last executing test programs:

21.425055967s ago: executing program 2 (id=216):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
sendmsg$tipc(r1, &(0x7f0000000ac0)={&(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x1}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000700)="24c708e7caf13463c5b2b7d62aa4c9a8a2041b53b5bf009f66c03ed5dde738e85234df31e9be7b73b5cef615b9c29cceb2cd399e36537d77e0b660da1786b4df3217d9adbfd35006153399e9ba2fd12ba076ec4262db4a3385d6752c941bb9be368d9518aac7d870a1b10bb016f2da3174c9743d9b51fa3ef507a49a2bf4202a", 0x80}, {&(0x7f0000000780)="c91d00d4d48f8511d30d7188af40c264db42c3979a9c47f4f2d46938b5114ee96f583e7637f4c3423ff4e7a06315dec046db75f95644b19b3dc1c78f4032b3d028e2b06f36be8b640f2ea052c24506b03ee0dd08b66cc2a8a6ea786a102faf505ed3e0389edf11c35a17d18fdebf49df774d3b3c9cd9275c0d9fbf8160d13eb6b0271dcb58a9f4eb437d31df8bd6e5b70ea1c4c321a76d414c37d88f447b7a981890", 0xa2}, {&(0x7f0000000940)="11aa7015348a783b5e18d1c577b5d921e01f66bd6d5cea5902d60f78c2e8663cfbe603b2c5a846fb8ac24d432b50122f4a524d740bb5cff8200f05404aea05729f508c3e2c5d526191c98423567fbdf01a287d5f877ff54ab3784acdb54d2058ac345ceaff1c1b22acdd869e6a4db63843e6", 0x72}], 0x3, &(0x7f0000000a00)="7c2fe6e8e9f4389dc259772ba32bef69da2761f3b59d1f740b6cd98f5ea9ba262932f023bb5bf836b19c040293eaa482a94988c4fa811bf766a1f2c7d16a7794b3121588913e3b02c1d282501600e57543f58a7a856510852c06d404e2793ca12842b17fa1b351aa02685fe91a9a1f9d3a1e72a5e5476072890764de33af9b11cc79da785adbb02bc7cfa226e1c3447b8aeaf42cda0e0863b04fcac995241ab9ce2c4755a21520ac330952b41f6b12306293129ea70bcd96181137758cba", 0xbe, 0x24004810}, 0x20040000)
close(r1)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r2, 0x1, 0x0, 0xfe, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0a00001f00000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=r3], 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
write$cgroup_type(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
sendmsg$sock(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="80fc68adba15af7f973cf4a16add91ee647f5d569486b6d286d472990fc9a8ac02dd26e4266cf8173c97d10a271e391f1b8c0c9df22f3d9fbfb54c8fed6dc566af5db79ab5fb05c51158f39bc1404eee0b15579abad7b0d65ece2b92aa82637b96d0b69b", 0x64}, {&(0x7f0000000340)="d88615999d39e4bb2ac59ee93743122854d5bb69147c8b5fff3238e72fbfb549e2b864f7db49a4b968e8c75938d74ee1bfd95255c9c86c20492c021198b7369a78b87d280e8010f82a47c26e248129c385a8f50c1a2331bed9bd2bed8683a11ffa7c85d82dce897d42b817be533b1ec0ec514f57daf0dbfa2ea96b619d6cb9672c6ab6272676f672cb7e53a0ac736b48ccc5726ba22c1c895a7b95d380c3f7e1685bf82b3a9fba2c9dcb95fd1456217684794aefcad779b00e56c0f006b9fad2ec44a78e9560aeeb7ad2d894fd3de0f1717143b0d75fad910275c59de546cc1ba56c6a98c757a228bc3323413f", 0xed}, {&(0x7f0000000440)="be84054c51eb91c047ab90356a7d913ede443c", 0x13}, {&(0x7f0000000480)="fb9f26f56e8f53078829286ccab6c8ffc936a8d393f68e3dd4f518a986cc54d768", 0x21}], 0x4, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xc0}, 0x24000010)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x410)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/197, 0xc5}], 0x1}, 0x30020)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b7809dc9", 0x14}], 0x2}, 0x0)

21.288126079s ago: executing program 2 (id=217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x138}, 0x1, 0x0, 0x0, 0x4845}, 0x40010)

21.281746561s ago: executing program 2 (id=219):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x8001, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x20, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x6a, &(0x7f00000005c0)=""/106, 0x40f00, 0x28, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0xb, 0x2, 0x81}, 0x10, r1, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40), 0x10, 0x4}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd0}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f0000000b00)='syzkaller\x00', 0x401, 0x89, &(0x7f0000000b40)=""/137, 0x41000, 0x2a, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0xc, 0x4, 0x7}, 0x10, 0x992e, r0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe0000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x5, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000200)=""/166}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x1241, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xc}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r9}, &(0x7f0000000280), &(0x7f0000000400)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0xff, 0x33e, 0x800, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1d, 0x16, &(0x7f0000000840)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x49}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @tail_call, @jmp={0x5, 0x1, 0xd, 0xa, 0x5, 0xc, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x1}], &(0x7f0000000900)='GPL\x00', 0x28ec, 0xd9, &(0x7f0000000940)=""/217, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x0, 0x2, 0x2, 0xcb3}, 0x10, r1, r2, 0x1, &(0x7f0000001000)=[r3, r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f0000001040)=[{0x0, 0x5, 0x8, 0x5}], 0x10, 0x6}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r15}, &(0x7f00000006c0), &(0x7f0000000700)=r14}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r15}, &(0x7f0000000300), &(0x7f0000000680)=r14}, 0x20)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140))
recvmsg$can_j1939(r13, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f00000004c0)=""/49, 0x31}], 0x6, &(0x7f0000000580)=""/171, 0xab}, 0x40)
sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

21.207170954s ago: executing program 2 (id=222):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8040)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x20002880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getpid()
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000180001032abd7000fadbdf2505000000a1ce3ff65a50c6d5f14cf50ddf5cd1bb919765ef9881656c2e7fb52704846065c094fef68d964b047cc6faab1e1aba8b8cb43839079549ff9d122acff8cb124f4c78d97470702a37b9070a6c0d528dce7697cf93773954caf06456d1279194f2b414e3d2c9d7616c6373a83013ef48e13df19fe6bf48dca586c07db2e7f62519f2fd930fcab95e7f68598da12b6456d46b33428473b644d90501eea34bf9306ccf6ca77c0f6680b368ffc68620d823276f4cb4f662fe7fdd83125a96893edb95621d6a8fc5cbe6870e50cc"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40648c0}, 0x800)
close(0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x25dfdbfb, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9, {0x3b, 0x7}}}}]}]}, 0x48}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x8, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"})
close(r1)

20.604338651s ago: executing program 2 (id=230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x20004000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffffaf, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4800)

20.519196596s ago: executing program 2 (id=231):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000000)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x18}], &(0x7f00000000c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r0, r0], &(0x7f00000001c0)=[{0x4, 0x1, 0xb, 0xf}]}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x849000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x4c, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async)
r3 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x44, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000010) (async)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

8.568228822s ago: executing program 1 (id=239):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r1})
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000c, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x78, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, 0x0, 0x80)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e8a1cad89600"/33], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xfffffffffffffdd8, 0x1, {{0x9, 0x8, 0x8, 0x4, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7fff, 0xc, 0x8, 0x4, 0x6}, 0x1a}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x0, 0x9, 0x4, 0x5, 0x9}, 0x60}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x4, 0x10000000, 0x6, 0x4}, 0x21}}]}, {0xfffffffffffffced}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000}, 0x40040)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x98, 0x0, 0x200, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32=r11], 0x1c}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

8.363508757s ago: executing program 0 (id=240):
socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x4000) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0xc, 0x9}, {0x10, 0x2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8040) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
mount$bpf(0x0, 0x0, 0x0, 0x200401, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008007d8bcc"], 0x50)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r4}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={0x0, &(0x7f00000002c0)=""/2, &(0x7f0000000300)="215856bfa264bc6b7c216ed5ad98b3b2db5bce65e86bbb6145fe3953d4f747c30b3b986a0a", &(0x7f0000000440)="1dc28facdffec84aa221d4757cd3b76ccc4c31866619ad4fc89bc998faceeb512a85ee80b3a50661ed4f92a97dbe2e552743e99e7da80cc2087d204411f20306cf7779a6be6142834665c8c0ef3e0eaf0a10e100d39d914e8397c896689d2c12a9cd03d19244643f63871cc9ac423ffaf7909e739187d701e235f64ebec01f069ec4faba8cc650475e6eb43ad008d67e9fec54c3425a12e2690b661d9bf71672df9859ca07e536957f896a93", 0xffffffff, r6}, 0x38) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) (async)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100000ffdbdf250700000013000000080000000000006c82392444056cc10000000000", @ANYRES32, @ANYBLOB="04001a8004003780"], 0x28}], 0x1}, 0x4040)

6.804915763s ago: executing program 1 (id=241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xd, 0x1, {0x0, 0x0, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000ffff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)

5.993842504s ago: executing program 1 (id=242):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001a148b442bbd7000fcdbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x100, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006b01600000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000070160380f4000080e4000180e000010007c4ddae87e98eafd124d88300ff1e75afd14ef9c278938db451062adeb3d033cacbf736b8197b4e6f23c34448e5406a811d009e6c9052c8a04e13c6ba016ef77db93c179e3408ec444a634e4a7ab3996ece22903a9474242abd9690a646984c920c0bba7668066fa1262a3f996449102849f0da1bcce3649e795b7207d338727ca1681f9d121feee964157d9efb47177db307d1cf30af07fc0e3f4bba5c328a139bfd4b1d014b39011d40c981773e40be0b364d850327ea1d186aa1c92e8f0526593b922ded79321ca5fa78eef0dde1f4cb4147fe1a8fc99bd6362c0c0005"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4.956339171s ago: executing program 32 (id=231):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000000)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x18}], &(0x7f00000000c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r0, r0], &(0x7f00000001c0)=[{0x4, 0x1, 0xb, 0xf}]}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x849000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x4c, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async)
r3 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x44, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000010) (async)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

3.783545076s ago: executing program 0 (id=244):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r5, 0x0, 0x20000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7effffff, 0x100, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r7, &(0x7f00000000c0)=ANY=[@ANYRES32=r7], 0x5b)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
r8 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r8, 0x0, 0x20000011)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000002400070130bd7000fbdbdf25037c00000c0001800800020021000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
close(r3)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r10)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r11}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0)
write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r10], 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.777156666s ago: executing program 1 (id=245):
r0 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0xc410, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYBLOB="ebaded9138a2a0b9f62bf43a3c8976b323e7362238edfa101839e728b58691d7c790448e5b2c7708fd34d2771821598c73fcc18f4dbca29690d4b2c66fc6d471b6409de91c3919c359739e447c6ddfa5005efa205a32ee0af8d04f4c4a1ec2c75fcd383a468df8a2270d5efb90f0faeaeb76d05d085e8ac365a43399f62982f171655bda380d993ddff3e08321ed057928215343fa59310a243ea7f7272c66a560612d64381b7b9df1f07778bda0428355b22dd5706d4a50c28b530098cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}], 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
close(0xffffffffffffffff)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40)
socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d080081007c05e8fe55a10a000400110000000a600e41b0000900ac00e1060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e0036de350dd8550db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a", 0xd9}], 0x1}, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0)
r9 = socket$kcm(0x2, 0x3, 0x106)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010040000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed29d8e7ffff4300ff0043d090fc6889ae6b849a205886602a54d7823999b2a4c23044c325275b35d48feb80c3aa0ce71c2b1b", 0x34}], 0x1}, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r12}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r11}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

3.341411537s ago: executing program 1 (id=246):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x201, 0x2, 0xfffffffe, 0xf, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000009000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000700000000000000000000211a0000000000000005000000000000"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000080), 0x0, 0xc00}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000354b1799a1ceeaadc7dbdb250400ffe7080000000200000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd)
r6 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x828, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffd}, {0x10000002}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

724.294883ms ago: executing program 0 (id=247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

607.357572ms ago: executing program 0 (id=248):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x7, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0xc752f905e18da48d, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002440)={&(0x7f00000010c0)={0x1354, 0x5, 0x8, 0x301, 0x70bd2d, 0x1, {0x0, 0x0, 0x1}, [@nested={0x11ed, 0x5, 0x0, 0x1, [@typed={0x4, 0x13b}, @typed={0x65, 0x6, 0x0, 0x0, @binary="76f66023d267058f67c5ff79a94ba7b0b3b6e7698cbe0972636012387ec2d3cf2215f044fbdc61500551976490ddd843a461add1e809fddc583fdddaafa371bc6c8b31c6e2094e86406b82848b4287c819b0bdcd575c7e867330cc7a0aadce1055"}, @generic="5f858c5081f29bac2bcd1f64accc3469307f84d770d3b3750b1b2ab4e05a7fdf36889f46c53a7b7f2bd7e4d644b13bafa13f279c35003996c686faf8f5e7dae513192858157986c5de2cb3a66a7e7e7463845736b35170531197837faacc08ff7df2fa9b86712bcccd910bee2563b3499fe0ada77694a37698a2c0573b6f2bb8d2afe519c54963f44706d4b476", @generic="00ae25ba71cc4174cf10a22e197a11b5f809463550ca8365dfbcbc42c5a55d131473c2ea7be186ef39652457f1d7799d46db7d868a9c078a5aa8c5bc193899ee2da12e32d253d837199d8455a08e52f70ca7fb2fec01864c8e10713599e72ed13e65e6e4307a29ce7abffe9c9ea3b4faf71e34a75d4778054840a6ffd6d52fdcc30d395a8e7b23d3efbaec8e7303466743927f0b77e135494524bde53a84eff96a84a8c0d3f62f0ff521df1480cec1537b210643a696415453a6f67ecbd2f29759bf668352d4da7f5bb8cc0c1bbd8a3b4293c659ecee99970dba867d13b11c0750cd5b13c991d7bf52", @typed={0x1004, 0x9b, 0x0, 0x0, @binary="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"}, @generic="1a77e3"]}, @nested={0xb2, 0x14f, 0x0, 0x1, [@generic="6cf21bb0a72b9666d60ebaf73537b334d7f8cb183288ef076603b038359f9f13c4025f9c8d96801974297fa6f9e0045c7264472f44dcf3c47aeb8537e2f95ff64045335cee4a926415016b3745fb077fc4795809bba2e354c12feb11fc155fd571822d1bcc2a16346006ef98ac18ffe318c63c909fb2cd94805f234475f41d65d8046a9957a3a40a5bd6226826059a0b75b8578a2a1f2c61d13d", @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@local}]}, @generic="f7bc9476c9fb5bced61783fa311e74da8ca22e88503586fc725e8dad4b916bd18981ec32c07d362392919c314f91015fdb8f3f1a19eb43b3937eba0ab03deb266be31cfa5f6a6ecc74b623c33e5b26e812716ae6c161f64ba22b1c505eadd4c0fc798ecf4f0cd2af63edbe34c8c6d7cb1a5b71ffe7abee051c9c29363761ee88942b3f1eb8f78137e2db4bc1813c7a942a5300ddff356267bfb808"]}, 0x1354}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400208b00000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

595.78559ms ago: executing program 3 (id=243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB="30000000240001002abd7000fedbdf25090000001c0005"], 0x30}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x290}}, 0x24048010)

455.331704ms ago: executing program 1 (id=249):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000000404000006000b007b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x5, &(0x7f0000000540)=@raw=[@ldst={0x0, 0x0, 0x1, 0x5, 0x8, 0x100, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @jmp={0x5, 0x0, 0x5, 0x8, 0xb, 0xe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x43}], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xb, 0xffffffc0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8a, 0x8, 0x1ff, 0x80040001}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2800000000000000, 0x800}, 0x405, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5a20, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4090, 0x3ffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000240), &(0x7f00000006c0), 0x1040000}, 0x20)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{0x0}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x20}, 0x4004)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xf2a2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8460, 0x4, @perf_config_ext={0x8, 0x100}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

454.749973ms ago: executing program 3 (id=250):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x117fa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x117fa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x2, 0x0) (async)
r1 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, &(0x7f0000000000)={r1}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, &(0x7f0000000000)={r1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43dbb19703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43dbb19703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
sendmsg$sock(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f", 0x9}, {&(0x7f0000000100)}], 0x2}, 0x4804) (async)
sendmsg$sock(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f", 0x9}, {&(0x7f0000000100)}], 0x2}, 0x4804)
recvmsg(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/101, 0x65}], 0x1}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) (async)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014)

1.113588ms ago: executing program 0 (id=251):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8000000000000001}, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060108000034e40000000000060000050001000600000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640000000000500050002"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711096000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

0s ago: executing program 0 (id=252):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x0, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7ffffffffffffffd}, 0x828, 0x0, 0x0, 0x3, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000140)}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94)
sendmsg$inet(r6, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18f3ffff01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000217e7b2c000000000600000018560000060000000000000000000000850000001c00000003a3010001000000147b2000100000ffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0xfffffff4, 0x9a, &(0x7f0000000440)=""/154, 0x41000, 0x30, '\x00', 0x0, 0x1b, r11, 0x8, &(0x7f0000000500)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000005c0)=[r13], &(0x7f0000000600)=[{0x2, 0x3, 0x9, 0x9}, {0x0, 0x5, 0x5, 0x9}, {0x2, 0x2, 0xb, 0x7}, {0x1, 0x5, 0xa, 0x7}, {0x1, 0x1, 0xd, 0x3}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x9}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43576' (ED25519) to the list of known hosts.
syzkaller login: [   57.787364][ T5593] cgroup: Unknown subsys name 'net'
[   57.881114][ T5593] cgroup: Unknown subsys name 'cpuset'
[   57.885024][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.721744][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.115303][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.118305][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.121201][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.125010][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.128918][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.186514][ T4999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.191946][ T4999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.196583][ T4999] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.201032][ T4999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.205718][ T4999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.241505][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.246979][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.251891][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.255398][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.260027][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.692399][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.695489][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.697991][ T5609] bridge_slave_0: entered allmulticast mode
[   64.700709][ T5609] bridge_slave_0: entered promiscuous mode
[   64.711157][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.713895][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.716651][ T5609] bridge_slave_1: entered allmulticast mode
[   64.719690][ T5609] bridge_slave_1: entered promiscuous mode
[   64.740398][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.752058][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.796958][ T5609] team0: Port device team_slave_0 added
[   64.819157][ T5609] team0: Port device team_slave_1 added
[   64.865734][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.867898][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.875099][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.886541][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.889025][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.897729][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.909143][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.911394][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.913668][ T5618] bridge_slave_0: entered allmulticast mode
[   64.916150][ T5618] bridge_slave_0: entered promiscuous mode
[   64.930333][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.932439][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.934497][ T5618] bridge_slave_1: entered allmulticast mode
[   64.937440][ T5618] bridge_slave_1: entered promiscuous mode
[   64.966842][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.984025][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.999174][ T5609] hsr_slave_0: entered promiscuous mode
[   65.002001][ T5609] hsr_slave_1: entered promiscuous mode
[   65.042043][ T5618] team0: Port device team_slave_0 added
[   65.057415][ T5618] team0: Port device team_slave_1 added
[   65.101453][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.103589][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.105819][ T5623] bridge_slave_0: entered allmulticast mode
[   65.108765][ T5623] bridge_slave_0: entered promiscuous mode
[   65.111864][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.114145][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.123145][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.137276][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.140685][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.143482][ T5623] bridge_slave_1: entered allmulticast mode
[   65.147071][ T5623] bridge_slave_1: entered promiscuous mode
[   65.151134][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.153804][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.163818][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.207914][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.212278][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.280767][ T5618] hsr_slave_0: entered promiscuous mode
[   65.283952][ T5618] hsr_slave_1: entered promiscuous mode
[   65.287482][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   65.289652][ T5618] Cannot create hsr debugfs directory
[   65.292678][ T5623] team0: Port device team_slave_0 added
[   65.296357][ T5623] team0: Port device team_slave_1 added
[   65.322767][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.325026][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.333727][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.339052][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.341552][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.349506][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.410523][ T5623] hsr_slave_0: entered promiscuous mode
[   65.412891][ T5623] hsr_slave_1: entered promiscuous mode
[   65.414871][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   65.416506][ T5623] Cannot create hsr debugfs directory
[   65.471994][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.480001][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.491230][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.496996][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.511197][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.515969][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.518511][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.522949][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.658899][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.664791][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.667472][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.672909][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.675609][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.681394][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.683955][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.689534][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.753111][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.760718][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.765047][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.771037][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.775251][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.777744][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.783288][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.786285][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.791691][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.820022][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   65.834164][  T812] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.836853][  T812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.849378][  T812] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.851495][  T812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.920387][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.953178][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   65.969223][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.972025][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.992867][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.994973][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.014205][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.053479][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   66.070847][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.073654][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.094522][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.097381][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.190060][ T5612] Bluetooth: hci0: command tx timeout
[   66.269871][ T5612] Bluetooth: hci1: command tx timeout
[   66.269885][ T4999] Bluetooth: hci2: command tx timeout
[   66.374858][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.435734][ T5609] veth0_vlan: entered promiscuous mode
[   66.447480][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.463896][ T5609] veth1_vlan: entered promiscuous mode
[   66.522286][ T5609] veth0_macvtap: entered promiscuous mode
[   66.533205][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.547196][ T5623] veth0_vlan: entered promiscuous mode
[   66.551337][ T5609] veth1_macvtap: entered promiscuous mode
[   66.567709][ T5623] veth1_vlan: entered promiscuous mode
[   66.587605][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.594470][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.626873][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.632056][ T5618] veth0_vlan: entered promiscuous mode
[   66.639251][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.643870][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.657295][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.662172][ T5623] veth0_macvtap: entered promiscuous mode
[   66.668537][ T5623] veth1_macvtap: entered promiscuous mode
[   66.674579][ T5618] veth1_vlan: entered promiscuous mode
[   66.722728][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.744442][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.749834][ T5618] veth0_macvtap: entered promiscuous mode
[   66.780510][ T5618] veth1_macvtap: entered promiscuous mode
[   66.784826][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.788977][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.797025][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.797045][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.804919][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.808768][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.837508][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.856809][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.876660][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.884065][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.888186][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.899231][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.923985][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.927422][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.937746][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.941735][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.952867][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.041706][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.046690][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.047741][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.055546][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.099186][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.103582][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.278412][ T5730] netlink: 'syz.2.3': attribute type 21 has an invalid length.
[   67.280778][ T5730] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.284769][ T5730] netlink: 'syz.2.3': attribute type 5 has an invalid length.
[   67.296411][ T5730] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.310156][ T5730] Zero length message leads to an empty skb
[   67.325160][ T5727] =======================================================
[   67.325160][ T5727] WARNING: The mand mount option has been deprecated and
[   67.325160][ T5727]          and is ignored by this kernel. Remove the mand
[   67.325160][ T5727]          option from the mount to silence this warning.
[   67.325160][ T5727] =======================================================
[   67.349690][ T5727] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.361905][ T5727] proc: Bad value for 'gid'
[   67.417226][ T5734] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.271399][ T4999] Bluetooth: hci0: command tx timeout
[   68.361845][ T5612] Bluetooth: hci2: command tx timeout
[   68.364723][ T4999] Bluetooth: hci1: command tx timeout
[   68.926481][ T5778] netlink: 'syz.1.17': attribute type 22 has an invalid length.
[   69.272402][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   69.331011][ T5804] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.384563][ T5798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.473947][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   70.356262][ T4999] Bluetooth: hci0: command tx timeout
[   70.429126][ T4999] Bluetooth: hci1: command tx timeout
[   70.429197][ T5612] Bluetooth: hci2: command tx timeout
[   70.986379][ T5838] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   70.999412][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'.
[   71.158299][ T5848] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   71.169836][ T5848] netlink: 'syz.0.36': attribute type 2 has an invalid length.
[   72.406472][ T5878] netlink: 10 bytes leftover after parsing attributes in process `syz.2.43'.
[   72.434763][ T5612] Bluetooth: hci0: command tx timeout
[   72.511009][ T4999] Bluetooth: hci2: command tx timeout
[   72.512946][ T5612] Bluetooth: hci1: command tx timeout
[   73.048951][ T5912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51'.
[   73.056866][ T5912] netlink: 'syz.2.51': attribute type 3 has an invalid length.
[   73.149148][ T5922] netlink: 'syz.0.53': attribute type 29 has an invalid length.
[   73.152726][ T5917] netlink: 'syz.0.53': attribute type 29 has an invalid length.
[   73.155270][ T5922] netlink: 'syz.0.53': attribute type 29 has an invalid length.
[   73.382468][ T5930] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.57'.
[   73.424276][ T5930] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.57'.
[   75.723636][ T5950] netlink: 11 bytes leftover after parsing attributes in process `syz.0.61'.
[   75.726459][ T5952] sch_tbf: peakrate 9 is lower than or equals to rate 38788 !
[   75.787076][ T5956] netlink: 112 bytes leftover after parsing attributes in process `syz.1.64'.
[   75.791813][ T5956] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   75.846843][ T5956] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   75.884158][ T5959] netlink: 'syz.2.63': attribute type 9 has an invalid length.
[   76.366095][ T5974] netlink: 'syz.0.70': attribute type 13 has an invalid length.
[   76.368698][ T5974] netlink: 'syz.0.70': attribute type 58 has an invalid length.
[   76.371126][ T5974] netlink: 136 bytes leftover after parsing attributes in process `syz.0.70'.
[   76.487450][ T5973] infiniband syz1: set active
[   76.491522][ T5973] infiniband syz1: added bond_slave_0
[   76.513869][ T5973] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   76.519873][ T5973] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   76.526916][ T5973] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   76.560518][ T5973] RDS/IB: syz1: added
[   76.565305][ T5973] smc: adding ib device syz1 with port count 1
[   76.569063][ T5973] smc:    ib device syz1 port 1 has no pnetid
[   76.682704][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.685525][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   76.688604][ T1380] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[   76.799796][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   76.944400][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.72'.
[   77.027555][ T5981] netlink: 68 bytes leftover after parsing attributes in process `syz.1.72'.
[   77.040109][ T5982] netlink: 'syz.1.72': attribute type 6 has an invalid length.
[   77.057588][ T5981] netlink: 'syz.1.72': attribute type 6 has an invalid length.
[   77.225582][ T5995] netlink: 'syz.0.76': attribute type 21 has an invalid length.
[   77.822723][ T6005] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET)
[   78.071023][ T6008] __nla_validate_parse: 4 callbacks suppressed
[   78.071033][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.81'.
[   78.285655][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.83'.
[   78.302775][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'.
[   78.302843][ T5612] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[   79.433480][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'.
[   79.500662][ T6082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.98'.
[   79.508156][ T6081] can: request_module (can-proto-4) failed.
[   79.593616][ T6093] raw_sendmsg: syz.2.101 forgot to set AF_INET. Fix it!
[   79.732191][ T6100] validate_nla: 1 callbacks suppressed
[   79.732201][ T6100] netlink: 'syz.0.103': attribute type 9 has an invalid length.
[   80.075078][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[   80.089435][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[   80.126946][ T6123] netlink: 10 bytes leftover after parsing attributes in process `syz.2.109'.
[   80.728835][ T6134] netlink: 'syz.0.115': attribute type 2 has an invalid length.
[   80.737124][ T6134] netlink: 'syz.0.115': attribute type 2 has an invalid length.
[   80.894071][ T6140] netlink: 'syz.2.117': attribute type 25 has an invalid length.
[   80.903998][ T6141] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.117'.
[   80.925153][ T6140] netlink: 'syz.2.117': attribute type 3 has an invalid length.
[   80.932382][ T6140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.117'.
[   81.114185][ T6153] netlink: 'syz.2.122': attribute type 21 has an invalid length.
[   81.681897][ T6173] netlink: 'syz.0.126': attribute type 6 has an invalid length.
[   81.858919][ T6177] sch_tbf: burst 1 is lower than device bridge_slave_0 mtu (1514) !
[   82.565041][ T6071] syz.0.94 (6071) used greatest stack depth: 19936 bytes left
[   83.666288][ T6232] __nla_validate_parse: 5 callbacks suppressed
[   83.666300][ T6232] netlink: 1 bytes leftover after parsing attributes in process `syz.1.142'.
[   83.687193][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'.
[   84.159521][ T5612] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[   84.364386][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'.
[   84.671175][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[   84.753168][ T6270] netlink: 'syz.0.152': attribute type 27 has an invalid length.
[   84.785903][ T6270] netlink: 'syz.0.152': attribute type 3 has an invalid length.
[   84.795376][ T6270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.152'.
[   84.850705][ T6272] netlink: 'syz.0.152': attribute type 27 has an invalid length.
[   84.868546][ T6274] netlink: 763 bytes leftover after parsing attributes in process `syz.2.153'.
[   84.872387][ T6272] netlink: 'syz.0.152': attribute type 3 has an invalid length.
[   84.877626][ T6274] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   84.883804][ T6272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.152'.
[   84.886522][ T6274] netlink: 'syz.2.153': attribute type 8 has an invalid length.
[   84.891421][ T6274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.153'.
[   84.904230][ T6274] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   84.914229][ T6274] netlink: 'syz.2.153': attribute type 8 has an invalid length.
[   84.922795][ T6274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.153'.
[   85.337668][ T6284] netlink: 'syz.1.157': attribute type 6 has an invalid length.
[   85.339954][ T6284] netlink: 1048 bytes leftover after parsing attributes in process `syz.1.157'.
[   85.342924][ T6284] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[   85.368898][ T6288] tun0: tun_chr_ioctl cmd 1074025677
[   85.373027][ T6288] tun0: linktype set to 780
[   86.651544][ T6331] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[   86.860318][ T6341] siw: device registration error -23
[   86.903738][ T6350] : port 1(ip6gretap0) entered blocking state
[   86.906369][ T6350] : port 1(ip6gretap0) entered disabled state
[   86.908888][ T6350] ip6gretap0: entered allmulticast mode
[   86.912183][ T6350] ip6gretap0: entered promiscuous mode
[   86.917313][ T6350] ip6gretap0: left allmulticast mode
[   86.919088][ T6350] ip6gretap0: left promiscuous mode
[   86.921477][ T6350] : port 1(ip6gretap0) entered disabled state
[   86.960531][ T6354] xt_time: invalid argument - start or stop time greater than 23:59:59
[   86.974223][   T31] cfg80211: failed to load regulatory.db
[   89.091194][ T6368] sctp: [Deprecated]: syz.0.178 (pid 6368) Use of int in maxseg socket option.
[   89.091194][ T6368] Use struct sctp_assoc_value instead
[   89.099296][ T6371] __nla_validate_parse: 6 callbacks suppressed
[   89.099307][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'.
[   89.108062][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'.
[   89.113555][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.183'.
[   89.197562][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.183'.
[   89.253467][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   89.337613][ T6373] netlink: 4396 bytes leftover after parsing attributes in process `syz.2.183'.
[   89.338538][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   89.344370][ T6373] openvswitch: netlink: Flow key attr not present in new flow.
[   89.483866][ T6395] netlink: 830 bytes leftover after parsing attributes in process `syz.1.190'.
[   89.684263][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'.
[   89.691830][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'.
[   89.936530][ T6419] validate_nla: 4 callbacks suppressed
[   89.936541][ T6419] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   90.269082][ T6445] netlink: 'syz.2.205': attribute type 39 has an invalid length.
[   90.273534][ T6444] Driver unsupported XDP return value 0 on prog  (id 148) dev N/A, expect packet loss!
[   90.502369][ T6453] netlink: 'syz.1.207': attribute type 21 has an invalid length.
[   90.637672][ T6462] netlink: 'syz.0.209': attribute type 4 has an invalid length.
[   90.667729][ T6462] @: renamed from sit0 (while UP)
[   91.063721][ T6472] tap0: tun_chr_ioctl cmd 1074025676
[   91.076624][ T6472] tap0: owner set to 0
[   91.435166][ T6505] smbdirect: ib_dev[syz1] renamed to [syz0]
[   91.491306][ T6513] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   91.494557][ T6513] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   91.546912][ T6514] netlink: 'syz.1.223': attribute type 4 has an invalid length.
[   91.569678][ T6516] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.955955][ T6530] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   91.959394][ T6530] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   91.963296][ T6530] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   92.033532][ T6533] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   93.009433][ T6552] netlink: 'syz.0.236': attribute type 13 has an invalid length.
[   99.164733][    C0] clocksource: Marking clocksource tsc unstable due to frequency skew
[   99.172055][    C0] clocksource: Watchdog               kvm-clock interval:          1629831ns
[   99.176003][    C0] clocksource: Clocksource                  tsc interval:          1618725ns
[   99.179663][    C0] tsc: Marking TSC unstable due to clocksource watchdog
[  104.071362][ T6570] __nla_validate_parse: 12 callbacks suppressed
[  104.071382][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'.
[  104.077420][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'.
[  104.081502][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'.
[  107.740624][ T4999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.744476][ T4999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.747719][ T4999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.755494][ T4999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.759610][ T4999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  108.166455][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.168660][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.170939][ T6586] bridge_slave_0: entered allmulticast mode
[  108.173491][ T6586] bridge_slave_0: entered promiscuous mode
[  108.176865][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.180079][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.182242][ T6586] bridge_slave_1: entered allmulticast mode
[  108.184804][ T6586] bridge_slave_1: entered promiscuous mode
[  108.206749][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.211988][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.230680][ T6586] team0: Port device team_slave_0 added
[  108.233929][ T6586] team0: Port device team_slave_1 added
[  108.250756][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.253170][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.261283][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.265412][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.267405][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.275764][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.321847][ T6586] hsr_slave_0: entered promiscuous mode
[  108.324536][ T6586] hsr_slave_1: entered promiscuous mode
[  108.326627][ T6586] debugfs: 'hsr0' already exists in 'hsr'
[  108.328675][ T6586] Cannot create hsr debugfs directory
[  108.460285][ T6586] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.751922][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  108.756793][ T6586] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.877104][ T6605] validate_nla: 1 callbacks suppressed
[  108.877120][ T6605] netlink: 'syz.1.245': attribute type 4 has an invalid length.
[  108.964652][ T6609] netlink: 'syz.0.244': attribute type 2 has an invalid length.
[  108.967294][ T6609] netlink: 'syz.0.244': attribute type 2 has an invalid length.
[  109.070778][ T5612] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  109.105775][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  109.111264][ T6586] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.217103][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  109.309925][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.788689][ T5612] Bluetooth: hci3: command tx timeout
[  110.244997][ T6586] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.275794][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.417612][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.430357][ T6586] 8021q: adding VLAN 0 to HW filter on device team0
[  110.436492][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.438773][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.449280][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.451485][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.692729][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.734245][ T6586] veth0_vlan: entered promiscuous mode
[  110.743268][ T6586] veth1_vlan: entered promiscuous mode
[  110.766939][ T6586] veth0_macvtap: entered promiscuous mode
[  110.774753][ T6586] veth1_macvtap: entered promiscuous mode
[  110.787426][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.798886][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.809632][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.823294][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.827713][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.584848][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.821415][ T6633] netlink: 'syz.0.247': attribute type 17 has an invalid length.
[  111.823617][ T6633] netlink: 152 bytes leftover after parsing attributes in process `syz.0.247'.
[  111.826644][ T6633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.857417][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.866988][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.897858][ T5612] Bluetooth: hci3: command tx timeout
[  111.901814][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.904398][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.019849][ T6637] netlink: 'syz.3.243': attribute type 5 has an invalid length.
[  112.096212][ T6640] wlan0 speed is unknown, defaulting to 1000
[  112.107312][ T6640] wlan0 speed is unknown, defaulting to 1000
[  112.125064][ T6640] wlan0 speed is unknown, defaulting to 1000
[  112.141887][ T6640] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  112.167222][ T6640] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  112.197462][ T6640] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  112.223402][ T6646] netlink: 'syz.3.250': attribute type 1 has an invalid length.
[  112.230644][ T6640] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.236149][ T6645] netlink: 'syz.3.250': attribute type 1 has an invalid length.
[  112.244984][ T6646] netlink: 176 bytes leftover after parsing attributes in process `syz.3.250'.
[  112.384224][ T6645] netlink: 176 bytes leftover after parsing attributes in process `syz.3.250'.
[  112.413628][ T6640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  112.448143][ T6640] wlan0 speed is unknown, defaulting to 1000
[  112.452347][ T6640] wlan0 speed is unknown, defaulting to 1000
[  112.457641][ T6640] wlan0 speed is unknown, defaulting to 1000
[  112.462700][ T6642] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[  112.477039][ T6642] team0: Port device vlan0 added
[  112.479775][ T6640] wlan0 speed is unknown, defaulting to 1000
[  114.117921][ T5612] Bluetooth: hci3: command tx timeout
[  116.188113][ T5612] Bluetooth: hci3: command tx timeout
[  127.841688][ T6666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.848154][ T6666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.856151][ T6666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.860158][ T6666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.865108][ T6666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.985194][ T6666] Bluetooth: hci5: command 0x1005 tx timeout
[  129.988850][ T4999] Bluetooth: hci5: Opcode 0x1005 failed: -110
[  130.006349][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.009557][ T6666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.012198][ T6666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.014898][ T4999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.018568][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.022022][ T4999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.025642][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.028657][ T4999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.323707][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.333844][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.337023][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.340387][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.343158][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  132.108385][   T54] Bluetooth: hci4: command tx timeout
[  132.111857][ T6667] Bluetooth: hci5: command tx timeout
[  132.428037][ T6667] Bluetooth: hci6: command tx timeout
[  134.188406][   T54] Bluetooth: hci4: command tx timeout
[  134.192271][ T6667] Bluetooth: hci5: command tx timeout
[  134.508003][ T6667] Bluetooth: hci6: command tx timeout
[  136.269381][   T54] Bluetooth: hci4: command tx timeout
[  136.272849][ T6667] Bluetooth: hci5: command tx timeout
[  136.588188][ T6667] Bluetooth: hci6: command tx timeout
[  138.111825][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.114827][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  138.118903][ T1380] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  138.348442][ T6667] Bluetooth: hci5: command tx timeout
[  138.350745][   T54] Bluetooth: hci4: command tx timeout
[  138.668031][   T54] Bluetooth: hci6: command tx timeout
[  188.908588][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  188.913682][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  188.917347][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  188.926564][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  188.929293][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.058918][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  189.065258][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  189.068349][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  189.071669][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  189.075015][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  191.067879][ T6667] Bluetooth: hci7: command tx timeout
[  191.189528][ T6667] Bluetooth: hci8: command tx timeout
[  191.395733][ T6667] Bluetooth: hci1: command 0x0406 tx timeout
[  191.780842][   T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  191.785442][   T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  191.789422][   T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  191.792992][   T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  191.795858][   T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  193.150677][   T54] Bluetooth: hci7: command tx timeout
[  193.228050][   T54] Bluetooth: hci8: command tx timeout
[  195.232819][   T54] Bluetooth: hci7: command tx timeout
[  195.308012][   T54] Bluetooth: hci8: command tx timeout
[  198.352557][   T54] Bluetooth: hci7: command tx timeout
[  198.354147][   T54] Bluetooth: hci8: command tx timeout
[  199.590277][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  199.592416][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  199.594923][ T1380] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  217.537773][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  217.539740][    C0] rcu: 	0-....: (1 GPs behind) idle=3ce4/1/0x4000000000000000 softirq=17388/17395 fqs=3811
[  217.543280][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  217.545136][    C0] rcu: 	 number:  1302567          0            0
[  217.546920][    C0] rcu: 	cputime:     8446      44052           34   ==> 52500(ms)
[  217.549454][    C0] rcu: 	(t=10502 jiffies g=12821 q=5016 ncpus=2)
[  217.551289][    C0] CPU: 0 UID: 0 PID: 6535 Comm: syz.2.231 Not tainted syzkaller #0 PREEMPT(full) 
[  217.551298][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.551303][    C0] RIP: 0010:__kernel_text_address+0x0/0x30
[  217.551321][    C0] Code: c1 03 38 c1 7c c1 48 c7 c7 80 70 30 90 e8 a8 37 a1 00 eb b3 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 53 48 89 fb e8 33 00 00 00 48 81 fb 00 00 9c 91 0f 93
[  217.551328][    C0] RSP: 0018:ffffc90000006e60 EFLAGS: 00000246
[  217.551336][    C0] RAX: 0000000000000000 RBX: ffffc90000006ed0 RCX: 0000000000000103
[  217.551341][    C0] RDX: 0000000000000008 RSI: ffffffff8e21d80b RDI: ffffffff8b212818
[  217.551346][    C0] RBP: ffffc90000006f10 R08: ffffc90000007b10 R09: 0000000000000000
[  217.551351][    C0] R10: ffffc90000006ed8 R11: fffff52000000ddd R12: ffff8881721f3b00
[  217.551356][    C0] R13: ffff888106789380 R14: dffffc0000000000 R15: 1ffff92000000dda
[  217.551361][    C0] FS:  00007f07d43f66c0(0000) GS:ffff88818dc89000(0000) knlGS:0000000000000000
[  217.551368][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.551372][    C0] CR2: 000000110c347eb4 CR3: 0000000114a22000 CR4: 00000000000006f0
[  217.551396][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  217.551401][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  217.551405][    C0] Call Trace:
[  217.551410][    C0]  <IRQ>
[  217.551413][    C0]  unwind_get_return_address+0x4d/0x90
[  217.551426][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  217.551439][    C0]  arch_stack_walk+0xfb/0x150
[  217.551456][    C0]  ? ieee80211_rx_list+0x29f8/0x3740
[  217.551470][    C0]  stack_trace_save+0xa9/0x100
[  217.551482][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  217.551495][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  217.551510][    C0]  kasan_save_track+0x3e/0x80
[  217.551517][    C0]  ? kasan_save_track+0x3e/0x80
[  217.551523][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  217.551530][    C0]  ? __kmalloc_noprof+0x35c/0x760
[  217.551537][    C0]  ? cfg80211_inform_single_bss_data+0x934/0x1af0
[  217.551548][    C0]  ? cfg80211_inform_bss_data+0x266/0x3c40
[  217.551557][    C0]  ? cfg80211_inform_bss_frame_data+0x3c7/0x730
[  217.551567][    C0]  ? ieee80211_bss_info_update+0x794/0xa40
[  217.551576][    C0]  ? ieee80211_scan_rx+0x552/0xa40
[  217.551608][    C0]  ? __pfx_kasan_save_track+0x10/0x10
[  217.551616][    C0]  __kasan_kmalloc+0x93/0xb0
[  217.551625][    C0]  __kmalloc_noprof+0x35c/0x760
[  217.551633][    C0]  ? cfg80211_inform_single_bss_data+0x934/0x1af0
[  217.551643][    C0]  ? __kmalloc_noprof+0x1b8/0x760
[  217.551652][    C0]  cfg80211_inform_single_bss_data+0x934/0x1af0
[  217.551669][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  217.551692][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  217.551703][    C0]  ? cfg80211_inform_bss_data+0x253/0x3c40
[  217.551716][    C0]  cfg80211_inform_bss_data+0x266/0x3c40
[  217.551730][    C0]  ? trace_call_bpf+0xc2/0xb70
[  217.551737][    C0]  ? lock_acquire+0x106/0x350
[  217.551751][    C0]  ? trace_call_bpf+0xc2/0xb70
[  217.551761][    C0]  ? trace_call_bpf+0x7d0/0xb70
[  217.551769][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  217.551779][    C0]  ? trace_call_bpf+0xc2/0xb70
[  217.551788][    C0]  ? ktime_get+0x45/0x220
[  217.551798][    C0]  ? lock_acquire+0x106/0x350
[  217.551808][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  217.551818][    C0]  ? ktime_get+0x45/0x220
[  217.551831][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  217.551844][    C0]  ? perf_trace_preemptirq_template+0x26f/0x350
[  217.551857][    C0]  ? irqentry_exit+0x218/0x760
[  217.551865][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  217.551886][    C0]  ? irqentry_exit+0x218/0x760
[  217.551899][    C0]  cfg80211_inform_bss_frame_data+0x3c7/0x730
[  217.551917][    C0]  ieee80211_bss_info_update+0x794/0xa40
[  217.551930][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  217.551951][    C0]  ieee80211_scan_rx+0x552/0xa40
[  217.551964][    C0]  ieee80211_rx_list+0x29f8/0x3740
[  217.551986][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  217.552004][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  217.552013][    C0]  ? lock_acquire+0x106/0x350
[  217.552021][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  217.552037][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  217.552045][    C0]  ieee80211_rx_napi+0x1b1/0x3e0
[  217.552085][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  217.552097][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  217.552109][    C0]  ? skb_dequeue+0x124/0x160
[  217.552121][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  217.552134][    C0]  tasklet_action_common+0x2da/0x4b0
[  217.552148][    C0]  handle_softirqs+0x22a/0x840
[  217.552158][    C0]  ? __irq_exit_rcu+0xca/0x220
[  217.552170][    C0]  __irq_exit_rcu+0xca/0x220
[  217.552179][    C0]  irq_exit_rcu+0x9/0x30
[  217.552185][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  217.552197][    C0]  </IRQ>
[  217.552200][    C0]  <TASK>
[  217.552203][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  217.552226][    C0] RIP: 0010:__srcu_check_read_flavor+0xb/0x250
[  217.552234][    C0] Code: 01 0a cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 89 f3 49 89 fe 83 fe 02 74 17 83 fb 04 74 12
[  217.552240][    C0] RSP: 0018:ffffc90007d671a8 EFLAGS: 00000293
[  217.552247][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  217.552251][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8e9bcdc0
[  217.552256][    C0] RBP: ffffffff823ca9ba R08: 0000000000000000 R09: 0000000000000000
[  217.552260][    C0] R10: dffffc0000000000 R11: fffff940008f8719 R12: 0000000000000002
[  217.552265][    C0] R13: ffffffff8e95ce20 R14: 0000000000000000 R15: 0000000000000000
[  217.552271][    C0]  ? pfn_valid+0xba/0x480
[  217.552287][    C0]  ? pfn_valid+0xba/0x480
[  217.552293][    C0]  lock_acquire+0x2bd/0x350
[  217.552305][    C0]  ? pfn_valid+0xba/0x480
[  217.552314][    C0]  pfn_valid+0xd6/0x480
[  217.552320][    C0]  ? pfn_valid+0xba/0x480
[  217.552329][    C0]  page_table_check_set+0x25/0x510
[  217.552340][    C0]  copy_pmd_range+0x486a/0x5970
[  217.552356][    C0]  ? ktime_get+0x1f5/0x220
[  217.552380][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  217.552389][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  217.552397][    C0]  ? irqentry_exit+0x218/0x760
[  217.552417][    C0]  copy_page_range+0xbe8/0x11f0
[  217.552437][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  217.552458][    C0]  dup_mmap+0xf40/0x1d90
[  217.552465][    C0]  ? kvm_clock_get_cycles+0x47/0x60
[  217.552487][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  217.552508][    C0]  ? copy_mm+0x130/0x4a0
[  217.552515][    C0]  ? uprobe_start_dup_mmap+0xcd/0x160
[  217.552527][    C0]  copy_mm+0x13b/0x4a0
[  217.552537][    C0]  copy_process+0x1f1c/0x4440
[  217.552555][    C0]  ? copy_process+0xd87/0x4440
[  217.552569][    C0]  ? __pfx_copy_process+0x10/0x10
[  217.552584][    C0]  kernel_clone+0x284/0x8f0
[  217.552592][    C0]  ? irqentry_exit+0x218/0x760
[  217.552599][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  217.552606][    C0]  ? irqentry_exit+0x218/0x760
[  217.552614][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  217.552633][    C0]  __x64_sys_clone+0x1b6/0x230
[  217.552644][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  217.552662][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.552675][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.552683][    C0]  do_syscall_64+0x15f/0xf80
[  217.552695][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.552702][    C0] RIP: 0033:0x7f07d619cdd9
[  217.552711][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.552717][    C0] RSP: 002b:00007f07d43f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  217.552724][    C0] RAX: ffffffffffffffda RBX: 00007f07d6415fa0 RCX: 00007f07d619cdd9
[  217.552729][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000849000
[  217.552733][    C0] RBP: 00007f07d6232d69 R08: 0000000000000000 R09: 0000000000000000
[  217.552738][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  217.552742][    C0] R13: 00007f07d6416038 R14: 00007f07d6415fa0 R15: 00007ffc5357f6f8
[  217.552757][    C0]  </TASK>
[  218.786989][    C0] sched: DL replenish lagged too much
