last executing test programs:

1m30.831410664s ago: executing program 2 (id=229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
close(r1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)

1m30.741374043s ago: executing program 2 (id=233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0))
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$TUNSETOWNER(r0, 0x400454cc, r2)
sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "49839e175cb64471"}, 0x10}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) (async)
sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "49839e175cb64471"}, 0x10}, 0x1, 0x0, 0x0, 0x24004000}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xf, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xf, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@delchain={0x5c, 0x65, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x1}, {0x4, 0xfff2}, {0x7, 0x3}}, [@f_tcindex={{0xc}, {0x2c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x22cf}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xc}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x3868}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x80)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f00000006c0)="41596798b18f0168ec3fca35093b09bc14b440073f0e513decefad231e9742ccc38860dceb2a4098ba12b1da7c6249d26dc107dbfafd9b1ae2a63ae768ea59d6e4cd358bad5559169a92ed0a01188b378763bc1e7bb54e598bdc724c0cbabf2f8b25df4584b5628ee1f3cc2545180777058193a1873ae3b7746d9435c8935876541b13f56be7737915482fa61bb305c2adc2510b0ac37a3f23c207b4a3a6ef223809e69b8abb5c1f3dbce67fcc", &(0x7f0000000780)=""/52, 0x4}, 0x20)
socketpair(0x21, 0x4, 0x58ba, &(0x7f0000000800)) (async)
socketpair(0x21, 0x4, 0x58ba, &(0x7f0000000800)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x1404, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}}, 0x4002)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3e8, 0x8, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) (async)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3e8, 0x8, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000a80)=r1) (async)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000a80)=r1)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000001dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000000b00)={0x1278, 0x14, 0x10, 0x70bd2b, 0x25dfdbfb, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "5b7e8a1a778fd0f8e004ea13ea53d7debe5005e1eaab3545b978dba52059c6c89025f0cb1ddfb7b3280ed0504f83335c81184273735f05d2bf7fd3779a5828ab7747c5e7f86eeadee2149d4339ae2654b3ca9bd204c70ef7e2e5d91a78a7682b25edd59210dc003185ad61c08c743c6610edd9b378ace72649ca7506d5929015ba6cd1ac54c7ab124ad238047a3fe5cb13b6e5805309ba87d1f500e1b23f68464d14f7fdc8092327ed24ef1d511495e4ff2a69964ea45fa2d1c1a97b2467b15e0b89749f10e940c36b72fcf20c5c0635a07bf7ba8aa96d5ca3baa54ed18c7b68b3be0a8be7f81495e378b3bef634da0084ec52187848c04394fbab3fce593d597a1d15770d35de8ddefed2b7ca055bbf96411915d5d4af0eb4c684b77057883ab40978924d1a80df05b3094bae51342844b6105a338abcf301c22efe1ab15878a813ad12dbf8721dfb73d5b8b8726de24ab7a63e84b7a015a70677ace5a03470a8c2b08e815df30c7b52befc80cf8dc5caf5d77a6305a80ce1b58578419016054822eeadf0487a02e2effe70f2624081eee91f0c0d4c7d26435b71eae1c3244bd40ac326408bba6c0063ed2111592a78be499c9bded40d5281975268ac77cb1b250113131688ae5fe1cf5a334f256ddd2778cfea0d364465d85055f90b14e75c3f34a4c1dd5867b182080a9be4aa188884b68978942d3ffe9d98df6e7df666cfdf6de59d617f8794e30f0787b9a5010aaf9d79b05e44c3de3dc4506f8f7480f872cc1760f450849c8ebc7f09bbd489b2a3b8b58def6f91645dfb15e5af5aba0d85f247e5a161d788f825dd8279c66a2581165c67b14514693b0f98eaf140ffc861d4d11dcd55af811a911a6200bc7ff2c1aea49b3ab7a2ad8457f7df5546981deabac0f45a1bb8d01ab106d5fc75ec971e8a96610df51b3981b66798c91a0db7c9b3d1187af72b5f3be19faa980817d71670ddc8ed4e839d52d97e65c87a85506694dcac78de069300e357dfdde9dddb09ffb58cbffdaff72957d630c6e03a284af82424b2b9498e381154d039f0dffa1225b4f8cb97e039a782eabcdb4df1659c7cb35182b7552c228cb6318213db65fa48043341c02158558d8b2cef6a030d93233c8a9a9e082e5039b75dcc96aa20746a87a10961ad2857340b5096363d3d70ae439d85040475dc11b90c1a895a3efad70bbf2d62a46c83a465acdcb620e443968d699c90d3f2680dc762ef4d00950a7ae9a6f27d6464479e488ab989f633fc3a40f2b5ba96a7608ea2a5318a6fddd4fa14f37f160fba9348b0208755ed95abcb9d72597f1316ad566e200a36fd576e6ff156cf1b0dd266b38e844bcc79c09ac6fe5e25e15bffef10d5fe35553f4f453d0e40b220ebe748855c996ff3ef25fdf7ada5d4390091e728c8c89206622812690431712fe08de9aafb36935d3bb405d54bf5848503e09d95a3fb1606c5b0af391792268f0ad6c375f562a84e2f00670e5c1abcef1f0328b0c0da515d482b85620d4ac1de04e17fa633c272b4f2e955182b64fa71132f3162cfeffbaebfc1f3f927d7cac402a10ebc7f370280593aace0746c3fb5f7877b8b2c1e51ddc0cf81bc47ecae5f6e11b7b87d57d66f45726221daddf7771af321c7a8045f433b9aebb1c73061471ff3a3767452ffeb98f4cf1bdfb654569e08df70cb29e7f17a6eab07324fb86ee94e26454160600aff5e2b3f8dbfac7f9c276480158f40cbbf3b6e3f613916c88edf56e6f02b44cd73290a0532695b6bf105994e5b590e5c8a0db09359ba9aef7382474ec191e3a0be2bdbe3817f289c8f1c6e8954943eaa355124e29e3943072355b91bfb6b769c562b448be68f702c230bba1b54d24c862938ff1c9a1c186be7495afee186bb8c869224aa87c0040a6c3df2d3766cb352af040f0911f6fbdaabbbb11b1fab3dec145c3da74ba98f1ff1242ec4ee024bdde65382b013b52c600d4c1406b71b8955eb54f2be46e18ab78ebe4a6e164aed8190b9dce9c3e43fa49f71272c173f3b9c81ac482e4e4c3466bcfc055c828fdb5a2a92cbdadb0d18f9c322ac451ca7e007d5bd043971cedf8b60515ceea731ad619f09d915e67f3c10e4e4c6ad0bcf1837ffbb75af3217f4ac6fee6ef98c21b6b3ab47241ff9b17f6a25844e496fe2aefbf135d84e06b339ae0621d9b56ecbc8e1f82d9acc39519b366ef6cffc0da061b86ad0182341c31a9e0612668f1a30c0b5ec9b6953cb98b05b146c9017b4c4c53bac2730adc16f5618fcce7122c7748d1db498fc29dcf8f0e49756e7ee0909caee06b4da5bff957cffba4850551735b1029cc4955539723999f6b599232797507ade4d62dfcad0a44c6436fdd5e10879d18171b7000908bf8f980d657e3188ffe06be5d2074ebd5653d3d1d3f71c13eefa5d74a66f0619113608cab8859484103494d6723f461ac20f813eadd8636e85a0d7577a4b25202e4d9c1709da457ea1f3d3022bb4f3def6560305ab6fb16a1353d1ea6d3cdf935e13a01265e24b8c0d4ea77a6303d54e081e7305f41a7357d328699d3d0a9ebe2122fc2c661a16cfd6c83f246d288ce6d1385dd376e58b4e6b20f3d910795c578ca87e5df956ba5ffe34dff6a19bbc2703a161aebbeb70c32050495dbb8a675c5fc99b441c32b4aa144c48907c7ea80494800106df3c8248b400402b977894429c9f5574634bc08dd2072ee04f7be4a99e5ca4b0d0eef5731d7ab3de69fcfbe33c8c95bf34df5c9c940064a51c3ec10d122ccc8be1dbeae4daaee47aefe4fe4998010f85ecf2a259ff02569b1bf2189538035b368ea788e062f688178686f5737bd05c964564f4edc471f4ca15c02db0d7bc0ce7861f2433ff31acb0ebee98338396c72b32c3aeed0694001919bc8914fa1a0fa66fe87127e738e173553e11ee48cb401f4a11c1535fa8e56ed6afd97d498273581a0e4cc33076d2193953a7c8f6b51c248182b4a3856adc688842915104fb97ec5786787012a97b03169a4d3c922925aff82ace1ebe128521abc13da10a65eb74fa8bfe7d8c0c79e35db5cf433a0376d102ecdce3001fd0584fd83caee1a3b2bb037e7c8143bea397341b149505b3c835c785b2baafcaa2e48b2a6c52fc395a07e2fc53eaba499860cff836b1f2aa82b37aeae5b5d3e062bfd5ee797a4952495fda0428545b9cc6ecf15464512e2eb8f559b63fd95b4043eaf751579abfdf075a6c266d6ebf46e2abca1ec9ec3f6fca7165b7a823136a167fb839acef8657679b224ed69ce76408a68920d59b4a02e5c82b046d815c7b0e54b39c58d4fdc90aedf8ae8047f436ff5fbafccf07cbe69a7d33608cedb60478fdcd2c329e1efabbc89433ecc7f7565549a567d6ef64a50efdcfa21285bfba24de07ebe9565b052e1aca6b81a14628afc32c497f5fc30791518f105ad545cc30e60be99ca17b98d6edb68e3a4804f3f8e1d2ac30c8576000ac12bedd7ab523b54433f1421736676183213748d30af8275d6ef287cb1c977d773a96a7683602da14de78fdca32f3b061effd3299b5130cf9386931151a9fc6adab9b91fb5b8a7d1667d5fe02aed3df88e34f295d530e1eade7f3349326559e3c39c8c3026e23ecfeea8b2cdb180bfbab4d509c82d2f8e50563b68345f095dc548ec5a8d69f3e002498a1b50d9ea6397470b3e4cf78e49395dba90fd3a45a604f52ed9b45b8e9001520e7aca7c4d7ce209d57938c1f63b464ec665fb534e625ee8b4220f25bf76f6f052e7cd00a734b7ee541caf9bda12e791c18d931229b25792c8bbee1492c96867205c7c8e13760ac5fdbd38b4b18e56a3ab3b2925798bd586f6b31bfb3e05c802364fd34c4ef4d57328a2ef0243126cbdf802dd4405c1759aeef5606e6901ad21eac939130070b770239143374b0e637caaebc37cea8c4b34ecce133b8866c5bd2751813b9cc5bca2b281cd5b9ff21b1317b6a04b67708a70e9609d827f5f3aad8534530cc815c80388db37d4b0784bbf6203d1e869bbf759532056f6334b8baf4dc30cd983af5b758b6190372662af179fcf3e43c569b922aaf8c4010bbce8ae73343cfb3abb5cc76bf5c5b8b9b94cb34ead4eb168e4933d8457ba7f736e36c9d9955e60c9c81483d62df0757649df88fdbc9c6d3f03c768352c22675ccf6e11575edd7fb2c891e27acd2b217498c5182420c92af7bb5930cecc98a90c315b2966d51d08d1260518b5b332916082a01e8f95361d9d3ec1cfa4510eeab480f2eb7c8d688da6f77e1c430909c2f9554461c9e0b5798c1589b875d0e59ffa597f121664f37d0a5967b418914e526b0673f07023d6f73b9786d8809a2d2f86f4454a27493a16b17fa2adf566a14d14e53619c5f1e61c84af89617dff5e980261c6233f3eb6f1237fdaf72c8cbbb826f2ef02425f24a6c5fe7a152eab1758eef7c92c777ffa1b71cde7fe1540ce04f2e69b57d1bc66a2451e8ef9539c1cb7f77997f5760c5edf71239968474c74d9fdc3c462321de457ce9f0100de5387e465789369a44e9676d0c64ac2a68223a0b0861d18a254892325b7cdb0bc3f28b9b185ead392ee9d06a7d9b52eb9f79e8ed44270218f62286b7b301ec94ab4e8e208678302f64ca5ed52551d15dc43fce90d9c12c4691f9f824ffe8a36c8311dac9c51cc74be366ec8ff86db8765be95971e40fd2a5d3f9a6d08efd05e67349c8c682318aa30437025ec010abf8b7fac7031f3b24d5d049d4fd8271a919355d50a5eb21710d30f14e68d3c1fbd02b136a9a665ee710ef2bb918d6ea4b7b53fb8441eeca00653c38ab17c72913c96fbf6b74afa1ae0e327bb518c0c3ec16eb2d34d642d84108c24c93eb80d2207c48b70dd20333909f947f4c89b787cfc88ae32b825797302354ef767f72a049c626e9abe4704802328e2925bd099e8f5bb7a832f6da934805cef4fb3ee728f29a681e7d2630e493970d1a005eb3b173986647701ed1b1c59b6ddc2f2239fb3e4f73b3a5f3be7f080bf92b9d4e119bd52420ebb49a86bbd7a23469f525ae1d0f503f35292455179e0958761668448c79a540e6791c8797a63ff6a487b931df8861199c5fd0f0831a84f66611d54add0bf108a6a50f134df3ecab582343746336d9aad28ce6f9323d0f19888a10c16f4959de85120f32587f4d6027fc5fae522bd490382235a92dd202a3abac659035b11d6c41b8dbb9044422a1d3e7cd13eaa2438000fe8229a475a1272414dde417ea0072323733ef6566848b0491838666f9989445659ab048bc55169f5bd56713f233789b779b61020f793230e0419c8980e36898f761608f1064cb38194d26d7be2c5c339df5c0af3bf45dfb1212984935e860b4e64d5a17d4e679b359181249092388f2f9fc7cf4194df46099a9b3bec63d465bf6bdfc5846fdebc69b50a18929d342cbd141820350cdf328e093039677191f28d4be4489b09c627c5b3aba1e7434b0a8bde54920b37f4e553c36271c3bd030d7367fd1409484e6a47d232b18d0b9eb859b5202c07d21760617837e7ae5a54337f7f71f04fd534707f88a5cb3399f1d58ffa56734d1d63aa50a6c763b2d68173345d717ddd9146b75d1693ebc04d8a0d1a5eaa49bb2a692758ce89fdfe81513dccc9d91d67656af451c686dd1e14c9419875465b0adf88ec2b623fe7bdd61f2e410263c0f1141f5e849a105899f6c109d6f3939a198d2b15f249920465306e36906a128504fd073a984c99a6812c0cb8b373ee58b3b29d5f033cbb85b102f0c33d76a447e27a8761a1ea248421a7de57852d150455d"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "942492f2c0f10226169a5ee8f4879444772fdd609047a57009251d79919f9436f96de8e7559c7c65512cacabeba44ed2fc405bbbe471bc3ba8e2c8eddbc92b413b680fef14a9f169a1cad6988d6e5b0ff81f268bbc547e8fc544f4f7cec0296ae515533c7d29ef2981b8c83d4b7b554a812c360ebd4359240a"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "cc7496afaa2db79e1ce2abcb2e1d864e57e839c69b26ecfff61123d77daca4caba99a67285b64e308237b350a43a274658b09849a3aac0c92b8031b214dcb55c8ca8cc206c0e"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "f7c63d08b10a46c5391b9cf5078fd4dbd4052d0a2f9300a7053125e786a1e052c831c59bdfaa8f88cb83cf386c54f85ad8565cbb2cc9268316dcd9b26160aa294e0a342a5a37c181c68fb5b1b1610af85afa0620de7a5f8f9247dda2bd45f09ed1d2a9b1de3f1cf6dbe05218717e9e200d4495580c983a87b6b2a26e1582a6ce8e892c6bb56a0eabdbc0562cf5ba6ebdff792072f286113e4f5f7b98083f62a67153087b48df19c5fbf9637210dd01061d7981a27185515d0d453d149ab88fb0"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "2d8135467fba5f9a0422d145a004c83d8e7cfe921e0b03f4646bde7537017ef438c4ca845cb665530eedf5aea79e828619b07de982d7a605949d28e646f31991816df112f9c4348f55d53584aedce7992059a206b92ecc7de58420f16d9adc11e094c08d868b98349a6f147f55c416bc0c816ddbaa0c477e95ee4221f86244cb35362085161354f9335b8972a45570ae3ea5eacd31de0201317ea2de"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "1bc986c32df86ec68f059e610dee6f2929b24a97979827143b2ce7dd9b26161fff0883f2b3739798b5920d"}]}, 0x1278}, 0x1, 0x0, 0x0, 0x4}, 0x20000800)
gettid() (async)
r6 = gettid()
perf_event_open(&(0x7f0000001e00)={0x4, 0x80, 0x7, 0x3, 0x7, 0x5, 0x0, 0x8, 0xb0824, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x1000, 0x3}, 0x10080, 0xfffffffffffffafc, 0x6, 0x8, 0x8, 0x5, 0x7ff, 0x0, 0x0, 0x0, 0x7}, r6, 0x1, r1, 0x8) (async)
perf_event_open(&(0x7f0000001e00)={0x4, 0x80, 0x7, 0x3, 0x7, 0x5, 0x0, 0x8, 0xb0824, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x1000, 0x3}, 0x10080, 0xfffffffffffffafc, 0x6, 0x8, 0x8, 0x5, 0x7ff, 0x0, 0x0, 0x0, 0x7}, r6, 0x1, r1, 0x8)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2c000400}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x40}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8014)
sendmsg$AUDIT_GET(r1, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x10, 0x3e8, 0x800, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x844)
openat$cgroup_procs(r1, &(0x7f0000002180)='cgroup.threads\x00', 0x2, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100100080}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x7c, 0x1e, 0x20, 0x70bd2a, 0x25dfdbff, {0xe}, [@generic="ac81d76783503b91a48229f57e0ab68cc3b4199e48877b68698ceb8e95c63d269b7bfa8d6540c94b11bb2d91ac662a4a2d9ee7053ccc7e3c0acf06afa699b1daebd39e9fe4899326cc53fa6e5753164ff93b078db8755ad10d714ed47504d650", @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x80) (async)
sendmsg$nl_generic(r1, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100100080}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x7c, 0x1e, 0x20, 0x70bd2a, 0x25dfdbff, {0xe}, [@generic="ac81d76783503b91a48229f57e0ab68cc3b4199e48877b68698ceb8e95c63d269b7bfa8d6540c94b11bb2d91ac662a4a2d9ee7053ccc7e3c0acf06afa699b1daebd39e9fe4899326cc53fa6e5753164ff93b078db8755ad10d714ed47504d650", @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x80)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000002800)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002340)=@newtclass={0x470, 0x28, 0x0, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x5}, {0x10}, {0x3, 0x5}}, [@c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x48, 0x1, 0x38, 0x8, 0x6}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x0, 0x4, 0x2, 0x6, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0xf4, 0x8001, 0x2, 0x0, 0xffffffb1, 0x673, 0xb, 0xfa2, 0x8, 0x1, 0x4, 0xbbf, 0x7, 0x86, 0x311, 0x8, 0xb, 0x2, 0xfffffffa, 0x3, 0x8, 0x800, 0x0, 0xfffffffc, 0x8, 0x4, 0x7, 0x8, 0x527, 0xb05, 0xfffffff9, 0x8001, 0x1, 0x8000, 0x8, 0x9, 0x2, 0xf60, 0x1f0, 0x9, 0x2, 0x8, 0x452, 0x5, 0xec5, 0x1, 0x1, 0xb, 0x3, 0x7, 0x0, 0xf, 0x4, 0x8001, 0xe, 0x5, 0x400, 0x9, 0x1, 0x400, 0x2a36deda, 0x2, 0x2, 0x8, 0x3, 0x1, 0xfffffffd, 0x5, 0x6, 0xee, 0x0, 0x2, 0x4e, 0x90e0, 0xe335, 0x800, 0x6, 0x8, 0x7fff, 0x1000, 0x7, 0x6, 0x8000, 0xff, 0x1, 0xfffffff1, 0x8, 0x6, 0x85, 0x800, 0x5, 0x7, 0xfffffffb, 0x2, 0xff, 0x2, 0x2, 0xb70, 0x7, 0x4, 0x729c, 0x3ff, 0x200000, 0x1000, 0x9, 0x5, 0x6, 0x4, 0x2, 0x200, 0x7, 0xc651, 0x4, 0x311e, 0x84, 0x2, 0xe, 0x7fff, 0x5, 0x1, 0x2f, 0x2, 0xc4e6, 0x497, 0x0, 0x2, 0x1, 0x7, 0x8, 0x8, 0x4, 0x9, 0xc720, 0x0, 0x9, 0x10, 0x1, 0x6, 0x800, 0xe6, 0x0, 0x0, 0x8, 0xd, 0x81, 0x503, 0x6, 0x6, 0x64, 0x8, 0x81, 0x80000000, 0x7fff, 0x1f5d, 0x5, 0x7fff, 0x87b, 0x0, 0xd, 0x1fe2, 0x1, 0x80000001, 0x7, 0x401, 0x0, 0x800, 0x4, 0xf, 0x2, 0x2, 0xc, 0x2, 0x2, 0x100, 0x7, 0x401, 0x4, 0x322c, 0x808, 0x3, 0xfffffff8, 0x0, 0x1, 0xd, 0x1, 0x7, 0xa6f5, 0x200, 0x3, 0x0, 0x4, 0x8, 0x1, 0x2, 0x40, 0x6, 0x1, 0x0, 0xf, 0x8, 0x2, 0x2, 0x401, 0x8, 0x7, 0x4, 0x80000001, 0x8, 0x1, 0xb, 0xd, 0xffff, 0xa, 0x8, 0x4, 0x10, 0x1, 0xfffffffb, 0x7a6788c8, 0x0, 0x1, 0x5, 0x2, 0xff, 0xa19, 0x5, 0x5, 0x6, 0x0, 0x0, 0x10001, 0x4, 0x6, 0x2, 0x0, 0x7, 0x100, 0x269, 0xe32d, 0x1, 0x7, 0xfffffffd, 0x4, 0xda5d, 0x6, 0xfff, 0x8, 0x2, 0x9, 0xec, 0x6, 0x9d, 0x3, 0x8037, 0xfffffff8]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x404c050}, 0x40800)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000002840)={<r7=>r5})
sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x34, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2f7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040008)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000002980))
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002b80)={r1, &(0x7f00000029c0)="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", &(0x7f0000002ac0)=""/154, 0x4}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002bc0))

1m30.610208565s ago: executing program 2 (id=234):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000001300000000000013000071105100000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

1m30.608023167s ago: executing program 2 (id=235):
socket$kcm(0x29, 0x8, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
r0 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xbf66, 0xf17b3fa26293868b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000600)}, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872460dba78b)
socket$kcm(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x41, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310)

1m29.768821042s ago: executing program 2 (id=243):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000001300000000000013000071105100000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

1m29.453286066s ago: executing program 2 (id=244):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000070000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000eaffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000059000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m14.448453479s ago: executing program 32 (id=244):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000070000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000eaffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000059000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.780157232s ago: executing program 3 (id=860):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2040)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971b"], 0x9a)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r4})

2.601351359s ago: executing program 3 (id=864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0x9f}, {&(0x7f0000000940)=""/220, 0xdc}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x1, 0x5, 0x3, 0x8, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcaa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x9b}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x1, 0x200, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x4, 0x5, 0x5, 0x9}, {0x3, 0x3, 0x0, 0xd}, {0x4, 0x1, 0x1, 0x2}, {0x3, 0x3, 0x8, 0x8}, {0x1, 0x1, 0x9, 0xc}], 0x10, 0x8}, 0x94) (async, rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000095000000000000008f5df2daa18b963b98d33eca868e3a546f628330291c205b2f2c8c26860d5390e463ede3430fda0a22ed589981cd9711fa024f276acfe9e8d04abe3c5014ca7db02c107661aee86c0d2d8780b1cdbf19f43b74cb2f9bb654139cfaf79ea43c6259b292bb52e042ef39"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000020605000000000000000000000000000c0007800800080000000000050f05000200000005000400000000000900020073797a3100000000"], 0x3c}}, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r4, 0x25, 0x4, @void}, 0x10) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
r7 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r7, 0x8919, 0x0) (async, rerun: 32)
r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.564158157s ago: executing program 3 (id=866):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000140081044ea1f782db44b904022008f130000000040000a118000200e014000e00000e1208000f0100030000000016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dbe5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e7ae4001b146222fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00d95667e0060000000000000080ca9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ff070dd68adb000000000000000000000083ea32baf4ef367516", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r3, 0x0, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000540), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0x1, 0x58, &(0x7f0000000ac0)}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2a, 0x3, 0x10, &(0x7f00000002c0))
close(r1)
openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095002000eca90000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)

1.610840941s ago: executing program 0 (id=871):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x80000001, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3c) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1946}, 0x801, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x4828, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
socket$kcm(0xa, 0x5, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x200000d4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x18}]}, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500), 0x4)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

1.608972402s ago: executing program 3 (id=872):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x99}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000270000001801000020786c2500000000002013207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', r1}, 0x94)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
r5 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x3, 0xffff}, {0xc, 0x5}, {0x9, 0x3}, {0x9, 0x200}, {0xd, 0x2}, {0x4, 0x7}, {0x41c8, 0x8}]}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x8}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x36, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x61, 0x5f, 0x61, 0x0]}}, &(0x7f0000000840)=""/1, 0xdf, 0x1, 0x0, 0x9}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x23, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb741}, [@generic={0x7a, 0x8, 0x6, 0x6, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x70000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f00000006c0)='GPL\x00', 0x192, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x1197, 0x400}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000a80)=[{0x4, 0x2, 0x6, 0xa}, {0x0, 0x3, 0x4, 0x8}, {0x0, 0x2, 0x8, 0x5}, {0x0, 0x2, 0x3, 0x2}, {0x2, 0x1, 0xa, 0xc}, {0x4, 0x2, 0xe, 0xc}, {0x1, 0x4, 0x7, 0xb}, {0x1, 0x3, 0x3, 0x4}, {0x1, 0x5, 0x2, 0xc}, {0x5, 0x3, 0x4}], 0x10, 0x5}, 0x94)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1401, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xd8}, 0x40010)
r9 = socket$kcm(0x2, 0x922000000001, 0x106)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x25, &(0x7f00000002c0)=r10, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x7fe, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r13}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24004840)

1.332782906s ago: executing program 0 (id=875):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140800000000000324fc60", 0xb}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\\/S[\x00'}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xff80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x81}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}, @IPSET_ATTR_ETHER={0xa}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x3a3254dc95e317eb}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r1 = socket$kcm(0x11, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000)=r3, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={0x0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x10000, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xc, 0x4}, 0x11efa, 0x4, 0x7, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0)

1.0610552s ago: executing program 0 (id=878):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xb6, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x3, 0x18}, 0xc)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x10, r0}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps    \x00'}, 0x20)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x3a, &(0x7f0000000180)=""/58, 0x0, 0x60, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000880)=[r5, r6, r7, r8, r9, r10, r11], &(0x7f00000008c0)=[{0x4, 0x1, 0xb, 0x3}, {0x0, 0x4, 0xc, 0x3}, {0x1, 0x5, 0x0, 0x3}, {0x2, 0x5, 0x9, 0x5}, {0x2, 0x5, 0x5, 0x5}, {0x3, 0x5, 0x5, 0x2}, {0x2, 0x5, 0x4, 0x2}, {0x5, 0x5, 0x2, 0x2}], 0x10, 0xc}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@map=<r13=>r10, 0x24, 0x1, 0x8001, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r14=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@ifindex=r3, r6, 0x25, 0x2e, r6, @void, @void, @void, @value=r2, r14}, 0x20)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000b80)={'veth0_to_hsr\x00', 0x1})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={<r15=>r6})
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x9, 0x26dbc4ee, 0x0, 0x40000, r13, 0x50, '\x00', r3, r6, 0x3, 0x3, 0x4}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x3, '\x00', 0x0, r6, 0x4, 0x3, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={r11, <r16=>0xffffffffffffffff}, 0x4)
close(r16)
r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10}, 0x18)
openat$cgroup_subtree(r6, &(0x7f0000000f00), 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r17, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001100)}}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000001580)={&(0x7f0000000f40), 0xc, &(0x7f0000001540)={&(0x7f0000001280)=@delqdisc={0x28c, 0x25, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r18, {0xf, 0xb}, {0x9, 0x6}, {0xfff2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xbc}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xa3, 0x1, 0x49, 0x1, 0x5, 0x7fff, 0x7}}, {0x12, 0x2, [0x6, 0x5, 0x6, 0x7056, 0x1200, 0x2, 0x396f]}}, {{0x1c, 0x1, {0x4, 0x1, 0x3, 0x8, 0x0, 0xf33, 0x4a, 0x9}}, {0x16, 0x2, [0xb, 0x5, 0x2, 0x0, 0x81, 0x8, 0x8000, 0x7, 0xfff]}}, {{0x1c, 0x1, {0x3, 0x0, 0x40, 0x80000001, 0x0, 0x5, 0x9, 0x6}}, {0x10, 0x2, [0x6, 0x1, 0x2, 0x2, 0x8, 0x7]}}, {{0x1c, 0x1, {0x3, 0x4, 0xffff, 0xfff, 0x0, 0x0, 0x6, 0x8}}, {0x14, 0x2, [0x9, 0x0, 0x6, 0x1, 0xef6, 0x3, 0x0, 0xf68]}}, {{0x1c, 0x1, {0x4, 0x16, 0x1, 0x9, 0x0, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0x7f, 0x2, 0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xa7, 0x200, 0x38, 0x1, 0x3, 0xf6, 0x4}}, {0xc, 0x2, [0xa7, 0xcd, 0x7, 0x6380]}}, {{0x1c, 0x1, {0x7c, 0x8, 0x0, 0x0, 0x0, 0xfda, 0x6, 0x3}}, {0xa, 0x2, [0x8001, 0x8, 0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0x7, 0x2, 0x2, 0x6, 0xa, 0x3}}, {0xa, 0x2, [0x1, 0xa90, 0x6]}}, {{0x1c, 0x1, {0xa4, 0x0, 0x5, 0x101, 0x1, 0x6, 0xebc, 0x2}}, {0x8, 0x2, [0x8, 0xffff]}}, {{0x1c, 0x1, {0x9, 0x1, 0x1876, 0x5, 0x1, 0xffffffe0, 0x2, 0x8}}, {0x14, 0x2, [0x2, 0x5, 0x7, 0xf548, 0x8, 0x9, 0x3, 0x7]}}, {{0x1c, 0x1, {0x80, 0x0, 0x3, 0xfffffffa, 0x2, 0x80, 0x5, 0x5}}, {0xe, 0x2, [0x0, 0x200, 0x1, 0x15, 0x2]}}, {{0x1c, 0x1, {0x5, 0x1, 0xead, 0x137, 0x2, 0x5, 0x1, 0x6}}, {0x10, 0x2, [0x7, 0xffff, 0xd, 0x0, 0xe, 0xfffc]}}, {{0x1c, 0x1, {0x6, 0x0, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x4, 0x7, 0xc6, 0x1, 0x5, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x24008810}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r13, 0xfff, '\x00', r3, r15, 0x4, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r17, <r19=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)=r12}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001840)={r19, &(0x7f0000001700)="1cf570642073e25113c617d1db08bba1e085e721c9e882f7f864054cee2074dffe7b4817be838eb6c06f6692fcd67c5655c3aceba0ea9e439cafe06c13d10ea10e1206cc273b", &(0x7f0000001780)=""/131}, 0x20)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001980)={@cgroup, 0x12, 0x1, 0x5, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000018c0)=[0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0]}, 0x40)

1.059971679s ago: executing program 0 (id=879):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000840))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x18, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001180)=""/4096, 0x41100, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000900)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002180)={0x2, 0x9, 0x5, 0xfffffff8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000021c0)=[r0, r0, r8, r0, r0], &(0x7f0000002200)=[{0x2, 0x4, 0x3, 0x1}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x2, 0x8, 0xc}, {0x5, 0x3, 0x3, 0x5}], 0x10, 0x7}, 0x94)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x9, 0x7, 0x4, 0x800c, 0xffffffffffffffff, 0x1, '\x00', r10, r9, 0x0, 0x2, 0x3, 0x0, @value=r9}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000002300)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
close(r11)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xd}, 0x94)

972.873447ms ago: executing program 1 (id=880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="ff00000000037c00000c00018008000600ffefffff120002810c0001002a0aa32f9d5c778dbd2d0000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

912.602978ms ago: executing program 1 (id=881):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0080002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2044004)

911.999973ms ago: executing program 1 (id=882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

669.290026ms ago: executing program 1 (id=883):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018250000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000002c0)=""/203, 0x41000, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, r1, r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00'], 0xfe33)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

441.225017ms ago: executing program 3 (id=884):
socket$kcm(0xa, 0x5, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000009ffffffffffffffff000000050000000400000010000000006161613000"], &(0x7f0000000280)=""/238, 0x36, 0xee, 0x1, 0x2}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00004204000000000000000000130eeaea00000042746f009cec5570f532686266a29c824fc68466af066dbad1c61fa05f159abd556d6d790eb38e73025486a2205db188012de5c1f045383ea2984d95ef80bd6c937d4ade45a756f0184b40d153e19b373e8cc6fb6e2ec3ae5ad08949a769cd36adc2f5149a8c136599beea0b9b7a22ede9c7ee0e90df48a701d0e72c4006723c2b3b3b004c324415292d", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x7fffffff, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$kcm(0x28, 0x5, 0x0)
sendmsg$kcm(r3, 0x0, 0x40000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002d00092f27bd700000"], 0x1c}}, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
recvmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2)

284.781167ms ago: executing program 1 (id=885):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x48094)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0xffffffffffffffff)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf262, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
close(r0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000005500000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94)

284.203277ms ago: executing program 3 (id=886):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
socket$kcm(0x2, 0x1, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, &(0x7f0000000900)='\xe5\xee\x91\xd4\xdc~\x82]0\x9e\x9e\xae0\xfa\x94q\x0eY\x1f\xfa%zu\xf9\xb6\xb4n\x13\xa0G/k5t\xb6{\xa8\xb2\xf3}\xdb\xd7j?\x95\x8dj\xf5|YZ\x1b\xa9\x89$@k\xbe\x14\xf8&\x8d\x98F\xbb\x92\f\xdc\x1dv\x83\x06\x14\xf6\xb5g$\xc4\xcc\xcd6\x83&Y\x9d\xb5S\x19\x83\x1e\xe7dt\xbf\x11\xedu&t\x1f\x84TO\x98jv\xb3?\xec\x10\xf8\xca-\x92\xf2\xe1\xae\xb6O^\xb2s\xa4\x1b$\x06{\xfa\xf32p\xa6\x01\x8a,J\xdb\xf4X\x14.\x8dl\x9c\xaa9\xfd\xe5^\xa3G\x1e\xa9\x8e\xcf\xb2X\xe4\xb4(\xf4T\x92\xc2\x9c\xa36-\xe0\x11>\xa2\x9b\'\xf1~\x18\xc9W\xd14\xd9\xee1Q\xd5m\"\xae\x9c\xd0\xaaB3\x91\x14PK`6\xed\x99j\xae\xc0\x10\n\x80\xa6\x96m\x0ecP\x13>\x8e\x04\x14\xf5\xe3=)\x16/\xe5\xe4\xa4+\x1e\xef\xf3O\xab\x04\xe0os\xd4Xj\xdc\'\xb7,\x1a\xb4\xb9\xf3\xd0\xcbE\x86D\xc8\t\x1d\xeaE;\x84\xb4\x81U\xbfo\x15\xea\x04\x04\xed\xaeS\xbe\xfe[\xce/p\x83\xc2F }B\xd2\xbd\xd7\xc0\x004\xc7\xe4Y\x8f\xf9\x99r\xcaU\x00[\xc5\x03\xdc\xe3\xab\xc1\xc0\xfb\x10Z\xb1\xdb\xe9v\x9e\f)\xe0\x8e\xd2\xb2\xf0\x81\xbc\xfb1[A\xf1{\xcck\xc5k\xcf\x91A\xd2,:\xa8\r\xb2\xeb\xa0\x84y\x7f\xc3\xe0\xe0 \xec\xf2\x18rc\xae1s\xf0h\xa8\xaa\xe6O\xe4\x0f\xbd%\x1c\xfb\x95\x15\xb2\vP\x06\xc3%+\xc7X\xf7\x99\xd8l\x1d>y\xdb\x11\xad')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x5460, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

82.335692ms ago: executing program 0 (id=887):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xd, 0x19, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000500000000000000e4ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802007a607ea2a4c8f0ee0095000000000000005ccf1083d8faf77c233bdc7e80f44bd1ad4248de91121fb7f6fd"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0xfd, 0x8, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xc, 0x3}, 0x11efa, 0x8, 0x94, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x5f8b}, r2, 0x0, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1]}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000003c0)}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x1b, &(0x7f00000001c0)=r7, 0xa1)

2.508112ms ago: executing program 0 (id=888):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000240)=0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, 0x0, 0x101c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcf}]}, 0x0, 0x73e, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="021becff0479f5ad019e0f3df308001680000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000030000701fefffffffcffffff107c000004000180bff2b354125e32a1761cbef1b5471232810b45d222d88e46f3b631dd3aa8ba374f76f0daa07b95b68665316749392c15719b5f41d41b1dd1d598b2c74f08ce6dba3012ef10e4012ba6b1442954e684a4a546eac80654dbe0d6d748f9f95ebeb322dc49606121d9dea9b5ca0a24db08e98c440ab71a99718f25d89eb99b83270577e8ca70a2f71dc9102f5a825b7b360f56f3d6c8fcb70883276df191ee33c65ca885b70cb18d8a0d3516e843975d436b59c4369a947c90c5d346391ac1ae94a23594360f400f188c85ebec75dab9bfa44e6a2ea6953c0ecc0304264e0af821cd018938f69b5a51cbf8e2fcfd86c03fea211a"], 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'wlan1\x00', 0x100})
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

0s ago: executing program 1 (id=889):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000001300000000000013000071106100000000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47629' (ED25519) to the list of known hosts.
syzkaller login: [   57.151489][ T5832] cgroup: Unknown subsys name 'net'
[   57.318259][ T5832] cgroup: Unknown subsys name 'cpuset'
[   57.324121][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.650904][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.232494][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.254797][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.257390][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.260380][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.262713][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.266755][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.270057][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.272857][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.275879][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.278911][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.283478][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.286632][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.293477][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.303169][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.306465][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.542580][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.642900][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.750356][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.757811][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.761512][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.766369][ T5847] bridge_slave_0: entered allmulticast mode
[   64.770313][ T5847] bridge_slave_0: entered promiscuous mode
[   64.799731][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.802408][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.805908][ T5847] bridge_slave_1: entered allmulticast mode
[   64.808871][ T5847] bridge_slave_1: entered promiscuous mode
[   64.854049][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.885397][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.925913][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.928276][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.930706][ T5851] bridge_slave_0: entered allmulticast mode
[   64.934707][ T5851] bridge_slave_0: entered promiscuous mode
[   64.970020][ T5847] team0: Port device team_slave_0 added
[   64.972792][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.977020][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.980045][ T5851] bridge_slave_1: entered allmulticast mode
[   64.984476][ T5851] bridge_slave_1: entered promiscuous mode
[   64.988110][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.991089][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.994924][ T5855] bridge_slave_0: entered allmulticast mode
[   64.998933][ T5855] bridge_slave_0: entered promiscuous mode
[   65.006565][ T5847] team0: Port device team_slave_1 added
[   65.038311][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.041074][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.044294][ T5855] bridge_slave_1: entered allmulticast mode
[   65.047970][ T5855] bridge_slave_1: entered promiscuous mode
[   65.110698][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.115965][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.119177][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.129339][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.137898][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.145649][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.149901][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.152573][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.163465][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.170141][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.237917][ T5851] team0: Port device team_slave_0 added
[   65.244109][ T5851] team0: Port device team_slave_1 added
[   65.248435][ T5855] team0: Port device team_slave_0 added
[   65.253618][ T5855] team0: Port device team_slave_1 added
[   65.305204][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.307434][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.316033][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.332582][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.334995][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.342831][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.349684][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.352519][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.363046][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.370133][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.372945][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.383501][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.400515][ T5847] hsr_slave_0: entered promiscuous mode
[   65.404710][ T5847] hsr_slave_1: entered promiscuous mode
[   65.497700][ T5855] hsr_slave_0: entered promiscuous mode
[   65.500043][ T5855] hsr_slave_1: entered promiscuous mode
[   65.502202][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.504624][ T5855] Cannot create hsr debugfs directory
[   65.512299][ T5851] hsr_slave_0: entered promiscuous mode
[   65.515766][ T5851] hsr_slave_1: entered promiscuous mode
[   65.518730][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.521127][ T5851] Cannot create hsr debugfs directory
[   65.805136][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.813121][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.819238][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.835663][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.882561][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.890508][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.902042][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.919473][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.967805][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.979188][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.986609][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.992897][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.063078][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.090876][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.112916][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.116171][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.124396][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.127392][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.146157][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.200305][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.212647][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.226649][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.228907][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.232911][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.235429][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.265202][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.275504][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.277935][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.296410][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.299685][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.306876][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.309144][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.318030][ T5857] Bluetooth: hci0: command tx timeout
[   66.320275][ T5857] Bluetooth: hci1: command tx timeout
[   66.394819][ T5238] Bluetooth: hci2: command tx timeout
[   66.449877][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.515541][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.554336][ T5847] veth0_vlan: entered promiscuous mode
[   66.576572][ T5847] veth1_vlan: entered promiscuous mode
[   66.590893][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.632126][ T5855] veth0_vlan: entered promiscuous mode
[   66.651297][ T5855] veth1_vlan: entered promiscuous mode
[   66.682552][ T5851] veth0_vlan: entered promiscuous mode
[   66.689032][ T5847] veth0_macvtap: entered promiscuous mode
[   66.706304][ T5847] veth1_macvtap: entered promiscuous mode
[   66.722824][ T5851] veth1_vlan: entered promiscuous mode
[   66.738355][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.749585][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.759602][ T5855] veth0_macvtap: entered promiscuous mode
[   66.768415][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.779626][ T5855] veth1_macvtap: entered promiscuous mode
[   66.784147][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.788291][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.791132][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.822126][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.828815][ T5851] veth0_macvtap: entered promiscuous mode
[   66.848998][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.861245][ T5851] veth1_macvtap: entered promiscuous mode
[   66.901509][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.908263][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.914200][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.917499][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.918581][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.930974][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.936344][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.942464][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.968580][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.980449][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.986755][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.990824][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.991342][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.006238][ T5914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.080735][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.089352][  T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.092603][  T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.133887][  T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.143975][  T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.177755][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.181058][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.198211][ T5919] netlink: 'syz.2.3': attribute type 21 has an invalid length.
[   67.212394][ T5919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.220550][ T5919] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   67.234043][  T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.236725][  T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.683347][    C1] hrtimer: interrupt took 57723 ns
[   68.396155][ T5238] Bluetooth: hci1: command tx timeout
[   68.397991][ T5238] Bluetooth: hci0: command tx timeout
[   68.474626][ T5857] Bluetooth: hci2: command tx timeout
[   68.520931][ T5951] Zero length message leads to an empty skb
[   68.568075][ T5949] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   68.571451][ T5949] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9'.
[   68.879723][ T5964] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.885588][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'.
[   68.896948][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'.
[   68.901103][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'.
[   68.914752][ T5960] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET)
[   69.111591][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.236284][ T5971] netlink: 'syz.0.16': attribute type 10 has an invalid length.
[   69.239428][ T5971] netlink: 55 bytes leftover after parsing attributes in process `syz.0.16'.
[   70.041546][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'.
[   70.267473][ T5983] netlink: 'syz.1.21': attribute type 39 has an invalid length.
[   70.473941][ T5857] Bluetooth: hci0: command tx timeout
[   70.476999][ T5238] Bluetooth: hci1: command tx timeout
[   70.553678][ T5857] Bluetooth: hci2: command tx timeout
[   71.035625][ T6030] netlink: 188 bytes leftover after parsing attributes in process `syz.1.32'.
[   71.197773][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.202084][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.612313][ T6060] netlink: 'syz.1.39': attribute type 10 has an invalid length.
[   71.616454][ T6060] netlink: 55 bytes leftover after parsing attributes in process `syz.1.39'.
[   72.298328][ T6056] delete_channel: no stack
[   72.853896][ T5857] Bluetooth: hci0: command tx timeout
[   72.856270][ T5857] Bluetooth: hci1: command tx timeout
[   72.859557][ T5857] Bluetooth: hci2: command tx timeout
[   73.480495][ T6105] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.51'.
[   73.580497][ T6110] netlink: 'syz.0.53': attribute type 3 has an invalid length.
[   73.609506][ T6112] syzkaller0: refused to change device tx_queue_len
[   73.719741][ T6116] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   74.104709][ T6121] netlink: 168 bytes leftover after parsing attributes in process `syz.0.57'.
[   74.110320][ T6121] netlink: 168 bytes leftover after parsing attributes in process `syz.0.57'.
[   74.360680][ T6133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.60'.
[   74.737027][ T6141] netlink: 'syz.2.62': attribute type 4 has an invalid length.
[   74.740333][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'.
[   75.050430][ T6152] netlink: 'syz.0.65': attribute type 6 has an invalid length.
[   75.229377][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'.
[   75.234979][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'.
[   75.362081][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'.
[   75.364810][ T6164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'.
[   75.389440][ T6164] netlink: 'syz.0.68': attribute type 3 has an invalid length.
[   75.556844][ T6185] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[   76.276584][ T5238] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[   76.709360][ T6213] netlink: 'syz.2.83': attribute type 39 has an invalid length.
[   78.021350][ T6235] netlink: 252 bytes leftover after parsing attributes in process `syz.0.91'.
[   78.372549][ T6250] netlink: 'syz.0.95': attribute type 2 has an invalid length.
[   78.384419][ T6250] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   78.473883][ T6252] netlink: 'syz.1.96': attribute type 2 has an invalid length.
[   78.595564][ T6255] netlink: 'syz.0.97': attribute type 12 has an invalid length.
[   78.598874][ T6255] __nla_validate_parse: 1 callbacks suppressed
[   78.598891][ T6255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.97'.
[   78.664583][ T6255] openvswitch: netlink: Flow actions attr not present in new flow.
[   79.133742][ T6270] netlink: 48 bytes leftover after parsing attributes in process `syz.0.102'.
[   79.147985][ T6269] delete_channel: no stack
[   79.326786][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'.
[   79.378205][ T6275] netlink: 160 bytes leftover after parsing attributes in process `syz.0.104'.
[   80.052218][ T6293] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.110'.
[   80.068638][ T6290] netlink: 'syz.0.109': attribute type 21 has an invalid length.
[   80.072238][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.109'.
[   80.545822][ T6308] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   80.588773][ T6314] netlink: 'syz.2.117': attribute type 29 has an invalid length.
[   80.657252][ T6319] netlink: 'syz.2.118': attribute type 4 has an invalid length.
[   80.826936][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[   81.241506][ T6340] can: request_module (can-proto-0) failed.
[   82.306711][ T6352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.128'.
[   82.410476][ T6352] netlink: zone id is out of range
[   82.422363][ T6352] netlink: zone id is out of range
[   82.427879][ T6352] netlink: zone id is out of range
[   82.429728][ T6352] netlink: zone id is out of range
[   82.435358][ T6352] netlink: zone id is out of range
[   82.437834][ T6352] netlink: zone id is out of range
[   82.439831][ T6352] netlink: zone id is out of range
[   82.446653][ T6352] netlink: zone id is out of range
[   82.448758][ T6352] netlink: zone id is out of range
[   82.450823][ T6352] netlink: zone id is out of range
[   82.714713][ T1090] wlan1: Trigger new scan to find an IBSS to join
[   82.776797][ T6362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.131'.
[   82.789064][ T6362] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.131'.
[   82.989637][ T6373] netlink: 'syz.0.135': attribute type 10 has an invalid length.
[   82.992657][ T6373] team0: entered promiscuous mode
[   82.996248][ T6373] team_slave_0: entered promiscuous mode
[   82.998765][ T6373] team_slave_1: entered promiscuous mode
[   83.001390][ T6373] team0: entered allmulticast mode
[   83.004548][ T6373] team_slave_0: entered allmulticast mode
[   83.007114][ T6373] team_slave_1: entered allmulticast mode
[   83.010116][ T6373] bridge0: port 3(team0) entered blocking state
[   83.012806][ T6373] bridge0: port 3(team0) entered disabled state
[   83.020712][ T6373] bridge0: port 3(team0) entered blocking state
[   83.023616][ T6373] bridge0: port 3(team0) entered forwarding state
[   83.157755][ T6377] bridge0: port 3(ip6gretap0) entered blocking state
[   83.161216][ T6377] bridge0: port 3(ip6gretap0) entered disabled state
[   83.165167][ T6377] ip6gretap0: entered allmulticast mode
[   83.170402][ T6377] ip6gretap0: entered promiscuous mode
[   83.177401][ T6377] bridge0: port 3(ip6gretap0) entered blocking state
[   83.180070][ T6377] bridge0: port 3(ip6gretap0) entered forwarding state
[   83.187910][ T6377] netlink: 'syz.1.137': attribute type 14 has an invalid length.
[   83.899360][ T6390] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   84.862453][ T6415] netlink: 'syz.2.147': attribute type 10 has an invalid length.
[   84.869564][ T6415] __nla_validate_parse: 2 callbacks suppressed
[   84.869573][ T6415] netlink: 156 bytes leftover after parsing attributes in process `syz.2.147'.
[   84.998859][ T6418] team_slave_0: left promiscuous mode
[   85.001314][ T6418] team_slave_0: left allmulticast mode
[   85.011830][ T6421] netlink: 7 bytes leftover after parsing attributes in process `syz.1.150'.
[   85.019626][ T6421] netlink: 7 bytes leftover after parsing attributes in process `syz.1.150'.
[   85.030425][ T6418] team0: Port device team_slave_0 removed
[   85.114440][ T6423] netlink: 'syz.1.151': attribute type 10 has an invalid length.
[   85.117542][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.151'.
[   85.121099][ T6423] batadv0: entered promiscuous mode
[   85.123250][ T6423] batadv0: entered allmulticast mode
[   85.144568][ T6423] bridge0: port 4(batadv0) entered blocking state
[   85.153809][ T6423] bridge0: port 4(batadv0) entered disabled state
[   85.161240][ T6423] bridge0: port 4(batadv0) entered blocking state
[   85.164263][ T6423] bridge0: port 4(batadv0) entered forwarding state
[   85.281148][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   85.285057][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   85.669582][ T6446] netlink: 763 bytes leftover after parsing attributes in process `syz.2.159'.
[   85.704475][ T6450] netlink: 10 bytes leftover after parsing attributes in process `syz.0.161'.
[   85.738206][ T6448] netlink: 'syz.1.160': attribute type 64 has an invalid length.
[   85.926788][ T6464] netlink: 14 bytes leftover after parsing attributes in process `syz.2.165'.
[   86.562090][  T974] cfg80211: failed to load regulatory.db
[   87.728859][  T181] wlan1: Trigger new scan to find an IBSS to join
[   88.730255][ T1091] wlan1: Creating new IBSS network, BSSID 02:8d:f7:57:fb:7b
[   88.881526][ T6464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.892981][ T6464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.898831][ T6464] bond0 (unregistering): Released all slaves
[   89.048510][ T6478] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.168'.
[   89.131001][ T6484] netlink: 'syz.1.170': attribute type 29 has an invalid length.
[   89.135080][ T6484] netlink: 'syz.1.170': attribute type 29 has an invalid length.
[   89.172134][ T6486] netlink: 'syz.1.171': attribute type 21 has an invalid length.
[   89.176460][ T6486] netlink: 152 bytes leftover after parsing attributes in process `syz.1.171'.
[   89.184968][ T6488] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.172'.
[   89.188594][ T6488] netlink: 'syz.2.172': attribute type 10 has an invalid length.
[   89.194023][ T6488] team0: Device hsr_slave_0 failed to register rx_handler
[   89.226247][ T6492] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   90.125600][ T6533] __nla_validate_parse: 7 callbacks suppressed
[   90.125611][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'.
[   90.233184][ T6545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.194'.
[   90.290636][ T6554] netlink: 'syz.2.197': attribute type 2 has an invalid length.
[   90.293225][ T6554] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   90.297055][ T6554] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.197'.
[   90.327474][ T6547] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.330496][ T6547] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.427034][ T6564] Illegal XDP return value 4294967274 on prog  (id 147) dev N/A, expect packet loss!
[   91.515373][ T6576] netlink: 'syz.1.205': attribute type 2 has an invalid length.
[   91.517876][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.205'.
[   92.404581][ T6602] netlink: 'syz.1.213': attribute type 2 has an invalid length.
[   92.472118][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[   92.478828][ T6606] netlink: 6 bytes leftover after parsing attributes in process `syz.2.216'.
[   92.555772][ T6614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.218'.
[   92.967840][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'.
[   94.261113][ T6639] netlink: 'syz.1.226': attribute type 10 has an invalid length.
[   94.270025][ T6639] netlink: 55 bytes leftover after parsing attributes in process `syz.1.226'.
[   94.849616][ T6637] delete_channel: no stack
[   96.817766][ T6641] netlink: 'syz.2.227': attribute type 1 has an invalid length.
[   96.825158][ T6641] netlink: 'syz.2.227': attribute type 2 has an invalid length.
[   96.958242][ T6657] net_ratelimit: 8 callbacks suppressed
[   96.958276][ T6657] openvswitch: netlink: Flow actions attr not present in new flow.
[   97.010985][ T6655] netlink: 80 bytes leftover after parsing attributes in process `syz.1.231'.
[   97.048018][ T6655] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.231'.
[   97.122904][ T6655] netlink: 68 bytes leftover after parsing attributes in process `syz.1.231'.
[   97.410856][ T6670] syzkaller0: entered promiscuous mode
[   97.412957][ T6670] syzkaller0: entered allmulticast mode
[   97.691637][ T6689] netlink: 17 bytes leftover after parsing attributes in process `syz.0.242'.
[   97.695270][ T6689] netlink: zone id is out of range
[   97.697198][ T6689] netlink: zone id is out of range
[   97.698797][ T6689] netlink: zone id is out of range
[   97.700595][ T6689] netlink: zone id is out of range
[   97.702718][ T6689] netlink: zone id is out of range
[   97.706866][ T6689] netlink: zone id is out of range
[   97.708760][ T6689] netlink: zone id is out of range
[   97.710431][ T6689] netlink: zone id is out of range
[   97.712144][ T6689] netlink: zone id is out of range
[   97.899287][ T5238] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[   99.008849][ T6715] netlink: 'syz.0.248': attribute type 11 has an invalid length.
[   99.011521][ T6715] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.248'.
[   99.382376][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.252'.
[   99.398374][ T6732] netlink: 183836 bytes leftover after parsing attributes in process `syz.0.252'.
[  100.880061][ T6753] netlink: 'syz.0.259': attribute type 10 has an invalid length.
[  100.890092][ T6753] netlink: 55 bytes leftover after parsing attributes in process `syz.0.259'.
[  101.117199][ T6759] netlink: 4232 bytes leftover after parsing attributes in process `syz.1.260'.
[  101.202930][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[  101.422789][ T6774] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[  101.431970][ T6774] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[  101.442331][ T6774] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[  101.446544][ T6774] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[  102.342678][ T6785] tun0: tun_chr_ioctl cmd 1074025673
[  102.345345][ T6786] tun0: tun_chr_ioctl cmd 1074025677
[  102.347724][ T6786] tun0: linktype set to 270
[  103.088113][ T6794] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.570655][ T6808] netlink: 'syz.1.275': attribute type 4 has an invalid length.
[  103.593634][ T6808] __nla_validate_parse: 66 callbacks suppressed
[  103.593647][ T6808] netlink: 152 bytes leftover after parsing attributes in process `syz.1.275'.
[  103.610378][ T6808] .`: renamed from bond0 (while UP)
[  103.657044][ T6810] netlink: 'syz.0.276': attribute type 2 has an invalid length.
[  103.760667][ T6814] net_ratelimit: 76 callbacks suppressed
[  103.760679][ T6814] netlink: set zone limit has 4 unknown bytes
[  103.969459][ T6823] netlink: 'syz.0.281': attribute type 6 has an invalid length.
[  103.976176][ T6823] netlink: 'syz.0.281': attribute type 3 has an invalid length.
[  103.979153][ T6823] netlink: 199728 bytes leftover after parsing attributes in process `syz.0.281'.
[  104.375702][ T6843] lo: entered allmulticast mode
[  104.387670][ T6841] veth1_macvtap: left promiscuous mode
[  104.389964][ T6841] macsec0: entered allmulticast mode
[  104.403080][ T6843] lo: entered promiscuous mode
[  104.409606][ T6843] lo: left allmulticast mode
[  104.409863][ T6841] netlink: 'syz.1.286': attribute type 2 has an invalid length.
[  104.415351][ T6841] netlink: 'syz.1.286': attribute type 1 has an invalid length.
[  104.417807][ T6841] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.286'.
[  104.422469][ T6841] block nbd5: not configured, cannot reconfigure
[  104.741693][ T6855] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.292'.
[  104.825521][ T6856] raw_sendmsg: syz.0.291 forgot to set AF_INET. Fix it!
[  105.038063][ T6856] netlink: 180 bytes leftover after parsing attributes in process `syz.0.291'.
[  105.108633][ T6858] netlink: 'syz.1.293': attribute type 29 has an invalid length.
[  105.182861][ T6858] netlink: 'syz.1.293': attribute type 29 has an invalid length.
[  105.210536][ T6858] netlink: 'syz.1.293': attribute type 29 has an invalid length.
[  105.341866][ T6862] sit0: entered allmulticast mode
[  105.371442][ T6861] sit0: entered promiscuous mode
[  107.558145][ T6866] netlink: 146940 bytes leftover after parsing attributes in process `syz.1.295'.
[  107.561452][ T6866] openvswitch: netlink: Message has 6 unknown bytes.
[  107.663255][ T6871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.671864][ T6871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.182052][ T6881] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.299'.
[  109.378035][ T6893] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.303'.
[  109.470917][ T6889] delete_channel: no stack
[  110.184693][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'.
[  110.941930][ T6907] netlink: 'syz.1.306': attribute type 29 has an invalid length.
[  111.061030][ T6918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.309'.
[  111.066425][ T6918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.309'.
[  111.543657][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.314'.
[  111.746388][ T6944] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[  111.767152][ T6944] geneve0: entered promiscuous mode
[  111.878549][ T6944] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  111.922570][ T6948] netlink: 'syz.1.316': attribute type 21 has an invalid length.
[  112.170330][ T6950] netlink: 'syz.0.317': attribute type 10 has an invalid length.
[  112.292007][ T6950] bond0: (slave bond_slave_0): Releasing backup interface
[  113.344071][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'.
[  113.346990][ T6989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.398704][ T6989] netlink: 'syz.0.325': attribute type 39 has an invalid length.
[  113.660350][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.683549][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.690324][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.694364][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.698147][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.709570][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.797311][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.846296][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.926336][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.008034][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.333'.
[  114.011603][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.333'.
[  115.101231][ T6996] chnl_net:caif_netlink_parms(): no params data found
[  115.108351][   T13] bridge_slave_1: left allmulticast mode
[  115.110338][   T13] bridge_slave_1: left promiscuous mode
[  115.112599][ T7021] netlink: 'syz.0.335': attribute type 10 has an invalid length.
[  115.113580][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.115172][ T7021] netlink: 168 bytes leftover after parsing attributes in process `syz.0.335'.
[  115.128170][   T13] bridge_slave_0: left allmulticast mode
[  115.130083][   T13] bridge_slave_0: left promiscuous mode
[  115.132148][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.472864][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.476042][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.479228][ T6996] bridge_slave_0: entered allmulticast mode
[  115.483061][ T6996] bridge_slave_0: entered promiscuous mode
[  115.573644][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.576671][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.579671][ T6996] bridge_slave_1: entered allmulticast mode
[  115.584773][ T6996] bridge_slave_1: entered promiscuous mode
[  115.699511][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.763755][ T5857] Bluetooth: hci0: command tx timeout
[  115.767860][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.855285][ T6996] team0: Port device team_slave_0 added
[  115.860293][ T6996] team0: Port device team_slave_1 added
[  115.917280][ T7044] =======================================================
[  115.917280][ T7044] WARNING: The mand mount option has been deprecated and
[  115.917280][ T7044]          and is ignored by this kernel. Remove the mand
[  115.917280][ T7044]          option from the mount to silence this warning.
[  115.917280][ T7044] =======================================================
[  115.971134][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.977111][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.985797][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.014998][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.017406][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.032577][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.056533][   T13] hsr_slave_0: left promiscuous mode
[  116.059092][   T13] hsr_slave_1: left promiscuous mode
[  116.067713][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.080342][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.083813][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.086604][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.114900][   T13] veth1_macvtap: left promiscuous mode
[  116.117353][   T13] veth0_macvtap: left promiscuous mode
[  116.120234][   T13] veth1_vlan: left promiscuous mode
[  116.122134][   T13] veth0_vlan: left promiscuous mode
[  116.557283][   T13] team0 (unregistering): Port device team_slave_1 removed
[  116.597471][   T13] team0 (unregistering): Port device team_slave_0 removed
[  117.833600][ T5857] Bluetooth: hci0: command tx timeout
[  118.074083][ T6996] hsr_slave_0: entered promiscuous mode
[  118.077359][ T6996] hsr_slave_1: entered promiscuous mode
[  118.111593][ T7062] netlink: 'syz.1.347': attribute type 10 has an invalid length.
[  118.122433][ T7062] geneve0: entered promiscuous mode
[  118.159143][ T7062] .`: (slave geneve0): Enslaving as an active interface with an up link
[  118.219342][ T7071] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  118.315634][ T6996] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  118.326313][ T6996] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  118.331659][ T6996] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  118.338837][ T6996] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  118.410334][ T7079] openvswitch: netlink: Duplicate or invalid key (type 0).
[  118.413289][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.426826][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.442436][ T6996] 8021q: adding VLAN 0 to HW filter on device team0
[  118.450332][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.452716][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.462552][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.465097][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.624617][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.658226][ T6996] veth0_vlan: entered promiscuous mode
[  118.666704][ T6996] veth1_vlan: entered promiscuous mode
[  118.690418][ T6996] veth0_macvtap: entered promiscuous mode
[  118.697728][ T6996] veth1_macvtap: entered promiscuous mode
[  118.709547][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.719416][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.727550][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.731143][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.736428][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.739500][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.791127][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.797675][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.818007][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.820761][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.863137][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'.
[  118.924865][ T7086] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.326'.
[  118.928222][ T7087] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.326'.
[  118.931240][ T7086] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.326'.
[  119.128472][ T7098] netlink: 'syz.1.352': attribute type 13 has an invalid length.
[  119.131080][ T7098] netlink: 'syz.1.352': attribute type 17 has an invalid length.
[  119.156853][ T7098] sit0: left promiscuous mode
[  119.158647][ T7098] sit0: left allmulticast mode
[  119.196819][ T7098] 8021q: adding VLAN 0 to HW filter on device .`
[  119.220935][ T7098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.320642][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'.
[  119.384813][ T7120] netlink: 182 bytes leftover after parsing attributes in process `syz.1.357'.
[  119.545032][ T7132] netlink: 'syz.1.360': attribute type 21 has an invalid length.
[  119.745855][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'.
[  119.937165][ T5857] Bluetooth: hci0: command tx timeout
[  121.004740][ T7177] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.014617][ T7177] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.150819][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.376'.
[  121.214597][ T7191] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.378'.
[  121.361932][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  121.364963][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  121.994265][ T5857] Bluetooth: hci0: command tx timeout
[  122.210550][ T7212] netlink: 200 bytes leftover after parsing attributes in process `syz.3.387'.
[  122.260872][ T7213] netlink: 'syz.1.386': attribute type 3 has an invalid length.
[  122.273422][ T7213] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.386'.
[  123.778971][ T7241] netlink: 'syz.0.396': attribute type 16 has an invalid length.
[  123.783467][ T7241] netlink: 156 bytes leftover after parsing attributes in process `syz.0.396'.
[  123.814422][ T7241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.396'.
[  124.397990][ T7254] netlink: 168 bytes leftover after parsing attributes in process `syz.3.400'.
[  127.589772][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[  127.677102][ T7276] netlink: 160 bytes leftover after parsing attributes in process `syz.3.405'.
[  127.699428][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'.
[  127.703925][ T7273] netlink: 'syz.3.405': attribute type 10 has an invalid length.
[  127.725216][ T7273] batman_adv: batadv0: Adding interface: netdevsim0
[  127.727925][ T7273] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.758239][ T7273] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  127.839006][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[  127.845859][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'.
[  127.949827][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.410'.
[  128.129119][ T7295] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.412'.
[  128.134071][ T7295] openvswitch: netlink: Message has 6 unknown bytes.
[  128.185894][ T7295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.190164][ T7295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.221152][ T7299] netlink: 175264 bytes leftover after parsing attributes in process `syz.0.412'.
[  128.435099][ T7305] netlink: 'syz.3.414': attribute type 10 has an invalid length.
[  128.448126][ T7305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.414'.
[  128.462408][ T7305] batadv0: entered promiscuous mode
[  128.471256][ T7305] batadv0: entered allmulticast mode
[  128.490036][ T7305] bridge0: port 3(batadv0) entered blocking state
[  128.508408][ T7305] bridge0: port 3(batadv0) entered disabled state
[  128.557878][ T7305] bridge0: port 3(batadv0) entered blocking state
[  128.560826][ T7305] bridge0: port 3(batadv0) entered forwarding state
[  128.991546][ T7313] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.416'.
[  129.028483][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  129.032336][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  129.861108][ T7378] netlink: 'syz.0.421': attribute type 3 has an invalid length.
[  129.878942][ T7380] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  130.006821][ T7384] lo speed is unknown, defaulting to 1000
[  130.011113][ T7384] lo speed is unknown, defaulting to 1000
[  130.092285][ T7384] lo speed is unknown, defaulting to 1000
[  130.141957][ T7384] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  130.253086][ T7384] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  130.441909][ T7384] lo speed is unknown, defaulting to 1000
[  130.467895][ T7384] lo speed is unknown, defaulting to 1000
[  130.486465][ T7384] lo speed is unknown, defaulting to 1000
[  131.100508][   T13] syzkaller0: tun_net_xmit 76
[  131.102856][   T13] syzkaller0: tun_net_xmit 48
[  132.644105][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.646785][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  132.685335][ T7416] __nla_validate_parse: 2 callbacks suppressed
[  132.685420][ T7416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.433'.
[  132.859641][ T7418] netlink: 'syz.1.434': attribute type 21 has an invalid length.
[  132.866584][ T7418] netlink: 100 bytes leftover after parsing attributes in process `syz.1.434'.
[  133.176590][ T7427] mac80211_hwsim hwsim13 .3c: renamed from wlan1 (while UP)
[  133.265394][ T7430] bridge0: port 3(batadv0) entered disabled state
[  136.129546][ T7430] bridge_slave_1: left allmulticast mode
[  136.132109][ T7430] bridge_slave_1: left promiscuous mode
[  136.138145][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.144840][ T7430] bridge_slave_0: left allmulticast mode
[  136.147125][ T7430] bridge_slave_0: left promiscuous mode
[  136.149499][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.221657][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.439'.
[  136.348917][ T7443] netlink: 'syz.0.442': attribute type 4 has an invalid length.
[  136.442901][ T7447] lo speed is unknown, defaulting to 1000
[  136.458791][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.445'.
[  136.632767][ T7456] netlink: 'syz.1.447': attribute type 16 has an invalid length.
[  136.636466][ T7456] netlink: 152 bytes leftover after parsing attributes in process `syz.1.447'.
[  136.716806][ T7457] netlink: 'syz.0.446': attribute type 4 has an invalid length.
[  137.028064][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'.
[  137.195124][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'.
[  137.284360][ T5857] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23
[  137.447850][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  137.751906][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[  137.908491][ T7480] netlink: 'syz.0.453': attribute type 10 has an invalid length.
[  137.937971][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'.
[  137.941067][ T7471] netlink: 130076 bytes leftover after parsing attributes in process `syz.3.451'.
[  137.946404][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'.
[  137.964972][ T7481] netlink: 'syz.1.454': attribute type 16 has an invalid length.
[  137.967884][ T7481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.454'.
[  137.972129][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.400522][ T7511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.630572][ T7524] netlink: 17 bytes leftover after parsing attributes in process `syz.3.467'.
[  138.636163][ T7524] netlink: zone id is out of range
[  138.638356][ T7524] netlink: zone id is out of range
[  138.639965][ T7524] netlink: zone id is out of range
[  138.641644][ T7524] netlink: zone id is out of range
[  138.643244][ T7524] netlink: zone id is out of range
[  138.653858][ T7524] netlink: zone id is out of range
[  138.656487][ T7524] netlink: zone id is out of range
[  138.660774][ T7524] netlink: zone id is out of range
[  138.663632][ T7524] netlink: zone id is out of range
[  138.708662][ T7526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.468'.
[  138.797645][ T7529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.469'.
[  138.802355][ T7531] netlink: 'syz.3.470': attribute type 10 has an invalid length.
[  139.100722][ T7531] team0 (unregistering): Port device team_slave_0 removed
[  139.126783][ T7531] team0 (unregistering): Port device team_slave_1 removed
[  139.916340][ T7555] lo speed is unknown, defaulting to 1000
[  140.011249][ T7553] netlink: 'syz.1.475': attribute type 10 has an invalid length.
[  140.020107][ T7553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.475'.
[  140.024863][ T7561] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.478'.
[  140.034844][ T7553] dummy0: entered promiscuous mode
[  140.071522][ T7553] bridge0: port 5(dummy0) entered blocking state
[  140.084405][ T7553] bridge0: port 5(dummy0) entered disabled state
[  140.096217][ T7553] dummy0: entered allmulticast mode
[  140.180727][ T7553] bridge0: port 5(dummy0) entered blocking state
[  140.185843][ T7553] bridge0: port 5(dummy0) entered forwarding state
[  140.658001][ T7580] netlink: 'syz.0.480': attribute type 10 has an invalid length.
[  140.761485][ T7582] netlink: 'syz.1.483': attribute type 21 has an invalid length.
[  141.239093][ T7599] netlink: 'syz.1.486': attribute type 10 has an invalid length.
[  141.295459][ T7567] delete_channel: no stack
[  141.676536][ T7618] lo speed is unknown, defaulting to 1000
[  141.827498][ T7625] validate_nla: 1 callbacks suppressed
[  141.827534][ T7625] netlink: 'syz.0.493': attribute type 19 has an invalid length.
[  142.536769][ T7660] IPv6: Can't replace route, no match found
[  142.655747][ T7660] macvtap0: refused to change device tx_queue_len
[  142.789373][ T7685] __nla_validate_parse: 9 callbacks suppressed
[  142.789392][ T7685] netlink: 3787 bytes leftover after parsing attributes in process `syz.3.510'.
[  142.847507][ T7683] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.509'.
[  142.867571][ T7692] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.512'.
[  142.931395][ T7692] netlink: 'syz.3.512': attribute type 4 has an invalid length.
[  142.969150][ T7692] netlink: 'syz.3.512': attribute type 10 has an invalid length.
[  142.997856][ T7701] lo speed is unknown, defaulting to 1000
[  143.036860][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.041920][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.047590][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.051297][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.057865][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.061751][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.068806][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.149254][ T7715] netlink: 'syz.3.517': attribute type 2 has an invalid length.
[  143.168887][ T7715] netlink: 'syz.3.517': attribute type 2 has an invalid length.
[  143.325330][ T7721] netlink: 'syz.0.519': attribute type 29 has an invalid length.
[  143.330906][ T7721] netlink: 'syz.0.519': attribute type 10 has an invalid length.
[  143.351468][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.368180][ T7721] bond0: entered promiscuous mode
[  143.370255][ T7721] bond_slave_1: entered promiscuous mode
[  143.372925][ T7721] bond0: entered allmulticast mode
[  143.375836][ T7721] bond_slave_1: entered allmulticast mode
[  143.378319][ T7721] geneve0: entered allmulticast mode
[  143.382133][ T7721] team0: Port device bond0 added
[  143.750140][ T7746] netlink: 'syz.0.527': attribute type 2 has an invalid length.
[  143.774376][ T7746] netlink: 'syz.0.527': attribute type 10 has an invalid length.
[  143.781570][ T7730] netlink: 'syz.3.522': attribute type 39 has an invalid length.
[  143.807223][ T7746] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  143.810504][ T7746] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  143.816439][ T7746] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  145.608973][ T7815] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.678053][ T7815] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.350924][ T7822] xt_HMARK: spi-set and port-set can't be combined
[  146.766525][ T7850] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  147.535202][ T7875] net_ratelimit: 79 callbacks suppressed
[  147.535227][ T7875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.901600][ T7893] __nla_validate_parse: 69 callbacks suppressed
[  147.901741][ T7893] netlink: 152 bytes leftover after parsing attributes in process `syz.3.571'.
[  148.071016][ T7900] netlink: 67 bytes leftover after parsing attributes in process `syz.1.573'.
[  148.154713][ T7907] validate_nla: 5 callbacks suppressed
[  148.154727][ T7907] netlink: 'syz.0.574': attribute type 4 has an invalid length.
[  148.158811][ T7907] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.574'.
[  148.512448][ T7917] netlink: 328 bytes leftover after parsing attributes in process `syz.1.578'.
[  148.521823][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'.
[  148.610488][ T7919] netlink: 'syz.0.579': attribute type 10 has an invalid length.
[  148.616239][ T7919] netlink: 55 bytes leftover after parsing attributes in process `syz.0.579'.
[  148.902646][ T7935] netlink: 'syz.3.582': attribute type 10 has an invalid length.
[  148.906658][ T7935] netlink: 55 bytes leftover after parsing attributes in process `syz.3.582'.
[  149.105776][ T7942] sctp: [Deprecated]: syz.1.584 (pid 7942) Use of int in maxseg socket option.
[  149.105776][ T7942] Use struct sctp_assoc_value instead
[  149.476954][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'.
[  151.725632][ T8012] tmpfs: Bad value for 'mode'
[  151.842785][ T8014] netlink: 6 bytes leftover after parsing attributes in process `syz.3.601'.
[  151.974680][ T8014] nbd: must specify an index to disconnect
[  151.984892][ T8014] netlink: 277 bytes leftover after parsing attributes in process `syz.3.601'.
[  151.988795][ T8014] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  152.375336][ T8027] netlink: 'syz.3.603': attribute type 21 has an invalid length.
[  152.378454][ T8027] netlink: 'syz.3.603': attribute type 4 has an invalid length.
[  152.396875][ T8027] netlink: 'syz.3.603': attribute type 3 has an invalid length.
[  153.216053][ T8043] netlink: 'syz.0.605': attribute type 29 has an invalid length.
[  153.219921][ T8043] netlink: 'syz.0.605': attribute type 29 has an invalid length.
[  153.306159][ T8046] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  153.370242][ T8048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.534349][ T8050] __nla_validate_parse: 2 callbacks suppressed
[  153.534364][ T8050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.608'.
[  153.539618][ T8052] netlink: 60 bytes leftover after parsing attributes in process `syz.1.608'.
[  153.545618][ T8050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.608'.
[  153.551220][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.608'.
[  153.554237][ T8050] openvswitch: netlink: Missing key (keys=40, expected=100)
[  153.905228][ T8063] netlink: 'syz.1.611': attribute type 29 has an invalid length.
[  153.909353][ T8063] netlink: 'syz.1.611': attribute type 29 has an invalid length.
[  154.507371][ T8097] netlink: 'syz.0.621': attribute type 41 has an invalid length.
[  154.980789][ T8107] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.622'.
[  154.984549][ T8107] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  156.275828][ T8127] netlink: 'syz.3.631': attribute type 4 has an invalid length.
[  156.278999][ T8127] netlink: 209028 bytes leftover after parsing attributes in process `syz.3.631'.
[  156.624662][ T8136] netlink: 160644 bytes leftover after parsing attributes in process `syz.3.632'.
[  157.464161][ T8144] netlink: 'syz.0.634': attribute type 10 has an invalid length.
[  157.467859][ T8144] syz_tun: entered promiscuous mode
[  157.511604][ T8144] syz_tun: entered allmulticast mode
[  157.520733][ T8144] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  157.954083][ T8164] bpf: Bad value for 'uid'
[  158.393286][ T8175] netlink: 'syz.3.642': attribute type 2 has an invalid length.
[  158.396700][ T8175] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.642'.
[  159.054683][ T8185] netlink: 10 bytes leftover after parsing attributes in process `syz.0.646'.
[  159.187398][ T8192] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  159.868244][ T8210] netlink: 'syz.3.651': attribute type 28 has an invalid length.
[  163.286355][ T8249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.663'.
[  163.291053][ T8249] unsupported nlmsg_type 40
[  163.407102][ T8256] netlink: 68 bytes leftover after parsing attributes in process `syz.1.661'.
[  164.370630][ T8272] syzkaller1: entered promiscuous mode
[  164.372844][ T8272] syzkaller1: entered allmulticast mode
[  164.446992][ T8272] lo speed is unknown, defaulting to 1000
[  164.680359][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.645360][ T8320] netlink: 'syz.3.676': attribute type 4 has an invalid length.
[  165.648558][ T8320] netlink: 152 bytes leftover after parsing attributes in process `syz.3.676'.
[  165.706650][ T8320] .`: renamed from bond0 (while UP)
[  165.957062][ T8326] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  166.403180][ T8357] netlink: 'syz.3.684': attribute type 16 has an invalid length.
[  166.412254][ T8357] netlink: 'syz.3.684': attribute type 3 has an invalid length.
[  166.418713][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.684'.
[  166.635106][ T8366] netlink: 211 bytes leftover after parsing attributes in process `syz.1.688'.
[  166.847499][ T8387] netlink: 100 bytes leftover after parsing attributes in process `syz.0.694'.
[  167.042669][ T8400] netlink: 'syz.0.698': attribute type 4 has an invalid length.
[  167.063996][ T8400] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.698'.
[  167.095909][ T8397] netlink: 'syz.3.695': attribute type 10 has an invalid length.
[  167.110036][ T8397] netlink: 55 bytes leftover after parsing attributes in process `syz.3.695'.
[  167.685936][ T8388] delete_channel: no stack
[  169.358381][ T8454] netlink: 'syz.0.714': attribute type 2 has an invalid length.
[  169.361484][ T8454] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.714'.
[  169.365399][ T8454] nbd: must specify at least one socket
[  169.846162][ T8464] wg2: entered promiscuous mode
[  169.848317][ T8464] wg2: entered allmulticast mode
[  169.986047][ T5857] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  170.265132][ T8477] netlink: 72 bytes leftover after parsing attributes in process `syz.3.722'.
[  170.432642][ T8487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.442154][ T8490] macvtap0: mtu less than device minimum
[  170.445686][ T8490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.725'.
[  171.239721][ T8508] netlink: 'syz.0.730': attribute type 10 has an invalid length.
[  171.320310][ T8508] bridge0: port 4(netdevsim0) entered blocking state
[  171.326259][ T8508] bridge0: port 4(netdevsim0) entered disabled state
[  171.335139][ T8508] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  171.437314][ T8508] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  172.121619][ T5857] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  172.226867][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'.
[  173.179843][ T8554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.298384][ T8566] netlink: 'syz.1.751': attribute type 28 has an invalid length.
[  173.301082][ T8566] netlink: 'syz.1.751': attribute type 29 has an invalid length.
[  173.303879][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.751'.
[  173.533999][ T5857] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  173.563828][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'.
[  174.331233][ T8617] netlink: 'syz.1.766': attribute type 5 has an invalid length.
[  174.414130][ T8625] netlink: 56 bytes leftover after parsing attributes in process `syz.1.769'.
[  174.436953][ T8623] netlink: 48 bytes leftover after parsing attributes in process `syz.3.768'.
[  174.444533][ T8623] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.768'.
[  175.401073][ T8643] netlink: 14 bytes leftover after parsing attributes in process `syz.0.774'.
[  175.974417][ T8692] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.784'.
[  175.978417][ T8692] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.784'.
[  176.029417][ T8694] netlink: 'syz.3.785': attribute type 2 has an invalid length.
[  176.032536][ T8694] netlink: 110008 bytes leftover after parsing attributes in process `syz.3.785'.
[  176.195623][ T8697] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  176.381738][ T8697] bridge0: port 4(batadv0) entered disabled state
[  176.437661][ T8697] batadv0: left allmulticast mode
[  176.439734][ T8697] batadv0: left promiscuous mode
[  176.443756][ T8697] bridge0: port 4(batadv0) entered disabled state
[  176.680109][ T8706] TCP: TCP_TX_DELAY enabled
[  176.762368][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.820783][ T8697] .`: (slave batadv0): Enslaving as an active interface with an up link
[  176.835479][ T8701] netlink: 'syz.0.787': attribute type 13 has an invalid length.
[  176.842161][ T8703] netlink: 'syz.0.787': attribute type 13 has an invalid length.
[  177.050224][ T8722] netlink: 'syz.1.793': attribute type 10 has an invalid length.
[  177.066671][ T8722] 8021q: adding VLAN 0 to HW filter on device team0
[  177.079668][ T8722] .`: (slave team0): Enslaving as an active interface with an up link
[  177.097340][ T8722] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  177.222437][ T8732] siw: device registration error -23
[  177.280289][ T8734] __nla_validate_parse: 3 callbacks suppressed
[  177.280304][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.798'.
[  177.403036][ T8740] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.801'.
[  177.424157][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  177.452683][ T8744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.803'.
[  177.482015][ T8746] netlink: 'syz.0.805': attribute type 28 has an invalid length.
[  177.485317][ T8746] netlink: 'syz.0.805': attribute type 3 has an invalid length.
[  177.488403][ T8746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.805'.
[  177.525647][ T8750] netlink: 'syz.1.803': attribute type 1 has an invalid length.
[  177.710339][ T8756] netlink: 'syz.0.808': attribute type 4 has an invalid length.
[  177.820981][ T8767] netlink: 'syz.1.811': attribute type 21 has an invalid length.
[  177.831407][ T8767] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  177.915896][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.814'.
[  178.196059][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'.
[  178.267025][ T8792] sit0: entered allmulticast mode
[  178.286693][ T8792] sit0: entered promiscuous mode
[  178.375289][ T8798] netlink: 100 bytes leftover after parsing attributes in process `syz.0.822'.
[  179.203755][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'.
[  179.546373][ T8822] syzkaller0: entered promiscuous mode
[  179.548216][ T8822] syzkaller0: entered allmulticast mode
[  179.553092][ T8823] netlink: 'syz.3.826': attribute type 10 has an invalid length.
[  179.557706][ T8823] .`: (slave bond_slave_0): Releasing backup interface
[  179.558993][ T8822] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.828'.
[  182.077503][   T13] syzkaller0: tun_net_xmit 76
[  182.079653][   T13] syzkaller0: tun_net_xmit 48
[  182.410636][ T8869] validate_nla: 1 callbacks suppressed
[  182.410656][ T8869] netlink: 'syz.3.842': attribute type 1 has an invalid length.
[  182.428197][ T8869] netlink: 'syz.3.842': attribute type 1 has an invalid length.
[  182.431458][ T8869] netlink: 'syz.3.842': attribute type 1 has an invalid length.
[  182.445365][ T8869] netlink: 180 bytes leftover after parsing attributes in process `syz.3.842'.
[  183.487061][ T8883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.848'.
[  184.303032][ T8898] netlink: 'syz.0.854': attribute type 4 has an invalid length.
[  184.750586][ T8907] netlink: 'syz.3.856': attribute type 1 has an invalid length.
[  185.003713][ T8927] netlink: 830 bytes leftover after parsing attributes in process `syz.1.863'.
[  185.020718][ T8914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.034892][ T8914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.057983][ T8933] netlink: 'syz.3.864': attribute type 29 has an invalid length.
[  185.062603][ T8933] netlink: 'syz.3.864': attribute type 29 has an invalid length.
[  185.065520][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'.
[  185.076176][ T8933] netlink: 'syz.3.864': attribute type 29 has an invalid length.
[  185.079567][ T8933] netlink: 'syz.3.864': attribute type 29 has an invalid length.
[  185.079884][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'.
[  185.082566][ T8933] netlink: 'syz.3.864': attribute type 29 has an invalid length.
[  185.122571][ T8940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.866'.
[  185.727937][ T8940] lo speed is unknown, defaulting to 1000
[  186.081401][ T8956] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.870'.
[  186.297766][ T8969] netlink: 348 bytes leftover after parsing attributes in process `syz.1.874'.
[  186.348353][ T8971] netlink: 15786 bytes leftover after parsing attributes in process `syz.0.875'.
[  186.471752][ T8975] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.876'.
[  187.095870][ T8993] openvswitch: netlink: Flow actions attr not present in new flow.
[  292.923350][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  292.926242][    C0] rcu: 	1-...!: (7 ticks this GP) idle=8c04/1/0x4000000000000000 softirq=29229/29229 fqs=7
[  292.932044][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=25469, q=380 ncpus=2)
[  292.935069][    C0] Sending NMI from CPU 0 to CPUs 1:
[  292.935157][    C1] NMI backtrace for cpu 1
[  292.935179][    C1] CPU: 1 UID: 0 PID: 9008 Comm: syz.0.888 Not tainted syzkaller #0 PREEMPT(full) 
[  292.935188][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.935194][    C1] RIP: 0010:mark_lock+0x3c/0x190
[  292.935208][    C1] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 c4 ef 0a 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 93 49 93 eb 48 83 3d 2b 7f
[  292.935214][    C1] RSP: 0018:ffffc900001dfd98 EFLAGS: 00000003
[  292.935222][    C1] RAX: 0000000000000067 RBX: 0000000000000004 RCX: 0000000000000004
[  292.935227][    C1] RDX: 0000000000000004 RSI: ffff8881073f61a8 RDI: ffff8881073f5640
[  292.935232][    C1] RBP: 0000000000000010 R08: 0000000000000000 R09: ffffffff81adabcb
[  292.935236][    C1] R10: dffffc0000000000 R11: ffffed1026cc4f51 R12: 0000000000000002
[  292.935241][    C1] R13: 0000000000000002 R14: ffff8881073f61a8 R15: 0000000000000000
[  292.935246][    C1] FS:  00007fa21d1eb6c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  292.935252][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.935257][    C1] CR2: 000055557b87f588 CR3: 000000011cdba000 CR4: 00000000000006f0
[  292.935279][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  292.935285][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  292.935290][    C1] Call Trace:
[  292.935294][    C1]  <IRQ>
[  292.935301][    C1]  __lock_acquire+0x680/0xd20
[  292.935323][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  292.935331][    C1]  lock_acquire+0x120/0x360
[  292.935341][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  292.935350][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[  292.935363][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  292.935369][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  292.935380][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.935387][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.935400][    C1]  hrtimer_try_to_cancel+0x22b/0x420
[  292.935409][    C1]  hrtimer_cancel+0x3b/0x50
[  292.935416][    C1]  cpu_clock_event_stop+0xd9/0x130
[  292.935427][    C1]  __perf_event_overflow+0x580/0xe40
[  292.935437][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  292.935444][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  292.935456][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  292.935468][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  292.935477][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  292.935491][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.935498][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.935510][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  292.935520][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  292.935529][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  292.935540][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  292.935546][    C1]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  292.935558][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  292.935570][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  292.935580][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  292.935587][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.935595][    C1] RIP: 0010:unwind_next_frame+0x1856/0x2390
[  292.935605][    C1] Code: 00 4d 8b 6e 08 4d 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 26 5a b0 00 49 8b 07 4d 39 e5 0f 96 c1 4c 39 e0 <0f> 97 c2 20 ca 80 fa 01 0f 85 63 01 00 00 49 8d 4c 24 08 4c 39 e9
[  292.935611][    C1] RSP: 0018:ffffc900001e0738 EFLAGS: 00000206
[  292.935617][    C1] RAX: ffffc900027c0000 RBX: ffffffff9040b501 RCX: 0000000000000001
[  292.935622][    C1] RDX: ffffc900001e0848 RSI: dffffc0000000000 RDI: ffffc900001e0810
[  292.935627][    C1] RBP: dffffc0000000000 R08: ffffc900027bfc00 R09: 0000000000000000
[  292.935632][    C1] R10: ffffc900001e0858 R11: fffff5200003c10d R12: ffffc900027bfc10
[  292.935637][    C1] R13: ffffc900027b8000 R14: ffffc900001e0808 R15: ffffc900001e0818
[  292.935646][    C1]  ? unwind_next_frame+0x17c4/0x2390
[  292.935660][    C1]  ? unwind_next_frame+0xa5/0x2390
[  292.935668][    C1]  ? kasan_save_track+0x3e/0x80
[  292.935678][    C1]  ? rcu_core+0xc37/0x1770
[  292.935692][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  292.935706][    C1]  arch_stack_walk+0x11c/0x150
[  292.935722][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  292.935737][    C1]  stack_trace_save+0x9c/0xe0
[  292.935753][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  292.935767][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  292.935778][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  292.935791][    C1]  kasan_save_track+0x3e/0x80
[  292.935807][    C1]  ? kasan_save_track+0x3e/0x80
[  292.935821][    C1]  ? kasan_save_free_info+0x46/0x50
[  292.935835][    C1]  ? __kasan_slab_free+0x5b/0x80
[  292.935848][    C1]  ? slab_free_after_rcu_debug+0x129/0x2a0
[  292.935858][    C1]  ? rcu_core+0xcab/0x1770
[  292.935869][    C1]  ? handle_softirqs+0x286/0x870
[  292.935875][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  292.935882][    C1]  ? irq_exit_rcu+0x9/0x30
[  292.935888][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  292.935895][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.935903][    C1]  ? preempt_schedule_irq+0xb0/0x150
[  292.935910][    C1]  ? irqentry_exit+0x6f/0x90
[  292.935917][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.935924][    C1]  ? unwind_next_frame+0x214/0x2390
[  292.935931][    C1]  ? arch_stack_walk+0x11c/0x150
[  292.935940][    C1]  ? stack_trace_save+0x9c/0xe0
[  292.935947][    C1]  ? kasan_save_track+0x3e/0x80
[  292.935964][    C1]  kasan_save_free_info+0x46/0x50
[  292.935971][    C1]  __kasan_slab_free+0x5b/0x80
[  292.935981][    C1]  slab_free_after_rcu_debug+0x129/0x2a0
[  292.935989][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  292.935997][    C1]  ? rcu_core+0xc37/0x1770
[  292.936007][    C1]  rcu_core+0xcab/0x1770
[  292.936018][    C1]  ? clockevents_program_event+0x24d/0x360
[  292.936032][    C1]  ? __pfx_rcu_core+0x10/0x10
[  292.936043][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  292.936049][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  292.936058][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.936066][    C1]  ? __pfx_rcu_core_si+0x10/0x10
[  292.936076][    C1]  handle_softirqs+0x286/0x870
[  292.936084][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  292.936092][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  292.936100][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  292.936110][    C1]  __irq_exit_rcu+0xca/0x1f0
[  292.936117][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  292.936125][    C1]  irq_exit_rcu+0x9/0x30
[  292.936162][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  292.936172][    C1]  </IRQ>
[  292.936174][    C1]  <TASK>
[  292.936177][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.936185][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  292.936193][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 eb 8e 14 f6 e8 56 eb 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  292.936199][    C1] RSP: 0018:ffffc900027bf640 EFLAGS: 00000286
[  292.936206][    C1] RAX: 62b3ac1534b52600 RBX: 0000000000000000 RCX: 62b3ac1534b52600
[  292.936212][    C1] RDX: 0000000000000000 RSI: ffffffff8d9ba163 RDI: 0000000000000001
[  292.936216][    C1] RBP: ffffc900027bf6f0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  292.936221][    C1] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: 0000000000000000
[  292.936226][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004f7ec8
[  292.936235][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  292.936244][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  292.936252][    C1]  irqentry_exit+0x6f/0x90
[  292.936259][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.936266][    C1] RIP: 0010:unwind_next_frame+0x214/0x2390
[  292.936274][    C1] Code: ef 08 8b 15 1e 5f 4b 0c 8d 42 ff 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 98 4e e0 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d
[  292.936280][    C1] RSP: 0018:ffffc900027bf7b8 EFLAGS: 00000a07
[  292.936286][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 62b3ac1534b52600
[  292.936290][    C1] RDX: 00000000000a7e25 RSI: ffffffff8be33de0 RDI: ffffffff8be33da0
[  292.936295][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
[  292.936300][    C1] R10: ffffc900027bf8d8 R11: ffffffff81ac5140 R12: ffffffff8959d506
[  292.936305][    C1] R13: ffffffff9101b5ec R14: ffffc900027bf888 R15: 00000000000859d5
[  292.936310][    C1]  ? sk_prot_alloc+0x56/0x220
[  292.936319][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  292.936328][    C1]  ? unwind_next_frame+0xa5/0x2390
[  292.936338][    C1]  ? unwind_next_frame+0xd4/0x2390
[  292.936347][    C1]  ? unwind_next_frame+0xa5/0x2390
[  292.936354][    C1]  ? sk_prot_alloc+0x57/0x220
[  292.936363][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  292.936372][    C1]  arch_stack_walk+0x11c/0x150
[  292.936382][    C1]  ? sk_prot_alloc+0x57/0x220
[  292.936390][    C1]  stack_trace_save+0x9c/0xe0
[  292.936399][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  292.936409][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  292.936419][    C1]  kasan_save_track+0x3e/0x80
[  292.936428][    C1]  ? kasan_save_track+0x3e/0x80
[  292.936436][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  292.936446][    C1]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  292.936455][    C1]  ? sk_prot_alloc+0x57/0x220
[  292.936474][    C1]  __kasan_slab_alloc+0x6c/0x80
[  292.936483][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  292.936493][    C1]  ? sk_prot_alloc+0x57/0x220
[  292.936502][    C1]  sk_prot_alloc+0x57/0x220
[  292.936510][    C1]  ? sk_alloc+0x24/0x370
[  292.936519][    C1]  sk_alloc+0x3a/0x370
[  292.936528][    C1]  unix_create1+0xb0/0x7c0
[  292.936541][    C1]  unix_create+0x16b/0x210
[  292.936551][    C1]  __sock_create+0x4b3/0x9f0
[  292.936560][    C1]  __sys_socketpair+0x1c5/0x560
[  292.936569][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  292.936576][    C1]  do_syscall_64+0xfa/0x3b0
[  292.936585][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.936592][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.936600][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.936607][    C1] RIP: 0033:0x7fa21c38eba9
[  292.936616][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.936622][    C1] RSP: 002b:00007fa21d1eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  292.936629][    C1] RAX: ffffffffffffffda RBX: 00007fa21c5d5fa0 RCX: 00007fa21c38eba9
[  292.936634][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  292.936638][    C1] RBP: 00007fa21c411e19 R08: 0000000000000000 R09: 0000000000000000
[  292.936642][    C1] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.936647][    C1] R13: 00007fa21c5d6038 R14: 00007fa21c5d5fa0 R15: 00007ffc93ae2178
[  292.936659][    C1]  </TASK>
[  292.937109][    C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g25469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  293.349148][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  293.353130][    C0] rcu: RCU grace-period kthread stack dump:
[  293.355533][    C0] task:rcu_preempt     state:R  running task     stack:27160 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  293.360852][    C0] Call Trace:
[  293.362229][    C0]  <TASK>
[  293.363396][    C0]  __schedule+0x1798/0x4cc0
[  293.365250][    C0]  ? __lock_acquire+0xab9/0xd20
[  293.367287][    C0]  ? __pfx___schedule+0x10/0x10
[  293.369304][    C0]  ? schedule+0x91/0x360
[  293.371041][    C0]  schedule+0x165/0x360
[  293.372777][    C0]  schedule_timeout+0x12b/0x270
[  293.374760][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  293.376933][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  293.379348][    C0]  ? __pfx_process_timeout+0x10/0x10
[  293.381506][    C0]  ? prepare_to_swait_event+0x341/0x380
[  293.383588][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  293.385557][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  293.388054][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  293.390278][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  293.392417][    C0]  ? finish_swait+0xcd/0x1f0
[  293.394293][    C0]  rcu_gp_kthread+0x99/0x390
[  293.396142][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  293.398214][    C0]  ? __kthread_parkme+0x7b/0x200
[  293.400159][    C0]  ? __kthread_parkme+0x1a1/0x200
[  293.402213][    C0]  kthread+0x711/0x8a0
[  293.403765][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  293.405787][    C0]  ? __pfx_kthread+0x10/0x10
[  293.407545][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.409611][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.411728][    C0]  ? __pfx_kthread+0x10/0x10
[  293.413623][    C0]  ret_from_fork+0x439/0x7d0
[  293.415463][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  293.417560][    C0]  ? __switch_to_asm+0x39/0x70
[  293.419498][    C0]  ? __switch_to_asm+0x33/0x70
[  293.421438][    C0]  ? __pfx_kthread+0x10/0x10
[  293.423322][    C0]  ret_from_fork_asm+0x1a/0x30
[  293.425285][    C0]  </TASK>
[  293.426298][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  293.428712][    C0] CPU: 0 UID: 0 PID: 7340 Comm: kworker/u9:21 Not tainted syzkaller #0 PREEMPT(full) 
[  293.432560][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  293.436582][    C0] Workqueue: events_unbound toggle_allocation_gate
[  293.439154][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  293.441784][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e
[  293.449466][    C0] RSP: 0018:ffffc90006927660 EFLAGS: 00000293
[  293.451925][    C0] RAX: ffffffff81b4665b RBX: 1ffff11026cc7f61 RCX: ffff8880221a5640
[  293.455109][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  293.458277][    C0] RBP: ffffc900069277e0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  293.461467][    C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff88813663fb08
[  293.464536][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  293.467517][    C0] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  293.470977][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.473574][    C0] CR2: 0000000100000003 CR3: 000000000df36000 CR4: 00000000000006f0
[  293.476667][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  293.479841][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  293.482930][    C0] Call Trace:
[  293.484264][    C0]  <TASK>
[  293.485468][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  293.487379][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  293.489894][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  293.492098][    C0]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  293.494539][    C0]  ? __pfx___text_poke+0x10/0x10
[  293.496536][    C0]  ? rcu_is_watching+0x15/0xb0
[  293.498455][    C0]  ? trace_contention_end+0x39/0x120
[  293.500590][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  293.502639][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  293.504716][    C0]  smp_text_poke_batch_finish+0x5f9/0x1130
[  293.507095][    C0]  ? arch_jump_label_transform_apply+0x17/0x30
[  293.509543][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  293.511580][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  293.514047][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  293.516558][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  293.518987][    C0]  static_key_enable_cpuslocked+0x128/0x250
[  293.521417][    C0]  static_key_enable+0x1a/0x20
[  293.523386][    C0]  toggle_allocation_gate+0xad/0x240
[  293.525488][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  293.527604][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  293.529796][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  293.531973][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  293.534164][    C0]  process_scheduled_works+0xae1/0x17b0
[  293.536389][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  293.538801][    C0]  worker_thread+0x8a0/0xda0
[  293.540694][    C0]  kthread+0x711/0x8a0
[  293.542371][    C0]  ? __pfx_worker_thread+0x10/0x10
[  293.544433][    C0]  ? __pfx_kthread+0x10/0x10
[  293.546325][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.548419][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.550527][    C0]  ? __pfx_kthread+0x10/0x10
[  293.552467][    C0]  ret_from_fork+0x439/0x7d0
[  293.554365][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  293.556442][    C0]  ? __switch_to_asm+0x39/0x70
[  293.558386][    C0]  ? __switch_to_asm+0x33/0x70
[  293.560335][    C0]  ? __pfx_kthread+0x10/0x10
[  293.562147][    C0]  ret_from_fork_asm+0x1a/0x30
[  293.564040][    C0]  </TASK>

VM DIAGNOSIS:
19:42:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888107610237 R9 =1ffff11020ec2046 R10=dffffc0000000000 R11=ffffffff854fa380
R12=dffffc0000000000 R13=ffffffff99b02908 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa3fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000100000003 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff91e412e53
XMM06=0000000000000000 00007ff91e412e4d XMM07=0000000000000000 00007ff91e412e61
XMM08=0000000000000000 00007ff91e412ee7 XMM09=0000000000000000 00007ff91e412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000067 RBX=0000000000000003 RCX=00000000ffffffff RDX=00000000ffffffff
RSI=ffff8881073f61a8 RDI=ffff8881073f5640 RBP=0000000000000001 RSP=ffffc900001dfdd0
R8 =0000000000000000 R9 =ffffffff81adabcb R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000000067 R13=ffff8881073f6130 R14=ffff8881073f61a8 R15=ffffffffffffffff
RIP=ffffffff819d7f88 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa21d1eb6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557b87f588 CR3=000000011cdba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007fa21c412ee7 XMM09=0000000000000000 00007fa21c412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
