last executing test programs:

3m2.483042821s ago: executing program 1 (id=125):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7f, 0x7f, 0x9, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x1}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x6, [{0x7, 0x4, 0xfffffff9}, {0x6, 0x2, 0x6}, {0x2, 0x4, 0x7}, {0x9, 0x4, 0x8001}, {0xd, 0x1, 0x9}, {0x3, 0x5, 0x8}, {0xf, 0x1}]}, @datasec={0xb, 0x0, 0x0, 0xf, 0x3, [], "fe19cd"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000040)=""/79, 0xa1, 0x4f, 0x1, 0xc, 0x10000, @value=r2}, 0x28)

3m2.482106778s ago: executing program 1 (id=126):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r1], 0xfe33)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', r0, 0x4000, r3}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x7f}}]}, 0xc4}}, 0x2c000010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x40000000}, 0x0, 0x6e6bb5, 0x1}}, 0xb8}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a01"], 0x70}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x58, 0x0, &(0x7f0000000080)="e480eb00c152080094296d4c08caaecab831fca591d2c9aa80f1714111e85c0641a83400bd8314473a1c587d790bef52c1491e94311c82399f77094eb9ba9dd6ba343f7fa74582b7417b45b8a2c7881a4f57c620b2abf973", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x28, 0x140c, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)

3m2.307645646s ago: executing program 1 (id=128):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xc8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff31, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x21, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcb}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x13, &(0x7f0000000440)=""/19, 0x41100, 0x11, '\x00', r6, 0x18, r4, 0x8, &(0x7f0000000780)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x8, 0x9}, 0x10, 0x14d97, r5, 0x5, &(0x7f0000000800)=[r4, r4], &(0x7f0000000840)=[{0x0, 0x1, 0x6, 0x6}, {0x1, 0x1, 0x1, 0x7}, {0x1, 0x5, 0xb, 0x5}, {0x3, 0x3, 0xf, 0x7}, {0x1, 0x1, 0xd, 0x9}], 0x10, 0x7}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r5})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000150001"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)

3m2.303483038s ago: executing program 2 (id=129):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0x101)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x10, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x24}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x18}, 0x0)

3m1.894235151s ago: executing program 2 (id=131):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000001000085100000010000009500000000000000184400000300000000000000000000008500000012000000950000000000000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

3m1.748209376s ago: executing program 1 (id=132):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c023a02000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

3m1.669296826s ago: executing program 2 (id=133):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0103000071105100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

3m1.665757431s ago: executing program 0 (id=134):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xfc}]}]}, 0x16c}}, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4801)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115b00000000008510000002000000850000004900000095000000000100009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3m1.574456281s ago: executing program 2 (id=135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4ea0}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x490) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4ea0}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x490)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000006feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fee10000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x29, 0x5, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00043a00005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef)

3m1.574245433s ago: executing program 0 (id=136):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02037f0221001d000000000000000000030006000000000002000000ac14142e06000000001300000200010000000000000009007fffffff030005002b00000002000000ac1414aa0000000000000008170008007805259f1e770e49f170fe638127a9675553371d7e163c3fd945f1a0bd7d49c1a3e2461acbdce51ec6b9f8d4d9252c63f52a2755290c0afdb7635ebd3047e139c4bcdfe5005e43fd0a58cb431f1bcb4b75e792ab647f9822fb38d87e7ac9897c67bc0c6a530d0000000000000000", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=0x0], 0x108}, 0x1, 0x7}, 0x0)

3m1.483975242s ago: executing program 2 (id=137):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xdb, 0x18}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x383}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[r0, r1, r2, r3, r4], &(0x7f0000000b40)=[{0x5, 0x1, 0x8f, 0x4}, {0x3, 0x4, 0x6, 0x3}, {0x5, 0x2, 0x0, 0xb}, {0x2, 0x1, 0xc, 0xc}], 0x10, 0x1000}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map, 0xffffffffffffffff, 0x2, 0x4008}, 0x20)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000040), 0x4)
r9 = socket$kcm(0xa, 0x3, 0x3a)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa", @ANYRES64=r8], 0xfdef)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f00000000c0)={r9})
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000fdff0000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080004400000080008000340000000ba080001400000001108000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4)

3m1.48337491s ago: executing program 0 (id=138):
socket$kcm(0x2, 0x5, 0x84) (async)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440), 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000a80)={0x1, 0x80, 0x4, 0x6, 0x80, 0x1, 0x0, 0xc, 0x11010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000a40), 0x3}, 0x400, 0x5, 0xfffffff2, 0x0, 0x7ff, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000540)="e02742e86c0d85", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f0000000040)) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8903, &(0x7f00000005c0)) (async)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000), 0x10) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000540)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@exit, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x61, &(0x7f0000000240)=""/97, 0x40f00, 0xe, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x23, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r1, r9, r4, r2, r1, r1], 0x0, 0x10, 0x10000}, 0x94) (async)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3m1.411431626s ago: executing program 1 (id=139):
socket$kcm(0x29, 0x7, 0x0)
perf_event_open(&(0x7f0000000040)={0xf, 0x80, 0xc1, 0x6, 0x0, 0xb3, 0x0, 0x0, 0x108, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6d175b38, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x11200a, 0x2, 0x7, 0x1, 0xfff, 0x1, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) (async)
r0 = perf_event_open(&(0x7f0000000040)={0xf, 0x80, 0xc1, 0x6, 0x0, 0xb3, 0x0, 0x0, 0x108, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6d175b38, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x11200a, 0x2, 0x7, 0x1, 0xfff, 0x1, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\v)}\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x8c, 0x3, 0x49, 0x0, 0x7, 0x9055, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf81, 0x2, @perf_config_ext={0xffff, 0x9f5c}, 0xa251, 0x7f, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x7ff, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x6a, 0x7, 0x8, 0x0, 0x64564035, 0x230, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100)}, 0x10e040, 0x7, 0x5, 0x0, 0x100000001, 0x2, 0x5, 0x0, 0x40, 0x0, 0x5}, r1, 0x3, r2, 0x9) (async)
r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x6a, 0x7, 0x8, 0x0, 0x64564035, 0x230, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100)}, 0x10e040, 0x7, 0x5, 0x0, 0x100000001, 0x2, 0x5, 0x0, 0x40, 0x0, 0x5}, r1, 0x3, r2, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x4, [{0x2, 0x2, 0x95}, {0x4, 0x2, 0x5}, {0x5, 0x8, 0x81}, {0x3, 0x3, 0x3}]}, @enum64={0x3, 0x4, 0x0, 0x13, 0x1, 0x3, [{0xd, 0xfffffff8, 0x8e}, {0x2, 0x7, 0x10000}, {0x4, 0x5, 0x8}, {0x5, 0x1ab, 0xf4}]}]}, {0x0, [0x61]}}, &(0x7f0000000640)=""/75, 0xa3, 0x4b, 0x0, 0x8, 0x10000}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000740)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000780)='GPL\x00', 0x1a0, 0xa6, &(0x7f00000007c0)=""/166, 0x40f00, 0x5a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0xb, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)=[0x1], 0x0, 0x10, 0x6}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000740)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000780)='GPL\x00', 0x1a0, 0xa6, &(0x7f00000007c0)=""/166, 0x40f00, 0x5a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0xb, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)=[0x1], 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x10000}, 0xc) (async)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x10000}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pB    \x00'}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x4, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7ad}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0xd7, &(0x7f0000000480)=""/215, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f0000000700)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x4, &(0x7f0000000b80)=[r7, r8, r9], &(0x7f0000000bc0)=[{0x3, 0x5, 0x5}, {0x0, 0x3, 0xd}, {0x4, 0x3, 0x4, 0x4}, {0x2, 0x1, 0xf, 0x9}], 0x10, 0x2}, 0x94)
gettid() (async)
r11 = gettid()
perf_event_open(&(0x7f0000000cc0)={0x5, 0x80, 0x5, 0x6, 0x4, 0x6, 0x0, 0x8, 0x2103, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xfd5}, 0x1018, 0xa, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x100000000}, r11, 0x7, r3, 0x2) (async)
perf_event_open(&(0x7f0000000cc0)={0x5, 0x80, 0x5, 0x6, 0x4, 0x6, 0x0, 0x8, 0x2103, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xfd5}, 0x1018, 0xa, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x100000000}, r11, 0x7, r3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='fsi_master_aspeed_cfam_reset\x00', r10, 0x0, 0x40}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='fsi_master_aspeed_cfam_reset\x00', r10, 0x0, 0x40}, 0x18)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000dc0), 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r11, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e40)='%pS    \x00', <r13=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@fallback=r1, r12, 0x1c, 0x32, r6, @void, @void, @void, @value=r13}, 0x20)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xfffffff9, '\x00', 0x0, r5, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r14}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK    \x00'}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r12, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001040)=[0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f00000010c0)=[{}], 0x8, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000001180)}}, 0x10)
r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x699f, 0x0, 0x1, 0x4042, r9, 0x9, '\x00', r15, r16, 0x5, 0x2}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x699f, 0x0, 0x1, 0x4042, r9, 0x9, '\x00', r15, r16, 0x5, 0x2}, 0x50)
r17 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x48200, 0x0)
ioctl$TUNGETFILTER(r17, 0x801054db, &(0x7f0000001400)=""/110) (async)
ioctl$TUNGETFILTER(r17, 0x801054db, &(0x7f0000001400)=""/110)
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r18, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r19 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x4000, 0x0)
ioctl$TUNSETIFF(r19, 0x400454ca, &(0x7f0000001600)={'ip_vti0\x00', 0x400})

3m1.231946726s ago: executing program 1 (id=140):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}})
r2 = socket$kcm(0x10, 0x400000002, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x78, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex=r5, 0xffffffffffffffff, 0x1f, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(r3, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x1, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r7}, 0x10)
close(r8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401c5820, &(0x7f0000000040)=0x8000000000000000)
setsockopt$sock_attach_bpf(r6, 0x84, 0x23, &(0x7f0000000000), 0x8)
sendmsg$inet(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x5)
r10 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r10, 0x6, 0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071105100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

3m1.230208832s ago: executing program 0 (id=141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc00000103009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

3m1.131189814s ago: executing program 0 (id=142):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', r1, 0x4000, r0}, 0x18) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
close(r2) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async, rerun: 64)
ioctl$TUNGETVNETLE(r2, 0x80047456, &(0x7f0000001200)) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffea5, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x40059}, 0x24044054) (async)
r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5a, 0x0, 0x3, 0x10, 0x0, 0xd8, 0xa0000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfb, 0x6}, 0x100, 0x3, 0x8, 0x0, 0x40, 0x2, 0x3, 0x0, 0xad1a, 0x0, 0x7fffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='/dev/net/tun\x00')

3m1.047371282s ago: executing program 2 (id=143):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000006100)=""/4085, 0xff5}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000005100)=""/4077, 0xfed}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000500)=""/231, 0xe7}], 0xa}, 0x40002102) (async)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3m1.04661593s ago: executing program 0 (id=144):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000001000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000003400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x304)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400000008000000634f000000000000", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r4, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000))
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="00eb01001800000000000000250000002500000004001c0007000000d02e1c23370000001201000000060000400100000f0100000005000000090000000010000017000000005f6100"], &(0x7f0000000680)=""/218, 0x44, 0xda, 0x0, 0xcf, 0x10000}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x9, 0x2, 0x9, 0x42}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="000000a460f275a354d94baa3eaf0dbb79780000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xc000000, 0x87, &(0x7f0000000100)=""/135, 0x41000, 0x4b, '\x00', r5, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x88f7, r1, 0x0, &(0x7f0000000840)=[r2, r9, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94)

2m41.64880314s ago: executing program 32 (id=144):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000001000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000003400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x304)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400000008000000634f000000000000", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r4, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000))
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="00eb01001800000000000000250000002500000004001c0007000000d02e1c23370000001201000000060000400100000f0100000005000000090000000010000017000000005f6100"], &(0x7f0000000680)=""/218, 0x44, 0xda, 0x0, 0xcf, 0x10000}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x9, 0x2, 0x9, 0x42}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="000000a460f275a354d94baa3eaf0dbb79780000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xc000000, 0x87, &(0x7f0000000100)=""/135, 0x41000, 0x4b, '\x00', r5, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x88f7, r1, 0x0, &(0x7f0000000840)=[r2, r9, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94)

0s ago: executing program 33 (id=140):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}})
r2 = socket$kcm(0x10, 0x400000002, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x78, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex=r5, 0xffffffffffffffff, 0x1f, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(r3, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x1, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r7}, 0x10)
close(r8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401c5820, &(0x7f0000000040)=0x8000000000000000)
setsockopt$sock_attach_bpf(r6, 0x84, 0x23, &(0x7f0000000000), 0x8)
sendmsg$inet(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x5)
r10 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r10, 0x6, 0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071105100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49098' (ED25519) to the list of known hosts.
syzkaller login: [   66.090162][ T5836] cgroup: Unknown subsys name 'net'
[   66.238943][ T5836] cgroup: Unknown subsys name 'cpuset'
[   66.246151][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.465339][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   74.191239][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.195930][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.199805][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.205269][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.209194][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.320882][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.327856][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.331779][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.336754][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.340185][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.386708][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.390461][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.395997][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.404846][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.410025][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.643522][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   74.856371][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   74.862737][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.867691][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.871077][ T5846] bridge_slave_0: entered allmulticast mode
[   74.876943][ T5846] bridge_slave_0: entered promiscuous mode
[   74.905648][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.909137][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.912650][ T5846] bridge_slave_1: entered allmulticast mode
[   74.918889][ T5846] bridge_slave_1: entered promiscuous mode
[   75.000142][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.020616][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.025559][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   75.088690][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.092233][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.095903][ T5851] bridge_slave_0: entered allmulticast mode
[   75.100511][ T5851] bridge_slave_0: entered promiscuous mode
[   75.124831][ T5846] team0: Port device team_slave_0 added
[   75.129019][ T5846] team0: Port device team_slave_1 added
[   75.131678][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.135487][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.138910][ T5851] bridge_slave_1: entered allmulticast mode
[   75.143902][ T5851] bridge_slave_1: entered promiscuous mode
[   75.210679][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.236871][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.250370][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.253925][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.266230][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.323471][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.326752][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.339294][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.355947][ T5851] team0: Port device team_slave_0 added
[   75.360084][ T5851] team0: Port device team_slave_1 added
[   75.374662][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.377443][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.380136][ T5853] bridge_slave_0: entered allmulticast mode
[   75.384102][ T5853] bridge_slave_0: entered promiscuous mode
[   75.426591][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.429361][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.432052][ T5853] bridge_slave_1: entered allmulticast mode
[   75.436911][ T5853] bridge_slave_1: entered promiscuous mode
[   75.458776][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.461400][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.471338][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.476909][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.479535][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.489460][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.511846][ T5846] hsr_slave_0: entered promiscuous mode
[   75.518287][ T5846] hsr_slave_1: entered promiscuous mode
[   75.536426][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.542891][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.639751][ T5851] hsr_slave_0: entered promiscuous mode
[   75.642583][ T5851] hsr_slave_1: entered promiscuous mode
[   75.645518][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   75.647743][ T5851] Cannot create hsr debugfs directory
[   75.670259][ T5853] team0: Port device team_slave_0 added
[   75.676409][ T5853] team0: Port device team_slave_1 added
[   75.749644][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.753304][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.772706][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.805012][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.807736][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.818524][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.994127][ T5853] hsr_slave_0: entered promiscuous mode
[   75.997686][ T5853] hsr_slave_1: entered promiscuous mode
[   76.000206][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   76.002469][ T5853] Cannot create hsr debugfs directory
[   76.159513][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.192265][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.227152][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.243661][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.254715][ T5235] Bluetooth: hci0: command tx timeout
[   76.308470][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   76.325236][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.334371][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.370574][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.404494][ T5235] Bluetooth: hci1: command tx timeout
[   76.409593][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.416641][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.424804][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.436047][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.484233][ T5235] Bluetooth: hci2: command tx timeout
[   76.573769][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.624479][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   76.639726][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.648634][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.652794][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.653428][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   76.661158][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.664173][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.688520][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.692052][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.717607][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   76.728877][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   76.747672][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.751224][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.765218][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.768718][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.774833][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.778338][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.801276][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.804401][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.056726][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.130895][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.148813][ T5846] veth0_vlan: entered promiscuous mode
[   77.157961][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.169535][ T5846] veth1_vlan: entered promiscuous mode
[   77.237207][ T5846] veth0_macvtap: entered promiscuous mode
[   77.244697][ T5853] veth0_vlan: entered promiscuous mode
[   77.256337][ T5846] veth1_macvtap: entered promiscuous mode
[   77.269319][ T5851] veth0_vlan: entered promiscuous mode
[   77.274772][ T5853] veth1_vlan: entered promiscuous mode
[   77.295019][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.299946][ T5851] veth1_vlan: entered promiscuous mode
[   77.315242][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.337336][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.346737][ T5853] veth0_macvtap: entered promiscuous mode
[   77.352388][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.359537][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.376557][ T5853] veth1_macvtap: entered promiscuous mode
[   77.383251][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.419786][ T5851] veth0_macvtap: entered promiscuous mode
[   77.427997][ T5851] veth1_macvtap: entered promiscuous mode
[   77.452134][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.488723][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.495232][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.526861][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.532507][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.539920][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.544542][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.548130][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.565576][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.571517][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.590785][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.597793][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.641517][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.646842][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.674594][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.681275][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.744705][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.748426][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.762756][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.810821][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.826254][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.862052][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.866771][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.872186][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.876693][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.966466][ T5910] Zero length message leads to an empty skb
[   77.989853][ T5913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'.
[   78.060459][ T5918] syz.0.4 uses obsolete (PF_INET,SOCK_PACKET)
[   78.095197][ T5918] netlink: 'syz.0.4': attribute type 10 has an invalid length.
[   78.221230][ T5924] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   78.225910][ T5924] netlink: 'syz.2.6': attribute type 2 has an invalid length.
[   78.237567][ T5926] netlink: 792 bytes leftover after parsing attributes in process `syz.2.6'.
[   78.307529][ T5928] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.316853][ T5928] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.324458][ T5235] Bluetooth: hci0: command tx timeout
[   78.484702][ T5235] Bluetooth: hci1: command tx timeout
[   78.512011][ T5937] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.10'.
[   78.519337][ T5937] netlink: 'syz.1.10': attribute type 1 has an invalid length.
[   78.563176][ T5235] Bluetooth: hci2: command tx timeout
[   78.594530][    C1] hrtimer: interrupt took 71037 ns
[   79.059747][ T5969] sit0: entered allmulticast mode
[   79.151244][ T5975] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.17'.
[   79.987291][ T6036] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.22'.
[   80.403645][ T5235] Bluetooth: hci0: command tx timeout
[   80.563198][ T5235] Bluetooth: hci1: command tx timeout
[   80.643291][ T5235] Bluetooth: hci2: command tx timeout
[   81.019131][ T6048] netlink: 64 bytes leftover after parsing attributes in process `syz.1.25'.
[   81.138755][ T6054] netlink: 'syz.2.26': attribute type 29 has an invalid length.
[   81.144584][ T6054] netlink: 'syz.2.26': attribute type 29 has an invalid length.
[   81.149202][ T6054] netlink: 'syz.2.26': attribute type 29 has an invalid length.
[   81.424711][ T6058] netlink: 348 bytes leftover after parsing attributes in process `syz.2.28'.
[   81.438518][ T6058] netlink: 'syz.2.28': attribute type 41 has an invalid length.
[   81.441905][ T6058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28'.
[   81.620699][ T6067] netlink: 'syz.2.31': attribute type 16 has an invalid length.
[   81.624651][ T6067] netlink: 156 bytes leftover after parsing attributes in process `syz.2.31'.
[   81.884417][ T6071] netlink: 196 bytes leftover after parsing attributes in process `syz.2.33'.
[   82.483307][ T5235] Bluetooth: hci0: command tx timeout
[   82.645561][ T5235] Bluetooth: hci1: command tx timeout
[   82.742794][ T5235] Bluetooth: hci2: command tx timeout
[   82.770203][ T6090] C: renamed from team_slave_0 (while UP)
[   82.839560][ T5235] Bluetooth: hci0: ISO packet for unknown connection handle 2
[   82.940004][ T6090] netlink: 'syz.2.39': attribute type 3 has an invalid length.
[   82.956309][ T6090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   83.634763][ T6125] netlink: 'syz.1.47': attribute type 4 has an invalid length.
[   83.638295][ T6125] __nla_validate_parse: 6 callbacks suppressed
[   83.638305][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[   84.469857][ T6133] netlink: 763 bytes leftover after parsing attributes in process `syz.0.50'.
[   84.709283][  T792] cfg80211: failed to load regulatory.db
[   84.834279][ T6144] netlink: 'syz.0.53': attribute type 21 has an invalid length.
[   84.838054][ T6144] netlink: 156 bytes leftover after parsing attributes in process `syz.0.53'.
[   84.844749][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.54'.
[   84.911390][ T6155] netlink: 'syz.0.56': attribute type 10 has an invalid length.
[   84.978535][ T6158] netlink: 'syz.0.56': attribute type 10 has an invalid length.
[   85.082381][ T6158] team0: Device hsr_slave_0 failed to register rx_handler
[   85.088614][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.091993][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.099480][ T6167] IPv6: NLM_F_REPLACE set, but no existing node found!
[   85.106447][ T6161] bridge0: entered allmulticast mode
[   85.111714][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.114631][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.118009][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.120677][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.129261][ T6165] bridge0: entered promiscuous mode
[   86.169660][ T6181] netlink: 'syz.2.63': attribute type 29 has an invalid length.
[   86.172111][ T6183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.179697][ T6181] netlink: 'syz.2.63': attribute type 29 has an invalid length.
[   86.203652][ T6183] Illegal XDP return value 4294967274 on prog  (id 101) dev N/A, expect packet loss!
[   86.519582][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[   86.664090][ T6207] netlink: 'syz.1.70': attribute type 33 has an invalid length.
[   86.668225][ T6207] netlink: 152 bytes leftover after parsing attributes in process `syz.1.70'.
[   86.676691][ T6207] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   86.680506][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'.
[   86.687379][ T6207] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.70'.
[   86.862820][ T6213] netlink: 'syz.1.73': attribute type 10 has an invalid length.
[   86.877921][ T6213] geneve0: entered promiscuous mode
[   86.909856][ T6213] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   87.334875][ T6223] netlink: 'syz.1.75': attribute type 10 has an invalid length.
[   87.344951][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'.
[   87.371550][ T6223] team0: entered promiscuous mode
[   87.403794][ T6223] team_slave_0: entered promiscuous mode
[   87.406024][ T6223] team_slave_1: entered promiscuous mode
[   87.500176][ T6223] team0: entered allmulticast mode
[   87.522840][ T6223] team_slave_0: entered allmulticast mode
[   87.533407][ T6223] team_slave_1: entered allmulticast mode
[   87.542015][ T6223] bridge0: port 3(team0) entered blocking state
[   87.554857][ T6223] bridge0: port 3(team0) entered disabled state
[   87.574136][ T6223] bridge0: port 3(team0) entered blocking state
[   87.576943][ T6223] bridge0: port 3(team0) entered forwarding state
[   88.186942][ T6247] netlink: 152 bytes leftover after parsing attributes in process `syz.1.80'.
[   88.897973][ T6256] __nla_validate_parse: 3 callbacks suppressed
[   88.898091][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[   89.165776][ T6266] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.494437][ T6270] validate_nla: 3 callbacks suppressed
[   89.494470][ T6270] netlink: 'syz.1.88': attribute type 27 has an invalid length.
[   89.499593][ T6270] netlink: 164 bytes leftover after parsing attributes in process `syz.1.88'.
[   90.132156][ T6299] netlink: 'syz.1.95': attribute type 21 has an invalid length.
[   90.143809][ T6298] netlink: 'syz.1.95': attribute type 10 has an invalid length.
[   90.147052][ T6299] netlink: 'syz.1.95': attribute type 10 has an invalid length.
[   90.158175][ T6298] netlink: 55 bytes leftover after parsing attributes in process `syz.1.95'.
[   90.170567][ T6299] netlink: 55 bytes leftover after parsing attributes in process `syz.1.95'.
[   90.526308][ T6306] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   91.092131][ T6331] netlink: 'syz.0.105': attribute type 10 has an invalid length.
[   91.151586][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   91.327986][ T6340] netlink: 148 bytes leftover after parsing attributes in process `syz.0.108'.
[   91.476848][ T6342] netlink: 'syz.1.106': attribute type 21 has an invalid length.
[   91.506393][ T6342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.106'.
[   91.509752][ T6342] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   91.531889][ T6348] netlink: 'syz.0.110': attribute type 10 has an invalid length.
[   92.282064][ T6359] netlink: 'syz.1.114': attribute type 25 has an invalid length.
[   93.060582][ T6348] syz.0.110 (6348) used greatest stack depth: 18808 bytes left
[  100.428108][ T6390] netlink: 180 bytes leftover after parsing attributes in process `syz.1.123'.
[  100.519215][ T6379] delete_channel: no stack
[  100.572854][ T6397] netlink: 'syz.1.126': attribute type 1 has an invalid length.
[  100.576401][ T6397] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.126'.
[  100.582254][ T6397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.126'.
[  100.598981][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'.
[  101.200968][ T6413] netlink: 'syz.2.131': attribute type 21 has an invalid length.
[  101.355231][ T6416] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.132'.
[  101.684909][ T6432] netlink: 'syz.0.138': attribute type 12 has an invalid length.
[  101.703774][ T6432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.138'.
[  105.943015][    C1] sched: DL replenish lagged too much
[  106.311593][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2844402677 wd_nsec: 2844402914
[  139.152114][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  139.166816][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  203.831614][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  204.154804][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  204.341713][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  204.355493][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  263.164380][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  263.179288][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  284.816139][   T34] INFO: task kworker/1:2:792 blocked for more than 154 seconds.
[  284.819865][   T34]       Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0
[  290.507901][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  290.512329][   T34] task:kworker/1:2     state:D stack:24880 pid:792   tgid:792   ppid:2      task_flags:0x4208060 flags:0x00004000

VM DIAGNOSIS:
05:11:00  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8881061f8237 R9 =1ffff11020c3f046 R10=dffffc0000000000 R11=ffffffff854f01b0
R12=dffffc0000000000 R13=ffffffff99af9904 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f022c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb135a00218 CR3=00000000493e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffc900001dfe50 RCX=ab22574703416100 RDX=0000000000000001
RSI=ffffffff8dba5ff5 RDI=ffffffff89675358 RBP=ffffc900001dfe90 RSP=ffffc900001dfde8
R8 =ffffc9000075f9e8 R9 =0000000000000000 R10=ffffc900001dfe58 R11=fffff5200003bfcd
R12=ffff888104b00000 R13=0000000000000000 R14=dffffc0000000000 R15=1ffff9200003bfca
RIP=ffffffff8172bff6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555647ac5c8 CR3=000000010ef28000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ffff00 0000000000000000 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
