last executing test programs:

1m25.017505426s ago: executing program 0 (id=169):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x1, 0x10}, 0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0x91}, @map_val={0x18, 0x6, 0x2, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xf, 0x4, 0x9, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1df3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x39, &(0x7f0000000240)=""/57, 0x40f00, 0x68, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x8, 0x73b6, 0x34c1443a}, 0x10, 0xc69c, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, 0x1, r2, r3, r4, r5], 0x0, 0x10, 0x35f}, 0x94)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r6, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0x74, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x5}}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000b00)=""/219, 0x34, 0xdb, 0x0, 0x1, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r6, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0], <r11=>0x0, 0xb1, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0x1b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x3, 0x3, 0x0, 0x2, 0x20, 0xffffffffffffffff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x0, 0xa, 0x0, 0x5, 0x100, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x59, '\x00', r8, @fallback=0x1c, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x2, 0x3, 0x2, 0x6}, 0x10, r11, r6, 0x2, 0x0, &(0x7f0000000f80)=[{0x4, 0x1, 0x9, 0x7}, {0x0, 0x1, 0x8, 0x6}]}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@cgroup, 0x1e, 0x1, 0x5, &(0x7f0000001080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0], &(0x7f0000001140)=[0x0, 0x0], <r13=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001200)='\x00', <r14=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@ifindex=r8, r6, 0x26, 0x30, 0x0, @void, @void, @void, @value=r14, r13}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000013c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r15=>0x0, 0xfb, &(0x7f0000001480)=[{}, {}], 0x10, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000001540)}}, 0x10)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0xb, &(0x7f0000001280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x9, 0x1, 0x2, 0xfffffffffffffff0}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000001300)='syzkaller\x00', 0x5, 0x64, &(0x7f0000001340)=""/100, 0x41000, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r15, r12, 0x4, &(0x7f00000016c0)=[r2, r0, r0, r1], &(0x7f0000001700)=[{0x5, 0x4, 0x6}, {0x3, 0x1, 0x1, 0x1}, {0x1, 0x5, 0x3, 0xc}, {0x0, 0x2, 0x4}], 0x10, 0xe5}, 0x94)
perf_event_open(&(0x7f0000001840)={0x3, 0x80, 0x5, 0x0, 0x6, 0x3, 0x0, 0x80000000, 0x100, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000001800)}, 0x10c000, 0x8, 0x7, 0x3, 0x12e8, 0xffffffcc, 0x7, 0x0, 0x5ad, 0x0, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xb)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x7, 0x3ff, 0x1, 0x8, 0x30400, r5, 0x8, '\x00', r8, r9, 0x5, 0x3, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001940)={r12, r17}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r16, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000001a80)=[{}, {}], 0x10, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10)
r19 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001cc0)={r19})
r20 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x8c21, 0x0, 0x1, 0x4, '\x00', 0x0, r9, 0x5, 0x1, 0x3}, 0x50)
r21 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x0, 0x4, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb859}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000001dc0)='GPL\x00', 0xfffffffb, 0xfa, &(0x7f0000001e00)=""/250, 0x40f00, 0x0, '\x00', r10, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f00)={0x2, 0xd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001f40)=[r0], &(0x7f0000001f80)=[{0x3, 0x1, 0x4}], 0x10, 0x1}, 0x94)
r22 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000020c0)={r16, r18, 0x25, 0x2, @void}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002080)={@fallback=r9, r6, 0x8, 0x200e, r6, @value=r22}, 0x20)
sendmsg$inet(r19, &(0x7f0000002580)={&(0x7f0000002100)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002140)="be0808", 0x3}, {&(0x7f0000002180)="4d705037f06c04e8b09e3f105f43fa0d8288022418f94a16066cf9241bee6bbf839104ac95d506a4a194bab36b91e1bb49bffddf389cf9e3059933258a411f1d5d9d18519b3fd6f6dcf48e6f9f94e7c2a92fb236171878ad7a96d28873e8", 0x5e}, {&(0x7f0000002200)="381d9912ee4add328e563d51a8786d812177396b19", 0x15}, {&(0x7f0000002240)="39358e5c28df4ebd45e41ec6ae74923081f1226571acaa0f7bd73924a1d815e992f6dd1b0824c09f4f50a3a61a2a4c6387af4fb7fa9d43e1e6eec8d267e4a29fbc467c69a479ff287c7f6ba36ec62ee9299654ab77731f167712832b81dfd46c76a1a8ebd8a9bd2dad366b926e4dde479d045cb4ecce27e1c38b2bebdfe6d7aa1be39a0f03da35914fcf6ad0fb09c44df3a3ebd10df26b156ee5645b33078ed897b023924ec0b22bebcc", 0xaa}, {&(0x7f0000002300)="a60a4f86a71ae0156de72d7ef89fedf91da8107cc6841c7f5eeac4040afcb13a72fecccbf398eca5ac506e8cd72b2ca90b9163201ad6c1305068d205be9805dac33ed58175d528dd80f30af5777535cf3195c345acd53968357985eceb410164cd9ec9f3dbead00cb4abd4f06548f71fd15e7051d749b542acc02abf5a4fee4834e01c9cae7ad585ad24b79ba59e7ef1976d539cc88c496f4e1005a7dd309d75202979eae905", 0xa6}, {&(0x7f00000023c0)="fb6d564d04db74a38a955fe39e3283908970fb726f9f858f", 0x18}], 0x6, &(0x7f0000002480)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xdd, [@dev={0xac, 0x14, 0x14, 0x2c}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xa2, 0x1, 0x5, [{@broadcast, 0x3}, {@local, 0x10000}]}, @end, @ssrr={0x89, 0x17, 0x94, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x4, 0x3, 0x4, [{@private=0xa010102, 0x7}, {@empty, 0x6a6}, {@empty, 0x3ff}, {@private=0xa010100, 0x3}]}, @ra={0x94, 0x4}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xe0}, 0x20000800)
r23 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000025c0)={0x3, 0x4, 0x4, 0xa, 0x0, r20, 0x40, '\x00', r10, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002640)={0x2, 0x4, 0x8, 0x1, 0x80, r23, 0x4, '\x00', 0x0, r21, 0x3, 0x3}, 0x50)

1m24.868701275s ago: executing program 0 (id=171):
r0 = getpid()
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40086)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000105)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x2f, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x34f, 0x1000, 0x0, 0x22000, 0x1, 0x1000, '\x00', r2, r3, 0x5, 0x3, 0x3, 0x7}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x10000}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38)

1m24.347027714s ago: executing program 0 (id=174):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff6ea, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x8, 0x0, 0x0, 0xb32}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000ff"], 0x18}}, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0)
close(r0)

1m24.017714856s ago: executing program 0 (id=175):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x922000000001, 0x106)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="140000003600fb50e35d3c4a0ed898a0190c8c00", 0x14}], 0x1}, 0x4044880)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
close(0x3)

1m23.306508939s ago: executing program 0 (id=179):
r0 = socket$kcm(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10)
r4 = socket$kcm(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2f}, 0x20)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x9c)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r8=>0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x0, 0x0, 0x20000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r8, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r9, r6, 0x0, r6}, 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x38}, 0x4080)

1m22.083461265s ago: executing program 0 (id=184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xf4ff, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090408000000000000000a0000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000020900010073797a300000008020000000080a01011000000000000000020000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x94}}, 0x40000)

1m7.03926611s ago: executing program 32 (id=184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xf4ff, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090408000000000000000a0000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000020900010073797a300000008020000000080a01011000000000000000020000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x94}}, 0x40000)

4.430100805s ago: executing program 3 (id=795):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93", 0x1}], 0x1}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)={0x40, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[], 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, 0x0, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xfffff000}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x68d2896c}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e290042169e54a1ffffffff000000000280000c0012", 0x2e}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x10c, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000800}, 0x4040000)

3.820192537s ago: executing program 1 (id=798):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bond0\x00', @random="01008b201000"})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xcf63}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1108d5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.538546813s ago: executing program 1 (id=799):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/97, 0x61}], 0x8}, 0x100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x40000}, 0x40000002)

3.524564813s ago: executing program 3 (id=800):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000090000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="000000000d0000000000000000000000f6ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (rerun: 64)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r1}, 0x18) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
socket$inet6(0xa, 0x80000, 0x3400) (async)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x8, 0x0, 0x0) (async, rerun: 64)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000020010000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f050000000000000000000000000000000200000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210466d38547aa140db9a200000000c538c7cb7a1c00040002004e244e200000fe80000000000000000000000000002ee32894391ade7497fee8a5d5637f13e47e51b4ec00"/312], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
close(r5) (async, rerun: 32)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 32)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0)

3.429639104s ago: executing program 1 (id=801):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r0) (async)
recvmsg$unix(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100)
recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002140)=""/4096, 0xe78}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x6}, 0x40010102) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000000522000000080000410d000000920000", @ANYRES32=r0, @ANYBLOB="0900000000000000000000000000000000000000afff0bceee17d6d9d6c194be53954767be8549111e053b078f04eabd2aed6099e478dc24825757c97b6a1e8d86c3949f85c26d06c12b077a231453ccd88d2690c52b046258b1eec2f0688bf248fcbf760e8f3a0055845aa02f3f1801c2633f5122b2838b9d6ee6c87f3d808b2bf007dd6f2d6473724a50a5ecc9491168facea9b12e5dc73017f8873abf47bd7fed740653a8a6a02a14cdde994e4abef74f4b3f0c32b0396c7eacb0d8bec3a1f07fb766a963f88438900e275a1229dda86214beb62f95", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000400"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b89f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7042001000000008500000024000000bf91000000000000b70a0000000000008500000000000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x174}, 0x90)

3.429100104s ago: executing program 3 (id=802):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010)
sendmsg$kcm(r0, 0x0, 0x0)
r4 = socket$kcm(0x25, 0x1, 0x0)
sendmsg(r4, 0x0, 0x4)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x100)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002b000b00000000000000100008000000040003000c000180060000008848000008080200", @ANYRES32, @ANYBLOB], 0x2c}}, 0x40)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1f, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xdf, &(0x7f00000002c0)=""/223, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0x81, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1, r1, r1], &(0x7f00000005c0)=[{0x5, 0x2, 0x87, 0x9}, {0x1, 0x1, 0x1b}, {0x5, 0x5, 0x5, 0x5}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map=r1, 0x3, 0x1, 0x80000000, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0]}, 0x79)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x113, 0x4, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000980)='syzkaller\x00', 0x5, 0x6e, &(0x7f00000009c0)=""/110, 0x41100, 0x6b, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x2, 0xa, 0x6}, 0x10, 0x1531a, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000e80)=[{0x5, 0x2, 0x8, 0x3}, {0x5, 0x1, 0x4, 0x9}], 0x10, 0x4}, 0x94)

3.366148582s ago: executing program 1 (id=803):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8915, &(0x7f0000001cc0))
close(r0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000140)=r3, 0x4)
recvmsg(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/45, 0x2d}, {0x0}, {0x0}], 0x3}, 0x10000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x11)

3.127393773s ago: executing program 3 (id=805):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d010900500012804900f880ea72235c5013f75c5a9ea24e25e521b8ca4759fe9ee6cb7c486c434b5f73829b3c21fcb903ee93511b48757cff54a13dc0fce8da4e62d85a1f9fc33f9a53e4d4dcf8115ddf00000020010b"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

2.685496578s ago: executing program 2 (id=806):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
socket$kcm(0x2b, 0x1, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) (async)
close(r0) (async)

2.685163988s ago: executing program 2 (id=807):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f010000000100000000503d0000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='inet_sock_set_state\x00', r0}, 0x18)
r3 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r2, 0x0, 0x14, 0xfffffffffffffffe}, 0x17)

2.684722301s ago: executing program 2 (id=808):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/295, 0x127}, {&(0x7f0000002300)=""/4150, 0x1036}], 0x6}, 0x40002022)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x24000040)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d21", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.683764228s ago: executing program 2 (id=809):
r0 = socket$kcm(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c995f189ae246fb52258333c19b29271e000000370001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055)

2.541158334s ago: executing program 1 (id=810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000021c0)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x0, 0x1a, 0x0, 0xa}, 0x28)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x104040, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x306)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000940)}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r2, <r5=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
fstat(r5, &(0x7f00000004c0))

94.339413ms ago: executing program 2 (id=811):
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3, 0x0, 0x2}}, 0x80, 0x0}, 0x40480cd)

93.973122ms ago: executing program 3 (id=812):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000100)=0x40000050)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)="68d558ad09ffb59ee75720e5ff7374b7060bb0c8ef22586ba804f824471f192566617e141946896da41b29980a4bd081088d06aaab0108d2989aa86a17a1f42b5d3d4e2c4b151be5d76700cc6d81f177173bcb18cedf8f0fad0caeeff26a585bb2610dd54b04f2a68efd0b506917f2bd428cbd0de7db9091dab37f6ed350878b9fbc1246c0eb3002876e5631ddde73ce054c2ced793900b67c55744b00e0d355008813d1bd1dd63e7b362fc6a13c591b83531222c4303ba457f67a30fbc9ed4af5ec29baa812c48adc132bff26d019f8931305df1e4847", &(0x7f0000000000), 0x80003, r1}, 0x38)

93.075345ms ago: executing program 2 (id=813):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xd}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d3}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
close(0x3)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x885, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async)
close(r1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xd}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d3}, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) (async)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040) (async)
close(0x3) (async)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x885, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)

1.072635ms ago: executing program 3 (id=814):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000141401"], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20004090)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r5 = socket$caif_stream(0x25, 0x1, 0xffffff7f)
fstat(r5, &(0x7f0000000180))
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000014008182db44b9040a1d08020a000000040000a1180006000000000000000e120850586bdc740401a800160aa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800000000000000000070100000000000000cb090000001fb791643a0400001b146218a0fc45d6d930dfe1d9d322fe7c9f3f5aeb4edbb57a5025ccca9e00360db70100000040fa595667e0dd0000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000000000a9d511d3d3e543315c800bbf", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

0s ago: executing program 1 (id=815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0xde2e92ecda5c185f, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x9b}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
close(0x3)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25463' (ED25519) to the list of known hosts.
syzkaller login: [   56.956530][ T5777] cgroup: Unknown subsys name 'net'
[   57.080867][ T5777] cgroup: Unknown subsys name 'cpuset'
[   57.085968][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.720607][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.715366][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.724827][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.728513][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.732418][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.736017][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.753516][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.764226][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.768894][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.772875][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.776566][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.831233][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.835781][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.840069][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.843623][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.846982][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.111098][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.180163][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   66.244505][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.248765][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.251419][ T5848] bridge_slave_0: entered allmulticast mode
[   66.254332][ T5848] bridge_slave_0: entered promiscuous mode
[   66.259299][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.261387][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.263602][ T5848] bridge_slave_1: entered allmulticast mode
[   66.266385][ T5848] bridge_slave_1: entered promiscuous mode
[   66.281368][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   66.325865][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.349169][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.352016][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.354805][ T5851] bridge_slave_0: entered allmulticast mode
[   66.359214][ T5851] bridge_slave_0: entered promiscuous mode
[   66.364743][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.387145][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.390503][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.393328][ T5851] bridge_slave_1: entered allmulticast mode
[   66.396993][ T5851] bridge_slave_1: entered promiscuous mode
[   66.445256][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.450943][ T5848] team0: Port device team_slave_0 added
[   66.461280][ T5848] team0: Port device team_slave_1 added
[   66.465814][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.527113][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.529921][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.533703][ T5858] bridge_slave_0: entered allmulticast mode
[   66.537035][ T5858] bridge_slave_0: entered promiscuous mode
[   66.540556][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.543175][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.545817][ T5858] bridge_slave_1: entered allmulticast mode
[   66.549486][ T5858] bridge_slave_1: entered promiscuous mode
[   66.553776][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.556459][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.565747][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.572962][ T5851] team0: Port device team_slave_0 added
[   66.585963][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.588877][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.599029][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.604536][ T5851] team0: Port device team_slave_1 added
[   66.624385][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.654554][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.658700][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.661353][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.671175][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.692834][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.695076][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.704081][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.754289][ T5858] team0: Port device team_slave_0 added
[   66.760092][ T5851] hsr_slave_0: entered promiscuous mode
[   66.762430][ T5851] hsr_slave_1: entered promiscuous mode
[   66.768734][ T5848] hsr_slave_0: entered promiscuous mode
[   66.771481][ T5848] hsr_slave_1: entered promiscuous mode
[   66.773834][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   66.776160][ T5848] Cannot create hsr debugfs directory
[   66.779469][ T5858] team0: Port device team_slave_1 added
[   66.843020][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.845451][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.856881][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.884231][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.887018][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.896866][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.007253][ T5858] hsr_slave_0: entered promiscuous mode
[   67.010542][ T5858] hsr_slave_1: entered promiscuous mode
[   67.013339][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   67.015630][ T5858] Cannot create hsr debugfs directory
[   67.205092][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.214594][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.225080][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.253990][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.322156][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.330503][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.339768][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.345425][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.428729][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.447948][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.453958][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.460145][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.494204][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.530594][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   67.549360][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.551698][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.556105][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.558681][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.566278][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.603650][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.614216][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.617023][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.646853][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.649808][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.700932][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.728808][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   67.746100][  T716] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.748996][  T716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.764969][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.774396][  T716] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.776640][  T716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.788034][ T5850] Bluetooth: hci0: command tx timeout
[   67.797982][ T5850] Bluetooth: hci1: command tx timeout
[   67.857086][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.871493][ T5850] Bluetooth: hci2: command tx timeout
[   67.938819][ T5848] veth0_vlan: entered promiscuous mode
[   67.950386][ T5848] veth1_vlan: entered promiscuous mode
[   67.980733][ T5848] veth0_macvtap: entered promiscuous mode
[   67.991435][ T5848] veth1_macvtap: entered promiscuous mode
[   68.006703][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.017555][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.032903][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.050468][ T5678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.057232][ T5678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.078625][ T5678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.093436][ T5678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.134849][ T5851] veth0_vlan: entered promiscuous mode
[   68.140206][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.150379][ T5851] veth1_vlan: entered promiscuous mode
[   68.161885][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.164641][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.213027][  T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.215415][  T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.243473][ T5851] veth0_macvtap: entered promiscuous mode
[   68.246799][ T5858] veth0_vlan: entered promiscuous mode
[   68.254418][ T5851] veth1_macvtap: entered promiscuous mode
[   68.269854][ T5858] veth1_vlan: entered promiscuous mode
[   68.295777][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.320297][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.342319][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.349439][ T5858] veth0_macvtap: entered promiscuous mode
[   68.361112][ T5678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.365145][ T5678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.388534][ T5858] veth1_macvtap: entered promiscuous mode
[   68.392826][ T5678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.415516][ T5678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.471991][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.518841][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.521841][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.525541][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.536755][ T5898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.549089][ T5898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.553485][ T5898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.556420][ T5898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.626064][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.629596][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.701848][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4'.
[   68.731135][ T1894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.734173][ T1894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.837881][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.840810][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.967316][    C0] hrtimer: interrupt took 52808 ns
[   69.806397][ T5945] syzkaller1: tun_chr_ioctl cmd 1074025677
[   69.809290][ T5945] syzkaller1: linktype set to 780
[   69.812949][ T5942] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10'.
[   69.868785][ T5850] Bluetooth: hci1: command tx timeout
[   69.870296][ T5856] Bluetooth: hci0: command tx timeout
[   69.951981][ T5856] Bluetooth: hci2: command tx timeout
[   69.991947][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7'.
[   70.016973][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7'.
[   70.250074][ T5962] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.15'.
[   70.683701][ T5992] netlink: 'syz.0.23': attribute type 10 has an invalid length.
[   70.697762][ T5992] geneve0: entered promiscuous mode
[   70.705355][ T5992] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   70.717176][ T5992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23'.
[   71.156586][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.163314][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.409974][ T6002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26'.
[   71.494708][ T6009] netlink: 'syz.0.28': attribute type 29 has an invalid length.
[   71.843190][ T6032] netlink: 'syz.1.31': attribute type 11 has an invalid length.
[   71.884717][ T6030] netlink: 84 bytes leftover after parsing attributes in process `syz.2.30'.
[   71.901612][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30'.
[   71.977571][ T5856] Bluetooth: hci1: command tx timeout
[   71.978680][ T5850] Bluetooth: hci0: command tx timeout
[   72.030434][ T5856] Bluetooth: hci2: command tx timeout
[   72.541633][ T6044] netlink: 'syz.0.33': attribute type 29 has an invalid length.
[   72.549532][ T6043] netlink: 'syz.0.33': attribute type 29 has an invalid length.
[   72.691203][ T6051] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET)
[   74.027838][ T5856] Bluetooth: hci1: command tx timeout
[   74.038975][ T5856] Bluetooth: hci0: command tx timeout
[   74.091997][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   74.108555][ T5856] Bluetooth: hci2: command tx timeout
[   74.947048][ T6141] netlink: 143 bytes leftover after parsing attributes in process `syz.1.61'.
[   74.956208][ T6141] netlink: 512 bytes leftover after parsing attributes in process `syz.1.61'.
[   75.330413][ T6148] veth0_vlan: entered allmulticast mode
[   75.454425][ T6147] veth0_vlan: left promiscuous mode
[   75.468170][ T6147] veth0_vlan: entered promiscuous mode
[   75.479879][ T6147] netlink: 36 bytes leftover after parsing attributes in process `syz.2.62'.
[   75.824607][ T6173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.69'.
[   76.651438][ T6204] netlink: 160 bytes leftover after parsing attributes in process `syz.2.78'.
[   77.016632][ T5297] udevd[5297]: worker [5857] terminated by signal 33 (Unknown signal 33)
[   77.022051][ T5297] udevd[5297]: worker [5857] failed while handling '/devices/virtual/block/loop1'
[   77.122589][ T6219] netlink: 'syz.1.82': attribute type 13 has an invalid length.
[   77.848566][  T975] cfg80211: failed to load regulatory.db
[   78.324706][ T6240] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.88'.
[   79.182032][ T6263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.96'.
[   79.191216][ T6263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.96'.
[   79.389050][ T6270] can: request_module (can-proto-4) failed.
[   79.534077][ T6276] Zero length message leads to an empty skb
[   82.874079][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'.
[   82.878870][ T6301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.110'.
[   83.092972][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.112'.
[   83.097127][ T6308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.112'.
[   83.655837][ T6314] netlink: 'syz.0.113': attribute type 29 has an invalid length.
[   85.046077][ T6335] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.120'.
[   85.568243][ T6367] netlink: 'syz.1.128': attribute type 29 has an invalid length.
[   85.572014][ T6365] netlink: 'syz.1.128': attribute type 29 has an invalid length.
[   85.806511][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   85.974507][ T6377] netlink: 'syz.1.131': attribute type 10 has an invalid length.
[   85.998601][ T6374] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   86.007500][ T6377] netlink: 55 bytes leftover after parsing attributes in process `syz.1.131'.
[   86.254915][ T6381] netlink: 'syz.0.132': attribute type 3 has an invalid length.
[   86.258347][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[   86.765626][ T6394] netlink: 'syz.2.135': attribute type 29 has an invalid length.
[   86.874337][ T6401] netlink: 'syz.2.138': attribute type 10 has an invalid length.
[   86.881136][ T6401] geneve0: entered promiscuous mode
[   86.899764][ T6401] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   86.917199][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.2.138'.
[   86.923580][ T6403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.238053][ T6432] netlink: 'syz.0.148': attribute type 4 has an invalid length.
[   88.241320][ T6432] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.148'.
[   88.304936][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[   88.495895][ T6444] netlink: 'syz.1.150': attribute type 2 has an invalid length.
[   88.502883][ T6444] netlink: 120 bytes leftover after parsing attributes in process `syz.1.150'.
[   88.616241][ T6448] netlink: 'syz.0.153': attribute type 33 has an invalid length.
[   88.626268][ T6448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.153'.
[   88.670230][ T6453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.870442][ T6460] syzkaller0: entered promiscuous mode
[   88.872405][ T6460] syzkaller0: entered allmulticast mode
[   89.017074][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'.
[   89.134739][ T6469] Driver unsupported XDP return value 0 on prog  (id 136) dev N/A, expect packet loss!
[   89.604765][ T6477] pim6reg0: tun_chr_ioctl cmd 1074025681
[   89.739219][ T6481] IPv6: Can't replace route, no match found
[   89.995145][ T6483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.196796][ T6486] __nla_validate_parse: 2 callbacks suppressed
[   90.196813][ T6486] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.166'.
[   90.934093][ T6499] netlink: 'syz.2.172': attribute type 4 has an invalid length.
[   90.936756][ T6499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.172'.
[   90.960252][ T6501] netlink: 'syz.2.172': attribute type 13 has an invalid length.
[   91.586559][ T6512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.000346][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   95.171927][ T6567] netlink: 'syz.1.189': attribute type 16 has an invalid length.
[   95.174964][ T6567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.189'.
[   95.338150][ T6572] IPv6: NLM_F_REPLACE set, but no existing node found!
[   95.371839][ T6574] netlink: 212 bytes leftover after parsing attributes in process `syz.1.191'.
[   96.175533][ T6588] warning: `syz.2.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   96.506174][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'.
[   96.636332][ T6601] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   96.657958][ T6601] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   96.661863][ T6601] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   96.676299][ T6604] netlink: 'syz.2.199': attribute type 21 has an invalid length.
[   97.022647][ T6609] netlink: 'syz.2.200': attribute type 10 has an invalid length.
[   97.268615][ T6615] raw_sendmsg: syz.2.202 forgot to set AF_INET. Fix it!
[   97.752688][ T6629] netlink: 'syz.2.207': attribute type 7 has an invalid length.
[   97.790896][ T6629] =======================================================
[   97.790896][ T6629] WARNING: The mand mount option has been deprecated and
[   97.790896][ T6629]          and is ignored by this kernel. Remove the mand
[   97.790896][ T6629]          option from the mount to silence this warning.
[   97.790896][ T6629] =======================================================
[   98.140142][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'.
[   98.510673][ T6644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.213'.
[   99.284882][ T6655] cgroup2: Unknown parameter 'u'
[   99.546970][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[   99.719334][ T6672] netlink: 'syz.2.221': attribute type 22 has an invalid length.
[   99.725421][ T6672] : renamed from gre0 (while UP)
[   99.746662][ T6675] netlink: 'syz.1.222': attribute type 21 has an invalid length.
[   99.749983][ T6675] netlink: 132 bytes leftover after parsing attributes in process `syz.1.222'.
[   99.804863][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'.
[  100.052947][ T6683] openvswitch: netlink: Message has 4 unknown bytes.
[  100.958565][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[  101.839828][ T6693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.227'.
[  102.247014][ T6703] netlink: 'syz.2.230': attribute type 2 has an invalid length.
[  102.254177][ T6703] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[  102.260389][ T6703] netlink: 'syz.2.230': attribute type 8 has an invalid length.
[  102.264333][ T6703] netlink: 44 bytes leftover after parsing attributes in process `syz.2.230'.
[  102.625480][ T6714] netlink: 'syz.2.232': attribute type 40 has an invalid length.
[  102.635660][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.092065][ T6798] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  104.094738][ T6798] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  104.474290][ T6807] netlink: 'syz.1.242': attribute type 3 has an invalid length.
[  106.365152][ T6838] option changes via remount are deprecated (pid=6837 comm=syz.1.250)
[  106.571753][ T6840] : renamed from gre0 (while UP)
[  106.614375][ T6842] netlink: 'syz.2.252': attribute type 10 has an invalid length.
[  106.824574][ T6849] IPv6: Can't replace route, no match found
[  106.830630][ T6850] IPv6: Can't replace route, no match found
[  107.130822][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[  107.227548][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[  107.338677][ T6856] netlink: 'syz.1.256': attribute type 21 has an invalid length.
[  107.341968][ T6856] netlink: 'syz.1.256': attribute type 6 has an invalid length.
[  107.345016][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.256'.
[  107.518069][ T6868] netlink: 34 bytes leftover after parsing attributes in process `syz.1.259'.
[  108.783704][ T6888] netlink: 'syz.1.265': attribute type 10 has an invalid length.
[  108.787079][ T6888] netlink: 55 bytes leftover after parsing attributes in process `syz.1.265'.
[  109.085026][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'.
[  109.088389][ T6896] netlink: 108 bytes leftover after parsing attributes in process `syz.2.268'.
[  109.091545][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'.
[  109.094996][ T6896] netlink: 108 bytes leftover after parsing attributes in process `syz.2.268'.
[  109.098888][ T6896] netlink: 84 bytes leftover after parsing attributes in process `syz.2.268'.
[  109.140151][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.145068][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.149060][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.152896][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.158090][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.500142][ T6898] chnl_net:caif_netlink_parms(): no params data found
[  109.593419][ T6912] openvswitch: netlink: IP tunnel dst address not specified
[  109.656954][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.664812][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.677556][ T6898] bridge_slave_0: entered allmulticast mode
[  109.693044][ T6898] bridge_slave_0: entered promiscuous mode
[  109.706866][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.715894][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.725463][ T6898] bridge_slave_1: entered allmulticast mode
[  109.729762][ T6919] netlink: 'syz.2.274': attribute type 10 has an invalid length.
[  109.735169][ T6898] bridge_slave_1: entered promiscuous mode
[  109.803587][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.813727][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.844483][ T6898] team0: Port device team_slave_0 added
[  109.851194][ T6898] team0: Port device team_slave_1 added
[  109.871675][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.873810][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.896464][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.903544][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.906445][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.919880][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.974080][ T6898] hsr_slave_0: entered promiscuous mode
[  109.977437][ T6898] hsr_slave_1: entered promiscuous mode
[  109.980368][ T6898] debugfs: 'hsr0' already exists in 'hsr'
[  109.982773][ T6898] Cannot create hsr debugfs directory
[  110.205940][ T6936] C: renamed from team_slave_0 (while UP)
[  110.210940][ T6936] netlink: 'syz.1.277': attribute type 3 has an invalid length.
[  110.355656][ T6898] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.374681][ T6898] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.385805][ T6898] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.403462][ T6898] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.467369][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.470380][ T6898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.473434][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.476383][ T6898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.519826][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.524367][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.563519][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.584260][ T6898] 8021q: adding VLAN 0 to HW filter on device team0
[  110.594745][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.597772][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.610644][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.613639][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.800309][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.861858][ T6898] veth0_vlan: entered promiscuous mode
[  110.872576][ T6898] veth1_vlan: entered promiscuous mode
[  110.905074][ T6898] veth0_macvtap: entered promiscuous mode
[  110.914186][ T6898] veth1_macvtap: entered promiscuous mode
[  110.933749][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.945994][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.956224][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.963095][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.970154][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.973789][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.068350][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.071454][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.124017][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.127128][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.234476][ T5850] Bluetooth: hci1: command tx timeout
[  111.281702][ T6962] netlink: 'syz.2.280': attribute type 11 has an invalid length.
[  111.285613][ T6962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.302010][ T6960] openvswitch: netlink: Message has 8 unknown bytes.
[  111.702571][ T6980] netlink: 'syz.1.283': attribute type 10 has an invalid length.
[  111.712818][ T6980] geneve0: entered promiscuous mode
[  111.722298][ T6980] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  113.011081][ T7015] netlink: 'syz.3.297': attribute type 4 has an invalid length.
[  113.013619][ T7015] __nla_validate_parse: 6 callbacks suppressed
[  113.013627][ T7015] netlink: 140 bytes leftover after parsing attributes in process `syz.3.297'.
[  113.308070][ T5850] Bluetooth: hci1: command tx timeout
[  113.354131][ T7026] netlink: 'syz.2.300': attribute type 29 has an invalid length.
[  113.593588][ T7037] netlink: 'syz.1.302': attribute type 39 has an invalid length.
[  113.617867][ T7037] veth0_macvtap: left promiscuous mode
[  114.247981][ T7046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.304'.
[  114.572948][ T7048] netlink: 'syz.2.305': attribute type 10 has an invalid length.
[  114.588120][ T7048] netlink: 55 bytes leftover after parsing attributes in process `syz.2.305'.
[  115.387959][ T5850] Bluetooth: hci1: command tx timeout
[  115.658320][ T7051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  115.662148][ T7051] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  115.809663][ T7060] netlink: 176 bytes leftover after parsing attributes in process `syz.3.308'.
[  116.057671][ T7065] tap0: tun_chr_ioctl cmd 1074025675
[  116.060209][ T7065] tap0: persist enabled
[  116.064588][ T7065] tap0: tun_chr_ioctl cmd 1074025675
[  116.066810][ T7065] tap0: persist enabled
[  117.130248][ T5850] Bluetooth: hci2: ISO packet for unknown connection handle 53
[  117.238059][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[  117.467595][ T5850] Bluetooth: hci1: command tx timeout
[  117.567115][ T7119] netlink: 'syz.1.327': attribute type 10 has an invalid length.
[  117.705772][ T7119] team0: Port device syz_tun added
[  118.699635][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[  119.637588][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[  119.775985][ T7175] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[  120.357093][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[  120.375761][ T7201] sit0: entered promiscuous mode
[  120.385909][ T7201] sit0: entered allmulticast mode
[  120.444863][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'.
[  120.519401][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'.
[  120.524423][ T7206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'.
[  120.528492][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'.
[  120.546975][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.349'.
[  120.573624][ T7210] netlink: 'syz.3.350': attribute type 2 has an invalid length.
[  120.576639][ T7210] netlink: 119 bytes leftover after parsing attributes in process `syz.3.350'.
[  121.121959][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'.
[  121.126097][ T7224] syzkaller1: tun_chr_ioctl cmd 1074025677
[  121.130329][ T7224] syzkaller1: linktype set to 780
[  121.423287][ T7235] netlink: 'syz.2.359': attribute type 19 has an invalid length.
[  121.499665][ T7244] openvswitch: netlink: Message has 8 unknown bytes.
[  122.213462][ T7253] delete_channel: no stack
[  122.746511][ T7277] netlink: 'syz.1.371': attribute type 10 has an invalid length.
[  122.801317][ T7279] netlink: 'syz.3.370': attribute type 29 has an invalid length.
[  122.829210][ T7275] netlink: 'syz.3.370': attribute type 29 has an invalid length.
[  123.246953][ T7284] netlink: 'syz.3.372': attribute type 2 has an invalid length.
[  123.259813][ T7284] netlink: 'syz.3.372': attribute type 1 has an invalid length.
[  124.006720][ T7301] netlink: 'syz.2.378': attribute type 12 has an invalid length.
[  124.019426][ T7301] __nla_validate_parse: 5 callbacks suppressed
[  124.019498][ T7301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.378'.
[  124.030554][ T7302] netlink: 'syz.2.378': attribute type 12 has an invalid length.
[  124.033785][ T7302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.378'.
[  124.375999][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'.
[  124.382621][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'.
[  124.432676][ T7314] geneve0: entered promiscuous mode
[  124.450888][ T7314] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  124.469571][ T7314] netlink: 104 bytes leftover after parsing attributes in process `syz.3.383'.
[  124.925818][ T7325] validate_nla: 2 callbacks suppressed
[  124.925858][ T7325] netlink: 'syz.1.385': attribute type 29 has an invalid length.
[  124.932851][ T7325] netlink: 'syz.1.385': attribute type 29 has an invalid length.
[  124.946117][ T7324] netlink: 'syz.1.385': attribute type 29 has an invalid length.
[  124.953230][ T7321] netlink: 'syz.1.385': attribute type 29 has an invalid length.
[  126.050853][ T7352] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[  126.120798][ T7358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.395'.
[  126.122105][ T7357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.503166][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'.
[  126.662924][ T7403] netlink: 'syz.2.402': attribute type 10 has an invalid length.
[  126.666354][ T7403] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.402'.
[  127.104906][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.161426][ T7438] netlink: 'syz.1.407': attribute type 21 has an invalid length.
[  127.857620][ T7452] netlink: 'syz.2.411': attribute type 2 has an invalid length.
[  127.861369][ T7452] netlink: 'syz.2.411': attribute type 8 has an invalid length.
[  127.864679][ T7452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.411'.
[  128.141070][ T7458] : renamed from gre0 (while UP)
[  128.146756][ T7456] nftables ruleset with unbound chain
[  130.665716][ T7546] netlink: 'syz.3.438': attribute type 10 has an invalid length.
[  130.749022][ T7546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.438'.
[  131.859916][ T7595] netlink: 'syz.2.451': attribute type 10 has an invalid length.
[  131.864792][ T7595] netlink: 104 bytes leftover after parsing attributes in process `syz.2.451'.
[  132.481828][ T7607] syzkaller1: tun_chr_ioctl cmd 1074025677
[  132.483734][ T7607] syzkaller1: linktype set to 780
[  132.592663][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.595185][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.624824][ T7612] netlink: 'syz.2.458': attribute type 10 has an invalid length.
[  132.629851][ T7612] netlink: 104 bytes leftover after parsing attributes in process `syz.2.458'.
[  133.099688][ T7631] netlink: 'syz.1.463': attribute type 10 has an invalid length.
[  133.107636][ T7631] netlink: 55 bytes leftover after parsing attributes in process `syz.1.463'.
[  133.146222][ T7631] netlink: 'syz.1.463': attribute type 14 has an invalid length.
[  133.154499][ T7631] netlink: 164 bytes leftover after parsing attributes in process `syz.1.463'.
[  133.394635][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'.
[  133.402146][   T33] audit: type=1107 audit(1759132173.012:2): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='U@ckl'
[  133.405428][ T7639] netlink: 'syz.1.466': attribute type 29 has an invalid length.
[  133.411170][ T7639] netlink: 'syz.1.466': attribute type 29 has an invalid length.
[  133.421608][ T7639] netlink: 'syz.1.466': attribute type 29 has an invalid length.
[  133.472265][ T7644] netlink: 'syz.2.467': attribute type 10 has an invalid length.
[  133.486534][ T7644] netlink: 104 bytes leftover after parsing attributes in process `syz.2.467'.
[  134.282657][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'.
[  134.970770][ T7707] netlink: 'syz.1.485': attribute type 10 has an invalid length.
[  135.047241][ T7707] 8021q: adding VLAN 0 to HW filter on device team0
[  135.105188][ T7707] bond0: (slave team0): Enslaving as an active interface with an up link
[  137.900459][ T7771] netlink: 10494 bytes leftover after parsing attributes in process `syz.1.501'.
[  138.479720][ T7793] netlink: 1 bytes leftover after parsing attributes in process `syz.3.504'.
[  138.515669][ T7791] netlink: 'syz.2.507': attribute type 29 has an invalid length.
[  138.661085][ T7804] netlink: 'syz.1.510': attribute type 10 has an invalid length.
[  138.666479][ T7804] netlink: 104 bytes leftover after parsing attributes in process `syz.1.510'.
[  140.217042][ T7844] netlink: 'syz.3.523': attribute type 7 has an invalid length.
[  140.223499][ T7844] netlink: 92 bytes leftover after parsing attributes in process `syz.3.523'.
[  140.229869][ T7844] netlink: 168 bytes leftover after parsing attributes in process `syz.3.523'.
[  141.402227][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'.
[  141.536929][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.533'.
[  141.552655][ T7875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.533'.
[  141.567983][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.533'.
[  141.751133][ T7882] syzkaller1: tun_chr_ioctl cmd 1074025677
[  141.754764][ T7882] syzkaller1: linktype set to 780
[  141.853917][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.536'.
[  142.011794][ T7890] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[  142.655172][ T7911] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[  142.956170][ T7920] netlink: 'syz.2.546': attribute type 29 has an invalid length.
[  143.090603][ T7925] __nla_validate_parse: 5 callbacks suppressed
[  143.090621][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[  143.360851][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.552'.
[  143.403365][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.552'.
[  143.814594][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'.
[  145.007121][ T7972] netlink: 'syz.3.562': attribute type 10 has an invalid length.
[  145.048573][ T7972] netlink: 55 bytes leftover after parsing attributes in process `syz.3.562'.
[  145.428826][ T7982] netlink: 'syz.2.565': attribute type 10 has an invalid length.
[  145.817130][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.835596][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.864204][ T7982] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  146.043416][ T8000] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  146.067834][ T8001] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[  146.080777][ T8001] netlink: 55 bytes leftover after parsing attributes in process `syz.1.569'.
[  146.083071][ T8003] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[  146.093767][ T8003] netlink: 55 bytes leftover after parsing attributes in process `syz.1.569'.
[  146.270560][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  146.306298][ T8019] netlink: 'syz.2.575': attribute type 3 has an invalid length.
[  146.309633][ T8019] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[  147.309624][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[  147.542898][ T8050] delete_channel: no stack
[  147.554934][ T8050] delete_channel: no stack
[  147.925731][ T8047] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  148.125447][ T8047] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  148.485601][ T8064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.588'.
[  148.498885][ T8061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.588'.
[  148.508197][ T8060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.588'.
[  150.652614][ T8069] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.591'.
[  150.656618][ T8069] netlink: 8668 bytes leftover after parsing attributes in process `syz.3.591'.
[  150.660442][ T8069] netlink: 7708 bytes leftover after parsing attributes in process `syz.3.591'.
[  151.484957][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'.
[  151.680541][ T8113] netlink: 'syz.3.601': attribute type 2 has an invalid length.
[  151.683615][ T8113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.601'.
[  151.698180][ T8114] lo speed is unknown, defaulting to 1000
[  151.702771][ T8114] lo speed is unknown, defaulting to 1000
[  151.730981][ T8114] lo speed is unknown, defaulting to 1000
[  151.759130][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[  151.831153][ T8114] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  152.003496][ T8114] lo speed is unknown, defaulting to 1000
[  152.014037][ T8114] lo speed is unknown, defaulting to 1000
[  152.021545][ T8114] lo speed is unknown, defaulting to 1000
[  152.038908][ T8114] lo speed is unknown, defaulting to 1000
[  152.797235][ T8133] lo speed is unknown, defaulting to 1000
[  153.054225][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'.
[  153.085376][ T8154] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[  153.115998][ T8152] netlink: 'syz.3.610': attribute type 29 has an invalid length.
[  153.206247][ T8158] lo speed is unknown, defaulting to 1000
[  153.349752][ T8176] netlink: 'syz.3.618': attribute type 1 has an invalid length.
[  153.433416][ T8178] lo speed is unknown, defaulting to 1000
[  153.493637][ T8183] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  153.510572][ T8183] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  153.518290][ T8183] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  153.525362][ T8183] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  153.537960][ T8183] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  153.540715][ T8183] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  154.054554][ T8199] __nla_validate_parse: 2 callbacks suppressed
[  154.054568][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'.
[  154.430807][ T8217] syzkaller1: tun_chr_ioctl cmd 1074025677
[  154.434115][ T8217] syzkaller1: linktype set to 776
[  154.865792][   T33] audit: type=1107 audit(1759132194.472:3): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  155.597505][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.601554][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.619163][ T8247] bridge0: entered allmulticast mode
[  156.033811][ T8262] lo speed is unknown, defaulting to 1000
[  156.116335][ T8263] lo speed is unknown, defaulting to 1000
[  156.531724][ T5850] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  156.567191][ T8274] netlink: 198328 bytes leftover after parsing attributes in process `syz.2.646'.
[  156.775111][ T8283] lo speed is unknown, defaulting to 1000
[  157.273464][ T8304] netlink: 208 bytes leftover after parsing attributes in process `syz.2.655'.
[  157.292071][ T8301] syzkaller1: tun_chr_ioctl cmd 1074025677
[  157.293992][ T8301] syzkaller1: linktype set to 780
[  157.319800][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.652'.
[  157.335068][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.652'.
[  157.410499][ T8312] validate_nla: 34 callbacks suppressed
[  157.410523][ T8312] netlink: 'syz.2.655': attribute type 10 has an invalid length.
[  157.415800][ T8312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.655'.
[  157.447086][ T8312] team0: entered promiscuous mode
[  157.450203][ T8312] team_slave_0: entered promiscuous mode
[  157.454262][ T8312] team_slave_1: entered promiscuous mode
[  157.456991][ T8312] team0: entered allmulticast mode
[  157.467496][ T8312] team_slave_0: entered allmulticast mode
[  157.469764][ T8312] team_slave_1: entered allmulticast mode
[  157.473440][ T8312] bridge0: port 3(team0) entered blocking state
[  157.491085][ T8312] bridge0: port 3(team0) entered disabled state
[  157.514606][ T8312] bridge0: port 3(team0) entered blocking state
[  157.517440][ T8312] bridge0: port 3(team0) entered forwarding state
[  157.704291][ T8311] lo speed is unknown, defaulting to 1000
[  158.284550][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.660'.
[  158.291181][ T8323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.660'.
[  158.522801][ T8323] netlink: zone id is out of range
[  158.524574][ T8323] netlink: zone id is out of range
[  158.526470][ T8323] netlink: zone id is out of range
[  158.529424][ T8323] netlink: zone id is out of range
[  158.533577][ T8323] netlink: zone id is out of range
[  158.534027][ T8333] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[  158.535412][ T8323] netlink: zone id is out of range
[  158.535472][ T8323] netlink: zone id is out of range
[  158.535730][ T8323] netlink: zone id is out of range
[  158.546408][ T8323] netlink: zone id is out of range
[  158.550712][ T8333] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[  158.554969][ T8323] netlink: zone id is out of range
[  158.569477][ T8323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.660'.
[  158.583940][ T8333] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[  158.806827][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'.
[  159.074250][ T8367] netlink: 'syz.3.674': attribute type 2 has an invalid length.
[  159.832030][ T8381] lo speed is unknown, defaulting to 1000
[  159.913093][ T8386] lo speed is unknown, defaulting to 1000
[  160.042412][ T8391] veth1_macvtap: entered allmulticast mode
[  160.557132][ T8401] netlink: 208252 bytes leftover after parsing attributes in process `syz.2.683'.
[  160.569007][ T8401] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[  160.572725][ T8401] netlink: 'syz.2.683': attribute type 2 has an invalid length.
[  160.576401][ T8401] netlink: 'syz.2.683': attribute type 3 has an invalid length.
[  160.582850][ T8401] netlink: 'syz.2.683': attribute type 4 has an invalid length.
[  160.872893][ T8413] lo speed is unknown, defaulting to 1000
[  161.169232][ T8428] syzkaller1: tun_chr_ioctl cmd 1074025677
[  161.171998][ T8428] syzkaller1: linktype set to 780
[  161.462629][ T8442] xt_time: invalid argument - start or stop time greater than 23:59:59
[  161.676826][ T8447] netlink: 'syz.3.695': attribute type 29 has an invalid length.
[  161.777768][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.697'.
[  161.781985][ T8451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.697'.
[  161.930650][ T8457] lo speed is unknown, defaulting to 1000
[  162.173363][ T8469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.700'.
[  162.191495][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.700'.
[  162.210597][ T8469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.700'.
[  162.495259][ T8488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.705'.
[  162.499472][ T8486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.705'.
[  163.022781][ T8509] validate_nla: 1 callbacks suppressed
[  163.022797][ T8509] netlink: 'syz.1.711': attribute type 10 has an invalid length.
[  163.033028][ T8509] bond0: (slave team0): Releasing backup interface
[  163.038074][ T8509] team0: Cannot enslave team device to itself
[  163.114309][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.2.713'.
[  163.133743][ T8511] netlink: 60 bytes leftover after parsing attributes in process `syz.2.713'.
[  163.285212][ T8524] lo speed is unknown, defaulting to 1000
[  163.664170][ T8538] netlink: 'syz.2.720': attribute type 13 has an invalid length.
[  164.753406][ T8582] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  164.816865][ T8581] lo speed is unknown, defaulting to 1000
[  164.892614][ T8587] xt_socket: unknown flags 0x6
[  165.417268][ T8607] netlink: 'syz.3.740': attribute type 4 has an invalid length.
[  165.558878][ T8613] lo speed is unknown, defaulting to 1000
[  165.764390][ T8626] __nla_validate_parse: 9 callbacks suppressed
[  165.764404][ T8626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.746'.
[  165.774542][ T8626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.746'.
[  166.313796][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  166.638137][ T8653] netlink: 'syz.3.754': attribute type 1 has an invalid length.
[  167.725369][ T8670] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.759'.
[  167.822056][ T8672] lo speed is unknown, defaulting to 1000
[  167.892159][ T8675] netlink: 'syz.2.761': attribute type 1 has an invalid length.
[  167.895902][ T8675] netlink: 'syz.2.761': attribute type 2 has an invalid length.
[  167.901948][ T8675] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.761'.
[  168.042038][ T8683] netlink: 17 bytes leftover after parsing attributes in process `syz.3.762'.
[  168.127885][ T8682] netlink: 13183 bytes leftover after parsing attributes in process `syz.2.763'.
[  168.352973][ T8690] netlink: 'syz.1.765': attribute type 1 has an invalid length.
[  168.355772][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'.
[  168.560226][ T8692] lo speed is unknown, defaulting to 1000
[  169.171299][ T8706] netlink: 'syz.2.770': attribute type 10 has an invalid length.
[  169.194717][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'.
[  169.248884][ T8707] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.770'.
[  169.414410][ T8719] netlink: 'syz.3.772': attribute type 1 has an invalid length.
[  169.671422][ T8728] lo speed is unknown, defaulting to 1000
[  169.774261][ T8728] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  169.964053][ T8740] netlink: 'syz.2.780': attribute type 1 has an invalid length.
[  170.086916][ T8742] lo speed is unknown, defaulting to 1000
[  170.619619][ T8762] lo speed is unknown, defaulting to 1000
[  170.634018][ T8763] lo speed is unknown, defaulting to 1000
[  170.841986][ T8777] __nla_validate_parse: 5 callbacks suppressed
[  170.842001][ T8777] netlink: 72 bytes leftover after parsing attributes in process `syz.1.788'.
[  170.985403][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.789'.
[  170.992955][ T8779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.789'.
[  171.008154][ T8779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.789'.
[  171.367235][ T8797] netlink: 14 bytes leftover after parsing attributes in process `syz.3.795'.
[  171.664481][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.796'.
[  171.672912][ T8801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.796'.
[  171.741918][ T8797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.768153][ T8797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.804921][ T8797] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  171.822284][ T8797] bond0 (unregistering): Released all slaves
[  172.007758][ T8804] lo speed is unknown, defaulting to 1000
[  172.220526][ T8815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'.
[  172.227885][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'.
[  172.390429][ T8823] netlink: 'syz.3.802': attribute type 1 has an invalid length.
[  172.394301][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'.
[  172.876522][ T8841] netlink: 'syz.2.808': attribute type 29 has an invalid length.
[  175.602955][ T8848] netlink: 'syz.2.811': attribute type 33 has an invalid length.
[  280.727307][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  280.729796][    C0] rcu: 	1-...!: (0 ticks this GP) idle=69d4/1/0x4000000000000000 softirq=32142/32142 fqs=0
[  280.734362][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=25253, q=205 ncpus=2)
[  280.737324][    C0] Sending NMI from CPU 0 to CPUs 1:
[  280.737416][    C1] NMI backtrace for cpu 1
[  280.737445][    C1] CPU: 1 UID: 0 PID: 8854 Comm: syz.3.814 Not tainted syzkaller #0 PREEMPT(full) 
[  280.737474][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.737482][    C1] RIP: 0010:lock_acquire+0x58/0x360
[  280.737507][    C1] Code: 8b 05 7c 9c 03 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 7f 9c 03 11 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 68 4e 06 0e <73> 16 e8 61 02 09 00 84 c0 75 0d f6 05 1b 33 f0 0d 01 0f 84 d7 01
[  280.737517][    C1] RSP: 0018:ffffc900001e07e0 EFLAGS: 00000097
[  280.737529][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[  280.737537][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888136627a98
[  280.737544][    C1] RBP: ffffffff81adabcb R08: 0000000000000001 R09: 0000000000000000
[  280.737552][    C1] R10: dffffc0000000000 R11: ffffed1026cc4f51 R12: 0000000000000000
[  280.737560][    C1] R13: ffff888136627a98 R14: 0000000000000000 R15: 0000000000000001
[  280.737568][    C1] FS:  00007f3f55ed46c0(0000) GS:ffff8881a3c0f000(0000) knlGS:0000000000000000
[  280.737578][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.737586][    C1] CR2: 0000200000004010 CR3: 00000001085cc000 CR4: 00000000000006f0
[  280.737616][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  280.737624][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  280.737632][    C1] Call Trace:
[  280.737638][    C1]  <IRQ>
[  280.737652][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[  280.737668][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  280.737680][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  280.737694][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  280.737709][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  280.737725][    C1]  hrtimer_try_to_cancel+0x22b/0x420
[  280.737740][    C1]  hrtimer_cancel+0x3b/0x50
[  280.737751][    C1]  cpu_clock_event_stop+0xd9/0x130
[  280.737764][    C1]  __perf_event_overflow+0x580/0xe40
[  280.737783][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  280.737797][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  280.737813][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  280.737827][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  280.737839][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  280.737864][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  280.737878][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  280.737935][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  280.737948][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  280.737959][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  280.737979][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  280.737996][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  280.738019][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  280.738035][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  280.738051][    C1]  </IRQ>
[  280.738055][    C1]  <TASK>
[  280.738060][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  280.738074][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  280.738091][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 9b 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  280.738107][    C1] RSP: 0018:ffffc9000603f8b8 EFLAGS: 00000206
[  280.738118][    C1] RAX: 0715706edf266e00 RBX: 0000000000000000 RCX: 0715706edf266e00
[  280.738126][    C1] RDX: 0000000000000001 RSI: ffffffff8dbaacc4 RDI: ffffffff8be34480
[  280.738134][    C1] RBP: ffffffff8172d195 R08: 0000000000000000 R09: ffffffff8172d195
[  280.738143][    C1] R10: ffffc9000603fad8 R11: fffff52000c07f5d R12: 0000000000000002
[  280.738151][    C1] R13: ffffffff8e13a160 R14: 0000000000000000 R15: 0000000000000246
[  280.738160][    C1]  ? unwind_next_frame+0xa5/0x2390
[  280.738175][    C1]  ? unwind_next_frame+0xa5/0x2390
[  280.738195][    C1]  ? unwind_next_frame+0xa5/0x2390
[  280.738207][    C1]  ? arch_stack_walk+0xe4/0x150
[  280.738221][    C1]  ? unwind_next_frame+0xa5/0x2390
[  280.738234][    C1]  unwind_next_frame+0xc2/0x2390
[  280.738246][    C1]  ? unwind_next_frame+0xa5/0x2390
[  280.738261][    C1]  ? unwind_next_frame+0xa5/0x2390
[  280.738275][    C1]  ? __unwind_start+0xf8/0x760
[  280.738290][    C1]  __unwind_start+0x5b9/0x760
[  280.738305][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  280.738320][    C1]  arch_stack_walk+0xe4/0x150
[  280.738336][    C1]  ? arch_stack_walk+0xe4/0x150
[  280.738350][    C1]  stack_trace_save+0x9c/0xe0
[  280.738364][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  280.738377][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  280.738389][    C1]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  280.738404][    C1]  ref_tracker_alloc+0x17d/0x460
[  280.738420][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  280.738440][    C1]  ? sock_lock_init+0x41c/0x870
[  280.738456][    C1]  ? sk_prot_alloc+0x161/0x220
[  280.738474][    C1]  sk_alloc+0x1b1/0x370
[  280.738491][    C1]  __netlink_create+0x65/0x260
[  280.738508][    C1]  netlink_create+0x3ca/0x590
[  280.738525][    C1]  ? __pfx_nfnetlink_unbind+0x10/0x10
[  280.738537][    C1]  ? __pfx_nfnetlink_bind+0x10/0x10
[  280.738550][    C1]  __sock_create+0x4b3/0x9f0
[  280.738568][    C1]  __sys_socket+0xd7/0x1b0
[  280.738583][    C1]  __x64_sys_socket+0x7a/0x90
[  280.738598][    C1]  do_syscall_64+0xfa/0x3b0
[  280.738615][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.738626][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  280.738641][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.738652][    C1] RIP: 0033:0x7f3f54f8ec29
[  280.738664][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.738673][    C1] RSP: 002b:00007f3f55ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  280.738685][    C1] RAX: ffffffffffffffda RBX: 00007f3f551d5fa0 RCX: 00007f3f54f8ec29
[  280.738694][    C1] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  280.738701][    C1] RBP: 00007f3f55011e41 R08: 0000000000000000 R09: 0000000000000000
[  280.738708][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.738715][    C1] R13: 00007f3f551d6038 R14: 00007f3f551d5fa0 R15: 00007ffe6caffbe8
[  280.738730][    C1]  </TASK>
[  280.739366][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g25253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  280.956022][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  280.960044][    C0] rcu: RCU grace-period kthread stack dump:
[  280.962387][    C0] task:rcu_preempt     state:R  running task     stack:27160 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  280.967673][    C0] Call Trace:
[  280.968997][    C0]  <TASK>
[  280.970206][    C0]  __schedule+0x1798/0x4cc0
[  280.972074][    C0]  ? __lock_acquire+0xab9/0xd20
[  280.973984][    C0]  ? __pfx___schedule+0x10/0x10
[  280.975941][    C0]  ? schedule+0x91/0x360
[  280.977605][    C0]  schedule+0x165/0x360
[  280.979272][    C0]  schedule_timeout+0x12b/0x270
[  280.981182][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  280.983313][    C0]  ? __pfx_process_timeout+0x10/0x10
[  280.985442][    C0]  ? prepare_to_swait_event+0x341/0x380
[  280.987636][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  280.989597][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  280.991602][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.993669][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  280.995430][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  280.997042][    C0]  ? finish_swait+0xcd/0x1f0
[  280.998482][    C0]  rcu_gp_kthread+0x99/0x390
[  280.999933][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  281.001824][    C0]  ? __kthread_parkme+0x7b/0x200
[  281.003798][    C0]  ? __kthread_parkme+0x1a1/0x200
[  281.005397][    C0]  kthread+0x711/0x8a0
[  281.006734][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  281.008357][    C0]  ? __pfx_kthread+0x10/0x10
[  281.009788][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.011658][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.013709][    C0]  ? __pfx_kthread+0x10/0x10
[  281.015291][    C0]  ret_from_fork+0x439/0x7d0
[  281.017158][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  281.019207][    C0]  ? __switch_to_asm+0x39/0x70
[  281.021019][    C0]  ? __switch_to_asm+0x33/0x70
[  281.022484][    C0]  ? __pfx_kthread+0x10/0x10
[  281.024215][    C0]  ret_from_fork_asm+0x1a/0x30
[  281.026110][    C0]  </TASK>
[  281.027332][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  281.029771][    C0] CPU: 0 UID: 0 PID: 1894 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  281.032786][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.036023][    C0] Workqueue: events_unbound toggle_allocation_gate
[  281.038080][    C0] RIP: 0010:smp_call_function_many_cond+0xd44/0x12d0
[  281.040159][    C0] Code: 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 42 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 <74> 1e e8 45 5f 0b 00 eb e4 44 89 e1 80 e1 07 80 c1 03 38 c1 7c e2
[  281.047151][    C0] RSP: 0018:ffffc90009577660 EFLAGS: 00000202
[  281.049419][    C0] RAX: 0000000000000000 RBX: 1ffff11026cc7f61 RCX: ffff8880247c5640
[  281.052466][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  281.055247][    C0] RBP: ffffc900095777e0 R08: ffffffff8fa3c237 R09: 1ffffffff1f47846
[  281.057704][    C0] R10: dffffc0000000000 R11: fffffbfff1f47847 R12: ffff88813663fb08
[  281.060148][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  281.062612][    C0] FS:  0000000000000000(0000) GS:ffff8880b860f000(0000) knlGS:0000000000000000
[  281.065411][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.067431][    C0] CR2: 00002000001fa000 CR3: 000000000df36000 CR4: 00000000000006f0
[  281.069898][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  281.072393][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  281.074836][    C0] Call Trace:
[  281.075901][    C0]  <TASK>
[  281.076826][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  281.078432][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  281.080407][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  281.082092][    C0]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  281.084027][    C0]  ? __pfx___text_poke+0x10/0x10
[  281.085727][    C0]  ? rcu_is_watching+0x15/0xb0
[  281.087303][    C0]  ? trace_contention_end+0x39/0x120
[  281.089059][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  281.090670][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  281.092318][    C0]  smp_text_poke_batch_finish+0x5f9/0x1130
[  281.094243][    C0]  ? arch_jump_label_transform_apply+0x17/0x30
[  281.096617][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  281.098609][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  281.101071][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  281.103546][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  281.105916][    C0]  static_key_enable_cpuslocked+0x128/0x250
[  281.108268][    C0]  static_key_enable+0x1a/0x20
[  281.110180][    C0]  toggle_allocation_gate+0xad/0x240
[  281.112380][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  281.114801][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  281.117061][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  281.119149][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  281.120991][    C0]  process_scheduled_works+0xae1/0x17b0
[  281.122792][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  281.124795][    C0]  worker_thread+0x8a0/0xda0
[  281.126442][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  281.128509][    C0]  ? __kthread_parkme+0x7b/0x200
[  281.130161][    C0]  kthread+0x711/0x8a0
[  281.131509][    C0]  ? __pfx_worker_thread+0x10/0x10
[  281.133225][    C0]  ? __pfx_kthread+0x10/0x10
[  281.134784][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.136802][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.138610][    C0]  ? __pfx_kthread+0x10/0x10
[  281.140119][    C0]  ret_from_fork+0x439/0x7d0
[  281.141606][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  281.143282][    C0]  ? __switch_to_asm+0x39/0x70
[  281.144910][    C0]  ? __switch_to_asm+0x33/0x70
[  281.146492][    C0]  ? __pfx_kthread+0x10/0x10
[  281.147985][    C0]  ret_from_fork_asm+0x1a/0x30
[  281.149720][    C0]  </TASK>

VM DIAGNOSIS:
07:52:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888106660237 R9 =1ffff11020ccc046 R10=dffffc0000000000 R11=ffffffff85504980
R12=dffffc0000000000 R13=ffffffff99b06920 R14=ffffffff99dfb420 R15=0000000000000000
RIP=ffffffff855049fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b860f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000001fa000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f284da12e7b
XMM06=0000000000000000 00007f284da12e75 XMM07=0000000000000000 00007f284da12e89
XMM08=0000000000000000 00007f284da12f0f XMM09=0000000000000000 00007f284da12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000a0f RBX=ffff888136627a98 RCX=ffffffff9349d310 RDX=0000000000000001
RSI=0000000000000067 RDI=ffff8880247c0000 RBP=0000000000000000 RSP=ffffc900001e0750
R8 =0000000000000001 R9 =0000000000000001 R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d7891 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f55ed46c0 ffffffff 00c00000
GS =0000 ffff8881a3c0f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004010 CR3=00000001085cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3f551a7498 00007f3f551a7470 XMM03=00007f3f551a74a8 00007f3f551a74a0
XMM04=00007f3f55d0d100 00007f3f551a7460 XMM05=00007f3f551a7478 00007f3f551a74c0
XMM06=00007f3f551a74b8 00007f3f551a74b0 XMM07=00007f3f551a74a8 00007f3f551a74a0
XMM08=0000000000000000 00007f3f55012f0f XMM09=0000000000000000 00007f3f55012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
