x1, 0xd}}, {0x7, 0x8000, {0x1, 0x4df0}}, {0x4, 0x2, {0x1, 0x1}}, {0xc, 0x1, {0x0, 0xfffffff2}}, {0x3, 0x81, {0x0, 0x9}}, {0x1, 0x5, {0x3, 0x4}}, {0x40, 0x6f2c, {0x0, 0x9}}, {0x8, 0x8, {0x3, 0xd}}, {0x7, 0x7, {0x1, 0x5}}, {0xbc06, 0x81, {0x0, 0x7}}, {0xe, 0x6cc, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0xb, 0x2, 0x7, 0xfffa, 0x15, 'syz1\x00', "b5e66db1aaca9ad078dda4f8fce0e3ab1b00d5053403710afd5d868a47b7a245", "883cab74355bc79fcc6fa79de4a17b85f89e6123a333d45ad813ff5c7c29a5dc", [{0x3, 0x9, {0x3, 0x101}}, {0xffff, 0x9, {0x3, 0xffffffff}}, {0x5, 0x3ff, {0x0, 0x1ff}}, {0xa01, 0x6, {0x3, 0x3}}, {0x0, 0x8, {0x2, 0x3}}, {0x7, 0x3, {0x3, 0x400}}, {0x8, 0x9, {0x3, 0x7}}, {0x1, 0x6, {0x1}}, {0x4, 0x4, {0x1, 0x3}}, {0x9, 0x7, {0x1, 0x6}}, {0x7ff, 0x9, {0x2, 0x2}}, {0x6, 0x140, {0x3}}, {0x1, 0x0, {0x3, 0x475a6805}}, {0x8000, 0x3, {0x1, 0xc}}, {0x7, 0xff7f, {0x2, 0x9}}, {0x7ff, 0xdc, {0x7, 0x9b}}, {0x4, 0x8000, {0x1, 0x3}}, {0x11f, 0x9, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x9}}, {0x6, 0x0, {0x1, 0x3}}, {0x9, 0x6, {0x1}}, {0x8, 0x7, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x3}}, {0x200, 0x2, {0x0, 0xff}}, {0x1000, 0x1ff, {0x3, 0x8}}, {0x1ff, 0x8, {0x0, 0x8}}, {0x9, 0x19, {0x6, 0x9}}, {0x5b, 0x4}, {0xd00, 0x6}, {0x0, 0x6, {0x0, 0x1fc0000}}, {0x10, 0x8001, {0x2, 0xf}}, {0x7, 0x7f}, {0x7, 0x1, {0x0, 0xffffffff}}, {0xf, 0x3, {0x3, 0x9}}, {0x81, 0xd44, {0x3, 0x8}}, {0x6f1a, 0x4, {0x1, 0x40}}, {0x8, 0x42d, {0x0, 0x6c6}}, {0x8000, 0x3, {0x1, 0x401}}, {0x1, 0x0, {0x1, 0x10000}}, {0x6, 0x6, {0x1, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0xa, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xbb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xc}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000103000000000000031ad40000000000000000002e"], 0x0, 0x3a, 0x0, 0x1}, 0x28)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0x22a, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x71bd26, 0x3502}, @sadb_x_sec_ctx={0x201, 0x18, 0x5a, 0x3f, 0x1000, "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"}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x21, 0x8, 0x800, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc2911ada72941105c34627a0f9c79fd6905e90514a9620b5568aee12dfcf3a3780c3a729985ca956035883bd610421029d7ecc106161990784ba524427fe86fffaa57a31320adc81458a8c90a68899838ee795c749ac2341bbc2d18eef675b85ae0b6702b188c7ad8e16e1f95fc65c2ca2a9e0c6619b6540fcc1b4bea733e5fa7ec86264831b0c5cf4f84b6"}]}, 0x1150}, 0x1, 0x7}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delsa={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x1b, &(0x7f0000000100), 0x120)

6m41.611008178s ago: executing program 2 (id=376):
socket$kcm(0xf, 0x3, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
close(0x3)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0x11}, 0x80, 0x0}, 0x24000844)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000c40)={r3, &(0x7f0000000c80)="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"/299, &(0x7f0000000bc0)=""/122}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x6c, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x9, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x399, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @generic={0x3, 0x3, 0x4, 0x10, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x1d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xe, 0xf4, &(0x7f0000000780)=""/244, 0x40f00, 0x6c, '\x00', r4, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x0, 0x7, 0x400}, 0x10, r5, r0, 0x1, 0x0, &(0x7f0000000a00)=[{0x5, 0x3, 0x3, 0xb}], 0x10, 0x1}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)

6m33.81009379s ago: executing program 1 (id=382):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x1b}]}, {0x0, [0x61]}}, &(0x7f0000000680)=""/107, 0x4f, 0x6b, 0x0, 0x8, 0x10000}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$can_raw(r1, 0x0, 0x8001)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x7, 0x800, r0, 0x100, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xed5)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r6}, 0x10)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085)

6m32.324406696s ago: executing program 2 (id=384):
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2, 0x8, 0x4}, 0x20)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x6, [@volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x10, 0x5, 0x4}, {0x2, 0x0, 0x1}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x7fffffff}}, @struct={0x3, 0x3, 0x0, 0x4, 0x0, 0x8, [{0xb, 0x1}, {0x0, 0x0, 0x1}, {0x5, 0x1, 0x1}]}, @fwd={0xc}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0xc, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0xa, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x9, 0x1}, {0x4, 0x3}]}, @fwd={0x1}]}, {0x0, [0x61, 0x30, 0x2e, 0x61]}}, &(0x7f0000000080), 0x10e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x8000)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000000), 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m31.435509767s ago: executing program 2 (id=385):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x91, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', @random="020000f9ff00"})
close(r4)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000240))
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x29, 0x2, 0x0)
close(r7)
r8 = socket$kcm(0x2b, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r1}, 0x18)
close(r8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x3}, 0x94)
r9 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x79}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x11, &(0x7f0000000000)=r12, 0x8)
r13 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x200, @mcast2}, 0x80, 0x0}, 0xb80a)
close(r8)
socket$kcm(0x2, 0x3, 0x2)

6m16.757611746s ago: executing program 32 (id=381):
socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{}, [@map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000005, 0x0)
socket$kcm(0x23, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000850706410800000000000000000a0000040500010007000000b236fc5e44a819"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60)
sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000800000000006000000000000000000000000000000ac1e0001000000000000000000000000fc01000000000000000000000000000105000500000000000a00000000000000fc00"/157], 0xd8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6m16.669755431s ago: executing program 33 (id=382):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x1b}]}, {0x0, [0x61]}}, &(0x7f0000000680)=""/107, 0x4f, 0x6b, 0x0, 0x8, 0x10000}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$can_raw(r1, 0x0, 0x8001)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x7, 0x800, r0, 0x100, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xed5)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r6}, 0x10)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085)

6m16.602837785s ago: executing program 34 (id=375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x80000001, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000001040)={0x12b4, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x101}, 0xe, 0x8, 0xb62, 0xf53b, 0xb, 'syz1\x00', "5c6435da6588542da127f8b0289d7b7c69855257b3662ec0c97f94143d1ff0e6", "f10d98603e01c2057b72f59f969b9366f1dfb9ba0d05b291ddfadf117f6a9c94", [{0x1, 0x7, {0x1, 0xd7}}, {0x0, 0x5, {0x0, 0x2f}}, {0x1, 0x6, {0x1, 0x6}}, {0x101, 0xff, {0x3, 0x54}}, {0x5, 0x2, {0x2, 0xfff0}}, {0x0, 0x7, {0x1, 0x6}}, {0xdf75, 0x7fff, {0x0, 0x9f96dc2}}, {0xfff7, 0x1, {0xe24c3c5d94c7703e, 0xffffffff}}, {0x0, 0x6, {0x0, 0xce}}, {0x75, 0x100, {0x0, 0x9}}, {0x800, 0x800, {0x1, 0x3ff}}, {0x200, 0x8000, {0x1}}, {0xc, 0x0, {0x2, 0x137}}, {0x0, 0x3, {0x1, 0x7}}, {0xfffc, 0x8000, {0x1, 0xa}}, {0x7, 0x8, {0x1, 0x5}}, {0x9, 0x30, {0x2, 0x5}}, {0x4, 0x101, {0x2, 0x66}}, {0xa, 0x2, {0x2, 0x6}}, {0x2, 0x6, {0x1, 0xffffff39}}, {0x40, 0x54, {0x2, 0x9}}, {0x2, 0x8000, {0x2, 0xfff}}, {0x8, 0x1, {0x0, 0x1c}}, {0x7, 0x8, {0x3, 0x1}}, {0x7, 0x8, {0x3, 0x9}}, {0x3, 0x4, {0x0, 0x4d}}, {0x2, 0x6, {0x2}}, {0xf471, 0x80, {0x2, 0x5}}, {0x6, 0x4, {0x0, 0x4}}, {0xb91, 0x3, {0x1, 0xffffffff}}, {0x8001, 0xe, {0x2, 0x5}}, {0x3, 0x9, {0x2, 0x4}}, {0x6, 0xfffe, {0x3, 0x200}}, {0xab9, 0xf21e, {0x1, 0x9}}, {0x0, 0xffff, {0x2, 0x5}}, {0x7f, 0x3, {0x16525c2313b5d396, 0x27}}, {0x0, 0x10, {0x2, 0x6}}, {0x7, 0x0, {0x2, 0x1400}}, {0x5, 0xfc82, {0x0, 0xe1}}, {0x8, 0x6, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffffc}, 0xa4, 0x2, 0xc, 0x508a, 0x24, 'syz1\x00', "8bcddf27984bc51a2c482ad0b7414c4f7d27ee177183f963381c986fdf28168f", "676c42e57b20ff401d4475c7a34d606b61bf83a587054fd28ba3f548f0a3bd14", [{0x9, 0xfda, {0x2, 0x80000001}}, {0x6, 0xb61d, {0x3, 0xadf}}, {0x9, 0x6, {0x3, 0x3}}, {0x1f8, 0x6, {0x0, 0x613b}}, {0xe1c, 0x8, {0x2, 0x2}}, {0x1, 0x10, {0x0, 0x4}}, {0x9, 0x4, {0x0, 0x8000}}, {0x6, 0x5, {0x1, 0x800}}, {0x2, 0x8, {0x1, 0x3}}, {0x3ff, 0x8, {0x2, 0x1ff}}, {0x8, 0x376, {0x0, 0xffff}}, {0x0, 0x8f96, {0x0, 0x9}}, {0x800, 0x8, {0x0, 0x8}}, {0x6, 0xd, {0x3, 0x4}}, {0x3, 0x0, {0x0, 0x5}}, {0xcc11, 0x1, {0x3, 0x9ab}}, {0x8, 0x6, {0x2, 0x101}}, {0x8, 0x7, {0x0, 0x61c}}, {0x8, 0x0, {0x2, 0x3}}, {0x9, 0x1f, {0x0, 0x8}}, {0x1, 0x4, {0x0, 0x9}}, {0x0, 0x100, {0x3, 0xf3}}, {0x3, 0x8, {0x2, 0xa}}, {0x7, 0x38, {0x0, 0x2}}, {0x4, 0x4, {0x2, 0x6}}, {0x1, 0x4aa, {0x0, 0x80000000}}, {0x3, 0x5, {0x0, 0xd}}, {0x0, 0x0, {0x2, 0x10}}, {0x400, 0x100, {0x3, 0x10}}, {0x2, 0x0, {0x2, 0x6}}, {0x0, 0x8000, {0x1, 0xfb75}}, {0x200, 0x9, {0x1, 0x7}}, {0x7, 0x3, {0x0, 0x6}}, {0x9, 0x7, {0x1, 0x101}}, {0xcb63, 0xa69, {0x3, 0x80000000}}, {0x1, 0x3554, {0x1}}, {0xfffc, 0x7ff, {0x3, 0x80000000}}, {0x9, 0x1, {0x1, 0x7}}, {0x7, 0x2, {0x2, 0x800}}, {0xd3, 0xf, {0x3, 0x3131}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x6, 0x2, 0xc7b8, 0x2, 0x2, 'syz1\x00', "4205c688f78b26168dcf98517e65150ec03adf8e3d5f050913ea639231565b5b", "e0a3f2901f7bc4ecb06471b22734135bcaa63cdf6c2c156f463078714348cd21", [{0x7, 0x800, {0x2, 0xff}}, {0x5a87, 0x3, {0x2, 0x6}}, {0xe88, 0x6, {0x1, 0x7f8b6a19}}, {0x6, 0x7, {0x3}}, {0x1ff, 0x4, {0x1, 0x2}}, {0xa, 0x3, {0x2, 0x8}}, {0xfffb, 0x6d00, {0x2, 0xce}}, {0xffff, 0x0, {0x3, 0xa}}, {0x0, 0xa, {0x1, 0xfffffffe}}, {0x3, 0xed, {0x2, 0x369}}, {0x9, 0xff80, {0x3, 0x4}}, {0x9, 0xfffd, {0x1}}, {0x2, 0x9, {0x3, 0x1}}, {0xfffe, 0x7, {0x3, 0x200}}, {0x1, 0x0, {0x0, 0x36}}, {0x9, 0x4, {0x0, 0xe65}}, {0x0, 0x9, {0x0, 0x6}}, {0x1, 0x3, {0x1, 0x7}}, {0x2, 0x7ff, {0x1, 0x5}}, {0x6, 0x8, {0x3, 0x6fca000}}, {0x8001, 0x7, {0x3, 0x9}}, {0x0, 0x5, {0x3, 0x6}}, {0x5, 0xd, {0x2, 0x1680}}, {0x5, 0x2a0, {0x0, 0x101}}, {0x4, 0x3, {0x3, 0x4}}, {0xc, 0x38, {0x1, 0x7}}, {0xfff7, 0x3, {0x2, 0x3}}, {0x1, 0x0, {0x1, 0x8}}, {0x29, 0x8, {0x2, 0x6}}, {0x0, 0x9, {0x2, 0x3}}, {0x0, 0x100, {0x2, 0x380}}, {0x5, 0x2, {0x3, 0x3ff}}, {0xe8, 0x101, {0x3, 0x3}}, {0x7fff, 0x72b, {0x0, 0xfff}}, {0xc1e, 0x0, {0x1, 0x6}}, {0xac88, 0x3, {0x2, 0x7}}, {0x68d, 0x2, {0x0, 0xcdd}}, {0x7, 0x7, {0x1, 0x7}}, {0x4, 0x7f, {0x1, 0x4}}, {0x7f9, 0x0, {0x2, 0x1000}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x4, 0x3, 0x9, 0x10, 0x27, 'syz0\x00', "c88089232232262557b50bf256212cd72f13bdb672f789e9c9133a80324aaafb", "a7725c4f17a1735e882a6349a7b7b42160a934959e998373bfaf9226ef906904", [{0xfff7, 0x0, {0x2, 0x3}}, {0x6, 0x31c4, {0x1, 0x9}}, {0x2, 0x1, {0x3, 0xa}}, {0x3b4, 0xd, {0x1, 0x5}}, {0x3, 0x7, {0x1, 0x9c9}}, {0xf62, 0x6, {0x0, 0xdd}}, {0x81, 0x4, {0x1, 0x7}}, {0xd5, 0x4, {0x1, 0x179e}}, {0x1, 0x1, {0x2, 0xc6}}, {0xb5, 0x1000, {0x3}}, {0x100, 0x8, {0x3, 0x10000}}, {0x5, 0x1, {0x0, 0x40}}, {0x5, 0xe, {0x3, 0x54}}, {0x9, 0x7, {0x1, 0xffff}}, {0x401, 0x9, {0x3, 0x8000}}, {0x2, 0xa, {0x3, 0x6}}, {0x6, 0xe, {0x0, 0x6}}, {0x8, 0xd8, {0x1, 0x3}}, {0x1, 0x100, {0x3, 0x2}}, {0x1, 0x6, {0x0, 0x1}}, {0x8, 0x1ff, {0x1, 0x9}}, {0xf1c8, 0x8, {0x2, 0x8}}, {0x3, 0x8, {0x2, 0xd36}}, {0x1, 0x1, {0x3, 0xffffff30}}, {0x4, 0x8, {0x2}}, {0x9d, 0x9, {0x0, 0xb3}}, {0x4, 0x5, {0x2, 0x81}}, {0x9, 0x1, {0x0, 0x80000001}}, {0xd, 0x8, {0x1, 0x77}}, {0x35, 0xe4, {0x3, 0x8}}, {0xd, 0x3, {0x2, 0xbe}}, {0x1, 0x7, {0x3, 0x80000000}}, {0x4, 0x1, {0x1, 0xffffff7f}}, {0x200, 0x40, {0x1, 0x9}}, {0x9, 0xfffa, {0x0, 0x2}}, {0xd, 0x8000, {0x0, 0x4d}}, {0xff, 0xd8, {0x0, 0x9}}, {0x9, 0x81, {0x0, 0x4}}, {0xe0d, 0x3, {0x2, 0xfffffffe}}, {0xa, 0x9, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2}, 0xc0, 0xd, 0x5, 0xc5, 0x17, 'syz0\x00', "272f5df4c8528f3e9107b9e6054e5530bd9441781682d57e8c582cc6496edd56", "001f379a201f770dd87bca9eb25b35ebcfc83fcfa5e6604a280c5578716b5cdf", [{0x4000, 0x1, {0x0, 0x3}}, {0x7fff, 0x1, {0x1}}, {0x6, 0x3ff, {0x3, 0x7ff}}, {0x2, 0x7f, {0x0, 0x5}}, {0x3, 0x5}, {0x6, 0x4, {0x1, 0x6}}, {0x6, 0x2, {0x3, 0xec}}, {0x7, 0xbae, {0x0, 0x8}}, {0x5, 0x6, {0x1, 0x2}}, {0x7f00, 0x200, {0x0, 0x9}}, {0xee3, 0x0, {0x3, 0x10000}}, {0xab0, 0x7, {0x1, 0x6}}, {0xb035, 0x7, {0x1, 0x9}}, {0x7, 0x5, {0x3, 0x1}}, {0x8d9, 0x7ff, {0x0, 0x51}}, {0x3, 0xa, {0x1, 0x8000}}, {0x2, 0xd00, {0x3, 0x6}}, {0x101, 0xd0, {0x2, 0x3}}, {0x56c4, 0x5, {0x1, 0x6}}, {0x2, 0x2, {0x0, 0x5ebf}}, {0x2, 0x5, {0x1, 0x3ff}}, {0x4, 0x3ff, {0x2}}, {0xc, 0xffff, {0x0, 0xfffff6e0}}, {0x1, 0x5, {0x1, 0x269}}, {0xd7, 0x6, {0x3, 0x2}}, {0xa, 0xffff, {0x2, 0x8000}}, {0x3f35, 0x9, {0x2, 0x10001}}, {0xc1, 0x2, {0x3, 0x8}}, {0x9, 0x0, {0x1, 0xffffffff}}, {0x0, 0x8001, {0x0, 0x6}}, {0x6, 0x7, {0x0, 0xa9e000}}, {0x5, 0x3, {0x1, 0x80}}, {0x40, 0x5, {0x1, 0x2}}, {0x9, 0x180, {0x3, 0x9e0}}, {0x3, 0x6, {0x0, 0x3}}, {0x3, 0x7d6, {0x3, 0x2f}}, {0xe, 0x7ff, {0x2, 0x7e54}}, {0x7, 0x4, {0x2, 0xfffffffd}}, {0x7, 0x9, {0x3, 0x4}}, {0x7, 0x9, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x29}, 0x5, 0x1, 0xb2, 0x6, 0x4, 'syz1\x00', "eac12093b565352ecc8acad2cb62bf51088b51a46a3e2759e9b5334a1785c7b9", "ffc3a2b71178270c15a1f26d49095d6aeb83b4ae0335c77d1ded763222f9cdfd", [{0x8, 0x2, {0x1, 0x80}}, {0xdca5, 0x0, {0x2, 0x5}}, {0x5, 0x8, {0x0, 0x3}}, {0x101, 0xc, {0x2, 0xfffffff9}}, {0xc784, 0x2, {0x2, 0x7f}}, {0x413, 0xc, {0x3}}, {0xf, 0x5, {0x3, 0x6}}, {0x38, 0x0, {0x3}}, {0x1000, 0xf, {0x2, 0x2}}, {0x6, 0x0, {0x1, 0xf960}}, {0x7, 0x8bbe, {0x1, 0x2}}, {0x3ff, 0x76e6, {0x1}}, {0x200, 0x4, {0x0, 0x5}}, {0xcafe, 0x8, {0x2}}, {0x712e, 0x6, {0x2, 0x1}}, {0x1, 0xfdbe, {0x3, 0x2}}, {0xd, 0xbb1, {0x0, 0x80000001}}, {0x8, 0x370, {0x0, 0x4}}, {0x7, 0x2, {0x3, 0x300000}}, {0xc, 0x53, {0x3, 0x4}}, {0x1, 0x0, {0x1, 0x4}}, {0x8, 0xfffa, {0x2, 0x80}}, {0xffff, 0x800, {0x3, 0xe76}}, {0x4e2, 0x9, {0x1, 0x77}}, {0x1, 0xd0, {0x3, 0x4}}, {0xa, 0xd, {0x2, 0x6}}, {0x3a09, 0xfff9, {0x1, 0x2}}, {0x7, 0x3, {0x1, 0x6}}, {0xd, 0x3, {0x1, 0x9}}, {0x8e9, 0x6, {0x2}}, {0x5, 0x0, {0x0, 0xfff}}, {0x0, 0x9, {0x0, 0x5}}, {0x4, 0x4, {0x1, 0x7fff}}, {0x0, 0x2, {0x0, 0x9}}, {0xa728, 0xb, {0x2, 0x5}}, {0x9, 0x10, {0x1, 0xfffffffa}}, {0xfff, 0xfffd, {0x3, 0x4}}, {0xfffa, 0x5, {0x3, 0x4}}, {0x0, 0x8, {0x1, 0x1e8}}, {0x7ff, 0x0, {0x2, 0x260}}]}}}, {{0x254, 0x1, {{0x0, 0x1b6}, 0x7, 0xec, 0xfff8, 0x7, 0x14, 'syz0\x00', "3ea331ac9302a500e2d2cafe719a617f63e2743ff6195f24e32110efd2ec29b4", "f21424b0c6385668329d14276329d1f400b52f8c86ccedb53e83c9be0d79263d", [{0xfffc, 0x800, {0x2, 0xe6f}}, {0x2, 0x3, {0x3, 0x2}}, {0x1, 0xd, {0x0, 0x8}}, {0x4, 0x40, {0x0, 0x80000000}}, {0x401, 0x5b, {0x0, 0x8}}, {0x9, 0x1, {0x1, 0x1}}, {0x4, 0x7, {0x0, 0x1}}, {0x667, 0x95d, {0x1, 0x2}}, {0x40, 0x9, {0x3, 0x4}}, {0x7, 0x6, {0x2, 0x9}}, {0x4d1, 0x1, {0x2, 0x6}}, {0x8, 0x9, {0x2, 0xc4df}}, {0x7, 0x3, {0x2, 0x6}}, {0x8e, 0x2, {0x3, 0x4}}, {0x1, 0x4, {0x0, 0x84a}}, {0x5, 0x3, {0x1, 0x80}}, {0x6, 0xcb, {0x1, 0x6}}, {0x80, 0xa69, {0x3, 0x2442}}, {0x5, 0x2, {0x1}}, {0x101, 0xfffb, {0x3, 0x979}}, {0x7, 0x7fff, {0x2, 0x1}}, {0x81, 0x1, {0x0, 0xffff}}, {0x9, 0xca, {0x0, 0x3}}, {0x7ff, 0x4, {0x0, 0x401}}, {0x1, 0x3, {0x0, 0x4}}, {0x3, 0x3, {0x0, 0x9}}, {0x7, 0xfffa, {0x3, 0xfffffff8}}, {0x40, 0x4, {0x1, 0x1}}, {0x81, 0x7, {0x0, 0x3}}, {0x46, 0xfff, {0x1, 0xd}}, {0x7, 0x8000, {0x1, 0x4df0}}, {0x4, 0x2, {0x1, 0x1}}, {0xc, 0x1, {0x0, 0xfffffff2}}, {0x3, 0x81, {0x0, 0x9}}, {0x1, 0x5, {0x3, 0x4}}, {0x40, 0x6f2c, {0x0, 0x9}}, {0x8, 0x8, {0x3, 0xd}}, {0x7, 0x7, {0x1, 0x5}}, {0xbc06, 0x81, {0x0, 0x7}}, {0xe, 0x6cc, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0xb, 0x2, 0x7, 0xfffa, 0x15, 'syz1\x00', "b5e66db1aaca9ad078dda4f8fce0e3ab1b00d5053403710afd5d868a47b7a245", "883cab74355bc79fcc6fa79de4a17b85f89e6123a333d45ad813ff5c7c29a5dc", [{0x3, 0x9, {0x3, 0x101}}, {0xffff, 0x9, {0x3, 0xffffffff}}, {0x5, 0x3ff, {0x0, 0x1ff}}, {0xa01, 0x6, {0x3, 0x3}}, {0x0, 0x8, {0x2, 0x3}}, {0x7, 0x3, {0x3, 0x400}}, {0x8, 0x9, {0x3, 0x7}}, {0x1, 0x6, {0x1}}, {0x4, 0x4, {0x1, 0x3}}, {0x9, 0x7, {0x1, 0x6}}, {0x7ff, 0x9, {0x2, 0x2}}, {0x6, 0x140, {0x3}}, {0x1, 0x0, {0x3, 0x475a6805}}, {0x8000, 0x3, {0x1, 0xc}}, {0x7, 0xff7f, {0x2, 0x9}}, {0x7ff, 0xdc, {0x7, 0x9b}}, {0x4, 0x8000, {0x1, 0x3}}, {0x11f, 0x9, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x9}}, {0x6, 0x0, {0x1, 0x3}}, {0x9, 0x6, {0x1}}, {0x8, 0x7, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x3}}, {0x200, 0x2, {0x0, 0xff}}, {0x1000, 0x1ff, {0x3, 0x8}}, {0x1ff, 0x8, {0x0, 0x8}}, {0x9, 0x19, {0x6, 0x9}}, {0x5b, 0x4}, {0xd00, 0x6}, {0x0, 0x6, {0x0, 0x1fc0000}}, {0x10, 0x8001, {0x2, 0xf}}, {0x7, 0x7f}, {0x7, 0x1, {0x0, 0xffffffff}}, {0xf, 0x3, {0x3, 0x9}}, {0x81, 0xd44, {0x3, 0x8}}, {0x6f1a, 0x4, {0x1, 0x40}}, {0x8, 0x42d, {0x0, 0x6c6}}, {0x8000, 0x3, {0x1, 0x401}}, {0x1, 0x0, {0x1, 0x10000}}, {0x6, 0x6, {0x1, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0xa, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xbb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xc}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000103000000000000031ad40000000000000000002e"], 0x0, 0x3a, 0x0, 0x1}, 0x28)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0x22a, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x71bd26, 0x3502}, @sadb_x_sec_ctx={0x201, 0x18, 0x5a, 0x3f, 0x1000, "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"}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x21, 0x8, 0x800, 0x0, "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"}]}, 0x1150}, 0x1, 0x7}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delsa={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x1b, &(0x7f0000000100), 0x120)

6m16.193175886s ago: executing program 35 (id=385):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x91, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', @random="020000f9ff00"})
close(r4)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000240))
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x29, 0x2, 0x0)
close(r7)
r8 = socket$kcm(0x2b, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r1}, 0x18)
close(r8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x3}, 0x94)
r9 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x79}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x11, &(0x7f0000000000)=r12, 0x8)
r13 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x200, @mcast2}, 0x80, 0x0}, 0xb80a)
close(r8)
socket$kcm(0x2, 0x3, 0x2)

5m17.829000758s ago: executing program 8 (id=758):
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x0, 0x6, 0xa, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}, @exit, @map_fd={0x18, 0x9}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x4, 0xf19}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x5, 0x6, 0x4}, {0x0, 0x3, 0x8, 0x1}, {0x2, 0x2, 0x3}], 0x10, 0x6}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8002}, 0x0, 0x2e, 0xfffffbfb, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffffb, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e000000100081883e7f2711d4619898066bd0e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003010f000000028000001294", 0x2e}], 0x1}, 0x0)

5m16.458646922s ago: executing program 8 (id=773):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newtaction={0x64, 0x30, 0x200, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4000005, 0x8, 0x8, 0x4, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c8c4}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000021053582c137153e371e14018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

5m16.235609343s ago: executing program 8 (id=776):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7df00010000fe880000000000000000510588000001fc01840000000000000000000000000100010796b77b15373fd2144e23000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0)

5m16.080081406s ago: executing program 8 (id=779):
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x81)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x0}}, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
mkdir(0x0, 0xbe9bac6d2d0f4e03)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1298b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x20000000, 0x5, 0x4, 0x80800004, 0x0, 0x0, 0x100000, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x300, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41)

5m15.787151362s ago: executing program 8 (id=785):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {@in6=@mcast1, 0x4d6, 0x2, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x3f7, 0x300, 0x70bd2d, 0x25dfdbff, {0x10, 0x10, './file0/../file0', './file0/../file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
mkdir(&(0x7f0000000340)='./file0/../file0\x00', 0xa)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="e9e0000000140001002abd5d00fd03002580"], 0x10}, 0x1, 0x0, 0x0, 0x4001885}, 0x800)

5m15.629457836s ago: executing program 8 (id=787):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0xcf, 0x7f, 0x9, 0x0, 0xffffffffffffffaf, 0x400, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x6, 0x1000}, 0x4, 0x1, 0x3, 0x7, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x4f}, 0x0, 0x4, r0, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3)
socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

5m0.374672969s ago: executing program 36 (id=787):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0xcf, 0x7f, 0x9, 0x0, 0xffffffffffffffaf, 0x400, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x6, 0x1000}, 0x4, 0x1, 0x3, 0x7, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x4f}, 0x0, 0x4, r0, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3)
socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

1m33.569119759s ago: executing program 5 (id=2581):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f00000001c0)=r0, 0xa1)

1m33.347578026s ago: executing program 5 (id=2585):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x40, 0xd, 0xfe, 0x7, 0x0, 0x8, 0x8, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc77, 0x2, @perf_bp={&(0x7f0000000280), 0xc}, 0x2811, 0x2, 0xf, 0x7, 0x7, 0x101, 0x6, 0x0, 0xc9a9, 0x0, 0x8}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="e321e25d6139d431"], 0xa)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xd, r1, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1003, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20030, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, r6, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0xa820, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1m32.99494265s ago: executing program 5 (id=2592):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x4}, 0x38)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x60d, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1m32.694405728s ago: executing program 5 (id=2593):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r2, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', r3, 0xffffffffffffffff, 0x2}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r5, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000005000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
close(r6)
sendmsg$nl_crypto(r6, 0x0, 0x40010)
sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4000800)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, 0x0)
socket$kcm(0x29, 0x5, 0x0)

1m32.181164477s ago: executing program 5 (id=2598):
syz_clone(0x80260000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_freezer_state(r0, &(0x7f0000000080)='FROZEN\x00', 0x7)

1m31.631258557s ago: executing program 5 (id=2601):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x1000000000000000)

1m16.608058811s ago: executing program 37 (id=2601):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x1000000000000000)

9.538410138s ago: executing program 7 (id=3195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d0021ffffffe400000000000400008008000c"], 0x1c}], 0x1}, 0x0)

9.268210662s ago: executing program 7 (id=3199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x57d, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x69, 0x3}, 0x0, 0xca, 0x200000, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080))
bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xc, 0x8001, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xefc, 0x30, 0xb, 0x0, 0x0, {}, [{0xee8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe9c, 0x2, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x4, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x5, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x0, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x9, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x4, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x7, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0xfffffffd, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xefc}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.062217186s ago: executing program 7 (id=3201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x22, 0x0, &(0x7f0000000b80)="f8ad48cc02cb29dcc8007f5b0800cfd6782bdb91b94088001652f33644b0db7c9d35", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x3}, 0x14}}, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$cgroup_freezer_state(r3, &(0x7f0000000000)='FREEZING\x00', 0x9)

8.838550646s ago: executing program 7 (id=3205):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0x20)

8.65850768s ago: executing program 7 (id=3208):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x22, 0xa, 0x10, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x88, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000080)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@fwd={0x2}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x5f, 0x5f, 0x61]}}, 0x0, 0x42}, 0x20)

8.479326444s ago: executing program 7 (id=3209):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x938, 0x10000000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b2000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffff9f950816000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r1, 0x58, &(0x7f00000008c0)}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socketpair(0x2a, 0x0, 0xcca, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)

2.735701939s ago: executing program 0 (id=3261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xa4}}, 0x0)

2.635040323s ago: executing program 0 (id=3263):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0)

2.374333029s ago: executing program 0 (id=3268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0)

2.318777195s ago: executing program 4 (id=3270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0)

2.251979884s ago: executing program 4 (id=3272):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11)

2.174506949s ago: executing program 0 (id=3273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0xe4ffffff}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff, 0xffffffff}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x7}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffff9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x14}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000000c0)="7ab971d6dbf881110b98a6bf6b41f94d0da7baa43b1df1337e20e04c82c810feeac1e57418", 0x25}, {&(0x7f00000001c0)="25e3657587caeb72e17d01bc1f8bf03034668f0b", 0x14}, {&(0x7f0000001380)}, {&(0x7f0000001540)="3729849688b664364f727fa20b5f3f9d53a3e2a8c18eb8b3e78628b2635fbe5563fd596758967a1cc7ebef17024680e1f66a8f6f2e622a41c8aaec9b3feb1717d9b02a572ba0f3c3c8a31445731969cc3b8ebd821126e306ec6f999c3832d54c4cc5991b5ccab07448f43743b14f206d3377b2089ee9e1c7474dcbc4625b8866145a52e6a8c7fe1b7de38a5dc40f61ea08c0ecb7a614b8cd768eefd75271c8669a121bd20ff95703dceff09ddf27d527cdcf35c1710a0552ad785c8f4159468b9b954ad9e1", 0xc5}, {&(0x7f0000001480)="d6c00d6096b9eb73b566affa3abbde99fa1aa1a424eeff4b6c25352d53e75646ce8313479435bfa3433f46684892da070eb9a6618a88916e49c40d229308625e8b1016ecbc901964198438299928e3", 0x4f}, {&(0x7f0000001640)="6a6ed6006667aa6ca8c0d6d96b9201e57bf951a1d7434c4b82a7c76b3f8e0e9b3c7e5a27c03953cd4688f0406dc2e888162d948cf8bed27eec48495e1f13a41426dc5671042ab1b0a6dee7254cc66b61f66488aa14524e09e4240b8cff16", 0x5e}, {&(0x7f00000016c0)="ad239bfe878183fa6eee80579a6c656ac8873719eb0262cce3b5569cd7b52c69f026b15196995f6aff94d7c4f113b12b6566b00be1fca6126e6e9dfdfaa9217fec5e7aa20d152a02ee041e7b82ce13054698358203efd4b92638dcf165872f6389ba488672c4c5b6af97da9273544627302244dc6df2a3a75146932ac33b482e5d2812a7fc4d8728888da790fa03fc83362929ae2682cc33a1da5ce2608add231945cb78be3ac584af08462fb5f5dbe5acf3e0431d463f016793160819b346022009b3f8edfdcb9886dc58eec810f2854bfbeb790910f56f63cc8c9f58bf849e494922522fe8561474fead956f8523b7313c950f57ce", 0xf6}], 0x7}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x84}, 0x1, 0xbb1414ac}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x2c, 0x0, 0x0, 0xfffff00c}, {0x6, 0x2, 0x8}]})
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'net'}, {0x2b, 'rlimit'}, {0x0, 'blkio'}, {0x2b, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2d, 'cpuset'}, {0x2d, 'freezer'}]}, 0x41)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
close(0xffffffffffffffff)
r6 = getpid()
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"})
r10 = socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf262, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000100)={r10})
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.116130216s ago: executing program 4 (id=3276):
socket$kcm(0x10, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x2000, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x54, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=r2, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000b80)='rcu_utilization\x00', r3}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x20040000)

2.043770313s ago: executing program 4 (id=3278):
socket$kcm(0xa, 0x5, 0x300)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed18a56331dbf9ed7815e381ad6400000000093b837dcd71fcd8aefaec8c7a6ec08120c000200080001400400446b9bbc7a46ef988285dcdf12f21308f868fece01955fed2009d78f0a947ee2b49e33538afa01002347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20040040)
recvmsg$kcm(r2, 0x0, 0x10102)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.684476528s ago: executing program 4 (id=3279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0xe4ffffff}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff, 0xffffffff}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x7}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffff9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x14}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000000c0)="7ab971d6dbf881110b98a6bf6b41f94d0da7baa43b1df1337e20e04c82c810feeac1e57418", 0x25}, {&(0x7f00000001c0)="25e3657587caeb72e17d01bc1f8bf03034668f0b", 0x14}, {&(0x7f0000001380)}, {&(0x7f0000001540)="3729849688b664364f727fa20b5f3f9d53a3e2a8c18eb8b3e78628b2635fbe5563fd596758967a1cc7ebef17024680e1f66a8f6f2e622a41c8aaec9b3feb1717d9b02a572ba0f3c3c8a31445731969cc3b8ebd821126e306ec6f999c3832d54c4cc5991b5ccab07448f43743b14f206d3377b2089ee9e1c7474dcbc4625b8866145a52e6a8c7fe1b7de38a5dc40f61ea08c0ecb7a614b8cd768eefd75271c8669a121bd20ff95703dceff09ddf27d527cdcf35c1710a0552ad785c8f4159468b9b954ad9e1", 0xc5}, {&(0x7f0000001480)="d6c00d6096b9eb73b566affa3abbde99fa1aa1a424eeff4b6c25352d53e75646ce8313479435bfa3433f46684892da070eb9a6618a88916e49c40d229308625e8b1016ecbc901964198438299928e3", 0x4f}, {&(0x7f0000001640)="6a6ed6006667aa6ca8c0d6d96b9201e57bf951a1d7434c4b82a7c76b3f8e0e9b3c7e5a27c03953cd4688f0406dc2e888162d948cf8bed27eec48495e1f13a41426dc5671042ab1b0a6dee7254cc66b61f66488aa14524e09e4240b8cff16", 0x5e}, {&(0x7f00000016c0)="ad239bfe878183fa6eee80579a6c656ac8873719eb0262cce3b5569cd7b52c69f026b15196995f6aff94d7c4f113b12b6566b00be1fca6126e6e9dfdfaa9217fec5e7aa20d152a02ee041e7b82ce13054698358203efd4b92638dcf165872f6389ba488672c4c5b6af97da9273544627302244dc6df2a3a75146932ac33b482e5d2812a7fc4d8728888da790fa03fc83362929ae2682cc33a1da5ce2608add231945cb78be3ac584af08462fb5f5dbe5acf3e0431d463f016793160819b346022009b3f8edfdcb9886dc58eec810f2854bfbeb790910f56f63cc8c9f58bf849e494922522fe8561474fead956f8523b7313c950f57ce", 0xf6}], 0x7}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x84}, 0x1, 0xbb1414ac}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x2c, 0x0, 0x0, 0xfffff00c}, {0x6, 0x2, 0x8}]})
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'net'}, {0x2b, 'rlimit'}, {0x0, 'blkio'}, {0x2b, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2d, 'cpuset'}, {0x2d, 'freezer'}]}, 0x41)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
close(0xffffffffffffffff)
r6 = getpid()
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"})
r10 = socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf262, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000100)={r10})
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.621359469s ago: executing program 6 (id=3280):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random})

1.523199431s ago: executing program 6 (id=3281):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x22, 0xa, 0x10, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x88, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000080)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@fwd={0x2}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x5f, 0x5f, 0x61]}}, 0x0, 0x42}, 0x20)

1.496345663s ago: executing program 6 (id=3282):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa7, 0xa7, 0x5, [@datasec={0x1, 0x9, 0x0, 0xf, 0x3, [{0x5, 0x7}, {0x1, 0x5}, {0x3, 0x3c5f, 0xc}, {0x4, 0x7, 0x2}, {0x5, 0x0, 0xd1e4}, {0x5, 0xffffffff, 0x9}, {0x1, 0x9, 0x5}, {0x3, 0x5, 0xfffffffd}, {0x2, 0x32a, 0xfffffffb}], "103ac1"}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x7a, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x6, 0x5}]}, {0x0, [0x1e, 0x0, 0x5f]}}, &(0x7f0000000500)=""/210, 0xc5, 0xd2}, 0x28)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "fc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20044080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x2, 0x3, 0x185, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
close(0x3)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000600)="b5dbc50a177a45b8587a43060790f11bee7de8958c9969393b1c1928c472044886cabbf6450043e5d436d4cb8ac51330b63885bc7af2bd0ccbe92f21f647917534007ef82f9c090b7bfce0018ea8fc97e1dbf99400cd75ccc7b4fc9818de9688fbc474cc17d39257c4ea73fdb8c1556fb6e1c3ceac085ed584772229120e3784549623c26414c6615cef4c602b89b89d1d9ad15e945c7ee659d401eea803fde730e80bfc4b461eb2fe88ab1f1004cdf792c1966bd68531b04bc8a7360eb265cb5d3be52fbf9309a6560f278e819d9e996f72a95f5dfcda047e00f3bd6869a175f4943edd59d7b43cba070a119afffe21577beb45fd5cd16aa1", &(0x7f0000000280)=@tcp=r7}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.285714363s ago: executing program 9 (id=3283):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x80000002, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2000406, 0x0)

1.104855329s ago: executing program 9 (id=3284):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000005780)=ANY=[@ANYBLOB="2c0000000203010100000000000000000500000a0800010001000000000027"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000200000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
setsockopt$sock_attach_bpf(r3, 0x28, 0x12, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0)
close(r7)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

592.344923ms ago: executing program 4 (id=3285):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xafb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff07, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9828ff1f3bc2d3, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x1a)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
r4 = socket$kcm(0x2, 0x5, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x4d6, 0x2b}, 0x2, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)
socket$kcm(0x29, 0x3, 0x0)

501.39538ms ago: executing program 6 (id=3286):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x2, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x201}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))

402.227042ms ago: executing program 9 (id=3287):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)

400.849984ms ago: executing program 0 (id=3288):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x8, 0xd}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000df53000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@delqdisc={0x78, 0x25, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1d, 0x7}, {0xb, 0xb}, {0x1, 0x2}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8002}, 0x91)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x20)

357.265747ms ago: executing program 6 (id=3289):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)

302.385779ms ago: executing program 9 (id=3290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e00000010800020073a700010c000280"], 0x70}}, 0x0)

231.697093ms ago: executing program 9 (id=3291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x114, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6e}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe116}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4e2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8e}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x58}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000081}, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
syz_clone(0x2080, &(0x7f00000000c0)="7ce15257ffd0d13896fb012e3d3ee539abeedd3b83000028210600a5f9d36907df9a861bb6703418684ec5a20c31d71ef9c01020c02d6426c9b66f066e59eb2efb0e23e45f76", 0x46, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="384532bad51e78fa3e86a8ca89112c4bed9a3dfb6c4e121800508b24f1ac1cf29e88495bcb587b7c99866c06efd00d33de5728a668991509bb4d23be96bb31d78500f29607fa48f9b0858c8b1bb7f5995823a70ad57da4856fe7453023365c35cce787d0009f21")
setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x84000)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [""]}, 0x14}}, 0x4080)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x44, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x114, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6e}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe116}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4e2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8e}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x58}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000081}, 0x2) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
syz_clone(0x2080, &(0x7f00000000c0)="7ce15257ffd0d13896fb012e3d3ee539abeedd3b83000028210600a5f9d36907df9a861bb6703418684ec5a20c31d71ef9c01020c02d6426c9b66f066e59eb2efb0e23e45f76", 0x46, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="384532bad51e78fa3e86a8ca89112c4bed9a3dfb6c4e121800508b24f1ac1cf29e88495bcb587b7c99866c06efd00d33de5728a668991509bb4d23be96bb31d78500f29607fa48f9b0858c8b1bb7f5995823a70ad57da4856fe7453023365c35cce787d0009f21") (async)
setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x84000) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [""]}, 0x14}}, 0x4080) (async)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x44, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) (async)

67.005838ms ago: executing program 0 (id=3292):
socket$kcm(0xa, 0x5, 0x300)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x400000002, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed18a56331dbf9ed7815e381ad6400000000093b837dcd71fcd8aefaec8c7a6ec08120c000200080001400400446b9bbc7a46ef988285dcdf12f21308f868fece01955fed2009d78f0a947ee2b49e33538afa01002347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20040040)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

32.629348ms ago: executing program 9 (id=3293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000200)={'syzkaller0\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x73}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

0s ago: executing program 6 (id=3294):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, 0x50)

kernel console output (not intermixed with test programs):

tore+0x89c/0xce0
[  357.084895][T11641]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  357.084921][T11641]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.084956][T11641]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  357.084981][T11641]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  357.085011][T11641]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  357.085168][T11641]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  357.085198][T11641]  ? perf_trace_lock+0x2f8/0x3b0
[  357.085251][T11641]  ? rcu_is_watching+0x15/0xb0
[  357.085291][T11641]  ? rcu_read_unlock_special+0x3a2/0x4b0
[  357.085342][T11641]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  357.085370][T11641]  ? netlink_deliver_tap+0x2e/0x1b0
[  357.085489][T11641]  netlink_unicast+0x82c/0x9e0
[  357.085562][T11641]  ? __pfx_netlink_unicast+0x10/0x10
[  357.085602][T11641]  ? netlink_sendmsg+0x642/0xb30
[  357.085620][T11641]  ? skb_put+0x11b/0x210
[  357.085671][T11641]  netlink_sendmsg+0x805/0xb30
[  357.085749][T11641]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.085788][T11641]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  357.085810][T11641]  ? aa_sock_msg_perm+0xf1/0x1d0
[  357.085849][T11641]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  357.085873][T11641]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.085906][T11641]  __sock_sendmsg+0x219/0x270
[  357.085952][T11641]  ____sys_sendmsg+0x505/0x830
[  357.086014][T11641]  ? __pfx_____sys_sendmsg+0x10/0x10
[  357.086096][T11641]  ? import_iovec+0x74/0xa0
[  357.086148][T11641]  ___sys_sendmsg+0x21f/0x2a0
[  357.086195][T11641]  ? __pfx____sys_sendmsg+0x10/0x10
[  357.086339][T11641]  ? __fget_files+0x2a/0x420
[  357.086429][T11641]  ? __fget_files+0x2a/0x420
[  357.086449][T11641]  ? __fget_files+0x3a0/0x420
[  357.086530][T11641]  __x64_sys_sendmsg+0x19b/0x260
[  357.086576][T11641]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  357.086657][T11641]  ? __pfx_ksys_write+0x10/0x10
[  357.086670][T11641]  ? rcu_is_watching+0x15/0xb0
[  357.086721][T11641]  ? do_syscall_64+0xbe/0x3b0
[  357.086768][T11641]  do_syscall_64+0xfa/0x3b0
[  357.086789][T11641]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.086815][T11641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.086835][T11641]  ? clear_bhb_loop+0x60/0xb0
[  357.086876][T11641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.086894][T11641] RIP: 0033:0x7f8e6a98eec9
[  357.086918][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.086933][T11641] RSP: 002b:00007f8e6b891038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  357.086951][T11641] RAX: ffffffffffffffda RBX: 00007f8e6abe5fa0 RCX: 00007f8e6a98eec9
[  357.086963][T11641] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000007
[  357.086974][T11641] RBP: 00007f8e6b891090 R08: 0000000000000000 R09: 0000000000000000
[  357.086985][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.086995][T11641] R13: 00007f8e6abe6038 R14: 00007f8e6abe5fa0 R15: 00007ffc237e14e8
[  357.087095][T11641]  </TASK>
[  357.950486][T11659] option changes via remount are deprecated (pid=11649 comm=syz.5.1896)
[  357.961549][T11658] netlink: 'syz.4.1898': attribute type 3 has an invalid length.
[  358.352893][T11672] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1903'.
[  358.753315][T11686] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1908'.
[  359.149821][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1907'.
[  359.396603][T11692] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1910'.
[  359.402148][T11694] netlink: 'syz.7.1911': attribute type 10 has an invalid length.
[  359.418866][T11694] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1911'.
[  359.429843][T11696] netlink: 'syz.6.1912': attribute type 39 has an invalid length.
[  359.623668][T11704] netlink: 'syz.7.1916': attribute type 1 has an invalid length.
[  359.764126][T11700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1914'.
[  360.099758][T11712] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1918'.
[  361.125222][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1923'.
[  361.236123][T11735] netlink: 'syz.4.1926': attribute type 39 has an invalid length.
[  361.540866][T11739] netlink: 'syz.9.1929': attribute type 3 has an invalid length.
[  361.632331][T11746] tc_dump_action: action bad kind
[  361.945536][ T5881] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  361.964189][T11760] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1935'.
[  362.260408][T11763] netlink: 'syz.6.1936': attribute type 10 has an invalid length.
[  362.269338][T11763] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1936'.
[  362.420130][T11778] netlink: 'syz.7.1941': attribute type 3 has an invalid length.
[  362.629883][T11787] netlink: 'syz.7.1945': attribute type 10 has an invalid length.
[  362.914226][T11790] tc_dump_action: action bad kind
[  362.930335][ T5881] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  363.064968][T11804] netlink: 'syz.5.1951': attribute type 1 has an invalid length.
[  363.246916][T11813] netlink: 'syz.5.1956': attribute type 3 has an invalid length.
[  363.408636][T11819] netlink: 'syz.9.1958': attribute type 10 has an invalid length.
[  363.416880][T11819] __nla_validate_parse: 7 callbacks suppressed
[  363.416908][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1958'.
[  363.510442][T11827] netlink: 'syz.6.1961': attribute type 39 has an invalid length.
[  363.770145][T11834] tc_dump_action: action bad kind
[  364.122781][T11839] siw: device registration error -23
[  364.371176][T11859] netlink: 'syz.5.1970': attribute type 3 has an invalid length.
[  364.485173][T11864] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1971'.
[  364.596458][T11868] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1973'.
[  364.886642][T11881] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1979'.
[  365.000735][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1983'.
[  365.094031][T11895] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1983'.
[  365.107519][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1982'.
[  365.228798][T11897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1985'.
[  365.317359][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1989'.
[  365.444480][T11908] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1990'.
[  366.594771][T11933] IPv6: Can't replace route, no match found
[  366.684649][T11934] siw: device registration error -23
[  366.701028][T11936] validate_nla: 2 callbacks suppressed
[  366.701058][T11936] netlink: 'syz.5.1999': attribute type 1 has an invalid length.
[  366.917416][T11946] FAULT_INJECTION: forcing a failure.
[  366.917416][T11946] name failslab, interval 1, probability 0, space 0, times 0
[  366.938799][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.6.2004 Not tainted syzkaller #0 PREEMPT(full) 
[  366.938823][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  366.938837][T11946] Call Trace:
[  366.938845][T11946]  <TASK>
[  366.938852][T11946]  dump_stack_lvl+0x189/0x250
[  366.938877][T11946]  ? __pfx____ratelimit+0x10/0x10
[  366.938897][T11946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.938918][T11946]  ? __pfx__printk+0x10/0x10
[  366.938947][T11946]  ? __pfx___might_resched+0x10/0x10
[  366.938972][T11946]  should_fail_ex+0x414/0x560
[  366.938998][T11946]  should_failslab+0xa8/0x100
[  366.939019][T11946]  __kmalloc_noprof+0xcb/0x4f0
[  366.939034][T11946]  ? pfkey_spdadd+0x88e/0x1a30
[  366.939063][T11946]  pfkey_spdadd+0x88e/0x1a30
[  366.939101][T11946]  ? __pfx_pfkey_spdadd+0x10/0x10
[  366.939121][T11946]  ? kmem_cache_free+0x18f/0x400
[  366.939154][T11946]  pfkey_sendmsg+0xbfe/0x1090
[  366.939196][T11946]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  366.939251][T11946]  ? aa_sock_msg_perm+0xf1/0x1d0
[  366.939274][T11946]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  366.939295][T11946]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  366.939321][T11946]  __sock_sendmsg+0x219/0x270
[  366.939344][T11946]  ____sys_sendmsg+0x505/0x830
[  366.939375][T11946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  366.939410][T11946]  ? import_iovec+0x74/0xa0
[  366.939439][T11946]  ___sys_sendmsg+0x21f/0x2a0
[  366.939466][T11946]  ? __pfx____sys_sendmsg+0x10/0x10
[  366.939515][T11946]  ? __fget_files+0x2a/0x420
[  366.939550][T11946]  ? __fget_files+0x2a/0x420
[  366.939566][T11946]  ? __fget_files+0x3a0/0x420
[  366.939597][T11946]  __x64_sys_sendmsg+0x19b/0x260
[  366.939624][T11946]  ? perf_trace_run_bpf_submit+0x100/0x170
[  366.939647][T11946]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  366.939682][T11946]  ? __pfx_ksys_write+0x10/0x10
[  366.939695][T11946]  ? rcu_is_watching+0x15/0xb0
[  366.939720][T11946]  ? do_syscall_64+0xbe/0x3b0
[  366.939745][T11946]  do_syscall_64+0xfa/0x3b0
[  366.939763][T11946]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.939782][T11946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.939799][T11946]  ? clear_bhb_loop+0x60/0xb0
[  366.939820][T11946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.939839][T11946] RIP: 0033:0x7fe04cf8eec9
[  366.939855][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.939868][T11946] RSP: 002b:00007fe04de85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  366.939886][T11946] RAX: ffffffffffffffda RBX: 00007fe04d1e5fa0 RCX: 00007fe04cf8eec9
[  366.939898][T11946] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  366.939908][T11946] RBP: 00007fe04de85090 R08: 0000000000000000 R09: 0000000000000000
[  366.939918][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.939927][T11946] R13: 00007fe04d1e6038 R14: 00007fe04d1e5fa0 R15: 00007ffd6f2aedf8
[  366.939960][T11946]  </TASK>
[  366.940680][T11940] tc_dump_action: action bad kind
[  368.368782][T11966] IPv6: Can't replace route, no match found
[  368.398420][T11969] netlink: 'syz.5.2013': attribute type 1 has an invalid length.
[  368.454988][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  369.064020][T11984] tc_dump_action: action bad kind
[  369.204192][T11994] netlink: 'syz.5.2023': attribute type 16 has an invalid length.
[  369.240432][T11994] __nla_validate_parse: 5 callbacks suppressed
[  369.240449][T11994] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2023'.
[  369.610905][T12008] IPv6: Can't replace route, no match found
[  369.655657][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2030'.
[  369.821411][T12015] netlink: 'syz.5.2032': attribute type 39 has an invalid length.
[  369.843421][T12017] tc_dump_action: action bad kind
[  370.009001][T12024] tmpfs: Bad value for 'gid'
[  370.015605][T12024] tmpfs: Bad value for 'gid'
[  370.023442][T12024] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.2037'.
[  370.068660][T12027] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2036'.
[  370.313103][T12040] netlink: 'syz.9.2041': attribute type 1 has an invalid length.
[  370.406918][T12042] IPv6: Can't replace route, no match found
[  370.476482][T12044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2044'.
[  370.546735][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'.
[  370.673814][T12048] netlink: 'syz.9.2046': attribute type 10 has an invalid length.
[  370.725264][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2046'.
[  371.047958][T12054] tc_dump_action: action bad kind
[  372.108428][T12072] netlink: 'syz.9.2057': attribute type 1 has an invalid length.
[  372.152965][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2059'.
[  372.509560][T12084] IPv6: Can't replace route, no match found
[  372.763195][T12092] tc_dump_action: action bad kind
[  372.929459][T12094] lo speed is unknown, defaulting to 1000
[  373.470804][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2072'.
[  373.660075][T12120] netlink: 'syz.6.2074': attribute type 1 has an invalid length.
[  374.013439][T12131] IPv6: Can't replace route, no match found
[  374.368695][T12139] tc_dump_action: action bad kind
[  374.443229][T12144] netlink: 'syz.6.2084': attribute type 39 has an invalid length.
[  374.596471][T12150] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2086'.
[  374.752782][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2087'.
[  375.201396][T12162] netlink: 'syz.4.2088': attribute type 10 has an invalid length.
[  375.230212][T12162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2088'.
[  375.294170][T12165] netlink: 'syz.7.2090': attribute type 1 has an invalid length.
[  375.446663][T12169] IPv6: Can't replace route, no match found
[  375.594677][T12178] netlink: 'syz.5.2097': attribute type 39 has an invalid length.
[  375.609833][T12175] tc_dump_action: action bad kind
[  375.951254][T12189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2100'.
[  376.217186][T12193] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  376.223928][T12193] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  376.580835][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2104'.
[  376.657410][T12201] netlink: 'syz.4.2105': attribute type 10 has an invalid length.
[  376.696233][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2105'.
[  376.764972][T12206] netlink: 'syz.5.2104': attribute type 10 has an invalid length.
[  377.160369][T12206] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  377.351492][T12217] netlink: 'syz.4.2107': attribute type 1 has an invalid length.
[  377.369932][T12215] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2108'.
[  377.410981][T12218] netlink: 'syz.9.2109': attribute type 1 has an invalid length.
[  377.432331][T12218] netlink: 'syz.9.2109': attribute type 2 has an invalid length.
[  377.523153][T12222] FAULT_INJECTION: forcing a failure.
[  377.523153][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.560541][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.4.2111 Not tainted syzkaller #0 PREEMPT(full) 
[  377.560565][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  377.560574][T12222] Call Trace:
[  377.560582][T12222]  <TASK>
[  377.560589][T12222]  dump_stack_lvl+0x189/0x250
[  377.560615][T12222]  ? __pfx____ratelimit+0x10/0x10
[  377.560636][T12222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.560656][T12222]  ? __pfx__printk+0x10/0x10
[  377.560695][T12222]  should_fail_ex+0x414/0x560
[  377.560720][T12222]  _copy_to_user+0x31/0xb0
[  377.560739][T12222]  simple_read_from_buffer+0xe1/0x170
[  377.560764][T12222]  proc_fail_nth_read+0x1b3/0x220
[  377.560789][T12222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  377.560815][T12222]  ? rw_verify_area+0x2a6/0x4d0
[  377.560837][T12222]  ? __lock_acquire+0xab9/0xd20
[  377.560863][T12222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  377.560886][T12222]  vfs_read+0x200/0xa30
[  377.560908][T12222]  ? fdget_pos+0x247/0x320
[  377.560931][T12222]  ? __pfx___mutex_lock+0x10/0x10
[  377.560953][T12222]  ? __pfx_vfs_read+0x10/0x10
[  377.560979][T12222]  ? __fget_files+0x2a/0x420
[  377.561002][T12222]  ? __fget_files+0x3a0/0x420
[  377.561019][T12222]  ? __fget_files+0x2a/0x420
[  377.561048][T12222]  ksys_read+0x145/0x250
[  377.561068][T12222]  ? __pfx_ksys_read+0x10/0x10
[  377.561091][T12222]  ? do_syscall_64+0xbe/0x3b0
[  377.561119][T12222]  do_syscall_64+0xfa/0x3b0
[  377.561136][T12222]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.561155][T12222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.561171][T12222]  ? clear_bhb_loop+0x60/0xb0
[  377.561189][T12222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.561205][T12222] RIP: 0033:0x7fa36338d8dc
[  377.561221][T12222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  377.561234][T12222] RSP: 002b:00007fa364186030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  377.561252][T12222] RAX: ffffffffffffffda RBX: 00007fa3635e5fa0 RCX: 00007fa36338d8dc
[  377.561265][T12222] RDX: 000000000000000f RSI: 00007fa3641860a0 RDI: 0000000000000006
[  377.561275][T12222] RBP: 00007fa364186090 R08: 0000000000000000 R09: 0000000000000000
[  377.561284][T12222] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001
[  377.561295][T12222] R13: 00007fa3635e6038 R14: 00007fa3635e5fa0 R15: 00007ffd729616f8
[  377.561328][T12222]  </TASK>
[  377.929510][T12229] tc_dump_action: action bad kind
[  378.393012][T12245] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2120'.
[  378.501135][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  378.508374][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.563640][T12251] netlink: 'syz.9.2122': attribute type 1 has an invalid length.
[  378.571714][T12251] netlink: 'syz.9.2122': attribute type 2 has an invalid length.
[  378.656803][T12255] netlink: 'syz.7.2124': attribute type 2 has an invalid length.
[  378.847956][T12262] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2125'.
[  379.013145][ T5881] Bluetooth: hci7: ACL packet for unknown connection handle 0
[  379.023340][T12266] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2129'.
[  379.225686][T12269] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  379.232477][T12269] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  379.281486][T12269] netlink: 'syz.9.2131': attribute type 10 has an invalid length.
[  380.068900][T12269] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  380.201446][T12281] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  380.218188][T12279] __nla_validate_parse: 2 callbacks suppressed
[  380.218217][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'.
[  380.270501][T12283] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2134'.
[  380.379930][T12290] FAULT_INJECTION: forcing a failure.
[  380.379930][T12290] name failslab, interval 1, probability 0, space 0, times 0
[  380.423199][T12290] CPU: 1 UID: 0 PID: 12290 Comm: syz.7.2137 Not tainted syzkaller #0 PREEMPT(full) 
[  380.423223][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  380.423232][T12290] Call Trace:
[  380.423239][T12290]  <TASK>
[  380.423247][T12290]  dump_stack_lvl+0x189/0x250
[  380.423271][T12290]  ? __pfx____ratelimit+0x10/0x10
[  380.423295][T12290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  380.423314][T12290]  ? __pfx__printk+0x10/0x10
[  380.423341][T12290]  ? __pfx___might_resched+0x10/0x10
[  380.423357][T12290]  ? fs_reclaim_acquire+0x7d/0x100
[  380.423380][T12290]  should_fail_ex+0x414/0x560
[  380.423403][T12290]  should_failslab+0xa8/0x100
[  380.423422][T12290]  __kmalloc_cache_noprof+0x70/0x3d0
[  380.423438][T12290]  ? ipv6_add_addr+0x530/0x1090
[  380.423462][T12290]  ipv6_add_addr+0x530/0x1090
[  380.423490][T12290]  ? __pfx_ipv6_add_addr+0x10/0x10
[  380.423508][T12290]  ? __mutex_trylock_common+0x153/0x260
[  380.423529][T12290]  ? __pfx___mutex_trylock_common+0x10/0x10
[  380.423555][T12290]  inet6_addr_add+0x387/0xc00
[  380.423587][T12290]  ? __pfx_inet6_addr_add+0x10/0x10
[  380.423611][T12290]  ? addrconf_add_ifaddr+0x13e/0x400
[  380.423630][T12290]  ? irqentry_exit+0x74/0x90
[  380.423650][T12290]  ? __pfx___mutex_lock+0x10/0x10
[  380.423684][T12290]  ? __pfx_rep_movs_alternative+0x10/0x10
[  380.423706][T12290]  addrconf_add_ifaddr+0x27d/0x400
[  380.423739][T12290]  ? __pfx_addrconf_add_ifaddr+0x10/0x10
[  380.423775][T12290]  inet6_ioctl+0x13d/0x280
[  380.423796][T12290]  ? __pfx_inet6_ioctl+0x10/0x10
[  380.423814][T12290]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  380.423835][T12290]  ? do_vfs_ioctl+0xbe8/0x1430
[  380.423861][T12290]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  380.423892][T12290]  ? trace_call_bpf+0xb7/0x850
[  380.423910][T12290]  sock_do_ioctl+0xdc/0x300
[  380.423930][T12290]  ? __pfx_sock_do_ioctl+0x10/0x10
[  380.423945][T12290]  ? __lock_acquire+0xab9/0xd20
[  380.423985][T12290]  sock_ioctl+0x576/0x790
[  380.424004][T12290]  ? __pfx_sock_ioctl+0x10/0x10
[  380.424021][T12290]  ? __fget_files+0x2a/0x420
[  380.424038][T12290]  ? __fget_files+0x3a0/0x420
[  380.424055][T12290]  ? __fget_files+0x2a/0x420
[  380.424076][T12290]  ? bpf_lsm_file_ioctl+0x9/0x20
[  380.424099][T12290]  ? __pfx_sock_ioctl+0x10/0x10
[  380.424115][T12290]  __se_sys_ioctl+0xfc/0x170
[  380.424140][T12290]  do_syscall_64+0xfa/0x3b0
[  380.424160][T12290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.424176][T12290]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  380.424192][T12290]  ? clear_bhb_loop+0x60/0xb0
[  380.424212][T12290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.424228][T12290] RIP: 0033:0x7f3c8678eec9
[  380.424244][T12290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.424258][T12290] RSP: 002b:00007f3c875a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  380.424275][T12290] RAX: ffffffffffffffda RBX: 00007f3c869e6090 RCX: 00007f3c8678eec9
[  380.424288][T12290] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000008
[  380.424298][T12290] RBP: 00007f3c875a2090 R08: 0000000000000000 R09: 0000000000000000
[  380.424309][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.424318][T12290] R13: 00007f3c869e6128 R14: 00007f3c869e6090 R15: 00007ffc09b02438
[  380.424348][T12290]  </TASK>
[  380.998535][T12298] netlink: 'syz.9.2142': attribute type 1 has an invalid length.
[  381.384678][T12317] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  381.391090][T12317] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  381.405332][T12319] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  381.411764][T12319] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  381.412795][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2147'.
[  381.429255][T12320] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2149'.
[  381.447623][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2148'.
[  381.590585][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2150'.
[  381.622539][T12322] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.2150'.
[  381.670426][T12322] netlink: 'syz.9.2150': attribute type 39 has an invalid length.
[  382.624928][T12334] siw: device registration error -23
[  382.731899][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2155'.
[  382.953362][T12349] tc_dump_action: action bad kind
[  383.367915][T12367] netlink: 'syz.4.2164': attribute type 1 has an invalid length.
[  383.475010][T12371] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2167'.
[  383.497002][T12361] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2163'.
[  383.507308][T12370] netlink: 'syz.9.2166': attribute type 10 has an invalid length.
[  383.666935][T12379] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  383.673595][T12379] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  383.721198][T12377] tc_dump_action: action bad kind
[  383.896208][T12387] siw: device registration error -23
[  384.489889][T12408] netlink: 'syz.5.2183': attribute type 1 has an invalid length.
[  384.519576][T12404] netlink: 'syz.9.2182': attribute type 10 has an invalid length.
[  384.718047][T12412] tc_dump_action: action bad kind
[  385.071453][T12420] siw: device registration error -23
[  385.230559][T12424] __nla_validate_parse: 8 callbacks suppressed
[  385.230577][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2190'.
[  385.322904][T12430] netlink: 'syz.6.2191': attribute type 1 has an invalid length.
[  385.567130][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2197'.
[  385.606997][T12438] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2195'.
[  385.620940][T12440] netlink: 'syz.5.2196': attribute type 1 has an invalid length.
[  385.744822][T12450] IPv6: Can't replace route, no match found
[  385.889406][T12459] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2202'.
[  385.961476][T12466] netlink: 'syz.6.2204': attribute type 1 has an invalid length.
[  386.003048][T12467] netlink: 'syz.7.2206': attribute type 1 has an invalid length.
[  386.090821][T12471] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  386.097418][T12471] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  386.176587][T12469] netlink: 'syz.4.2207': attribute type 10 has an invalid length.
[  386.216709][T12469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2207'.
[  386.565023][T12481] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2212'.
[  386.598418][T12485] IPv6: Can't replace route, no match found
[  387.580466][T12506] netlink: 'syz.9.2221': attribute type 1 has an invalid length.
[  388.539670][T12518] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2223'.
[  388.603347][T12512] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  388.609970][T12512] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  389.236805][T12525] validate_nla: 2 callbacks suppressed
[  389.236823][T12525] netlink: 'syz.9.2224': attribute type 10 has an invalid length.
[  389.289642][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2224'.
[  389.916337][T12530] netlink: 'syz.4.2226': attribute type 2 has an invalid length.
[  389.956411][T12530] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.2226'.
[  390.032751][T12530] netlink: 'syz.4.2226': attribute type 1 has an invalid length.
[  391.260357][T12537] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2228'.
[  391.541514][T12540] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2227'.
[  393.270036][T12552] tc_dump_action: action bad kind
[  394.273206][T12559] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2234'.
[  394.522474][T12566] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  394.529130][T12566] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  394.675146][T12575] IPv6: Can't replace route, no match found
[  394.811555][T12577] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2242'.
[  395.372750][T12587] netlink: 'syz.4.2246': attribute type 29 has an invalid length.
[  395.458561][T12587] netlink: 'syz.4.2246': attribute type 3 has an invalid length.
[  395.503985][T12587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2246'.
[  395.975445][T12600] netlink: 'syz.6.2249': attribute type 1 has an invalid length.
[  396.090647][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'.
[  396.215196][T12606] netlink: 'syz.6.2251': attribute type 1 has an invalid length.
[  396.567232][T12614] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  396.574119][T12614] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  396.686465][T12619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2255'.
[  396.858218][T12624] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2258'.
[  397.074434][T12626] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2259'.
[  397.246508][T12637] netlink: 'syz.9.2262': attribute type 1 has an invalid length.
[  397.320444][T12642] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2265'.
[  397.420581][T12649] netlink: 'syz.4.2267': attribute type 1 has an invalid length.
[  397.700481][T12651] tc_dump_action: action bad kind
[  397.880657][T12659] netlink: 'syz.6.2272': attribute type 39 has an invalid length.
[  397.929935][T12661] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2273'.
[  398.061866][T12663] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  398.068563][T12663] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  398.078336][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2274'.
[  398.394024][T12669] netlink: 'syz.4.2277': attribute type 1 has an invalid length.
[  398.524170][T12678] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2275'.
[  399.105027][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2278'.
[  399.456117][T12695] netlink: 'syz.9.2282': attribute type 10 has an invalid length.
[  399.476123][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  399.485745][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2282'.
[  399.617981][T12694] netlink: 'syz.6.2283': attribute type 2 has an invalid length.
[  399.644060][T12694] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2283'.
[  400.524878][T12728] validate_nla: 3 callbacks suppressed
[  400.524895][T12728] netlink: 'syz.6.2295': attribute type 10 has an invalid length.
[  400.869775][T12740] siw: device registration error -23
[  401.400481][T12737] syz.6.2299 (12737) used greatest stack depth: 15424 bytes left
[  401.507434][T12759] netlink: 'syz.4.2307': attribute type 39 has an invalid length.
[  401.572237][T12763] netlink: 'syz.6.2308': attribute type 1 has an invalid length.
[  401.852399][T12775] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  401.858960][T12775] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  401.894023][T12774] __nla_validate_parse: 6 callbacks suppressed
[  401.894053][T12774] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2313'.
[  401.918559][T12768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2311'.
[  402.381269][T12794] netlink: 'syz.7.2322': attribute type 1 has an invalid length.
[  402.405570][T12796] netlink: 'syz.9.2321': attribute type 39 has an invalid length.
[  402.599067][T12812] netlink: 'syz.5.2324': attribute type 10 has an invalid length.
[  402.890907][T12822] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2328'.
[  403.066267][T12819] netlink: 'syz.5.2329': attribute type 10 has an invalid length.
[  403.091904][T12819] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2329'.
[  403.152616][T12828] netlink: 'syz.4.2331': attribute type 1 has an invalid length.
[  403.180167][T12828] netlink: 'syz.4.2331': attribute type 1 has an invalid length.
[  403.360008][T12836] netlink: 'syz.4.2335': attribute type 1 has an invalid length.
[  403.537627][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2336'.
[  403.877432][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2345'.
[  404.002870][T12865] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.2344'.
[  405.119312][T12890] syz.7.2354: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  405.186616][T12890] CPU: 1 UID: 0 PID: 12890 Comm: syz.7.2354 Not tainted syzkaller #0 PREEMPT(full) 
[  405.186640][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  405.186652][T12890] Call Trace:
[  405.186660][T12890]  <TASK>
[  405.186671][T12890]  dump_stack_lvl+0x189/0x250
[  405.186712][T12890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.186739][T12890]  ? __pfx__printk+0x10/0x10
[  405.186769][T12890]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  405.186792][T12890]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  405.186822][T12890]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  405.186864][T12890]  warn_alloc+0x214/0x310
[  405.186892][T12890]  ? stack_depot_save_flags+0x40/0x860
[  405.186923][T12890]  ? __pfx_warn_alloc+0x10/0x10
[  405.186954][T12890]  ? kasan_save_track+0x4f/0x80
[  405.186986][T12890]  ? xskq_create+0x56/0x170
[  405.187004][T12890]  ? xsk_init_queue+0xb0/0x110
[  405.187021][T12890]  ? xsk_setsockopt+0x57b/0x8d0
[  405.187038][T12890]  ? do_sock_setsockopt+0x179/0x1b0
[  405.187060][T12890]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  405.187080][T12890]  ? do_syscall_64+0xfa/0x3b0
[  405.187100][T12890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.187143][T12890]  __vmalloc_node_range_noprof+0x125/0x12f0
[  405.187254][T12890]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  405.187297][T12890]  ? __kasan_kmalloc+0x93/0xb0
[  405.187328][T12890]  vmalloc_user_noprof+0xad/0xf0
[  405.187351][T12890]  ? xskq_create+0xbf/0x170
[  405.187378][T12890]  xskq_create+0xbf/0x170
[  405.187412][T12890]  xsk_init_queue+0xb0/0x110
[  405.187445][T12890]  xsk_setsockopt+0x57b/0x8d0
[  405.187478][T12890]  ? __pfx_xsk_setsockopt+0x10/0x10
[  405.187502][T12890]  ? __pfx_aa_sk_perm+0x10/0x10
[  405.187535][T12890]  ? __fget_files+0x2a/0x420
[  405.187553][T12890]  ? aa_sock_opt_perm+0xff/0x1b0
[  405.187586][T12890]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  405.187610][T12890]  ? __pfx_xsk_setsockopt+0x10/0x10
[  405.187661][T12890]  do_sock_setsockopt+0x179/0x1b0
[  405.187703][T12890]  __x64_sys_setsockopt+0x13f/0x1b0
[  405.187738][T12890]  do_syscall_64+0xfa/0x3b0
[  405.187755][T12890]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.187773][T12890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.187787][T12890]  ? clear_bhb_loop+0x60/0xb0
[  405.187810][T12890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.187823][T12890] RIP: 0033:0x7f3c8678eec9
[  405.187847][T12890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.187861][T12890] RSP: 002b:00007f3c875c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  405.187880][T12890] RAX: ffffffffffffffda RBX: 00007f3c869e5fa0 RCX: 00007f3c8678eec9
[  405.187890][T12890] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  405.187898][T12890] RBP: 00007f3c86811f91 R08: 0000000000000004 R09: 0000000000000000
[  405.187907][T12890] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  405.187916][T12890] R13: 00007f3c869e6038 R14: 00007f3c869e5fa0 R15: 00007ffc09b02438
[  405.187965][T12890]  </TASK>
[  405.187991][T12890] Mem-Info:
[  405.340323][T12895] netlink: 1192 bytes leftover after parsing attributes in process `syz.7.2354'.
[  405.458462][T12890] active_anon:16735 inactive_anon:0 isolated_anon:0
[  405.458462][T12890]  active_file:19657 inactive_file:40015 isolated_file:0
[  405.458462][T12890]  unevictable:768 dirty:417 writeback:0
[  405.458462][T12890]  slab_reclaimable:11740 slab_unreclaimable:117762
[  405.458462][T12890]  mapped:30981 shmem:9465 pagetables:1151
[  405.458462][T12890]  sec_pagetables:0 bounce:0
[  405.458462][T12890]  kernel_misc_reclaimable:0
[  405.458462][T12890]  free:1267041 free_pcp:24861 free_cma:0
[  405.594680][T12890] Node 0 active_anon:61240kB inactive_anon:0kB active_file:78628kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123824kB dirty:1664kB writeback:0kB shmem:30524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11424kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  405.682334][T12890] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  405.766419][T12890] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  405.802282][T12900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2357'.
[  405.867374][T12890] lowmem_reserve[]: 0 2497 2499 2499 2499
[  405.887164][T12900] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2357'.
[  405.897383][T12890] Node 0 DMA32 free:1175836kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56504kB inactive_anon:0kB active_file:78708kB inactive_file:158284kB unevictable:1536kB writepending:1824kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:81656kB local_pcp:29168kB free_cma:0kB
[  405.955131][T12904] IPv6: Can't replace route, no match found
[  406.002242][T12890] lowmem_reserve[]: 0 0 1 1 1
[  406.007054][T12890] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  406.088177][T12890] lowmem_reserve[]: 0 0 0 0 0
[  406.103614][T12890] Node 1 Normal free:3888544kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17600kB local_pcp:6048kB free_cma:0kB
[  406.161247][T12890] lowmem_reserve[]: 0 0 0 0 0
[  406.169264][T12890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  406.257088][T12910] tc_dump_action: action bad kind
[  406.268444][T12890] Node 0 DMA32: 855*4kB (UME) 985*8kB (UME) 857*16kB (UME) 77*32kB (UME) 170*64kB (UME) 198*128kB (UM) 73*256kB (UM) 78*512kB (UME) 18*1024kB (U) 5*2048kB (UM) 252*4096kB (UM) = 1183188kB
[  406.332685][T12890] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  406.441025][T12890] Node 1 Normal: 206*4kB (UE) 53*8kB (UME) 44*16kB (UME) 96*32kB (UME) 32*64kB (UME) 10*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888544kB
[  406.491395][T12890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  406.538547][T12890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  406.563775][T12890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  406.573785][T12890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  406.588577][T12890] 61082 total pagecache pages
[  406.593921][T12890] 0 pages in swap cache
[  406.598143][T12890] Free swap  = 124996kB
[  406.602843][T12890] Total swap = 124996kB
[  406.606997][T12890] 2097051 pages RAM
[  406.610872][T12890] 0 pages HighMem/MovableOnly
[  406.617123][T12890] 425684 pages reserved
[  406.621350][T12890] 0 pages cma reserved
[  406.825673][T12932] validate_nla: 3 callbacks suppressed
[  406.825690][T12932] netlink: 'syz.9.2367': attribute type 6 has an invalid length.
[  406.859024][T12932] netlink: 'syz.9.2367': attribute type 1 has an invalid length.
[  406.908098][T12934] netlink: 'syz.9.2367': attribute type 4 has an invalid length.
[  406.951005][T12934] __nla_validate_parse: 3 callbacks suppressed
[  406.951023][T12934] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2367'.
[  407.421141][T12938] IPv6: Can't replace route, no match found
[  407.772799][ T7466] wlan1: Trigger new scan to find an IBSS to join
[  409.967536][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'.
[  410.246176][T12972] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2382'.
[  410.257976][T12973] siw: device registration error -23
[  410.918260][T12982] netlink: 'syz.4.2384': attribute type 1 has an invalid length.
[  410.950980][T12982] netlink: 'syz.4.2384': attribute type 8 has an invalid length.
[  410.997378][T12982] netlink: 192060 bytes leftover after parsing attributes in process `syz.4.2384'.
[  411.010255][T12985] netlink: 'syz.9.2385': attribute type 1 has an invalid length.
[  411.284497][T12993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2387'.
[  411.865460][   T49] wlan1: Trigger new scan to find an IBSS to join
[  412.216106][T13002] IPv6: Can't replace route, no match found
[  412.265520][T13011] netlink: 'syz.9.2393': attribute type 39 has an invalid length.
[  412.372690][T13013] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2394'.
[  412.508724][T13017] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2396'.
[  412.529836][T13020] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2397'.
[  412.595460][T13023] netlink: 'syz.4.2399': attribute type 1 has an invalid length.
[  412.609239][T13024] netlink: 'syz.7.2398': attribute type 10 has an invalid length.
[  412.635212][T13024] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2398'.
[  412.720934][T13028] netlink: 'syz.6.2401': attribute type 1 has an invalid length.
[  412.795025][T13034] FAULT_INJECTION: forcing a failure.
[  412.795025][T13034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  412.808424][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.4.2403 Not tainted syzkaller #0 PREEMPT(full) 
[  412.808445][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  412.808455][T13034] Call Trace:
[  412.808461][T13034]  <TASK>
[  412.808468][T13034]  dump_stack_lvl+0x189/0x250
[  412.808491][T13034]  ? __pfx____ratelimit+0x10/0x10
[  412.808513][T13034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.808531][T13034]  ? __pfx__printk+0x10/0x10
[  412.808553][T13034]  ? __might_fault+0xb0/0x130
[  412.808580][T13034]  should_fail_ex+0x414/0x560
[  412.808602][T13034]  _copy_from_user+0x2d/0xb0
[  412.808618][T13034]  ___sys_sendmsg+0x158/0x2a0
[  412.808644][T13034]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.808699][T13034]  ? __fget_files+0x2a/0x420
[  412.808716][T13034]  ? __fget_files+0x3a0/0x420
[  412.808744][T13034]  __x64_sys_sendmsg+0x19b/0x260
[  412.808770][T13034]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.808799][T13034]  ? __pfx_ksys_write+0x10/0x10
[  412.808812][T13034]  ? rcu_is_watching+0x15/0xb0
[  412.808834][T13034]  ? do_syscall_64+0xbe/0x3b0
[  412.808858][T13034]  do_syscall_64+0xfa/0x3b0
[  412.808877][T13034]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.808895][T13034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.808910][T13034]  ? clear_bhb_loop+0x60/0xb0
[  412.808930][T13034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.808945][T13034] RIP: 0033:0x7fa36338eec9
[  412.808960][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.808974][T13034] RSP: 002b:00007fa364186038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.808992][T13034] RAX: ffffffffffffffda RBX: 00007fa3635e5fa0 RCX: 00007fa36338eec9
[  412.809004][T13034] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 000000000000000d
[  412.809015][T13034] RBP: 00007fa364186090 R08: 0000000000000000 R09: 0000000000000000
[  412.809025][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.809035][T13034] R13: 00007fa3635e6038 R14: 00007fa3635e5fa0 R15: 00007ffd729616f8
[  412.809063][T13034]  </TASK>
[  413.021977][T13035] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2402'.
[  413.069711][T13038] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2407'.
[  413.180471][   T36] wlan1: Creating new IBSS network, BSSID 32:a8:36:f3:a1:92
[  413.301150][T13053] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2410'.
[  414.046760][T13064] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2413'.
[  414.143708][T13072] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2415'.
[  414.160418][T13073] tc_dump_action: action bad kind
[  414.172895][T13072] netlink: zone id is out of range
[  414.186611][T13072] netlink: get zone limit has 8 unknown bytes
[  414.283914][T13078] netlink: 'syz.5.2418': attribute type 1 has an invalid length.
[  414.385256][T13080] tc_dump_action: action bad kind
[  414.422793][T13074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  414.430978][T13074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.469955][T13074] batman_adv: batadv0: Interface deactivated: vlan1
[  414.490302][T13074] batman_adv: batadv0: Removing interface: vlan1
[  414.607453][T13094] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2424'.
[  414.899435][T13099] lo: entered allmulticast mode
[  414.968429][T13099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.190498][T13111] netlink: 'syz.9.2429': attribute type 10 has an invalid length.
[  415.247205][T13111] bond0: (slave wlan1): Releasing backup interface
[  415.351722][T13111] team0: Port device wlan1 added
[  415.376919][T13117] siw: device registration error -23
[  415.476507][T13111] net veth1_virt_wifi ������: renamed from virt_wifi0
[  415.499703][T13119] netlink: 'syz.7.2432': attribute type 1 has an invalid length.
[  415.628863][T13122] netlink: 'syz.9.2434': attribute type 3 has an invalid length.
[  415.951475][T13137] netlink: 'syz.9.2441': attribute type 10 has an invalid length.
[  416.013120][T13137] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  417.106838][T13174] netlink: 'syz.5.2454': attribute type 39 has an invalid length.
[  417.569050][T13181] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  417.575747][T13181] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  417.715586][T13190] __nla_validate_parse: 7 callbacks suppressed
[  417.715606][T13190] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2459'.
[  418.403696][T13203] netlink: 'syz.4.2463': attribute type 1 has an invalid length.
[  418.439239][T13206] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2465'.
[  418.550083][T13207] netlink: 'syz.6.2464': attribute type 10 has an invalid length.
[  418.561303][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2464'.
[  418.684464][T13209] netlink: 'syz.4.2466': attribute type 10 has an invalid length.
[  418.722432][T13209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2466'.
[  419.542417][T13225] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  419.549033][T13225] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  419.605198][T13228] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2473'.
[  420.251573][T13237] netlink: 'syz.7.2476': attribute type 1 has an invalid length.
[  420.536427][T13247] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2478'.
[  420.870370][T13255] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2481'.
[  421.108778][T13260] sctp: [Deprecated]: syz.5.2483 (pid 13260) Use of struct sctp_assoc_value in delayed_ack socket option.
[  421.108778][T13260] Use struct sctp_sack_info instead
[  421.309242][T13276] FAULT_INJECTION: forcing a failure.
[  421.309242][T13276] name failslab, interval 1, probability 0, space 0, times 0
[  421.321946][T13276] CPU: 1 UID: 0 PID: 13276 Comm: syz.5.2488 Not tainted syzkaller #0 PREEMPT(full) 
[  421.321973][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  421.321982][T13276] Call Trace:
[  421.321990][T13276]  <TASK>
[  421.321997][T13276]  dump_stack_lvl+0x189/0x250
[  421.322022][T13276]  ? __pfx____ratelimit+0x10/0x10
[  421.322043][T13276]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.322064][T13276]  ? __pfx__printk+0x10/0x10
[  421.322082][T13276]  ? perf_trace_lock_acquire+0xf5/0x410
[  421.322101][T13276]  ? skb_network_protocol+0x508/0x760
[  421.322141][T13276]  should_fail_ex+0x414/0x560
[  421.322170][T13276]  should_failslab+0xa8/0x100
[  421.322190][T13276]  kmem_cache_alloc_noprof+0x73/0x3c0
[  421.322212][T13276]  ? skb_clone+0x212/0x3a0
[  421.322233][T13276]  skb_clone+0x212/0x3a0
[  421.322245][T13276]  ? dev_queue_xmit_nit+0x25a/0xcc0
[  421.322271][T13276]  dev_queue_xmit_nit+0x416/0xcc0
[  421.322291][T13276]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  421.322329][T13276]  dev_hard_start_xmit+0x1be/0x830
[  421.322375][T13276]  __dev_queue_xmit+0x1b8d/0x3b50
[  421.322390][T13276]  ? do_syscall_64+0xfa/0x3b0
[  421.322407][T13276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.322437][T13276]  ? __dev_queue_xmit+0x27b/0x3b50
[  421.322474][T13276]  ? __pfx___dev_queue_xmit+0x10/0x10
[  421.322507][T13276]  ? rcu_is_watching+0x15/0xb0
[  421.322531][T13276]  ? skb_release_data+0x2b6/0x7c0
[  421.322568][T13276]  ? pskb_expand_head+0xa40/0x1150
[  421.322586][T13276]  ? __bpf_redirect+0x56d/0xe40
[  421.322611][T13276]  __bpf_tx_skb+0x18e/0x260
[  421.322631][T13276]  bpf_clone_redirect+0x272/0x3d0
[  421.322655][T13276]  ? bpf_test_run+0x197/0x7b0
[  421.322674][T13276]  bpf_prog_170f4aa34f32f3f3+0x5f/0x68
[  421.322703][T13276]  ? ktime_get+0x3e/0x1f0
[  421.322730][T13276]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  421.322749][T13276]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.322767][T13276]  ? ktime_get+0x3e/0x1f0
[  421.322781][T13276]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  421.322808][T13276]  ? __local_bh_disable_ip+0xf1/0x190
[  421.322825][T13276]  ? __pfx___cant_migrate+0x10/0x10
[  421.322839][T13276]  ? __local_bh_enable_ip+0x12d/0x1c0
[  421.322856][T13276]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  421.322878][T13276]  ? bpf_test_timer_continue+0x136/0x350
[  421.322906][T13276]  bpf_test_run+0x318/0x7b0
[  421.322956][T13276]  ? __pfx_bpf_test_run+0x10/0x10
[  421.323012][T13276]  ? convert___skb_to_skb+0x3d/0x590
[  421.323036][T13276]  bpf_prog_test_run_skb+0xb4e/0x1550
[  421.323067][T13276]  ? __fget_files+0x2a/0x420
[  421.323093][T13276]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  421.323113][T13276]  bpf_prog_test_run+0x2c7/0x340
[  421.323142][T13276]  __sys_bpf+0x562/0x860
[  421.323167][T13276]  ? __pfx___sys_bpf+0x10/0x10
[  421.323212][T13276]  ? ksys_write+0x22a/0x250
[  421.323231][T13276]  ? __pfx_ksys_write+0x10/0x10
[  421.323243][T13276]  ? rcu_is_watching+0x15/0xb0
[  421.323271][T13276]  __x64_sys_bpf+0x7c/0x90
[  421.323293][T13276]  do_syscall_64+0xfa/0x3b0
[  421.323312][T13276]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.323332][T13276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.323348][T13276]  ? clear_bhb_loop+0x60/0xb0
[  421.323369][T13276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.323385][T13276] RIP: 0033:0x7f4b0a78eec9
[  421.323401][T13276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.323415][T13276] RSP: 002b:00007f4b0b5b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  421.323432][T13276] RAX: ffffffffffffffda RBX: 00007f4b0a9e5fa0 RCX: 00007f4b0a78eec9
[  421.323444][T13276] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  421.323454][T13276] RBP: 00007f4b0b5b0090 R08: 0000000000000000 R09: 0000000000000000
[  421.323463][T13276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  421.323473][T13276] R13: 00007f4b0a9e6038 R14: 00007f4b0a9e5fa0 R15: 00007ffc7ce7ac68
[  421.323503][T13276]  </TASK>
[  421.959974][T13280] FAULT_INJECTION: forcing a failure.
[  421.959974][T13280] name failslab, interval 1, probability 0, space 0, times 0
[  421.974752][T13289] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2492'.
[  421.988061][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.6.2490 Not tainted syzkaller #0 PREEMPT(full) 
[  421.988083][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  421.988093][T13280] Call Trace:
[  421.988100][T13280]  <TASK>
[  421.988107][T13280]  dump_stack_lvl+0x189/0x250
[  421.988132][T13280]  ? __pfx____ratelimit+0x10/0x10
[  421.988153][T13280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.988173][T13280]  ? __pfx__printk+0x10/0x10
[  421.988203][T13280]  ? __pfx___might_resched+0x10/0x10
[  421.988227][T13280]  should_fail_ex+0x414/0x560
[  421.988254][T13280]  should_failslab+0xa8/0x100
[  421.988275][T13280]  __kmalloc_noprof+0xcb/0x4f0
[  421.988291][T13280]  ? fib6_info_alloc+0x30/0xf0
[  421.988320][T13280]  fib6_info_alloc+0x30/0xf0
[  421.988345][T13280]  ip6_route_info_create+0x142/0x860
[  421.988373][T13280]  addrconf_f6i_alloc+0x1d2/0x450
[  421.988400][T13280]  ? __pfx_addrconf_f6i_alloc+0x10/0x10
[  421.988444][T13280]  ? __kasan_kmalloc+0x93/0xb0
[  421.988465][T13280]  ? ipv6_add_addr+0x530/0x1090
[  421.988492][T13280]  ipv6_add_addr+0x56e/0x1090
[  421.988522][T13280]  ? __pfx_ipv6_add_addr+0x10/0x10
[  421.988541][T13280]  ? __mutex_trylock_common+0x153/0x260
[  421.988564][T13280]  ? __pfx___mutex_trylock_common+0x10/0x10
[  421.988580][T13280]  ? trace_call_bpf+0xb7/0x850
[  421.988604][T13280]  inet6_addr_add+0x387/0xc00
[  421.988639][T13280]  ? __pfx_inet6_addr_add+0x10/0x10
[  421.988666][T13280]  ? addrconf_add_ifaddr+0x13e/0x400
[  421.988693][T13280]  ? __pfx___mutex_lock+0x10/0x10
[  421.988715][T13280]  ? __might_fault+0xb0/0x130
[  421.988754][T13280]  addrconf_add_ifaddr+0x27d/0x400
[  421.988789][T13280]  ? __pfx_addrconf_add_ifaddr+0x10/0x10
[  421.988817][T13280]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  421.988845][T13280]  inet6_ioctl+0x13d/0x280
[  421.988867][T13280]  ? __pfx_inet6_ioctl+0x10/0x10
[  421.988894][T13280]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  421.988917][T13280]  ? do_vfs_ioctl+0xbe8/0x1430
[  421.988944][T13280]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  421.988968][T13280]  ? trace_call_bpf+0xb7/0x850
[  421.988987][T13280]  sock_do_ioctl+0xdc/0x300
[  421.989010][T13280]  ? __pfx_sock_do_ioctl+0x10/0x10
[  421.989050][T13280]  sock_ioctl+0x576/0x790
[  421.989071][T13280]  ? __pfx_sock_ioctl+0x10/0x10
[  421.989090][T13280]  ? __fget_files+0x2a/0x420
[  421.989106][T13280]  ? __fget_files+0x3a0/0x420
[  421.989122][T13280]  ? __fget_files+0x2a/0x420
[  421.989144][T13280]  ? bpf_lsm_file_ioctl+0x9/0x20
[  421.989168][T13280]  ? __pfx_sock_ioctl+0x10/0x10
[  421.989185][T13280]  __se_sys_ioctl+0xfc/0x170
[  421.989211][T13280]  do_syscall_64+0xfa/0x3b0
[  421.989234][T13280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.989249][T13280]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  421.989265][T13280]  ? clear_bhb_loop+0x60/0xb0
[  421.989286][T13280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.989302][T13280] RIP: 0033:0x7fe04cf8eec9
[  421.989317][T13280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.989332][T13280] RSP: 002b:00007fe04de85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  421.989350][T13280] RAX: ffffffffffffffda RBX: 00007fe04d1e5fa0 RCX: 00007fe04cf8eec9
[  421.989362][T13280] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000008
[  421.989373][T13280] RBP: 00007fe04de85090 R08: 0000000000000000 R09: 0000000000000000
[  421.989383][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.989393][T13280] R13: 00007fe04d1e6038 R14: 00007fe04d1e5fa0 R15: 00007ffd6f2aedf8
[  421.989426][T13280]  </TASK>
[  422.941126][T13295] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2496'.
[  422.978335][T13302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2500'.
[  422.990459][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2497'.
[  423.018328][T13304] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2499'.
[  423.041605][T13300] netlink: 'syz.5.2498': attribute type 10 has an invalid length.
[  423.058627][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2498'.
[  423.224997][T13309] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2504'.
[  423.434397][T13319] netlink: 'syz.4.2506': attribute type 39 has an invalid length.
[  423.600356][T13321] IPv6: Can't replace route, no match found
[  424.290008][T13329] netlink: 'syz.4.2512': attribute type 2 has an invalid length.
[  424.539263][T13337] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2513'.
[  424.627086][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2515'.
[  424.627550][T13340] netlink: 'syz.9.2514': attribute type 10 has an invalid length.
[  424.644765][T13340] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2514'.
[  424.659902][T13340] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  424.796330][T13344] netlink: 'syz.7.2516': attribute type 1 has an invalid length.
[  425.041433][T13348] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2518'.
[  425.135828][T13359] netlink: 'syz.5.2522': attribute type 39 has an invalid length.
[  426.347153][T13380] netlink: 'syz.9.2528': attribute type 10 has an invalid length.
[  427.422783][T13380] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  427.629190][T13390] openvswitch: netlink: IPv6 tunnel dst address is zero
[  427.641384][T13386] IPv6: Can't replace route, no match found
[  427.728095][T13392] tc_dump_action: action bad kind
[  429.245677][T13425] netlink: 'syz.5.2544': attribute type 10 has an invalid length.
[  429.264295][T13425] __nla_validate_parse: 4 callbacks suppressed
[  429.264310][T13425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2544'.
[  431.749839][T13429] netlink: 'syz.7.2545': attribute type 1 has an invalid length.
[  431.813290][T13438] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2548'.
[  431.814809][T13437] Q�6��\b��Y�4��: renamed from lo (while UP)
[  432.016344][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2553'.
[  432.070288][T13450] hsr0 speed is unknown, defaulting to 1000
[  432.076862][T13450] hsr0 speed is unknown, defaulting to 1000
[  432.096724][T13450] hsr0 speed is unknown, defaulting to 1000
[  432.100297][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2553'.
[  432.282613][T13454] C: renamed from team_slave_0 (while UP)
[  432.391080][T13450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  432.394254][T13454] netlink: 'syz.6.2555': attribute type 3 has an invalid length.
[  432.399812][T13456] netlink: 'syz.6.2555': attribute type 7 has an invalid length.
[  432.490126][T13454] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  432.509927][T13458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.019445][T13450] hsr0 speed is unknown, defaulting to 1000
[  433.041600][T13450] hsr0 speed is unknown, defaulting to 1000
[  433.057006][T13450] hsr0 speed is unknown, defaulting to 1000
[  433.078911][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2556'.
[  433.098349][T13450] hsr0 speed is unknown, defaulting to 1000
[  433.144511][T13450] hsr0 speed is unknown, defaulting to 1000
[  433.566372][T13481] netlink: 'syz.5.2561': attribute type 10 has an invalid length.
[  433.581699][T13481] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2561'.
[  433.672036][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2562'.
[  433.862706][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2567'.
[  433.899590][T13495] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2567'.
[  433.946495][T13499] netlink: 'syz.4.2569': attribute type 1 has an invalid length.
[  433.979019][T13497] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  433.995150][T13497] netlink: 'syz.7.2568': attribute type 10 has an invalid length.
[  434.085324][T13497] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  434.211429][T13505] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2571'.
[  434.252018][T13507] tc_dump_action: action bad kind
[  434.532137][T13521] netlink: 'syz.5.2578': attribute type 29 has an invalid length.
[  434.543343][T13521] netlink: 'syz.5.2578': attribute type 29 has an invalid length.
[  434.552894][T13521] netlink: 'syz.5.2578': attribute type 29 has an invalid length.
[  434.582093][T13519] netlink: 'syz.7.2577': attribute type 21 has an invalid length.
[  434.590279][T13519] IPv6: NLM_F_CREATE should be specified when creating new route
[  434.629921][T13519] IPv6: Can't replace route, no match found
[  434.679923][T13519] netlink: 'syz.7.2577': attribute type 22 has an invalid length.
[  434.690186][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2577'.
[  434.693041][T13525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2579'.
[  434.791296][T13528] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2580'.
[  435.099198][T13534] lo speed is unknown, defaulting to 1000
[  435.109053][T13534] hsr0 speed is unknown, defaulting to 1000
[  435.169878][T13541] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2585'.
[  435.583683][T13557] netlink: 'syz.5.2592': attribute type 39 has an invalid length.
[  436.414570][T13578] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2597'.
[  436.623603][T13565] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2594'.
[  436.642791][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2597'.
[  436.697530][T13585] netlink: 'syz.6.2599': attribute type 3 has an invalid length.
[  436.906452][T13590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2602'.
[  437.929809][T13603] netlink: 'syz.4.2606': attribute type 1 has an invalid length.
[  438.074206][T13611] tc_dump_action: action bad kind
[  438.174447][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2611'.
[  438.292128][T13612] lo speed is unknown, defaulting to 1000
[  438.438387][T13612] hsr0 speed is unknown, defaulting to 1000
[  438.674417][T13623] netlink: 2104 bytes leftover after parsing attributes in process `syz.6.2614'.
[  439.946694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  439.954497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  440.317737][T13655] netlink: 'syz.9.2626': attribute type 39 has an invalid length.
[  440.521887][T13659] __nla_validate_parse: 2 callbacks suppressed
[  440.521904][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2628'.
[  440.784045][T13671] netlink: 'syz.9.2633': attribute type 1 has an invalid length.
[  441.245727][T13687] netlink: 'syz.6.2638': attribute type 10 has an invalid length.
[  441.270138][T13687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2638'.
[  441.344153][T13692] netlink: 'syz.4.2640': attribute type 10 has an invalid length.
[  441.382529][T13692] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2640'.
[  441.398989][T13692] batman_adv: batadv0: Interface deactivated: vlan1
[  441.640616][T13692] batman_adv: batadv0: Removing interface: vlan1
[  441.712483][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2643'.
[  441.775957][T13705] netlink: 'syz.6.2644': attribute type 1 has an invalid length.
[  441.941539][T13709] openvswitch: netlink: Message has 4 unknown bytes.
[  442.112766][T13712] wg2: entered promiscuous mode
[  442.117789][T13712] wg2: entered allmulticast mode
[  442.138351][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2649'.
[  442.175236][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2648'.
[  442.616483][T13736] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2656'.
[  442.837102][T13745] netlink: 'syz.4.2660': attribute type 10 has an invalid length.
[  442.866637][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2660'.
[  442.932244][T13747] netlink: 'syz.9.2662': attribute type 39 has an invalid length.
[  443.763235][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2673'.
[  443.996020][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2674'.
[  444.372498][T13792] lo speed is unknown, defaulting to 1000
[  444.382770][T13792] hsr0 speed is unknown, defaulting to 1000
[  444.758122][T13805] syzkaller0: tun_chr_ioctl cmd 1074812118
[  444.778838][T13805] netlink: 'syz.7.2682': attribute type 10 has an invalid length.
[  445.215058][T13812] netlink: 'syz.7.2684': attribute type 10 has an invalid length.
[  445.806620][T13826] netlink: 'syz.6.2689': attribute type 1 has an invalid length.
[  446.017823][T13836] __nla_validate_parse: 4 callbacks suppressed
[  446.017841][T13836] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2694'.
[  446.491357][T13842] netlink: 'syz.6.2697': attribute type 10 has an invalid length.
[  446.493175][T13847] tc_dump_action: action bad kind
[  446.500612][T13842] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2697'.
[  446.567807][T13846] netlink: 46603 bytes leftover after parsing attributes in process `syz.9.2698'.
[  446.939413][T13856] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2702'.
[  447.101344][T13861] siw: device registration error -23
[  447.557483][T13870] netlink: 'syz.9.2707': attribute type 27 has an invalid length.
[  447.647893][T13870] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2707'.
[  447.821459][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2710'.
[  448.024077][T13889] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2714'.
[  448.059953][T13888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2715'.
[  449.279387][T13908] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.2721'.
[  449.293042][T13908] netlink: 24032 bytes leftover after parsing attributes in process `syz.9.2721'.
[  449.558178][T13916] FAULT_INJECTION: forcing a failure.
[  449.558178][T13916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.603832][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.9.2725 Not tainted syzkaller #0 PREEMPT(full) 
[  449.603856][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  449.603874][T13916] Call Trace:
[  449.603894][T13916]  <TASK>
[  449.603914][T13916]  dump_stack_lvl+0x189/0x250
[  449.603969][T13916]  ? __pfx____ratelimit+0x10/0x10
[  449.604024][T13916]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.604079][T13916]  ? __pfx__printk+0x10/0x10
[  449.604149][T13916]  ? __might_fault+0xb0/0x130
[  449.604373][T13916]  should_fail_ex+0x414/0x560
[  449.604498][T13916]  _copy_from_user+0x2d/0xb0
[  449.604554][T13916]  kstrtouint_from_user+0xc4/0x170
[  449.604651][T13916]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  449.604967][T13916]  proc_fail_nth_write+0x88/0x200
[  449.605017][T13916]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  449.605175][T13916]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  449.605256][T13916]  vfs_write+0x27b/0xb30
[  449.605454][T13916]  ? __pfx_vfs_write+0x10/0x10
[  449.605550][T13916]  ? __fget_files+0x2a/0x420
[  449.605663][T13916]  ? __fget_files+0x3a0/0x420
[  449.605692][T13916]  ? __fget_files+0x2a/0x420
[  449.605885][T13916]  ksys_write+0x145/0x250
[  449.605918][T13916]  ? __fget_files+0x3a0/0x420
[  449.605983][T13916]  ? __pfx_ksys_write+0x10/0x10
[  449.606120][T13916]  ? do_syscall_64+0xbe/0x3b0
[  449.606225][T13916]  do_syscall_64+0xfa/0x3b0
[  449.606251][T13916]  ? lockdep_hardirqs_on+0x9c/0x150
[  449.606293][T13916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.606323][T13916]  ? clear_bhb_loop+0x60/0xb0
[  449.606413][T13916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.606436][T13916] RIP: 0033:0x7f8e6a98d97f
[  449.606475][T13916] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  449.606489][T13916] RSP: 002b:00007f8e6b891030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  449.606508][T13916] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e6a98d97f
[  449.606520][T13916] RDX: 0000000000000001 RSI: 00007f8e6b8910a0 RDI: 0000000000000008
[  449.606530][T13916] RBP: 00007f8e6b891090 R08: 0000000000000000 R09: 0000000000000000
[  449.606540][T13916] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  449.606550][T13916] R13: 00007f8e6abe6038 R14: 00007f8e6abe5fa0 R15: 00007ffc237e14e8
[  449.606821][T13916]  </TASK>
[  450.571481][T13939] netlink: 'syz.7.2733': attribute type 29 has an invalid length.
[  450.595254][T13939] netlink: 'syz.7.2733': attribute type 29 has an invalid length.
[  450.611258][T13939] netlink: 'syz.7.2733': attribute type 29 has an invalid length.
[  450.621153][T13939] netlink: 'syz.7.2733': attribute type 29 has an invalid length.
[  451.047259][T13955] netlink: 'syz.4.2739': attribute type 2 has an invalid length.
[  451.070172][T13956] __nla_validate_parse: 7 callbacks suppressed
[  451.070189][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2740'.
[  451.110273][T13958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2741'.
[  451.402121][T13963] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2743'.
[  451.421510][T13970] netlink: 'syz.6.2746': attribute type 1 has an invalid length.
[  452.057382][T13987] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2753'.
[  452.301101][T13994] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  452.461035][T13997] netlink: 'syz.4.2757': attribute type 39 has an invalid length.
[  452.461794][ T5887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  452.491431][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  452.507347][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  452.536912][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  452.546219][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  452.854608][T13996] lo speed is unknown, defaulting to 1000
[  452.875370][T13996] hsr0 speed is unknown, defaulting to 1000
[  452.882340][T14000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.003590][T14003] netlink: 'syz.9.2760': attribute type 10 has an invalid length.
[  453.032244][T14003] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2760'.
[  453.291892][T14014] netlink: 'syz.4.2764': attribute type 39 has an invalid length.
[  453.496753][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2766'.
[  453.817666][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2767'.
[  454.406945][T14003] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  454.427950][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2767'.
[  454.572537][ T5881] Bluetooth: hci2: command tx timeout
[  455.034243][   T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.224037][   T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.235014][T14035] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2769'.
[  455.530454][   T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.556990][T14050] netlink: 'syz.6.2775': attribute type 1 has an invalid length.
[  455.662043][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2776'.
[  455.739671][T14055] IPv6: NLM_F_CREATE should be specified when creating new route
[  455.750840][T14055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.758132][T14055] IPv6: NLM_F_CREATE should be set when creating new route
[  455.894794][T14059] netlink: 'syz.9.2779': attribute type 1 has an invalid length.
[  455.994815][   T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.054543][T13996] chnl_net:caif_netlink_parms(): no params data found
[  456.610676][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'.
[  456.613270][T13996] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.627655][T13996] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.639246][T13996] bridge_slave_0: entered allmulticast mode
[  456.658207][ T5881] Bluetooth: hci2: command tx timeout
[  456.671179][T13996] bridge_slave_0: entered promiscuous mode
[  456.698209][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2786'.
[  456.782739][T13996] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.790853][T13996] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.807272][T13996] bridge_slave_1: entered allmulticast mode
[  456.815766][T13996] bridge_slave_1: entered promiscuous mode
[  456.831248][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2786'.
[  456.844569][T14098] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2786'.
[  456.856404][T14088] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2786'.
[  456.971082][   T78] bridge_slave_1: left allmulticast mode
[  456.988352][   T78] bridge_slave_1: left promiscuous mode
[  456.996559][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.017600][   T78] bridge_slave_0: left allmulticast mode
[  457.032993][   T78] bridge_slave_0: left promiscuous mode
[  457.038751][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.141628][T14110] netlink: 'syz.6.2792': attribute type 10 has an invalid length.
[  457.157773][T14112] netlink: 'syz.7.2794': attribute type 10 has an invalid length.
[  457.161159][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2792'.
[  457.165718][T14112] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2794'.
[  457.468797][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.480032][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.491098][   T78] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  457.503528][   T78] bond0 (unregistering): Released all slaves
[  457.519158][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.547770][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.802322][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2798'.
[  457.807175][T13996] team0: Port device team_slave_0 added
[  457.813058][T14128] netlink: 'syz.4.2797': attribute type 10 has an invalid length.
[  457.819080][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2795'.
[  457.842599][T14128] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2797'.
[  457.849230][T13996] team0: Port device team_slave_1 added
[  457.860061][T14129] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  458.395910][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.435173][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.461880][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.476278][   T10] infiniband syz0: ib_query_port failed (-19)
[  458.478714][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.499512][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.534900][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.684298][T14149] netlink: 'syz.6.2806': attribute type 10 has an invalid length.
[  458.727631][T13996] hsr_slave_0: entered promiscuous mode
[  458.741431][ T5881] Bluetooth: hci2: command tx timeout
[  458.756122][T14152] netlink: 'syz.7.2805': attribute type 10 has an invalid length.
[  458.764000][T13996] hsr_slave_1: entered promiscuous mode
[  458.788610][T14149] batman_adv: batadv0: Interface deactivated: vlan1
[  458.800470][T14149] batman_adv: batadv0: Removing interface: vlan1
[  458.812105][T14149] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  459.382584][   T78] hsr_slave_0: left promiscuous mode
[  459.392540][   T78] hsr_slave_1: left promiscuous mode
[  459.399864][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.412789][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.424821][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.444307][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.471822][   T78] batman_adv: batadv0: Interface deactivated: vlan1
[  459.495822][   T78] batman_adv: batadv0: Removing interface: vlan1
[  459.780802][   T78] veth1_vlan: left promiscuous mode
[  459.787858][   T78] veth0_vlan: left promiscuous mode
[  460.470392][   T78] team0 (unregistering): Port device team_slave_1 removed
[  460.558116][   T78] team0 (unregistering): Port device team_slave_0 removed
[  460.813103][ T5881] Bluetooth: hci2: command tx timeout
[  461.158766][T14199] netlink: 'syz.9.2824': attribute type 1 has an invalid length.
[  461.558893][T14216] netlink: 'syz.7.2831': attribute type 10 has an invalid length.
[  461.622814][T14216] __nla_validate_parse: 16 callbacks suppressed
[  461.622831][T14216] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2831'.
[  461.773192][T14216] batman_adv: batadv0: Interface deactivated: vlan1
[  461.830893][T14216] batman_adv: batadv0: Removing interface: vlan1
[  461.874122][T14218] netlink: 'syz.6.2832': attribute type 10 has an invalid length.
[  461.938544][T14216] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  462.724114][T13996] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  462.734828][T14229] netlink: 2104 bytes leftover after parsing attributes in process `syz.4.2835'.
[  462.763920][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2835'.
[  462.786880][T13996] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  462.819139][T13996] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  462.838943][T13996] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  462.964838][T14234] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.2837'.
[  463.026483][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2837'.
[  463.072905][T14234] netlink: 22 bytes leftover after parsing attributes in process `syz.7.2837'.
[  463.143097][T13996] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.210800][T13996] 8021q: adding VLAN 0 to HW filter on device team0
[  463.243614][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.250767][ T7466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.287069][T14246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2840'.
[  463.294128][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.303237][ T7466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.648863][T14251] tc_dump_action: action bad kind
[  463.919010][T14257] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2843'.
[  464.298013][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.669274][T13996] veth0_vlan: entered promiscuous mode
[  464.715607][T14273] wg0 speed is unknown, defaulting to 1000
[  464.723456][T14273] wg0 speed is unknown, defaulting to 1000
[  464.725247][T13996] veth1_vlan: entered promiscuous mode
[  464.766920][T14273] wg0 speed is unknown, defaulting to 1000
[  464.848939][T13996] veth0_macvtap: entered promiscuous mode
[  464.917303][T14273] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  464.946687][T13996] veth1_macvtap: entered promiscuous mode
[  465.060156][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.110109][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.162119][   T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.233989][   T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.291264][   T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.337471][T14273] wg0 speed is unknown, defaulting to 1000
[  465.359721][   T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.406396][T14273] wg0 speed is unknown, defaulting to 1000
[  465.608016][T14273] wg0 speed is unknown, defaulting to 1000
[  465.682438][T14273] wg0 speed is unknown, defaulting to 1000
[  465.734920][T14273] wg0 speed is unknown, defaulting to 1000
[  465.813918][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.821748][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.966240][T14291] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2853'.
[  465.989987][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.017766][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.112797][T14292] netlink: 'syz.4.2854': attribute type 10 has an invalid length.
[  466.120718][T14292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2854'.
[  466.340901][T14293] syzkaller0: entered promiscuous mode
[  466.429498][T14294] netlink: 'syz.9.2852': attribute type 10 has an invalid length.
[  466.472644][T14293] syzkaller0: entered allmulticast mode
[  466.591617][T14294] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  467.231315][T14316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.238838][T14327] netlink: 'syz.7.2864': attribute type 29 has an invalid length.
[  469.396910][T14335] __nla_validate_parse: 1 callbacks suppressed
[  469.396927][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2866'.
[  469.501223][T14341] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2870'.
[  469.538352][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'.
[  469.564092][T14339] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2869'.
[  469.579832][T14341] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2870'.
[  469.741882][T14347] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2871'.
[  469.919043][T14350] nft_compat: unsupported protocol 0
[  470.181957][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  470.195674][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  470.208152][T14355] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2875'.
[  470.220954][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  470.238545][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  470.247278][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  470.457292][T14366] netlink: 'syz.6.2879': attribute type 1 has an invalid length.
[  470.458408][ T6428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.475502][T14366] netlink: 'syz.6.2879': attribute type 2 has an invalid length.
[  470.507551][T14367] netlink: 'syz.0.2880': attribute type 1 has an invalid length.
[  470.515679][T14357] lo speed is unknown, defaulting to 1000
[  470.524457][T14357] hsr0 speed is unknown, defaulting to 1000
[  470.531915][T14357] wg0 speed is unknown, defaulting to 1000
[  470.685979][ T6428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.716444][T14373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2882'.
[  470.770175][T14377] netlink: 'syz.6.2883': attribute type 29 has an invalid length.
[  470.849982][T14377] netlink: 'syz.6.2883': attribute type 29 has an invalid length.
[  470.879949][T14377] netlink: 'syz.6.2883': attribute type 29 has an invalid length.
[  470.910560][T14380] netlink: 22 bytes leftover after parsing attributes in process `syz.9.2884'.
[  471.018781][ T6428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.937187][ T6428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.994339][ T5951] wg0 speed is unknown, defaulting to 1000
[  472.000197][ T5951] syz0: Port: 1 Link DOWN
[  472.085291][T14405] netlink: 'syz.0.2893': attribute type 1 has an invalid length.
[  472.122054][T14405] netlink: 'syz.0.2893': attribute type 2 has an invalid length.
[  472.372282][ T5881] Bluetooth: hci0: command tx timeout
[  472.556256][T14412] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2896'.
[  472.966940][ T6428] bridge0: port 3(macsec0) entered disabled state
[  473.017406][ T6428] bridge_slave_1: left allmulticast mode
[  473.032204][ T6428] bridge_slave_1: left promiscuous mode
[  473.037968][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.050614][ T6428] bridge_slave_0: left allmulticast mode
[  473.063767][ T6428] bridge_slave_0: left promiscuous mode
[  473.069502][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.660031][T14357] chnl_net:caif_netlink_parms(): no params data found
[  473.992914][ T6428] : left promiscuous mode
[  474.052581][T14433] netlink: 'syz.6.2903': attribute type 39 has an invalid length.
[  474.412386][ T5881] Bluetooth: hci0: command tx timeout
[  474.829292][T14457] siw: device registration error -23
[  475.467290][T14357] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.476221][T14357] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.483805][T14357] bridge_slave_0: entered allmulticast mode
[  475.490853][T14357] bridge_slave_0: entered promiscuous mode
[  475.499739][T14452] __nla_validate_parse: 1 callbacks suppressed
[  475.499753][T14452] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2909'.
[  475.519488][T14357] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.530110][T14357] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.538642][T14357] bridge_slave_1: entered allmulticast mode
[  475.546932][T14357] bridge_slave_1: entered promiscuous mode
[  475.590260][T14357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.606501][T14357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.690039][T14357] team0: Port device team_slave_0 added
[  475.699730][T14357] team0: Port device team_slave_1 added
[  475.724439][T14465] netlink: 'syz.6.2911': attribute type 1 has an invalid length.
[  475.828147][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2913'.
[  475.901092][T14357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.918859][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.951378][T14357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.993435][T14471] netlink: 'syz.7.2914': attribute type 10 has an invalid length.
[  476.011199][T14471] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2914'.
[  476.051401][T14482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2917'.
[  476.079044][T14357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.086980][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.117108][T14357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.143436][T14471] batman_adv: batadv0: Adding interface: vlan1
[  476.149832][T14471] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.179694][T14471] batman_adv: batadv0: Interface activated: vlan1
[  476.404580][T14491] netlink: 184 bytes leftover after parsing attributes in process `syz.7.2920'.
[  476.492395][ T5881] Bluetooth: hci0: command tx timeout
[  477.265128][T14496] netlink: 2104 bytes leftover after parsing attributes in process `syz.0.2921'.
[  477.291693][T14496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'.
[  477.316484][T14357] hsr_slave_0: entered promiscuous mode
[  477.330127][T14357] hsr_slave_1: entered promiscuous mode
[  477.357825][T14357] debugfs: 'hsr0' already exists in 'hsr'
[  477.373914][T14357] Cannot create hsr debugfs directory
[  477.667533][ T6428] hsr_slave_0: left promiscuous mode
[  477.690023][ T6428] hsr_slave_1: left promiscuous mode
[  477.700097][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.712856][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.736118][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.752783][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.806073][ T6428] veth1_macvtap: left allmulticast mode
[  477.823898][ T6428] veth1_macvtap: left promiscuous mode
[  477.895591][T14514] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2928'.
[  478.228196][T14517] netlink: 'syz.0.2930': attribute type 10 has an invalid length.
[  478.239968][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2930'.
[  478.583778][ T5881] Bluetooth: hci0: command tx timeout
[  478.666952][ T6428] team0 (unregistering): Port device team_slave_1 removed
[  478.710201][ T6428] team0 (unregistering): Port device team_slave_0 removed
[  478.714391][T14519] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  478.723777][T14519] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  479.222597][ T5878] hsr0 speed is unknown, defaulting to 1000
[  479.237493][T14517] batman_adv: batadv0: Adding interface: vlan1
[  479.258938][ T5878] infiniband syz1: ib_query_port failed (-19)
[  479.265946][T14517] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.292356][T14517] batman_adv: batadv0: Interface activated: vlan1
[  479.301900][ T6018] lo speed is unknown, defaulting to 1000
[  479.332337][ T6018] infiniband syz2: ib_query_port failed (-19)
[  479.365265][T14526] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2934'.
[  479.388870][T14526] netlink: 'syz.9.2934': attribute type 10 has an invalid length.
[  479.440188][T14529] netlink: 'syz.0.2935': attribute type 27 has an invalid length.
[  480.115925][T14357] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  480.131482][T14357] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  480.155019][T14357] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  480.181413][T14357] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  480.391144][T14357] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.420861][T14357] 8021q: adding VLAN 0 to HW filter on device team0
[  480.444829][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.452011][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.484559][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.491762][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.602005][T14564] __nla_validate_parse: 3 callbacks suppressed
[  480.602024][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'.
[  480.626501][T14564] tc_dump_action: action bad kind
[  480.675417][T14571] netlink: 'syz.9.2947': attribute type 29 has an invalid length.
[  480.705182][T14571] netlink: 'syz.9.2947': attribute type 29 has an invalid length.
[  480.744891][T14571] netlink: 'syz.9.2947': attribute type 29 has an invalid length.
[  480.771615][T14571] netlink: 'syz.9.2947': attribute type 29 has an invalid length.
[  480.868536][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2951'.
[  480.911722][T14583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2951'.
[  481.025577][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2953'.
[  481.037102][T14592] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2952'.
[  481.058674][T14357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.071544][T14593] netlink: 'syz.6.2954': attribute type 3 has an invalid length.
[  481.108441][T14593] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2954'.
[  481.289236][T14603] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  481.295716][T14603] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  481.582534][T14612] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2960'.
[  481.751427][T14357] veth0_vlan: entered promiscuous mode
[  481.767082][T14357] veth1_vlan: entered promiscuous mode
[  481.809372][T14357] veth0_macvtap: entered promiscuous mode
[  481.820882][T14357] veth1_macvtap: entered promiscuous mode
[  481.851092][T14357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.874487][T14357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.890834][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.379734][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.419038][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.466072][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.592238][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.608199][T14625] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2965'.
[  482.610423][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.689203][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.712208][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.096213][T14633] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2967'.
[  483.423447][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2971'.
[  483.574361][T14650] netlink: 'syz.9.2971': attribute type 2 has an invalid length.
[  483.613979][T14650] netlink: 'syz.9.2971': attribute type 3 has an invalid length.
[  484.258496][T14666] sctp: [Deprecated]: syz.4.2976 (pid 14666) Use of int in max_burst socket option deprecated.
[  484.258496][T14666] Use struct sctp_assoc_value instead
[  484.303507][T14666] sock: sock_set_timeout: `syz.4.2976' (pid 14666) tries to set negative timeout
[  484.330270][T14668] xt_l2tp: unknown flags: 51
[  484.936584][T14664] netlink: 'syz.7.2977': attribute type 16 has an invalid length.
[  486.029339][T14705] __nla_validate_parse: 8 callbacks suppressed
[  486.029357][T14705] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2987'.
[  486.584458][T14718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2992'.
[  486.597056][T14718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2992'.
[  486.607611][T14718] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2992'.
[  486.637181][T14717] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.2991'.
[  486.701031][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2993'.
[  486.705750][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2991'.
[  486.752364][T14726] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2993'.
[  486.860084][T14728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2994'.
[  487.038812][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2997'.
[  487.170291][T14736] netlink: 'syz.7.2997': attribute type 13 has an invalid length.
[  487.188476][T14739] FAULT_INJECTION: forcing a failure.
[  487.188476][T14739] name failslab, interval 1, probability 0, space 0, times 0
[  487.188509][T14739] CPU: 1 UID: 0 PID: 14739 Comm: syz.4.2998 Not tainted syzkaller #0 PREEMPT(full) 
[  487.188528][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  487.188538][T14739] Call Trace:
[  487.188545][T14739]  <TASK>
[  487.188553][T14739]  dump_stack_lvl+0x189/0x250
[  487.188578][T14739]  ? __pfx____ratelimit+0x10/0x10
[  487.188599][T14739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  487.188618][T14739]  ? __pfx__printk+0x10/0x10
[  487.188642][T14739]  ? __lock_acquire+0xab9/0xd20
[  487.188674][T14739]  should_fail_ex+0x414/0x560
[  487.188698][T14739]  should_failslab+0xa8/0x100
[  487.188718][T14739]  kmem_cache_alloc_noprof+0x73/0x3c0
[  487.188742][T14739]  ? skb_clone+0x212/0x3a0
[  487.188762][T14739]  skb_clone+0x212/0x3a0
[  487.188781][T14739]  __netlink_deliver_tap+0x404/0x850
[  487.188815][T14739]  ? netlink_deliver_tap+0x2e/0x1b0
[  487.188837][T14739]  netlink_deliver_tap+0x19c/0x1b0
[  487.188859][T14739]  netlink_unicast+0x7fa/0x9e0
[  487.188887][T14739]  ? __pfx_netlink_unicast+0x10/0x10
[  487.188913][T14739]  ? netlink_sendmsg+0x642/0xb30
[  487.188932][T14739]  ? skb_put+0x11b/0x210
[  487.188957][T14739]  netlink_sendmsg+0x805/0xb30
[  487.188987][T14739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.189011][T14739]  ? aa_sock_msg_perm+0xf1/0x1d0
[  487.189033][T14739]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  487.189053][T14739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.189074][T14739]  __sock_sendmsg+0x219/0x270
[  487.189096][T14739]  ____sys_sendmsg+0x505/0x830
[  487.189124][T14739]  ? __pfx_____sys_sendmsg+0x10/0x10
[  487.189156][T14739]  ? import_iovec+0x74/0xa0
[  487.189183][T14739]  ___sys_sendmsg+0x21f/0x2a0
[  487.189209][T14739]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.189269][T14739]  ? __fget_files+0x2a/0x420
[  487.189286][T14739]  ? __fget_files+0x3a0/0x420
[  487.189314][T14739]  __x64_sys_sendmsg+0x19b/0x260
[  487.189340][T14739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  487.189373][T14739]  ? __pfx_ksys_write+0x10/0x10
[  487.189386][T14739]  ? rcu_is_watching+0x15/0xb0
[  487.189409][T14739]  ? do_syscall_64+0xbe/0x3b0
[  487.189434][T14739]  do_syscall_64+0xfa/0x3b0
[  487.189453][T14739]  ? lockdep_hardirqs_on+0x9c/0x150
[  487.189472][T14739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.189488][T14739]  ? clear_bhb_loop+0x60/0xb0
[  487.189508][T14739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.189524][T14739] RIP: 0033:0x7f70b998eec9
[  487.189539][T14739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  487.189553][T14739] RSP: 002b:00007f70ba8fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.189571][T14739] RAX: ffffffffffffffda RBX: 00007f70b9be5fa0 RCX: 00007f70b998eec9
[  487.189583][T14739] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  487.189594][T14739] RBP: 00007f70ba8fd090 R08: 0000000000000000 R09: 0000000000000000
[  487.189604][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.189613][T14739] R13: 00007f70b9be6038 R14: 00007f70b9be5fa0 R15: 00007fff0a567008
[  487.189642][T14739]  </TASK>
[  487.215754][T14734] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  487.215819][T14734] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  487.836520][T14736] netlink: 'syz.7.2997': attribute type 4 has an invalid length.
[  487.988577][T14749] C: renamed from team_slave_0 (while UP)
[  488.026972][T14757] netlink: 'syz.6.3002': attribute type 10 has an invalid length.
[  488.037728][T14749] netlink: 'syz.4.3000': attribute type 1 has an invalid length.
[  488.064263][T14749] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  488.093625][T14761] netlink: 'syz.6.3002': attribute type 10 has an invalid length.
[  488.112576][T14761] batadv0: entered promiscuous mode
[  488.118986][T14761] batadv0: entered allmulticast mode
[  488.141309][T14761] bridge0: port 3(batadv0) entered blocking state
[  488.147722][T14765] netlink: 'syz.9.3005': attribute type 2 has an invalid length.
[  488.162405][T14761] bridge0: port 3(batadv0) entered disabled state
[  488.204845][T14761] bridge0: port 3(batadv0) entered blocking state
[  488.211454][T14761] bridge0: port 3(batadv0) entered forwarding state
[  488.241759][T14757] bridge0: port 3(batadv0) entered disabled state
[  488.272880][   T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  488.282397][   T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  488.311254][T14757] batadv0: left allmulticast mode
[  488.319069][T14757] batadv0: left promiscuous mode
[  488.352600][T14757] bridge0: port 3(batadv0) entered disabled state
[  488.387872][T14757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.400578][T14757] batadv0: entered promiscuous mode
[  488.423531][T14757] $H�: (slave batadv0): Enslaving as an active interface with an up link
[  488.969973][T14802] openvswitch: netlink: Flow key attr not present in new flow.
[  489.028058][T14804] netlink: 'syz.0.3020': attribute type 29 has an invalid length.
[  489.060137][T14804] netlink: 'syz.0.3020': attribute type 29 has an invalid length.
[  489.076468][T14804] netlink: 'syz.0.3020': attribute type 29 has an invalid length.
[  490.192783][T14827] netlink: 'syz.9.3027': attribute type 39 has an invalid length.
[  490.446651][T14843] tc_dump_action: action bad kind
[  491.365752][T14849] __nla_validate_parse: 12 callbacks suppressed
[  491.365781][T14849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3037'.
[  491.608997][T14862] netlink: 'syz.7.3042': attribute type 39 has an invalid length.
[  491.637175][T14865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3043'.
[  491.733071][T14867] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3045'.
[  491.752082][T14869] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3044'.
[  491.762096][T14869] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3044'.
[  491.800564][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3044'.
[  491.881543][T14877] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3044'.
[  492.044100][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3049'.
[  492.934415][T14882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3050'.
[  493.024129][T14883] netlink: 'syz.4.3050': attribute type 10 has an invalid length.
[  493.031990][T14883] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3050'.
[  493.092625][T14883] batadv_slave_1: entered promiscuous mode
[  493.122768][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.136441][T14883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.404150][T14883] bridge0: port 3(batadv_slave_1) entered blocking state
[  493.420802][T14883] bridge0: port 3(batadv_slave_1) entered disabled state
[  493.431601][T14883] batadv_slave_1: entered allmulticast mode
[  493.453941][T14883] bridge0: port 3(batadv_slave_1) entered blocking state
[  493.461370][T14883] bridge0: port 3(batadv_slave_1) entered forwarding state
[  493.574741][T14886] netlink: 'syz.6.3051': attribute type 10 has an invalid length.
[  493.597048][T14886] veth0_vlan: entered allmulticast mode
[  493.615437][T14886] bridge0: port 3(veth0_vlan) entered blocking state
[  493.639904][T14886] bridge0: port 3(veth0_vlan) entered disabled state
[  493.681336][T14886] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  493.701924][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.884311][T14897] netlink: 'syz.9.3055': attribute type 29 has an invalid length.
[  493.935780][T14897] netlink: 'syz.9.3055': attribute type 29 has an invalid length.
[  493.960314][T14897] netlink: 'syz.9.3055': attribute type 29 has an invalid length.
[  494.121834][T14903] sctp: [Deprecated]: syz.7.3056 (pid 14903) Use of int in max_burst socket option deprecated.
[  494.121834][T14903] Use struct sctp_assoc_value instead
[  494.349681][T14906] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  494.356133][T14906] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  494.519652][T14914] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  494.526162][T14914] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  496.305745][T14950] validate_nla: 7 callbacks suppressed
[  496.305775][T14950] netlink: 'syz.7.3073': attribute type 1 has an invalid length.
[  496.600042][T14966] sctp: [Deprecated]: syz.7.3078 (pid 14966) Use of int in max_burst socket option deprecated.
[  496.600042][T14966] Use struct sctp_assoc_value instead
[  496.619926][T14967] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  496.626333][T14967] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  498.129674][T14988] netlink: 'syz.4.3085': attribute type 10 has an invalid length.
[  498.141595][T14988] __nla_validate_parse: 8 callbacks suppressed
[  498.141609][T14988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3085'.
[  498.201354][T14988] batman_adv: batadv0: Adding interface: vlan1
[  498.207849][T14988] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.256940][T14988] batman_adv: batadv0: Interface activated: vlan1
[  498.298054][T14994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.499674][T15001] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  498.506246][T15001] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  498.646036][T15006] sctp: [Deprecated]: syz.6.3093 (pid 15006) Use of int in max_burst socket option deprecated.
[  498.646036][T15006] Use struct sctp_assoc_value instead
[  498.852731][T15003] netlink: 'syz.4.3094': attribute type 9 has an invalid length.
[  499.027214][T15009] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.033872][T15009] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.108513][T15003] netlink: 'syz.4.3094': attribute type 8 has an invalid length.
[  499.164171][T15003] netlink: 'syz.4.3094': attribute type 3 has an invalid length.
[  499.173831][T15003] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.3094'.
[  499.528084][T15023] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  499.548641][T15023] netlink: 'syz.7.3099': attribute type 10 has an invalid length.
[  500.721088][T15039] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3103'.
[  501.030249][T15042] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3103'.
[  501.133292][T15042] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3103'.
[  501.423417][T15043] netlink: 'syz.7.3103': attribute type 6 has an invalid length.
[  503.443034][ T5887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  503.453331][ T5887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  503.462329][ T5887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  503.473526][ T5887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  503.483659][ T5887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  503.577596][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  503.592779][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  505.539907][ T5887] Bluetooth: hci3: command tx timeout
[  506.196339][   T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.221177][T15056] netlink: 'syz.7.3107': attribute type 10 has an invalid length.
[  506.377432][   T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.665187][   T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.867399][   T49] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.140533][T15045] chnl_net:caif_netlink_parms(): no params data found
[  507.186755][T15072] netlink: 'syz.7.3112': attribute type 1 has an invalid length.
[  507.188575][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3113'.
[  507.216603][T15067] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3110'.
[  507.227441][T15072] netlink: 'syz.7.3112': attribute type 2 has an invalid length.
[  507.284561][   T49] bridge_slave_1: left allmulticast mode
[  507.297061][   T49] bridge_slave_1: left promiscuous mode
[  507.310591][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.337725][   T49] bridge_slave_0: left allmulticast mode
[  507.348350][   T49] bridge_slave_0: left promiscuous mode
[  507.361960][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.517733][T15090] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3119'.
[  507.612374][ T5887] Bluetooth: hci3: command tx timeout
[  507.879026][   T49] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.890857][   T49] bond_slave_0: left promiscuous mode
[  507.917867][   T49] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.928199][   T49] bond_slave_1: left promiscuous mode
[  507.937310][   T49] $H� (unregistering): (slave wlan1): Releasing backup interface
[  507.955043][   T49] mac80211_hwsim hwsim21 wlan1: left promiscuous mode
[  507.972903][   T49] $H� (unregistering): (slave batadv0): Releasing backup interface
[  507.989088][   T49] batadv0: left promiscuous mode
[  507.998398][   T49] $H� (unregistering): Released all slaves
[  508.024296][T15067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  508.247490][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'.
[  508.275661][T15045] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.292324][T15045] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.302984][T15045] bridge_slave_0: entered allmulticast mode
[  508.310805][T15045] bridge_slave_0: entered promiscuous mode
[  508.392196][T15045] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.401153][T15045] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.417768][T15045] bridge_slave_1: entered allmulticast mode
[  508.430781][T15045] bridge_slave_1: entered promiscuous mode
[  508.563422][T15122] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3125'.
[  509.699410][ T5887] Bluetooth: hci3: command tx timeout
[  511.520055][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.546008][T15138] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3131'.
[  511.546735][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.795606][ T5887] Bluetooth: hci3: command tx timeout
[  512.621348][T15045] team0: Port device team_slave_0 added
[  512.634073][T15045] team0: Port device team_slave_1 added
[  512.886022][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.896932][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.928369][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.075425][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.085075][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.123965][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.144567][T15158] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3138'.
[  513.209549][T15160] netlink: 'syz.4.3139': attribute type 10 has an invalid length.
[  513.299726][T15160] batman_adv: batadv0: Interface deactivated: vlan1
[  513.717917][T15160] veth0_vlan: left promiscuous mode
[  513.769031][T15160] veth0_vlan: entered promiscuous mode
[  513.914972][T15160] batman_adv: batadv0: Interface activated: vlan1
[  513.921572][T15160] team0: Device veth0_vlan failed to register rx_handler
[  513.935684][T15160] batman_adv: batadv0: Interface deactivated: vlan1
[  514.392317][T15176] netlink: 'syz.0.3142': attribute type 10 has an invalid length.
[  514.447312][T15045] hsr_slave_0: entered promiscuous mode
[  514.458740][T15045] hsr_slave_1: entered promiscuous mode
[  514.465617][T15045] debugfs: 'hsr0' already exists in 'hsr'
[  514.479429][T15045] Cannot create hsr debugfs directory
[  515.140773][T15205] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3152'.
[  515.225325][   T49] hsr_slave_0: left promiscuous mode
[  515.234791][   T49] hsr_slave_1: left promiscuous mode
[  515.240835][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.260285][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  515.275457][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.325035][   T49] veth1_macvtap: left promiscuous mode
[  515.340287][   T49] veth1_vlan: left promiscuous mode
[  515.866742][T15228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3162'.
[  516.252935][   T49] team0 (unregistering): Port device team_slave_1 removed
[  516.290546][   T49] team0 (unregistering): Port device C removed
[  517.077834][T15257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3172'.
[  517.207473][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3174'.
[  517.254148][T15263] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3174'.
[  517.276076][T15268] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3177'.
[  517.308399][T15045] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  517.357422][T15045] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  517.385304][T15045] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  517.425316][T15045] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  517.582561][T15284] netlink: 'syz.7.3182': attribute type 10 has an invalid length.
[  517.603620][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3182'.
[  517.657261][T15045] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.684731][T15045] 8021q: adding VLAN 0 to HW filter on device team0
[  517.734303][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.741502][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.785745][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.792909][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.828266][T15291] netlink: 'syz.9.3184': attribute type 2 has an invalid length.
[  517.839321][T15291] netlink: 'syz.9.3184': attribute type 8 has an invalid length.
[  517.874256][T15291] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3184'.
[  517.960636][T15297] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3186'.
[  518.496629][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.529838][T15317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3194'.
[  518.548293][T15321] netlink: 'syz.9.3192': attribute type 2 has an invalid length.
[  518.627569][T15317] netlink: 'syz.0.3194': attribute type 4 has an invalid length.
[  518.733132][T15317] netlink: 'syz.0.3194': attribute type 2 has an invalid length.
[  518.757087][T15317] netlink: 190704 bytes leftover after parsing attributes in process `syz.0.3194'.
[  518.944059][T15330] netlink: 'syz.9.3196': attribute type 39 has an invalid length.
[  519.188586][T15045] veth0_vlan: entered promiscuous mode
[  519.207510][T15045] veth1_vlan: entered promiscuous mode
[  519.303286][T15342] netlink: 'syz.9.3198': attribute type 1 has an invalid length.
[  519.331020][T15045] veth0_macvtap: entered promiscuous mode
[  519.404829][T15045] veth1_macvtap: entered promiscuous mode
[  519.441987][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.465026][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.489110][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.508827][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.541978][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.587513][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.707002][T15353] netlink: 'syz.9.3204': attribute type 39 has an invalid length.
[  519.747378][T15361] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3206'.
[  519.797391][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.817154][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.835242][T15366] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3206'.
[  519.845800][T15366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3206'.
[  519.862878][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.870855][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.925392][T15360] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  519.931811][T15360] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  520.707903][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  520.723569][T15383] netlink: 'syz.6.3216': attribute type 39 has an invalid length.
[  520.777579][T15383] veth0_macvtap: left promiscuous mode
[  520.990380][T15390] sctp: [Deprecated]: syz.9.3217 (pid 15390) Use of int in max_burst socket option deprecated.
[  520.990380][T15390] Use struct sctp_assoc_value instead
[  521.154335][T15395] netlink: 'syz.6.3220': attribute type 1 has an invalid length.
[  521.166634][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  521.176828][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  521.185580][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  521.194454][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  521.206493][T15397] netlink: 'syz.0.3219': attribute type 10 has an invalid length.
[  521.209740][ T6428] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.215454][T15397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3219'.
[  521.244981][ T5184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  521.440901][ T6428] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.540783][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3221'.
[  521.581714][T15400] netlink: 'syz.0.3222': attribute type 39 has an invalid length.
[  521.769951][ T6428] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.401482][ T6428] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.093172][T15394] chnl_net:caif_netlink_parms(): no params data found
[  523.121595][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3228'.
[  523.303989][ T5887] Bluetooth: hci4: command tx timeout
[  523.305428][T15422] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3228'.
[  523.547255][ T6428] bridge_slave_1: left allmulticast mode
[  523.556017][ T6428] bridge_slave_1: left promiscuous mode
[  523.561760][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.574403][ T6428] bridge_slave_0: left allmulticast mode
[  523.580051][ T6428] bridge_slave_0: left promiscuous mode
[  523.594827][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.639488][T15452] sctp: [Deprecated]: syz.0.3232 (pid 15452) Use of int in max_burst socket option deprecated.
[  523.639488][T15452] Use struct sctp_assoc_value instead
[  523.738524][T15454] __nla_validate_parse: 1 callbacks suppressed
[  523.738555][T15454] netlink: 211576 bytes leftover after parsing attributes in process `syz.9.3234'.
[  524.749250][T15476] validate_nla: 1 callbacks suppressed
[  524.749267][T15476] netlink: 'syz.6.3244': attribute type 10 has an invalid length.
[  524.807032][ T6428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.819203][ T6428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.831138][ T6428] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  524.839828][ T6428] bond0 (unregistering): Released all slaves
[  524.854893][T15394] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.862245][T15394] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.869399][T15394] bridge_slave_0: entered allmulticast mode
[  524.876875][T15394] bridge_slave_0: entered promiscuous mode
[  524.885876][T15394] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.893070][T15394] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.900194][T15394] bridge_slave_1: entered allmulticast mode
[  524.911608][T15394] bridge_slave_1: entered promiscuous mode
[  524.974543][T15394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.991911][T15476] team0: Port device vlan0 added
[  525.068668][T15394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.296505][T15394] team0: Port device team_slave_0 added
[  525.372746][ T5887] Bluetooth: hci4: command tx timeout
[  525.383080][T15394] team0: Port device team_slave_1 added
[  525.519665][T15394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.531606][T15394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.569569][T15394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.586696][T15394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.593907][T15394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.630093][T15394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.833324][T15515] netlink: 'syz.0.3263': attribute type 29 has an invalid length.
[  525.906798][T15517] netlink: 'syz.0.3263': attribute type 29 has an invalid length.
[  525.944671][T15515] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3263'.
[  525.981169][T15394] hsr_slave_0: entered promiscuous mode
[  525.988701][T15394] hsr_slave_1: entered promiscuous mode
[  525.998021][T15394] debugfs: 'hsr0' already exists in 'hsr'
[  526.007921][T15394] Cannot create hsr debugfs directory
[  526.291492][T15544] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3274'.
[  526.418731][T15545] lo speed is unknown, defaulting to 1000
[  526.465139][ T6428] hsr_slave_0: left promiscuous mode
[  526.478157][ T6428] hsr_slave_1: left promiscuous mode
[  526.491278][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.507158][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.536424][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.547627][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.567304][ T6428] batman_adv: batadv0: Interface deactivated: vlan1
[  526.575702][ T6428] batman_adv: batadv0: Removing interface: vlan1
[  526.639902][ T6428] veth1_macvtap: left promiscuous mode
[  526.654086][ T6428] veth1_vlan: left promiscuous mode
[  526.670015][ T6428] veth0_vlan: left promiscuous mode
[  527.005477][T15563] siw: device registration error -23
[  527.263501][T15571] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3284'.
[  527.466350][ T5887] Bluetooth: hci4: command tx timeout
[  527.676565][T15545] lo speed is unknown, defaulting to 1000
[  527.688152][T15545] lo speed is unknown, defaulting to 1000
[  527.727417][T15545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  527.830053][T15545] lo speed is unknown, defaulting to 1000
[  527.877559][T15545] lo speed is unknown, defaulting to 1000
[  527.889264][T15545] lo speed is unknown, defaulting to 1000
[  527.899417][T15545] lo speed is unknown, defaulting to 1000
[  527.911297][T15545] lo speed is unknown, defaulting to 1000
[  528.102273][T15588] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3290'.
[  528.111567][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3290'.
[  528.229606][T15586] netlink: 822 bytes leftover after parsing attributes in process `syz.0.3288'.
[  528.379383][ T6428] ==================================================================
[  528.387481][ T6428] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  528.395560][ T6428] Write of size 8 at addr ffff8880784a8468 by task kworker/u8:8/6428
[  528.403625][ T6428] 
[  528.405961][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  528.405982][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  528.405993][ T6428] Workqueue: netns cleanup_net
[  528.406017][ T6428] Call Trace:
[  528.406026][ T6428]  <TASK>
[  528.406036][ T6428]  dump_stack_lvl+0x189/0x250
[  528.406060][ T6428]  ? rcu_is_watching+0x15/0xb0
[  528.406075][ T6428]  ? __kasan_check_byte+0x12/0x40
[  528.406097][ T6428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  528.406116][ T6428]  ? rcu_is_watching+0x15/0xb0
[  528.406131][ T6428]  ? __virt_addr_valid+0x1c8/0x5c0
[  528.406154][ T6428]  ? lock_release+0x4b/0x3e0
[  528.406201][ T6428]  ? __virt_addr_valid+0x1c8/0x5c0
[  528.406222][ T6428]  ? __virt_addr_valid+0x4a5/0x5c0
[  528.406252][ T6428]  print_report+0xca/0x240
[  528.406272][ T6428]  ? __xfrm_state_delete+0x666/0xca0
[  528.406292][ T6428]  kasan_report+0x118/0x150
[  528.406321][ T6428]  ? __xfrm_state_delete+0x666/0xca0
[  528.406366][ T6428]  __xfrm_state_delete+0x666/0xca0
[  528.406422][ T6428]  xfrm_state_flush+0x45f/0x770
[  528.406480][ T6428]  xfrm6_tunnel_net_exit+0x3c/0x100
[  528.406514][ T6428]  ops_undo_list+0x49a/0x990
[  528.406557][ T6428]  ? __pfx_ops_undo_list+0x10/0x10
[  528.406591][ T6428]  ? do_raw_spin_unlock+0x122/0x240
[  528.406627][ T6428]  cleanup_net+0x4c5/0x800
[  528.406661][ T6428]  ? __pfx_cleanup_net+0x10/0x10
[  528.406692][ T6428]  ? _raw_spin_unlock_irq+0x23/0x50
[  528.406713][ T6428]  ? process_scheduled_works+0x9ef/0x17b0
[  528.406730][ T6428]  ? process_scheduled_works+0x9ef/0x17b0
[  528.406756][ T6428]  process_scheduled_works+0xae1/0x17b0
[  528.406855][ T6428]  ? __pfx_process_scheduled_works+0x10/0x10
[  528.406923][ T6428]  worker_thread+0x8a0/0xda0
[  528.406953][ T6428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  528.406997][ T6428]  ? __kthread_parkme+0x7b/0x200
[  528.407046][ T6428]  kthread+0x70e/0x8a0
[  528.407080][ T6428]  ? __pfx_worker_thread+0x10/0x10
[  528.407100][ T6428]  ? __pfx_kthread+0x10/0x10
[  528.407130][ T6428]  ? _raw_spin_unlock_irq+0x23/0x50
[  528.407151][ T6428]  ? lockdep_hardirqs_on+0x9c/0x150
[  528.407176][ T6428]  ? __pfx_kthread+0x10/0x10
[  528.407205][ T6428]  ret_from_fork+0x436/0x7d0
[  528.407235][ T6428]  ? __pfx_ret_from_fork+0x10/0x10
[  528.407274][ T6428]  ? __switch_to_asm+0x39/0x70
[  528.407294][ T6428]  ? __switch_to_asm+0x33/0x70
[  528.407312][ T6428]  ? __pfx_kthread+0x10/0x10
[  528.407340][ T6428]  ret_from_fork_asm+0x1a/0x30
[  528.407403][ T6428]  </TASK>
[  528.407409][ T6428] 
[  528.412253][T15597] netlink: 'syz.0.3292': attribute type 39 has an invalid length.
[  528.416858][ T6428] Allocated by task 14853:
[  528.416882][ T6428]  kasan_save_track+0x3e/0x80
[  528.416909][ T6428]  __kasan_slab_alloc+0x6c/0x80
[  528.416924][ T6428]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  528.673621][ T6428]  xfrm_state_alloc+0x24/0x2f0
[  528.678374][ T6428]  __find_acq_core+0x8a7/0x1c00
[  528.683211][ T6428]  xfrm_find_acq+0x78/0xa0
[  528.687605][ T6428]  xfrm_alloc_userspi+0x6b3/0xc90
[  528.692617][ T6428]  xfrm_user_rcv_msg+0x7a3/0xab0
[  528.697545][ T6428]  netlink_rcv_skb+0x208/0x470
[  528.702295][ T6428]  xfrm_netlink_rcv+0x79/0x90
[  528.706955][ T6428]  netlink_unicast+0x82c/0x9e0
[  528.711704][ T6428]  netlink_sendmsg+0x805/0xb30
[  528.716471][ T6428]  __sock_sendmsg+0x219/0x270
[  528.721133][ T6428]  ____sys_sendmsg+0x505/0x830
[  528.725882][ T6428]  ___sys_sendmsg+0x21f/0x2a0
[  528.730542][ T6428]  __x64_sys_sendmsg+0x19b/0x260
[  528.735464][ T6428]  do_syscall_64+0xfa/0x3b0
[  528.739953][ T6428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.745828][ T6428] 
[  528.748134][ T6428] Freed by task 15047:
[  528.752178][ T6428]  kasan_save_track+0x3e/0x80
[  528.756841][ T6428]  kasan_save_free_info+0x46/0x50
[  528.761848][ T6428]  __kasan_slab_free+0x5b/0x80
[  528.766591][ T6428]  kmem_cache_free+0x18f/0x400
[  528.771332][ T6428]  xfrm_state_gc_task+0x52d/0x6b0
[  528.776335][ T6428]  process_scheduled_works+0xae1/0x17b0
[  528.781901][ T6428]  worker_thread+0x8a0/0xda0
[  528.786485][ T6428]  kthread+0x70e/0x8a0
[  528.790535][ T6428]  ret_from_fork+0x436/0x7d0
[  528.795105][ T6428]  ret_from_fork_asm+0x1a/0x30
[  528.799856][ T6428] 
[  528.802161][ T6428] The buggy address belongs to the object at ffff8880784a8440
[  528.802161][ T6428]  which belongs to the cache xfrm_state of size 928
[  528.816105][ T6428] The buggy address is located 40 bytes inside of
[  528.816105][ T6428]  freed 928-byte region [ffff8880784a8440, ffff8880784a87e0)
[  528.829795][ T6428] 
[  528.832098][ T6428] The buggy address belongs to the physical page:
[  528.838505][ T6428] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880784a9980 pfn:0x784a8
[  528.848549][ T6428] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  528.857025][ T6428] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  528.864547][ T6428] page_type: f5(slab)
[  528.868508][ T6428] raw: 00fff00000000040 ffff88801b36e140 dead000000000122 0000000000000000
[  528.877068][ T6428] raw: ffff8880784a9980 00000000800f000e 00000000f5000000 0000000000000000
[  528.885631][ T6428] head: 00fff00000000040 ffff88801b36e140 dead000000000122 0000000000000000
[  528.894277][ T6428] head: ffff8880784a9980 00000000800f000e 00000000f5000000 0000000000000000
[  528.902929][ T6428] head: 00fff00000000002 ffffea0001e12a01 00000000ffffffff 00000000ffffffff
[  528.911580][ T6428] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  528.920225][ T6428] page dumped because: kasan: bad access detected
[  528.926624][ T6428] page_owner tracks the page as allocated
[  528.932579][ T6428] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5994, tgid 5993 (syz.2.7), ts 76885765949, free_ts 76880109455
[  528.951410][ T6428]  post_alloc_hook+0x240/0x2a0
[  528.956159][ T6428]  get_page_from_freelist+0x21e4/0x22c0
[  528.961684][ T6428]  __alloc_frozen_pages_noprof+0x181/0x370
[  528.967468][ T6428]  alloc_pages_mpol+0x232/0x4a0
[  528.972299][ T6428]  allocate_slab+0x8a/0x370
[  528.976784][ T6428]  ___slab_alloc+0xbeb/0x1420
[  528.981438][ T6428]  kmem_cache_alloc_noprof+0x283/0x3c0
[  528.986884][ T6428]  xfrm_state_alloc+0x24/0x2f0
[  528.991628][ T6428]  pfkey_add+0x6e4/0x2e00
[  528.995938][ T6428]  pfkey_sendmsg+0xbfe/0x1090
[  529.000595][ T6428]  __sock_sendmsg+0x219/0x270
[  529.005250][ T6428]  ____sys_sendmsg+0x505/0x830
[  529.009995][ T6428]  ___sys_sendmsg+0x21f/0x2a0
[  529.014655][ T6428]  __x64_sys_sendmsg+0x19b/0x260
[  529.019578][ T6428]  do_syscall_64+0xfa/0x3b0
[  529.024060][ T6428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.029930][ T6428] page last free pid 5994 tgid 5993 stack trace:
[  529.036493][ T6428]  __free_frozen_pages+0xbc4/0xd30
[  529.041583][ T6428]  stack_depot_save_flags+0x436/0x860
[  529.046932][ T6428]  kasan_save_track+0x4f/0x80
[  529.051592][ T6428]  __kasan_slab_alloc+0x6c/0x80
[  529.056419][ T6428]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  529.061865][ T6428]  radix_tree_node_alloc+0x7e/0x3a0
[  529.067040][ T6428]  idr_get_free+0x2b3/0xa70
[  529.071521][ T6428]  idr_alloc_u32+0x159/0x2d0
[  529.076101][ T6428]  idr_alloc+0x6e/0xd0
[  529.080164][ T6428]  tipc_conn_alloc+0x302/0x4a0
[  529.084917][ T6428]  tipc_topsrv_kern_subscr+0xf0/0x240
[  529.090279][ T6428]  tipc_group_create+0x364/0x500
[  529.095205][ T6428]  tipc_sk_join+0x24d/0x6b0
[  529.099693][ T6428]  tipc_setsockopt+0x735/0x970
[  529.104444][ T6428]  do_sock_setsockopt+0x179/0x1b0
[  529.109458][ T6428]  __x64_sys_setsockopt+0x13f/0x1b0
[  529.114656][ T6428] 
[  529.116962][ T6428] Memory state around the buggy address:
[  529.122574][ T6428]  ffff8880784a8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  529.130617][ T6428]  ffff8880784a8380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  529.138771][ T6428] >ffff8880784a8400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  529.146811][ T6428]                                                           ^
[  529.154246][ T6428]  ffff8880784a8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  529.162288][ T6428]  ffff8880784a8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  529.170326][ T6428] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  529.178522][ T6428] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  529.185713][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  529.195170][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  529.205226][ T6428] Workqueue: netns cleanup_net
[  529.210005][ T6428] Call Trace:
[  529.213286][ T6428]  <TASK>
[  529.216215][ T6428]  dump_stack_lvl+0x99/0x250
[  529.220808][ T6428]  ? __asan_memcpy+0x40/0x70
[  529.225411][ T6428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.230623][ T6428]  ? __pfx__printk+0x10/0x10
[  529.235326][ T6428]  vpanic+0x281/0x750
[  529.239300][ T6428]  ? __pfx_vpanic+0x10/0x10
[  529.243787][ T6428]  ? irqentry_exit+0x74/0x90
[  529.248369][ T6428]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.253551][ T6428]  panic+0xb9/0xc0
[  529.257256][ T6428]  ? __pfx_panic+0x10/0x10
[  529.261656][ T6428]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  529.267545][ T6428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  529.273864][ T6428]  ? __xfrm_state_delete+0x666/0xca0
[  529.279136][ T6428]  check_panic_on_warn+0x89/0xb0
[  529.284063][ T6428]  ? __xfrm_state_delete+0x666/0xca0
[  529.289342][ T6428]  end_report+0x78/0x160
[  529.293572][ T6428]  kasan_report+0x129/0x150
[  529.298063][ T6428]  ? __xfrm_state_delete+0x666/0xca0
[  529.303347][ T6428]  __xfrm_state_delete+0x666/0xca0
[  529.308454][ T6428]  xfrm_state_flush+0x45f/0x770
[  529.313304][ T6428]  xfrm6_tunnel_net_exit+0x3c/0x100
[  529.318501][ T6428]  ops_undo_list+0x49a/0x990
[  529.323086][ T6428]  ? __pfx_ops_undo_list+0x10/0x10
[  529.328188][ T6428]  ? do_raw_spin_unlock+0x122/0x240
[  529.333379][ T6428]  cleanup_net+0x4c5/0x800
[  529.337794][ T6428]  ? __pfx_cleanup_net+0x10/0x10
[  529.342723][ T6428]  ? _raw_spin_unlock_irq+0x23/0x50
[  529.347908][ T6428]  ? process_scheduled_works+0x9ef/0x17b0
[  529.353609][ T6428]  ? process_scheduled_works+0x9ef/0x17b0
[  529.359314][ T6428]  process_scheduled_works+0xae1/0x17b0
[  529.364862][ T6428]  ? __pfx_process_scheduled_works+0x10/0x10
[  529.370833][ T6428]  worker_thread+0x8a0/0xda0
[  529.375408][ T6428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  529.381727][ T6428]  ? __kthread_parkme+0x7b/0x200
[  529.386654][ T6428]  kthread+0x70e/0x8a0
[  529.390711][ T6428]  ? __pfx_worker_thread+0x10/0x10
[  529.395804][ T6428]  ? __pfx_kthread+0x10/0x10
[  529.400379][ T6428]  ? _raw_spin_unlock_irq+0x23/0x50
[  529.405557][ T6428]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.410737][ T6428]  ? __pfx_kthread+0x10/0x10
[  529.415312][ T6428]  ret_from_fork+0x436/0x7d0
[  529.419887][ T6428]  ? __pfx_ret_from_fork+0x10/0x10
[  529.424987][ T6428]  ? __switch_to_asm+0x39/0x70
[  529.429738][ T6428]  ? __switch_to_asm+0x33/0x70
[  529.434487][ T6428]  ? __pfx_kthread+0x10/0x10
[  529.439068][ T6428]  ret_from_fork_asm+0x1a/0x30
[  529.443825][ T6428]  </TASK>
[  529.447091][ T6428] Kernel Offset: disabled
[  529.451401][ T6428] Rebooting in 86400 seconds..