last executing test programs:

1m47.24519298s ago: executing program 2 (id=3):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x4008804)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
close(0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000004f"], 0x4c}, 0x20001850)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000710000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800800000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000011000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r8, 0x0, 0x80004}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

1m47.07032508s ago: executing program 2 (id=5):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70d000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_config_ext={0x1ff, 0x5}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x6, 0x4, 0x0, 0xfffffffd, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x9509}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000051000000000000000800a001801000020646c2500000000002020207b1affff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000c800000095"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x7f, &(0x7f0000000080)=""/127, 0x40f00, 0x8}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100}, 0xd03, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x9a)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)

1m32.039475926s ago: executing program 32 (id=5):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70d000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_config_ext={0x1ff, 0x5}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x6, 0x4, 0x0, 0xfffffffd, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x9509}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000051000000000000000800a001801000020646c2500000000002020207b1affff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000c800000095"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x7f, &(0x7f0000000080)=""/127, 0x40f00, 0x8}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100}, 0xd03, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x9a)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)

1m10.668643555s ago: executing program 0 (id=363):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
gettid() (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x76, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x1f, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ldst={0x3, 0x1, 0x3, 0x6, 0x9, 0x2, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @printk={@lld}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, r3, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x8, 0x3}, 0x10, r5, r6, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x802) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m10.331771501s ago: executing program 0 (id=372):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000630181000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r0}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r10}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0xffffffffffffffe0, 0x4}, @alu={0x4, 0x1, 0x9, 0xa, 0x9, 0x10, 0x8}, @call={0x85, 0x0, 0x0, 0x78}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x4, &(0x7f0000000100)=""/4, 0x40f00, 0x1, '\x00', r1, @fallback=0x1b, r2, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x1, &(0x7f0000000440)=[0x1, r3, r4, r6, r8, r9, r10], &(0x7f0000000480)=[{0x5, 0x5, 0xf, 0x7}], 0x10, 0xd}, 0x94)

1m9.471229539s ago: executing program 0 (id=382):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x100, 0x0, 0x8, 0x3fe, 0x7ffffffb, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007700"/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180), 0x43)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f000010000000000000ff00000000030005de9bbaa1000000000002000000ffffff21000000dfffffff0000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002004e20e000000100"/132], 0x80}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe10000000000000000000000095000000c2000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
close(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)
socket$kcm(0x2, 0x1000000000000002, 0x0)

1m8.612575976s ago: executing program 0 (id=391):
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0x42, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f0000000380), 0x8, 0x1c, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe286}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r3})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1f000}], 0x20}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)=0x12800)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, 0x0, 0xfe33)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x6}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xd000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a97, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x102210, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)

1m7.668988416s ago: executing program 0 (id=417):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x4008804)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
close(0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000004f"], 0x4c}, 0x20001850)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000710000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800800000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000011000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r8, 0x0, 0x80004}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

1m7.616947595s ago: executing program 0 (id=420):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [], {0x95, 0x0, 0xf9}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x8, 0x0, 0x1f00}, 0x10}, 0x94)

52.071369179s ago: executing program 33 (id=420):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [], {0x95, 0x0, 0xf9}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x8, 0x0, 0x1f00}, 0x10}, 0x94)

2.286618674s ago: executing program 3 (id=1420):
socket$kcm(0x2, 0x922000000001, 0x106) (async)
r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, r0, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
r2 = socket$kcm(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = gettid()
sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002180)}, {&(0x7f00000021c0)=""/184, 0xb8}, {0x0}], 0x3, &(0x7f0000002700)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = socket$kcm(0x29, 0xf, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6, 0x1, 0xe, 0x3, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x3, 0x8000}, 0x1240, 0xed1, 0x9, 0x4, 0x1ff, 0x4, 0xa11d, 0x0, 0x4f6}, r5, 0xe, 0xffffffffffffffff, 0x2) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000002400048020000180080001006f736600140002800800034000000300080001400000000c0900010073797a30000000000900020073797a32"], 0x78}}, 0x0)
r9 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="45cd24b8a2c3"], 0x8) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r6, r1})
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001180)="1ddc5d833be9a9be38e0f904e384e24dae8155913b49960bd3bc0a6c2d6ed8dd46b8eec8de194fdb141a69a86561816d0573294d9415be2672c9f7e639ee1f5c3a7dfd41e027230cf67cdaf5abdaf0b1227779fd50c0b772ee8bb3ad32a9a82938b2af1e23a8ce14abe42ee502f76da00a6e47718c374b999f2bdd7142c5602712d71a126142e2c6085a1104e40d258235865a106c659940c9734e607061754815cffacdc788709a3b729411091b4f77bfeabc9c1304d064bc64f2e6ba0ce95acfebfc4a52c90a5de8464e970607a3c56d98b37e92d123ae016702ad1ec31a4ec777a058dbbc0d54eb450a09b318898faab5de55db9704550e00e010fdc2795e177f95082b5028c737a50cf579dfe14d82e9fc27929208344ac3fbf15fb819a3e88b268595840040a7e124bcb15834274a338c0d7db7cb8052b828c0c9a74c8299c55e256b73042b79b09807a77a9869c1add5bae63d2247773fa8501a91517b99c40516cadcdbacf0c91a25852487dcb5145ef5e3c5b2c38362dea13a4a1b2f4cd4af72fb007977ff8ad8a3567fe0b20fb8bfedbb5dc9b43786470a4aee2060a29d5e109fa72dc96dfefd95072cd97a2daf8f72ae95134b25352021c0d69c83583b005b409ddc1bc3d3ae55dd64186ae2daf61ebf09d85cdac205d64dc0bdf8bac9a1dca7c092d164c08c50139cd8c7d2f0bcc2097dc58509bbcf239e36af9811946df32b365551c9516192bea31a70fc0520bd84381eb79aced9dd38662d876fa24358dd395e208f30f7cae548d693c877c54c746ae3d9568857a0238df13ba03d3f0f1d0953cee60c740cefe43f220de9e383946417156d813b08547a68b5451f3111a490fc5b2771438bd4fcdf00fcee55415f60e7ae69fb3547935e01cd94a3dd3d0e33a0c7deec0a4302bbb821a275214488ba26ec41f670119175db1a2f0cfaa014de69bf31117bf2e53b9f42d71c9baed1571a1b5421ab2f3fb055112cddceb31a7ca9bf30531a22182e77a6f2a0ac8c928b367b46a044f01a3e8b2a41fced5860a1d0e0b6ebc7eae37242f27f14d90e4141015b44b320fdb289e4ee96ccbe834a791801f79dcdd93eedad6e82ce3181f7fc9a11b6bc371b9ea8fdea5cf84f72878f9606fde965dfe5db2b9b1f2321d62900e75f8791de168e00979d0a69d0a00882becf1e61910ab8ad1c9cf07f931ba6225e61cec61c71ce684256a1a3f20fd3bc2c4fbb7a77b5e736c7ea9f4246c3a3acc5461e2362a244eda0c78b2273ebc560a08f908db8e6a0c8854c0020b05af4dab4f37f07add4eb4f3e51e7019b8db88ce5a09ddafe188c2adf9cc705c7e0de3726e1ffda61958437b63806dc32658aac030ae46f463154c68c0b268bd3b179cd402c210ef5546c345ec37ba212a88c0b0335061f449a6ffaf09ae300eaa8b529560766fdf512d804d3e590dd2579b56e0a6e59424928298b03129d263f6c185ec53d3618bf8eafdb7105a98229711ed4175ee56411157fb612e0c452160f7c5feb70c902c0b39fa2d4e664c0ffc896bcd24c2013e2f1b367c7698ec62bd91dce07c88bed84304068452d315e72be51fc7328b32f58db14e9d83f5bc1607748f173c71d9458af1b15bd378de39a24fc02cc547616ee47eb1a81683f506ee855a939f718e82edb74920325893f30ce6347a89a00f4139cb82a714c3bca842ff1d0a15321d8e25292f4df25bbf9176b71da924d52426636926337b3275c1d92c5725b6d061ab7d990569321ae03c8e1e51a951f192c52f710245601399ce69a63b3f8452b7631d6104b1520a7dda1ff861fe98718e2f0db4d7846aa022c8cf7d0cf8a5f8f057288d87f9d30f06bda59e9c21df591513ad8bd278263a5560fbbfd544f5eff2a552b530be153ddb1ab76b04c40a25c91eca326e29554fb3ece4109971717ff4010947a98555e364d49755336d0ff6658c6c31eeed6c7fc62df6abbec0d2ae4eb4af78412d33537ab34e706def871b083743e8b47b0dc5aaeb9c425e46253e6542d7c4782b88bd110f1776a14785858aaf3e788902ef4a51d5ad7f0c2a976611d65e204fb8013ef2dda58eb1d1f5dce988dca885adf7e6702bdbb173620b171b5e5aa23322bc3d69b48e3f26601ecfbbe0157a215a294425f5dbdbb990e1526c6013d464e753d03d5299e264953951f298fbd00efe7dd256ebe7f36ac00e8627978741204b14d87359116a3d4da6ecfd537c64e658bc3bbc31d53272aee3f0386a5a60c1cebfd05b8ff9bc70189557d43c4c52644a6c454c75960a00653a7a052a3c5a8f9c7263121b784b01406715948683a207eaaf38475ba62d41874071725e7769f8ff3804a25d4fd3ed24bf38ef500caae96f298884ebab146f24fc274703714e05f2d149d5a775080f7308267c846e1e40eec4652fce90f4672dc0346ddda344fcebe5f5217dcacd364eb5da6baf87accdd3adbd54fa5224a5fe43df22748a9df45916d610127babde48b97c75ffcd0c5a59b6a1345849e8c2c5d19d4299a75eaa63b2cd3722dc10564340e093a62b967b89bb00887041b6ec89d756d027c22b2e015a3d63dda2f59c8fa532bc8af0ad849b7d9aaa5c75788ff42e08986afc71de28639c784a4026dbc49086c557eb6cb621e249aec52634fc046b5ccae1ad5103b644da1f5c7e0808a8e6c89902df13deea4c952bd1888543a749677cbd141babdae9b5f5ecfa324f20d055852fda59e22f299d759e1d2528e314a1de32154d58fead04a33c56bfe8695ab5461145df676b329526c9c81e8970e2fc2785dc1793a6d23939c723d451672425c0da1f8222595bac132829799e18ecf48f1b17d8d9f1272870937ab0042d095c06665d3f08f22ec1c1bc54c9e203771ebf5dc44537d316c7a05bdefb20585b6c4c8102305189ae0492e4a1e84afda952c6f1d67b5e7cb8adee2e0ef398e266b0efbcc047c925f7ca693f8f26679796c081072d33d030c8e75f389babd8aeb3d9f8add51ddbf76c8992541609c7bd170ce6d92c50441a021f9c48a79ada25566df5b6c1ac5f8188abc6074fd8d8073f1e601053ff5ef3c2bffe3d4bc5d2ea9436bae9220a64581695e7cb2f6cd1331118cfef80ac18920f851d7f5a9d3dce4af8ee2a947987c543f98a3946572512d35fdf726bc57be9ce54a0af14c96ee0967782bb37d3f242df1994dff4755b91e89674384418716a6e0df9630c16ae4d41dc549bb60147f389bc042bb7d9e4f054405f87a46331da4bf47936b4643cea39f3a31d6c05340c48369641403618e08cb939efc5ff1c478edf826db1d82700d814f24e9e944efc3a0da83042a4f1dcb189356a4ac490e00c17ecd4db6d6f11141cb05e13779d86d20d3f99115e61ba4c0663affc8f718ec4a3bc6e747c4d08adaaa3027fa7da0f2a8a8fedff9424a17c3685b7d1ffbda9cefc7978fcec688d39eb9960cdd88adc8e7d0c63a5dbb9f0f32c91b75af022c7f49ed037f20b3161b9e660bb4c46ddfadbae4a43a44691a92b05ea8b7b983fdc9f6355f8414f001beb7c62ae964abfb88efa3629345870a8580334a6c6d3bedbf8c5069f1243963bf76db65e822637ab07e39c168824f9b2ef200e69e91effe5082ce85adb90433fb59a51a5570bce746f72ce31454de52fe661797f350fac0645720dca1591ad4d165d935961f85877e3a207abd74fe103f557201a1778957624baa112f056d1fb28c7ef82a943c6cfa1cdc441aebd60e63fc37a84934b5aa45e82590e8431b6bd16888765d05e092f9367985e46bf79f66b64ac798dce1492bd18a88ee188868b626be355ffab25a564282bf89f54840f4dbaf2c694ae1953b3dda5980f8e7a7dcafbca76c536f79f5186e2f631b9b8486ea0bf9d0b8050d00a77e6f1ee8e6be80710ccbc37db29c878656a95c119463f2a4b9cc6ade54e82787d2771ef073304ef02ec66a12b3bd571e09035fbf376b744b74d470aaab837301552e6a3c5f334abcd4aa2e370d443ee82662eb1f0b3269f851ccd7ad2e59cc90011d2fab43e7ba7791ca15327428b2fda51f23f712385d39a85d761e352c675ed0503b2758d32d059f2e61b5f6c1f2228d658fcd557264b884f93e5db2e02c42af488a5eba79ad9d2e0d699d75792dae4d39944ad22437650685d64ec95980f25c54a267db0420b6db34b0dccba5ea05558eb33d365381497d63e1a908b21bd510d07660e75981c0e09063e3234eb50f376b6f67138b6743e9bc6f646b5cc330df557728ec265f311b32f34e59f8b5a9a55e696132fe81e9cd8aeabe584e8b4f1de678239a6802ab3ac6aaf38c1ccff84d0dd4da908362180ca4756d3f33064521892313d65309db572899dd8a593e57a69072d456f1e4a9658c63b134d73a7347aa77db20c9e92f233a3183a8b7486ff39462b6b6c868edc1fd38512034b5036797435c5ad1af399f9180d999e5aaa11f39d38bc386c52eeb3dc051b44744c1a83a1f930150cc0ad3da69fb44f9d75825c49d68b1b8dfc535215e635ed9d14d8aee93ae1ea489109a9da45cd54893a06c1ac8a1771b5a93b77dab39342df094178494205ce9e0ff42a7f81d1603cef8192bbc4c6e4b56b8682ac5198d6837da9f20af8bd2e4f4f0ba46c250f765933cb6c4c16ec752ddaaf9b30ed59884c93f329376f1c9e925401e2c859c18af910d0fa7dcc0638e44b2d7a4108b88c75aaa52cd06bb816d321fc078f7e5e6354c747585a5bf985d3d15d528e19feb8a01bcc7c4795992d762f174280a154dbc5e911da4bc0c3f126da2fc8d19856bd03e1be61185d6e704b996b32c10eb0e7753be06c6567ac8ce1d230e0f3c2b5c0ce700cf8a7532be0e439ad81974ce96f32f6a2494592ac56a491ed6aa879854118ad8765570e0506b30718f4b54d38c10d7766dade5a5e77cdd326e10bcda883da664f1a8422075a520f9c21933a2fb27507dfaa752e993c0a264f88105abfd42457e40a38a76c61ce985c6d1c73a92bb178414336b82af0a49fb7590958caa7857ef91582c9c72e808b9dea990da7a828a1ecee5d0ac454b33a2a4ffd68e4f3484a2dd8507c319e44e25423b8733da3dd69116c1341947e9b01cdb30dd6341aa652ccaecad91e5f88e5848c8773a97a034a71a3025ab5814c02f7c5ee66264d80b7c7795c8567442bea868a680a5a23bc88b29bbeb155a491dc53b2999501f15bd75482ada2cced1aa754ca8ecc6859b638e91425ecb24a3b7a8263ccba9a5d16677149b6f7af4af996c59082d304f9d807d6dd80b26a8b859f16fc89c740741143e0eb00a407796b67dc3eee955c033dec69dc53406a73ad40c37826be8e93fe9f9b7193b533a5fcb753e627d49a4d59a6b43dd0c3b2fa6e11ea7243525146309a273a7e28a26381be4981aec6bd43e19c40a59faa4b8cc7cc03689e3c4086b16a2a362062d96254a75499c1ced911d2c9dcd99d1750e709db74f0754149c111876b1c54d07fe3cd96a629e81d5c9d4e71bf08b5a75e3c3a2870c579e0fbe61e0673a9122ef957d55de5c01fbff11f5e61a2353562be5b8f4964c7931086dfce61a592f776c828c68dd3e320e80856b8a32faede972890ce77f9d2d47d75187572a520a9cf0a387942bd1305219650462841cd0a7af8c615195f9738d99008db8678ff2aff32b624f0c1d7fb4abec5b001b05642bd20e94b9c58c001a4662a834ae5012f8f314ead4ad26ac5102db19a90d8d114400bd837ea120c6fbd15a2fae11c0b3be5ca65f17716afbf8c136ecda7650584dc906046a89f455f575a87aa20a", 0x1000}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000000680)="1f6406982239c23180a638f2b58cadeb11738d70f2d84e20c4e6fb079bc2b29467506db1491960b0b941e953d5ad3465ba45a674259494544669e1341ef6138b4f5c59ed80df27abac709a456cc93282e3e1f70e7e1c6e9f41ed2a2c9e7a219884b756799085e12573cc67c4699f92b67637bd0df1cf417cf862e714984d6df2a0a67ec086989589fae5a33ed8c1a0fc5c5c5af2bf30ccef6d532373d0a420f34448712501a2bee72aab35456aa543e60eb6bd20dd6fcd150874d6d4720b911aa22e6042129662a0771ef67c013c277d57e4be1c7e42330bf04a", 0xda}, {&(0x7f0000000840)="508124141884913c2e6f1773697fee577fc59c0074195bfca21f8af4145c8d3a65b9221d681c1299baef34e816748a9ee91f793a5da9c9d880270fcb22e06638fe69a2a2bc6d913d5283c27dc9b8b7e6e992c5daaf7febc03d6b8a02a191acd1728399daa4177a2651a817f7690f2bc198c08dee5955b1c57901cddbc6b31497471c1583ef40a2098758210a7cdd95b62af26af8a5cf130d6410a993040f4fe273c2edf8b0dd96f9dbaf30bc2fc870a3ac5a249e58bb1202f70b9029763ab6aaead2", 0xc2}], 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="140000000000000000000000020000000600000000000000b400000000000000000000000700000000890bfce0000001ac1414aa4414deb5ac14142800000008ac14143a00000f46443cd5c1e0000002fffffa57ac14142a7fffffffffffffff00000001e000000200000000ac1414bb42838f60ffffffff00df00f2ac1414bb0000922e86240000000002118cc3ea7a7e022c812935730fc14235010d71e6e1759b624d97fff33089078f00000000891b3164010102ac1414bbac1414bbe0000002ac1414aaffffffff000000000000140000000000000000000000010000000400000000000000110000000000000000000000010000000400000000000000140000000000000000000000020000000e000000000000003f58130660d26866ce49ab1cf4ac8fb7b9ca0e32da16f761a9fe4c2e523bda9d4fc9f2c619ca457e0c58f0ee54bec057679369f183836dec48eacc46902e1d633331b206ba6daf2d9b837903bbd3c350afbe4ec1c01da2c0b95f5b60315d271ddf558af477efd574b16786d95fcc8a016b1b0629076a942b598cc46bc04945d6bfb806bb202b528e3a12b03701c6d5e3b193a0dec8cf1799a1db339bc322918b4225e4e0e2b442"], 0x118}, 0x4000040)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xa, 0x3c, 0xa0, 0x2, 0x0, 0x0, 0x1, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc8, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x11428, 0x1, 0x4, 0x7, 0x4, 0x7fff, 0x6, 0x0, 0x2, 0x0, 0x351e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2.209351577s ago: executing program 3 (id=1421):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f00000000c0), 0xb9)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xc8, 0x0, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "7dba8d4a83477ae5c9700a7113796f8d356fc3c65c782414cf0b6933636889907ad73ce9ce612bfe6f46f4cabce8bd0d5afa46f070e28581789398866ad3c4f4cdd478c1d288efdeed9ba8c4d99ab3b0384093c2f7a5ca5717119485c7d5962f891e36b3cfdf08902ef7415cec16ade8a7dfc7926f1d13aa6d38f488706e20e1134ae690c38de0424ef311bb825c9aaf998fd40cf14f6928bb5f6cc3d788f9144f2c"}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELOBJ={0x138, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xf6, 0x8, "ad1c071176ce62d02f5223230c333e413f2a109b246b5d7459e93f34918f948ddedcf512ff708f157bcf3695fd54c69271cbc761e699022d83003a78ac6347c639a6d919545f08a3ba02193f566d0dbf55edadb53d1e94dd6001905350e6eb8dfbecf68cd3da49ff6df364af371d1437eedf7c9fec28ce5f7af38f3c7d2865d45502a38943ab4eedfd1bd9cd14f3c1898a5a7367fc5b82ba086437a34be563ce6a257e7b846d01461e0bd3b2a0e449f4f1cf660e9e21359684f4d33735f816833cc8ef9434112800e05d04e751e22558f2638ddb36a0419db30b9ce181967e3d9f8ffe32864890e75beaa8fb0df161afd6ab"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x270}}, 0x1884)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000000000000000000000000ffff7fc5f603ff65ec5d67837e430478efd9022b11669623dc"], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)

1.100292329s ago: executing program 3 (id=1427):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x7}, 0x40012100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000000000ae550b000000000000000000008514b6bbcb2d28a9d5edf01f5a83cb615203565a65", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$TUNSETIFINDEX(r2, 0x5450, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa88"], 0xcfa4)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$kcm(0x2b, 0x1, 0x0)
close(r3)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000700)={0x2, 0xd6, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x4, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e02c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

949.177623ms ago: executing program 1 (id=1435):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000400000000000000010500000020000000000000000000000300000000020000000200000000003a0c000000302e616161610061"], 0x0, 0x64}, 0x28)
recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18022)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000640)}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0))
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r2, 0x0, &(0x7f0000000280)=""/78}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r4 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000040), 0x3)
setsockopt$sock_attach_bpf(r4, 0x29, 0x36, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES16=r3], 0x1c}}, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x0)
recvmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f00000005c0)=""/179, 0xb3}], 0x4, &(0x7f00000006c0)=""/96, 0x60}, 0x100)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x93d0063ee8269c0b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
fstat(r8, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401c5820, &(0x7f0000001000)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r7}, 0x18)

890.093721ms ago: executing program 1 (id=1438):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b000000090000000100009301000000060000000300080008000000005f305f30302e5f102edf"], 0x0, 0x3b, 0x0, 0x1, 0x6, 0x10000, @value=r0}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

831.032152ms ago: executing program 1 (id=1440):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000009c0)=""/169, 0xa9}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000580)=""/111, 0x6f}], 0x6, 0x0, 0x0, 0xffc3}, 0x10100)

828.678609ms ago: executing program 1 (id=1442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x14000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x124, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf6, 0xc, "4427c85237d32ca2e854ce9e470b5f68d877119d9bba02645e1ef8d0e72326451cab56ede1b037f25e78bba3f3987fdb9a601236f21cc80801ffe8c6c3a9d780318a8c38220ba483012ab26bcd8b3e5109b01a99b65c20b137f6757ef911737c09a73d946862715d1dbb17ff88d8ef469e63b523337f05c827b132c76edecb36fa7cbdf066dbaf09307546b1bd91b5b95c525b26cc943912b90aadfc18e0a3096c839e7487402773d04f7e56b11d5d408798c7f91a519610e3c10d1f1e388007401fd297859d0a3edda2f0e595660067d7a789ca3c6c0a0afe08a99cb6bdc64551425f9b383cc1c8597f164d98c00ca24999"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x194}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

757.097321ms ago: executing program 1 (id=1444):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x117937, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="04000000040000000400000001", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000000}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004be7cfb0dde9d8277904066a4c6b188340027ad299f966d285850e2f4bf5a61852fc605043e3bab310ca0d938f228981c8cce29b7500259d42e8bdc1a225f55489b2b374d199814bc5985a60f048ff132bbe220a308f4a1654c438ce58cc9018dee7aa19617bad5e080c73513a6ccdeb41e17791206ea1d1bcef6779b78dbe18b6154b5b930004c4"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x18)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r8}, 0x10)
close(r5)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r9, 0x4004743c, 0xf0ff1f00000000)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b40000000001010400000000fb0000000a000000440001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

518.706253ms ago: executing program 1 (id=1447):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x0, 0x2, 0x0, 0x4c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xffff4b0f, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000400000008"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x27, &(0x7f00000002c0)=""/39, 0x41100, 0x52, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x6, 0xffffff79}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r9], &(0x7f0000000840)=[{0x5, 0x1, 0x6, 0x6}], 0x10, 0x4}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080))

441.166534ms ago: executing program 4 (id=1449):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xe, 0x4, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x4, 0x0, 0x20ff, 0xffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/27}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000003c6400f10000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ec4ff000000007110b2000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

439.163294ms ago: executing program 4 (id=1450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x22000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x124, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf6, 0xc, "4427c85237d32ca2e854ce9e470b5f68d877119d9bba02645e1ef8d0e72326451cab56ede1b037f25e78bba3f3987fdb9a601236f21cc80801ffe8c6c3a9d780318a8c38220ba483012ab26bcd8b3e5109b01a99b65c20b137f6757ef911737c09a73d946862715d1dbb17ff88d8ef469e63b523337f05c827b132c76edecb36fa7cbdf066dbaf09307546b1bd91b5b95c525b26cc943912b90aadfc18e0a3096c839e7487402773d04f7e56b11d5d408798c7f91a519610e3c10d1f1e388007401fd297859d0a3edda2f0e595660067d7a789ca3c6c0a0afe08a99cb6bdc64551425f9b383cc1c8597f164d98c00ca24999"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x194}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

438.849837ms ago: executing program 4 (id=1451):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
close(r1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) (async)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

270.420064ms ago: executing program 4 (id=1452):
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)) (async)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2060}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3f9, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x814)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB="00001a945b5bf38a3113ed3809", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113300000000008510000002000000850000001800000095000000000000009500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x164)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0030, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x2, @perf_config_ext={0x1, 0x5d}, 0xd200, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="09000000020000006d0500000300000002000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000a9a8bb23e99b351ac6d868851865e22d1eb896fa84d90c854d9db3e5ebbd293719bf7513469504886f0a17dcc456b0bd34998e855167ce1b22d412f50887ce5f2d8babbfddd822dd840378b467293e227d5e8611affe7dd10cd7e1bd3f6fe78ef4d73b1ffb6ecc6198cbd52c787cb23598829dfbf10fa63aecca796fd59b5272471e14003a9049e123b556ca56fc0dc76b407ca1af15a532251332451dd2d060685138eccb3b4764441bc813c364bfd6317e62e837082847c9a231bcdd634c256c5a21d0a16f22ea80fe9ee2463f2789e54ea76c75d448548f66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="09000000020000006d0500000300000002000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000a9a8bb23e99b351ac6d868851865e22d1eb896fa84d90c854d9db3e5ebbd293719bf7513469504886f0a17dcc456b0bd34998e855167ce1b22d412f50887ce5f2d8babbfddd822dd840378b467293e227d5e8611affe7dd10cd7e1bd3f6fe78ef4d73b1ffb6ecc6198cbd52c787cb23598829dfbf10fa63aecca796fd59b5272471e14003a9049e123b556ca56fc0dc76b407ca1af15a532251332451dd2d060685138eccb3b4764441bc813c364bfd6317e62e837082847c9a231bcdd634c256c5a21d0a16f22ea80fe9ee2463f2789e54ea76c75d448548f66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

210.933648ms ago: executing program 3 (id=1453):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in=@broadcast, {0x2abe9d7c, 0x40000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {}, {0x0, 0x0, 0xfffffff7}, 0xfffffffd, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "933ad799ed7714d2680b21d543294c46ffef7ae517cfdf03e4e9f724223165945c"}}]}, 0x160}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$kcm(0x15, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ff7ffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) (async)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000f1ff000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000050600030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000006000000000000076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008103e00312ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe808178a8001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async)
recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000580)=""/111, 0x6f}], 0x6}, 0x10100)
r7 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) (async)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x80, 0x0}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

210.757086ms ago: executing program 4 (id=1454):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

150.597499ms ago: executing program 4 (id=1455):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40400c0)
socketpair(0x1d, 0x800, 0xb, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80044944, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000100100000c000000f800"], 0x18}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="181a0000", @ANYRES32=r3, @ANYBLOB="00000000000000002d9fc37d84382acf8d46eef99b3bf54318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000d3880000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000185a00000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@alu={0x4, 0x1, 0xc, 0xe, 0xb, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x6, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9c, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB], 0x50)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)

483.829µs ago: executing program 3 (id=1456):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0xf5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x124, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf6, 0xc, "4427c85237d32ca2e854ce9e470b5f68d877119d9bba02645e1ef8d0e72326451cab56ede1b037f25e78bba3f3987fdb9a601236f21cc80801ffe8c6c3a9d780318a8c38220ba483012ab26bcd8b3e5109b01a99b65c20b137f6757ef911737c09a73d946862715d1dbb17ff88d8ef469e63b523337f05c827b132c76edecb36fa7cbdf066dbaf09307546b1bd91b5b95c525b26cc943912b90aadfc18e0a3096c839e7487402773d04f7e56b11d5d408798c7f91a519610e3c10d1f1e388007401fd297859d0a3edda2f0e595660067d7a789ca3c6c0a0afe08a99cb6bdc64551425f9b383cc1c8597f164d98c00ca24999"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x194}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

0s ago: executing program 3 (id=1457):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r1)
write$cgroup_subtree(r1, 0x0, 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x8, 0xa9, 0x0, r0, 0x6, '\x00', 0x0, r1, 0x4, 0x0, 0x1, 0xd}, 0x50)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "bbec3e105215fdf4cafa13"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000500)=""/226, 0x37, 0xe2, 0x1, 0x4}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$kcm(0x10, 0x3, 0x10)
r8 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8917, 0x0)
sendmsg$kcm(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001580)="1400000035000b45d30000000000000000005a8089e3", 0x16}], 0x1}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x400, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000300)={0x0, 0x1, [@local]})
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)
r10 = socket$pppoe(0x18, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x38, r10}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23919' (ED25519) to the list of known hosts.
syzkaller login: [   48.481886][ T5834] cgroup: Unknown subsys name 'net'
[   48.590914][ T5834] cgroup: Unknown subsys name 'cpuset'
[   48.594559][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.864885][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.481059][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.491299][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.493946][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.496889][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.499818][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.518796][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.521402][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.524688][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.527320][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.530729][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.531618][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.534153][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.536079][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.541807][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.546165][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.791033][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   53.823739][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   53.878585][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   53.947120][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.951377][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.954411][ T5846] bridge_slave_0: entered allmulticast mode
[   53.958026][ T5846] bridge_slave_0: entered promiscuous mode
[   53.972536][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.975448][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.979177][ T5842] bridge_slave_0: entered allmulticast mode
[   53.982331][ T5842] bridge_slave_0: entered promiscuous mode
[   53.992530][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.995467][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.998312][ T5846] bridge_slave_1: entered allmulticast mode
[   54.002634][ T5846] bridge_slave_1: entered promiscuous mode
[   54.009784][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.012263][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.014583][ T5842] bridge_slave_1: entered allmulticast mode
[   54.017548][ T5842] bridge_slave_1: entered promiscuous mode
[   54.070176][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.074107][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.076495][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.079178][ T5850] bridge_slave_0: entered allmulticast mode
[   54.082390][ T5850] bridge_slave_0: entered promiscuous mode
[   54.086726][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.090313][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.093216][ T5850] bridge_slave_1: entered allmulticast mode
[   54.096698][ T5850] bridge_slave_1: entered promiscuous mode
[   54.117145][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.123456][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.136954][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.194953][ T5842] team0: Port device team_slave_0 added
[   54.208215][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.213591][ T5842] team0: Port device team_slave_1 added
[   54.217758][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.222312][ T5846] team0: Port device team_slave_0 added
[   54.243096][ T5846] team0: Port device team_slave_1 added
[   54.273934][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.276252][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.285336][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.291327][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.293759][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.302896][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.315540][ T5850] team0: Port device team_slave_0 added
[   54.318271][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.320752][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.329137][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.338257][ T5850] team0: Port device team_slave_1 added
[   54.343327][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.345616][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.354382][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.387094][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.390713][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.400445][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.416360][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.419735][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.429181][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.445038][ T5842] hsr_slave_0: entered promiscuous mode
[   54.448032][ T5842] hsr_slave_1: entered promiscuous mode
[   54.491718][ T5846] hsr_slave_0: entered promiscuous mode
[   54.494077][ T5846] hsr_slave_1: entered promiscuous mode
[   54.496261][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   54.498223][ T5846] Cannot create hsr debugfs directory
[   54.515165][ T5850] hsr_slave_0: entered promiscuous mode
[   54.519132][ T5850] hsr_slave_1: entered promiscuous mode
[   54.521776][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   54.523953][ T5850] Cannot create hsr debugfs directory
[   54.746208][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.755139][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.760270][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.772314][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.828224][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.844102][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.849962][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.870830][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.941740][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.955044][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.966162][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.973975][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.027277][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.053677][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   55.071296][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.074457][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.087161][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.090573][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.100391][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.128227][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   55.142463][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.144896][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.165481][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.169667][ T3213] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.172046][ T3213] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.197713][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   55.214747][ T3213] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.217131][ T3213] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.231515][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.234073][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.254869][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.310017][ T5842] veth0_vlan: entered promiscuous mode
[   55.320209][ T5842] veth1_vlan: entered promiscuous mode
[   55.361336][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.365255][ T5842] veth0_macvtap: entered promiscuous mode
[   55.371782][ T5842] veth1_macvtap: entered promiscuous mode
[   55.379927][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.389917][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.405275][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.415251][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.424599][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.436284][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.440289][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.454592][ T5846] veth0_vlan: entered promiscuous mode
[   55.467168][ T5846] veth1_vlan: entered promiscuous mode
[   55.494199][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.497270][ T5850] veth0_vlan: entered promiscuous mode
[   55.501309][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.528489][ T5850] veth1_vlan: entered promiscuous mode
[   55.532025][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.536104][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.538906][ T5846] veth0_macvtap: entered promiscuous mode
[   55.550845][ T5846] veth1_macvtap: entered promiscuous mode
[   55.574848][ T5850] veth0_macvtap: entered promiscuous mode
[   55.576769][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.580355][ T5850] veth1_macvtap: entered promiscuous mode
[   55.588350][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.592010][ T5236] Bluetooth: hci2: command tx timeout
[   55.599294][ T5236] Bluetooth: hci0: command tx timeout
[   55.601614][ T5236] Bluetooth: hci1: command tx timeout
[   55.611280][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.642652][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.648332][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.653959][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.657670][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.669849][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.675890][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.691015][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.700876][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.705937][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.712991][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.752701][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.760363][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.783189][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.788695][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.800991][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.803531][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.820310][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.824910][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.897839][ T5916] =======================================================
[   55.897839][ T5916] WARNING: The mand mount option has been deprecated and
[   55.897839][ T5916]          and is ignored by this kernel. Remove the mand
[   55.897839][ T5916]          option from the mount to silence this warning.
[   55.897839][ T5916] =======================================================
[   55.923511][ T5916] sysfs: Unknown parameter 'subj_type'
[   56.311697][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   56.388435][    C0] hrtimer: interrupt took 51771 ns
[   56.602556][ T5931] netlink: 'syz.1.8': attribute type 3 has an invalid length.
[   56.605189][ T5931] netlink: 'syz.1.8': attribute type 1 has an invalid length.
[   56.607641][ T5931] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.8'.
[   56.659592][ T5845] Bluetooth: hci0: SCO packet too small
[   56.801851][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.812598][ T5939] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   56.813595][ T5938] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   56.818295][ T5938] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11'.
[   56.826802][ T5938] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11'.
[   56.911954][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   56.916491][ T5845] Bluetooth: hci0: ISO packet for unknown connection handle 3124
[   56.925875][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   56.942569][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   56.965938][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   56.986913][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   56.999062][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.386456][ T5953] Zero length message leads to an empty skb
[   57.681279][ T5845] Bluetooth: hci1: command tx timeout
[   57.683184][ T5845] Bluetooth: hci0: command tx timeout
[   57.685036][ T5845] Bluetooth: hci2: command tx timeout
[   57.722305][ T5965] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.749257][ T5236] Bluetooth: hci2: command tx timeout
[   59.751344][ T5845] Bluetooth: hci0: command tx timeout
[   59.753282][ T5845] Bluetooth: hci1: command tx timeout
[   60.922748][ T6028] netlink: 'syz.1.37': attribute type 3 has an invalid length.
[   60.926153][ T6028] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   60.974194][ T5236] Bluetooth: hci0: SCO packet too small
[   61.828764][ T5853] Bluetooth: hci1: command tx timeout
[   61.831190][ T5853] Bluetooth: hci0: command tx timeout
[   61.833604][ T5236] Bluetooth: hci2: command tx timeout
[   62.082140][ T6044] __nla_validate_parse: 29 callbacks suppressed
[   62.082150][ T6044] netlink: 16038 bytes leftover after parsing attributes in process `syz.1.43'.
[   62.136294][ T6049] netlink: 'syz.0.45': attribute type 3 has an invalid length.
[   62.139996][ T6049] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   62.144237][ T6049] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.45'.
[   62.169563][ T5236] Bluetooth: hci2: SCO packet too small
[   62.345791][ T6052] proc: Unknown parameter 'u'
[   62.502945][ T6057] netlink: 'syz.0.48': attribute type 27 has an invalid length.
[   62.505767][ T6057] netlink: 'syz.0.48': attribute type 1 has an invalid length.
[   62.508893][ T6057] bridge0: port 1(bridge_slave_0) entered learning state
[   62.512495][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'.
[   62.515485][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'.
[   62.650227][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'.
[   62.773502][ T6076] netlink: 'syz.0.53': attribute type 3 has an invalid length.
[   62.776113][ T6076] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   62.779501][ T6076] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.53'.
[   62.804377][ T5236] Bluetooth: hci2: SCO packet too small
[   65.403768][ T6161] : entered promiscuous mode
[   65.528359][ T6172] netlink: 'syz.0.80': attribute type 29 has an invalid length.
[   65.539680][ T6172] netlink: 'syz.0.80': attribute type 29 has an invalid length.
[   65.545155][ T6172] netlink: 488 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.631620][ T5236] Bluetooth: hci2: SCO packet for unknown connection handle 0
[   65.682297][ T6182] Driver unsupported XDP return value 0 on prog  (id 89) dev N/A, expect packet loss!
[   66.986453][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   67.234651][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'.
[   67.242380][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'.
[   67.253617][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'.
[   67.432684][ T6228] netlink: 104 bytes leftover after parsing attributes in process `syz.0.99'.
[   67.550778][ T6232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.101'.
[   67.555141][ T6232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.101'.
[   68.521830][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   68.586353][ T6264] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   68.619791][ T6269] netlink: 'syz.0.117': attribute type 32 has an invalid length.
[   68.746062][ T6280] netlink: 'syz.1.116': attribute type 1 has an invalid length.
[   68.756682][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   69.835824][ T6309] netlink: 444 bytes leftover after parsing attributes in process `syz.1.126'.
[   70.164117][ T6318] netlink: 'syz.1.129': attribute type 3 has an invalid length.
[   70.167040][ T6318] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   70.172921][ T6318] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.129'.
[   70.206304][ T5236] Bluetooth: hci0: SCO packet too small
[   70.276368][ T6322] netlink: 'syz.1.130': attribute type 10 has an invalid length.
[   70.283183][ T6322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.389453][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.617991][ T6335] netlink: 'syz.0.136': attribute type 3 has an invalid length.
[   70.630581][ T6335] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   70.687182][ T5236] Bluetooth: hci2: SCO packet too small
[   71.032434][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.036041][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.263393][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.266862][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.271568][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.276194][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.281519][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.014679][ T6356] chnl_net:caif_netlink_parms(): no params data found
[   72.085628][ T5877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.195431][ T5877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.207846][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.210319][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.212744][ T6356] bridge_slave_0: entered allmulticast mode
[   72.217931][ T6356] bridge_slave_0: entered promiscuous mode
[   72.223409][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.226816][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.230418][ T6356] bridge_slave_1: entered allmulticast mode
[   72.244816][ T6356] bridge_slave_1: entered promiscuous mode
[   72.252044][ T6391] __nla_validate_parse: 3 callbacks suppressed
[   72.252053][ T6391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.153'.
[   72.252706][ T6390] netlink: 'syz.0.153': attribute type 2 has an invalid length.
[   72.265116][ T5877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.298289][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.305294][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.324512][ T5877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.385579][ T6396] C: renamed from team_slave_0 (while UP)
[   72.389898][ T6396] netlink: 'syz.1.156': attribute type 3 has an invalid length.
[   72.392444][ T6396] netlink: 'syz.1.156': attribute type 2 has an invalid length.
[   72.395119][ T6396] netlink: 116 bytes leftover after parsing attributes in process `syz.1.156'.
[   72.399454][ T6396] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   72.407237][ T6356] team0: Port device team_slave_0 added
[   73.048112][ T6356] team0: Port device team_slave_1 added
[   73.053430][ T6396] netlink: 160 bytes leftover after parsing attributes in process `syz.1.156'.
[   73.089450][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.091763][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.104582][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.122828][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.127267][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.142585][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.259706][ T6413] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.161'.
[   73.290119][ T6356] hsr_slave_0: entered promiscuous mode
[   73.293245][ T6356] hsr_slave_1: entered promiscuous mode
[   73.296220][ T6356] debugfs: 'hsr0' already exists in 'hsr'
[   73.307993][ T6356] Cannot create hsr debugfs directory
[   73.348900][ T5236] Bluetooth: hci3: command tx timeout
[   73.553097][ T5877] bridge_slave_1: left allmulticast mode
[   73.555068][ T5877] bridge_slave_1: left promiscuous mode
[   73.558619][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.578108][ T5877] bridge_slave_0: left allmulticast mode
[   73.581254][ T5877] bridge_slave_0: left promiscuous mode
[   73.586684][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.736978][ T6430] validate_nla: 1 callbacks suppressed
[   73.736987][ T6430] netlink: 'syz.0.164': attribute type 3 has an invalid length.
[   73.742570][ T6430] netlink: 'syz.0.164': attribute type 1 has an invalid length.
[   73.745657][ T6430] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.164'.
[   73.831289][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   74.063224][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.077436][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.086833][ T5877] bond0 (unregistering): Released all slaves
[   74.116333][ T6446] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.170'.
[   74.123890][ T6446] bridge: RTM_NEWNEIGH with invalid state 0x1
[   74.285238][ T6356] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.320691][ T6356] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.331274][ T6356] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.338682][ T6356] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.371603][ T5877] hsr_slave_0: left promiscuous mode
[   74.374150][ T5877] hsr_slave_1: left promiscuous mode
[   74.376273][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.380627][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.387429][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.398495][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.416839][ T5877] veth1_macvtap: left promiscuous mode
[   74.424473][ T5877] veth0_macvtap: left promiscuous mode
[   74.426458][ T5877] veth1_vlan: left promiscuous mode
[   74.432090][ T5877] veth0_vlan: left promiscuous mode
[   74.685227][ T5877] team0 (unregistering): Port device team_slave_1 removed
[   74.702710][ T5877] team0 (unregistering): Port device team_slave_0 removed
[   74.979812][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.009816][ T6356] 8021q: adding VLAN 0 to HW filter on device team0
[   75.015371][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.017726][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.027383][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.030087][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.226363][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.259630][ T6356] veth0_vlan: entered promiscuous mode
[   75.264972][ T6356] veth1_vlan: entered promiscuous mode
[   75.292059][ T6356] veth0_macvtap: entered promiscuous mode
[   75.296911][ T6356] veth1_macvtap: entered promiscuous mode
[   75.326611][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.342843][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.349247][ T6493] netlink: 'syz.0.177': attribute type 3 has an invalid length.
[   75.352154][ T6493] netlink: 'syz.0.177': attribute type 1 has an invalid length.
[   75.354646][ T6493] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.359762][ T5877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.366640][ T5236] Bluetooth: hci2: SCO packet too small
[   75.372872][ T5877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.375808][ T5877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.386016][ T5877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.427958][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.428495][ T5236] Bluetooth: hci3: command tx timeout
[   75.432791][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.455217][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.458317][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.611960][ T6515] netlink: 'syz.0.183': attribute type 3 has an invalid length.
[   75.614550][ T6515] netlink: 'syz.0.183': attribute type 1 has an invalid length.
[   75.617115][ T6515] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.183'.
[   75.797835][ T6537] netlink: 60 bytes leftover after parsing attributes in process `syz.0.188'.
[   75.904777][ T6549] netlink: 'syz.0.190': attribute type 3 has an invalid length.
[   75.907623][ T6549] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   77.508981][ T5236] Bluetooth: hci3: command tx timeout
[   77.646489][ T6639] __nla_validate_parse: 3 callbacks suppressed
[   77.646498][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'.
[   77.976242][ T6644] netlink: 'syz.0.210': attribute type 39 has an invalid length.
[   78.013217][ T6641] netlink: 'syz.1.212': attribute type 2 has an invalid length.
[   78.223760][ T6652] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.213'.
[   78.244256][ T5236] Bluetooth: hci0: SCO packet too small
[   78.316634][ T6654] netlink: 51 bytes leftover after parsing attributes in process `syz.3.214'.
[   78.366279][ T6656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.215'.
[   78.418960][ T6656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.215'.
[   78.426519][ T6656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.215'.
[   78.561244][ T6656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.675499][ T6671] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.221'.
[   78.696644][ T5236] Bluetooth: hci3: SCO packet too small
[   79.043837][ T6711] validate_nla: 7 callbacks suppressed
[   79.043851][ T6711] netlink: 'syz.0.234': attribute type 3 has an invalid length.
[   79.052334][ T6711] netlink: 'syz.0.234': attribute type 1 has an invalid length.
[   79.057470][ T6711] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.234'.
[   79.230396][  T974] cfg80211: failed to load regulatory.db
[   79.293937][ T6733] netlink: 'syz.1.241': attribute type 3 has an invalid length.
[   79.296988][ T6733] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   79.306498][ T6733] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.241'.
[   79.377168][ T6741] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.245'.
[   79.438208][ T6747] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.588766][ T5236] Bluetooth: hci3: command tx timeout
[   79.779236][ T6766] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[   79.782151][ T6766] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   79.787113][ T5236] Bluetooth: hci2: SCO packet too small
[   80.124089][ T6776] netlink: 'syz.1.256': attribute type 10 has an invalid length.
[   80.154756][ T6776] bond0: (slave bond_slave_0): Releasing backup interface
[   80.300061][ T6776] syz.1.256 (6776) used greatest stack depth: 19392 bytes left
[   80.811508][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.822704][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.125652][ T5236] Bluetooth: hci2: SCO packet too small
[   81.992171][ T6878] netlink: 'syz.0.297': attribute type 2 has an invalid length.
[   82.000315][ T6879] netlink: 'syz.0.297': attribute type 2 has an invalid length.
[   82.345951][ T6910] syzkaller0: entered promiscuous mode
[   82.347797][ T6910] syzkaller0: entered allmulticast mode
[   82.606581][ T5236] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[   86.013180][ T6954] netlink: 'syz.1.324': attribute type 11 has an invalid length.
[   86.020613][ T6954] __nla_validate_parse: 5 callbacks suppressed
[   86.020623][ T6954] netlink: 176 bytes leftover after parsing attributes in process `syz.1.324'.
[   86.130122][ T5236] Bluetooth: hci2: SCO packet too small
[   86.728510][ T5236] Bluetooth: hci3: SCO packet too small
[   87.056024][ T7015] netlink: 360 bytes leftover after parsing attributes in process `syz.1.341'.
[   87.105286][ T7015] netlink: 'syz.1.341': attribute type 29 has an invalid length.
[   87.117450][ T7015] netlink: 'syz.1.341': attribute type 10 has an invalid length.
[   87.172645][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.182127][ T7015] team0: Port device bond0 added
[   87.293582][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   89.018992][ T5236] Bluetooth: hci3: SCO packet too small
[   89.269483][ T7091] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.356'.
[   92.331019][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'.
[   92.334319][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'.
[   92.337779][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.359'.
[   92.344315][ T5236] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[   92.347416][ T5236] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[   92.503203][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.365'.
[   92.517611][ T7121] option changes via remount are deprecated (pid=7120 comm=syz.3.365)
[   92.573442][ T7129] netlink: 188 bytes leftover after parsing attributes in process `syz.1.367'.
[   92.920337][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'.
[   92.923841][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.373'.
[   92.926935][ T7143] netlink: 'syz.3.373': attribute type 1 has an invalid length.
[   93.120732][ T7155] netlink: 104 bytes leftover after parsing attributes in process `syz.1.379'.
[   93.225349][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[   93.612519][ T7165] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.616165][ T7165] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.011370][ T7169] netlink: 'syz.1.383': attribute type 21 has an invalid length.
[   94.014439][ T7169] netlink: 128 bytes leftover after parsing attributes in process `syz.1.383'.
[   94.018345][ T7169] netlink: 'syz.1.383': attribute type 5 has an invalid length.
[   94.025463][ T7169] netlink: 'syz.1.383': attribute type 6 has an invalid length.
[   94.249293][ T7180] netlink: 'syz.3.386': attribute type 10 has an invalid length.
[   94.255600][ T7180] team0: Device hsr_slave_0 failed to register rx_handler
[   94.942037][ T7225] netlink: 'syz.1.402': attribute type 29 has an invalid length.
[   94.945181][ T7225] netlink: 'syz.1.402': attribute type 29 has an invalid length.
[   94.948763][ T7225] netlink: 'syz.1.402': attribute type 1 has an invalid length.
[   94.951805][ T7225] netlink: 'syz.1.402': attribute type 2 has an invalid length.
[   94.955267][ T7225] openvswitch: netlink: nsh attr 165 is out of range max 3
[   94.957721][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.405289][ T7278] sysfs: Unknown parameter 'subj_type'
[   95.862484][ T7298] syzkaller0: entered promiscuous mode
[   95.864504][ T7298] syzkaller0: entered allmulticast mode
[   96.262498][ T5236] Bluetooth: hci3: SCO packet too small
[   96.623190][ T7320] syzkaller0: entered promiscuous mode
[   96.625281][ T7320] syzkaller0: entered allmulticast mode
[   96.663495][ T5236] Bluetooth: hci0: SCO packet too small
[   97.677145][ T7354] tmpfs: Bad value for 'uid'
[   97.679035][ T7354] tmpfs: Bad value for 'uid'
[   97.768385][ T7358] netlink: 'syz.1.448': attribute type 2 has an invalid length.
[   98.328182][ T7374] netlink: 'syz.3.455': attribute type 29 has an invalid length.
[   98.333748][ T7374] netlink: 'syz.3.455': attribute type 29 has an invalid length.
[   98.336665][ T7374] __nla_validate_parse: 7 callbacks suppressed
[   98.336671][ T7374] netlink: 500 bytes leftover after parsing attributes in process `syz.3.455'.
[   98.344469][ T7374] unsupported nla_type 58
[   98.349571][ T7376] netlink: 'syz.3.455': attribute type 29 has an invalid length.
[   98.711766][ T7386] netlink: 'syz.3.458': attribute type 10 has an invalid length.
[   98.714454][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'.
[   99.413762][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[  100.430501][ T5236] Bluetooth: hci3: ACL packet too small
[  100.846507][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'.
[  100.973382][ T7474] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  101.053197][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.488'.
[  101.064283][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.488'.
[  101.073512][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.488'.
[  101.134009][ T7492] openvswitch: netlink: IP tunnel dst address not specified
[  102.023195][ T7517] netlink: 'syz.3.497': attribute type 6 has an invalid length.
[  102.025805][ T7517] netlink: 140 bytes leftover after parsing attributes in process `syz.3.497'.
[  103.385252][ T7559] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.513'.
[  104.319963][ T7571] netlink: 'syz.3.518': attribute type 32 has an invalid length.
[  104.591601][ T7585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.519'.
[  104.597654][ T7586] netlink: 'syz.1.525': attribute type 14 has an invalid length.
[  104.605507][ T7585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.519'.
[  104.612637][ T5236] Bluetooth: hci0: ISO packet too small
[  105.042740][   T33] audit: type=1107 audit(1757557315.141:2): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  105.042740][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  105.042740][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC'
[  105.108783][ T7607] netlink: 'syz.3.528': attribute type 1 has an invalid length.
[  105.491526][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.540'.
[  105.531319][ T7639] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  105.535945][ T7639] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.596117][ T7690] netlink: 68 bytes leftover after parsing attributes in process `syz.3.559'.
[  107.600106][ T7690] netlink: 68 bytes leftover after parsing attributes in process `syz.3.559'.
[  107.658153][ T7691] netlink: 'syz.3.559': attribute type 10 has an invalid length.
[  107.716917][ T7691] team0 (unregistering): Port device team_slave_0 removed
[  107.722662][ T7691] team0 (unregistering): Port device team_slave_1 removed
[  108.723788][ T7709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.566'.
[  108.737467][ T7709] netlink: 22 bytes leftover after parsing attributes in process `syz.1.566'.
[  111.221149][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.224905][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.228343][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.234178][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.237907][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.410288][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'.
[  111.445000][ T7718] chnl_net:caif_netlink_parms(): no params data found
[  111.512235][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.514717][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.517669][ T7718] bridge_slave_0: entered allmulticast mode
[  111.520948][ T7718] bridge_slave_0: entered promiscuous mode
[  111.524283][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.526656][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.529600][ T7718] bridge_slave_1: entered allmulticast mode
[  111.532874][ T7718] bridge_slave_1: entered promiscuous mode
[  111.573208][ T7718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.578103][ T7718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.610572][ T7718] team0: Port device team_slave_0 added
[  111.613746][ T7718] team0: Port device team_slave_1 added
[  111.637882][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.640475][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.649184][ T7718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.653351][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.655552][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.664092][ T7718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.668334][ T7745] netlink: 'syz.1.575': attribute type 28 has an invalid length.
[  111.673149][ T7745] netlink: 'syz.1.575': attribute type 3 has an invalid length.
[  111.675712][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.1.575'.
[  111.706325][ T7718] hsr_slave_0: entered promiscuous mode
[  111.713453][ T7718] hsr_slave_1: entered promiscuous mode
[  111.719728][ T7718] debugfs: 'hsr0' already exists in 'hsr'
[  111.726381][ T7718] Cannot create hsr debugfs directory
[  111.832168][ T7718] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  111.837116][ T7718] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  111.842190][ T7718] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  111.846742][ T7718] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  111.859806][ T7765] netlink: 'syz.1.583': attribute type 28 has an invalid length.
[  111.863582][ T7765] netlink: 'syz.1.583': attribute type 3 has an invalid length.
[  111.867585][ T7765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.583'.
[  111.926732][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.929842][ T7718] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.933026][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.936238][ T7718] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.947488][ T7777] netlink: 'syz.1.586': attribute type 41 has an invalid length.
[  111.952172][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.586'.
[  111.960989][ T5845] Bluetooth: hci0: ISO packet for unknown connection handle 3856
[  111.995502][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.005112][ T3213] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.008967][ T3213] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.017068][ T7718] 8021q: adding VLAN 0 to HW filter on device team0
[  112.023897][ T3213] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.026319][ T3213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.034425][ T3213] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.036897][ T3213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.055153][ T7718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.059379][ T7718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.135027][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.235271][ T7718] veth0_vlan: entered promiscuous mode
[  112.243049][ T7718] veth1_vlan: entered promiscuous mode
[  112.260001][ T7718] veth0_macvtap: entered promiscuous mode
[  112.264561][ T7718] veth1_macvtap: entered promiscuous mode
[  112.280497][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.287500][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.295069][ T5876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.299158][ T5876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.302779][ T5876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.306772][ T5876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.343224][ T3213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.349244][ T3213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.362726][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.365697][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.487118][ T7804] netlink: 'syz.4.591': attribute type 28 has an invalid length.
[  112.490107][ T7804] netlink: 'syz.4.591': attribute type 3 has an invalid length.
[  112.493449][ T7804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.591'.
[  112.527513][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'.
[  112.704971][ T7810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'.
[  112.712880][ T7810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'.
[  113.271006][ T5845] Bluetooth: hci1: command tx timeout
[  113.576525][ T7887] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  113.959290][ T7901] __nla_validate_parse: 5 callbacks suppressed
[  113.959349][ T7901] netlink: 360 bytes leftover after parsing attributes in process `syz.3.624'.
[  113.982333][ T7901] netlink: 'syz.3.624': attribute type 29 has an invalid length.
[  113.987634][ T7901] netlink: 'syz.3.624': attribute type 10 has an invalid length.
[  114.080437][ T7903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.625'.
[  114.086539][ T7903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.625'.
[  114.254399][ T7914] syz.3.629 (7914) used obsolete PPPIOCDETACH ioctl
[  114.401985][ T7920] openvswitch: netlink: Flow actions attr not present in new flow.
[  114.468076][ T7929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'.
[  114.489252][ T7929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'.
[  115.153179][ T7963] netlink: 'syz.3.649': attribute type 4 has an invalid length.
[  115.320962][ T7973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.652'.
[  115.325453][ T7973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.652'.
[  115.349392][ T5845] Bluetooth: hci1: command tx timeout
[  115.473989][ T7988] syzkaller0: mtu less than device minimum
[  115.513877][ T7992] pim6reg1: entered promiscuous mode
[  115.516026][ T7992] pim6reg1: entered allmulticast mode
[  115.642400][ T7997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.662'.
[  115.645914][ T7997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.662'.
[  116.340899][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.4.673'.
[  117.145387][ T8080] validate_nla: 4 callbacks suppressed
[  117.145429][ T8080] netlink: 'syz.3.693': attribute type 10 has an invalid length.
[  117.228112][ T8105] netlink: 'syz.1.697': attribute type 12 has an invalid length.
[  117.245359][ T8105] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  117.250476][ T8105] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  117.431635][ T5845] Bluetooth: hci1: command tx timeout
[  117.510241][  T151] wlan1: Trigger new scan to find an IBSS to join
[  117.622379][ T8160] netlink: 'syz.1.714': attribute type 28 has an invalid length.
[  117.625942][ T8160] netlink: 'syz.1.714': attribute type 3 has an invalid length.
[  117.658690][ T8166] netlink: 'syz.3.715': attribute type 3 has an invalid length.
[  117.661501][ T8166] netlink: 'syz.3.715': attribute type 6 has an invalid length.
[  117.664205][ T8166] netlink: 'syz.3.715': attribute type 8 has an invalid length.
[  117.666934][ T8166] netlink: 'syz.3.715': attribute type 10 has an invalid length.
[  117.671728][ T8166] netlink: 'syz.3.715': attribute type 11 has an invalid length.
[  117.804608][ T8177] can: request_module (can-proto-0) failed.
[  118.349095][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.354099][ T8186] openvswitch: netlink: Missing valid actions attribute.
[  118.357321][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.978335][ T8221] __nla_validate_parse: 27 callbacks suppressed
[  118.978344][ T8221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.736'.
[  119.392906][ T8263] netlink: 132 bytes leftover after parsing attributes in process `syz.3.749'.
[  119.404818][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'.
[  119.508542][ T5845] Bluetooth: hci1: command tx timeout
[  120.139104][ T8282] netlink: 277 bytes leftover after parsing attributes in process `syz.1.756'.
[  120.574807][ T8284] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.757'.
[  120.719064][ T8288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.759'.
[  121.011403][ T8317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.770'.
[  121.124189][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'.
[  121.129529][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'.
[  121.204929][ T8326] openvswitch: netlink: Tunnel attr 197 out of range max 16
[  121.274491][ T8330] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.773'.
[  123.064688][ T8389] validate_nla: 19 callbacks suppressed
[  123.064703][ T8389] netlink: 'syz.1.795': attribute type 28 has an invalid length.
[  123.079876][ T8389] netlink: 'syz.1.795': attribute type 3 has an invalid length.
[  123.203948][ T8398] netlink: 'syz.1.799': attribute type 4 has an invalid length.
[  124.397180][ T8453] netlink: 'syz.1.813': attribute type 28 has an invalid length.
[  124.401388][ T8453] netlink: 'syz.1.813': attribute type 3 has an invalid length.
[  124.404678][ T8453] __nla_validate_parse: 42 callbacks suppressed
[  124.404688][ T8453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.813'.
[  124.473307][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'.
[  124.562894][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'.
[  124.621215][ T8466] netlink: 180 bytes leftover after parsing attributes in process `syz.1.818'.
[  125.201466][ T8506] netlink: 'syz.3.830': attribute type 28 has an invalid length.
[  125.204494][ T8506] netlink: 'syz.3.830': attribute type 3 has an invalid length.
[  125.207442][ T8506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.830'.
[  125.370399][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'.
[  125.533905][ T8523] netlink: 'syz.4.837': attribute type 28 has an invalid length.
[  125.536736][ T8523] netlink: 'syz.4.837': attribute type 3 has an invalid length.
[  125.540432][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.837'.
[  125.570878][ T8526] netlink: 56 bytes leftover after parsing attributes in process `syz.4.838'.
[  125.831145][ T8545] netlink: 'syz.4.845': attribute type 2 has an invalid length.
[  125.994118][ T8556] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  126.064906][ T8507] delete_channel: no stack
[  127.010429][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'.
[  127.071383][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'.
[  128.132961][ T8654] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  128.335213][ T8661] validate_nla: 3 callbacks suppressed
[  128.335226][ T8661] netlink: 'syz.4.885': attribute type 4 has an invalid length.
[  128.367607][ T8664] netlink: 'syz.4.887': attribute type 3 has an invalid length.
[  128.594268][ T8683] netlink: 'syz.3.894': attribute type 4 has an invalid length.
[  128.872790][ T8707] netlink: 'syz.3.901': attribute type 1 has an invalid length.
[  128.996853][ T8714] netlink: 'syz.4.904': attribute type 4 has an invalid length.
[  129.465871][ T8736] openvswitch: netlink: Key type 50 is out of range max 32
[  129.517500][ T8736] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  130.085442][ T8800] : entered promiscuous mode
[  130.195822][ T8809] netlink: 'syz.4.937': attribute type 1 has an invalid length.
[  130.441691][ T8809] netlink: 'syz.4.937': attribute type 4 has an invalid length.
[  130.447963][ T8809] __nla_validate_parse: 9 callbacks suppressed
[  130.448050][ T8809] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.937'.
[  131.110846][ T8843] netlink: 'syz.3.947': attribute type 28 has an invalid length.
[  131.113928][ T8843] netlink: 'syz.3.947': attribute type 3 has an invalid length.
[  131.116798][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.947'.
[  131.423367][ T8853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.819733][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'.
[  131.832611][ T8862] openvswitch: netlink: Missing key (keys=40, expected=100)
[  131.873388][ T8866] netlink: 'syz.4.954': attribute type 28 has an invalid length.
[  131.878129][ T8866] netlink: 132 bytes leftover after parsing attributes in process `syz.4.954'.
[  132.371238][ T8887] syz.4.964: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  132.377572][ T8887] CPU: 1 UID: 0 PID: 8887 Comm: syz.4.964 Not tainted syzkaller #0 PREEMPT(full) 
[  132.377585][ T8887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.377592][ T8887] Call Trace:
[  132.377597][ T8887]  <TASK>
[  132.377602][ T8887]  dump_stack_lvl+0x189/0x250
[  132.377624][ T8887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.377639][ T8887]  ? __pfx__printk+0x10/0x10
[  132.377656][ T8887]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  132.377666][ T8887]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  132.377680][ T8887]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  132.377695][ T8887]  warn_alloc+0x214/0x310
[  132.377736][ T8887]  ? stack_depot_save_flags+0x40/0x860
[  132.377753][ T8887]  ? __pfx_warn_alloc+0x10/0x10
[  132.377763][ T8887]  ? kasan_save_track+0x4f/0x80
[  132.377778][ T8887]  ? xskq_create+0x56/0x170
[  132.377792][ T8887]  ? xsk_init_queue+0xb0/0x110
[  132.377805][ T8887]  ? xsk_setsockopt+0x57b/0x8d0
[  132.377817][ T8887]  ? do_sock_setsockopt+0x17c/0x1b0
[  132.377828][ T8887]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  132.377839][ T8887]  ? do_syscall_64+0xfa/0x3b0
[  132.377849][ T8887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.377865][ T8887]  __vmalloc_node_range_noprof+0x125/0x12f0
[  132.377905][ T8887]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  132.377925][ T8887]  ? __kasan_kmalloc+0x93/0xb0
[  132.377944][ T8887]  vmalloc_user_noprof+0xad/0xf0
[  132.377955][ T8887]  ? xskq_create+0xbf/0x170
[  132.377971][ T8887]  xskq_create+0xbf/0x170
[  132.377982][ T8887]  xsk_init_queue+0xb0/0x110
[  132.377998][ T8887]  xsk_setsockopt+0x57b/0x8d0
[  132.378014][ T8887]  ? __pfx_xsk_setsockopt+0x10/0x10
[  132.378028][ T8887]  ? __pfx_aa_sk_perm+0x10/0x10
[  132.378047][ T8887]  ? __fget_files+0x2a/0x420
[  132.378057][ T8887]  ? aa_sock_opt_perm+0xff/0x1b0
[  132.378070][ T8887]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  132.378083][ T8887]  ? __pfx_xsk_setsockopt+0x10/0x10
[  132.378093][ T8887]  do_sock_setsockopt+0x17c/0x1b0
[  132.378106][ T8887]  __x64_sys_setsockopt+0x13f/0x1b0
[  132.378120][ T8887]  do_syscall_64+0xfa/0x3b0
[  132.378130][ T8887]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.378145][ T8887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.378155][ T8887]  ? exc_page_fault+0x9f/0xf0
[  132.378171][ T8887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.378180][ T8887] RIP: 0033:0x7fa8ec38eba9
[  132.378187][ T8887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.378195][ T8887] RSP: 002b:00007fa8ed13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  132.378206][ T8887] RAX: ffffffffffffffda RBX: 00007fa8ec5d5fa0 RCX: 00007fa8ec38eba9
[  132.378213][ T8887] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  132.378219][ T8887] RBP: 00007fa8ec411e19 R08: 0000000000000004 R09: 0000000000000000
[  132.378225][ T8887] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  132.378231][ T8887] R13: 00007fa8ec5d6038 R14: 00007fa8ec5d5fa0 R15: 00007ffc656368b8
[  132.378251][ T8887]  </TASK>
[  132.378255][ T8887] Mem-Info:
[  132.499160][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.501855][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.576403][ T8887] active_anon:31117 inactive_anon:0 isolated_anon:0
[  132.576403][ T8887]  active_file:14820 inactive_file:38273 isolated_file:0
[  132.576403][ T8887]  unevictable:1768 dirty:80 writeback:0
[  132.576403][ T8887]  slab_reclaimable:10045 slab_unreclaimable:68768
[  132.576403][ T8887]  mapped:18115 shmem:20666 pagetables:1047
[  132.576403][ T8887]  sec_pagetables:0 bounce:0
[  132.576403][ T8887]  kernel_misc_reclaimable:0
[  132.576403][ T8887]  free:240352 free_pcp:21532 free_cma:0
[  132.700127][ T8887] Node 0 active_anon:45888kB inactive_anon:0kB active_file:29920kB inactive_file:144608kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60076kB dirty:276kB writeback:0kB shmem:7852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6204kB pagetables:2864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.792027][ T8887] Node 1 active_anon:51612kB inactive_anon:0kB active_file:29360kB inactive_file:8484kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12312kB dirty:112kB writeback:0kB shmem:47688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6224kB pagetables:1388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.838772][ T8887] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  132.871017][ T8887] lowmem_reserve[]: 0 811 811 811 811
[  132.878558][ T8887] Node 0 DMA32 free:93616kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46908kB inactive_anon:0kB active_file:29920kB inactive_file:144608kB unevictable:3536kB writepending:276kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:57960kB local_pcp:41304kB free_cma:0kB
[  132.920613][ T8887] lowmem_reserve[]: 0 0 0 0 0
[  132.922313][ T8887] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  132.938672][ T8904] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  132.941029][ T8904] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  132.992318][ T8887] lowmem_reserve[]: 0 0 854 854 854
[  132.994539][ T8887] Node 1 Normal free:441692kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28424kB inactive_anon:0kB active_file:29360kB inactive_file:8484kB unevictable:3536kB writepending:112kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29172kB local_pcp:19012kB free_cma:0kB
[  133.035680][ T8887] lowmem_reserve[]: 0 0 0 0 0
[  133.037350][ T8887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  133.064361][ T8887] Node 0 DMA32: 1304*4kB (UME) 375*8kB (UME) 277*16kB (UME) 96*32kB (UM) 110*64kB (UM) 26*128kB (UM) 11*256kB (UME) 10*512kB (UM) 10*1024kB (UME) 3*2048kB (UM) 10*4096kB (UM) = 91368kB
[  133.084639][ T8887] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  133.109560][ T8887] Node 1 Normal: 649*4kB (UME) 1012*8kB (UME) 743*16kB (UME) 359*32kB (UME) 319*64kB (UME) 159*128kB (UME) 46*256kB (UME) 25*512kB (UME) 18*1024kB (UME) 12*2048kB (UME) 77*4096kB (UM) = 457812kB
[  133.120019][ T8887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.124796][ T8887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.128267][ T8887] 56149 total pagecache pages
[  133.130054][ T8887] 0 pages in swap cache
[  133.131835][ T8887] Free swap  = 124996kB
[  133.133401][ T8887] Total swap = 124996kB
[  133.135131][ T8887] 786301 pages RAM
[  133.136635][ T8887] 0 pages HighMem/MovableOnly
[  133.139669][ T8887] 241335 pages reserved
[  133.141261][ T8887] 0 pages cma reserved
[  133.280500][ T8917] delete_channel: no stack
[  133.282332][ T8917] delete_channel: no stack
[  133.284570][ T8917] netlink: 272 bytes leftover after parsing attributes in process `syz.3.974'.
[  133.329287][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.4.976'.
[  133.477404][ T8926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.482997][ T8919] validate_nla: 5 callbacks suppressed
[  133.483041][ T8919] netlink: 'syz.3.975': attribute type 10 has an invalid length.
[  133.757763][ T8931] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.979'.
[  133.834096][ T8949] netlink: 'syz.3.983': attribute type 28 has an invalid length.
[  133.837108][ T8949] netlink: 'syz.3.983': attribute type 3 has an invalid length.
[  133.843375][ T8949] netlink: 132 bytes leftover after parsing attributes in process `syz.3.983'.
[  133.877831][ T8952] netlink: 48 bytes leftover after parsing attributes in process `syz.3.984'.
[  133.968280][ T8952] netlink: 'syz.3.984': attribute type 10 has an invalid length.
[  133.977629][ T8952] syz_tun: entered promiscuous mode
[  134.116480][ T8952] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  134.134205][ T8952] syz.3.984 (8952) used greatest stack depth: 17912 bytes left
[  134.184206][ T8972] netlink: 72 bytes leftover after parsing attributes in process `syz.3.985'.
[  134.413736][ T8993] netlink: 'syz.4.990': attribute type 28 has an invalid length.
[  134.416577][ T8993] netlink: 'syz.4.990': attribute type 3 has an invalid length.
[  134.443348][ T8996] netlink: 'syz.4.991': attribute type 4 has an invalid length.
[  134.657925][ T9014] netlink: 'syz.4.995': attribute type 21 has an invalid length.
[  134.723341][ T9019] netlink: 'syz.4.995': attribute type 29 has an invalid length.
[  134.728264][ T9014] netlink: 'syz.4.995': attribute type 29 has an invalid length.
[  136.069447][ T9064] __nla_validate_parse: 10 callbacks suppressed
[  136.069461][ T9064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'.
[  136.076740][ T9064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'.
[  136.346626][ T9072] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1014'.
[  136.655394][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1019'.
[  137.006830][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'.
[  137.158906][ T9111] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1025'.
[  137.427902][ T9126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1032'.
[  137.432329][ T9126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1032'.
[  137.513596][ T9128] netlink: 143452 bytes leftover after parsing attributes in process `syz.3.1033'.
[  137.837886][ T9153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1046'.
[  137.857592][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.897933][ T9153] bridge_slave_0 (unregistering): left allmulticast mode
[  137.904754][ T9153] bridge_slave_0 (unregistering): left promiscuous mode
[  137.907409][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.158266][ T9174] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  138.161701][ T9174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.778352][ T9208] validate_nla: 9 callbacks suppressed
[  139.778366][ T9208] netlink: 'syz.4.1060': attribute type 28 has an invalid length.
[  139.784813][ T9208] netlink: 'syz.4.1060': attribute type 3 has an invalid length.
[  139.851232][ T9201] netlink: 'syz.1.1058': attribute type 4 has an invalid length.
[  140.445712][ T9234] netlink: 'syz.1.1070': attribute type 3 has an invalid length.
[  140.810837][ T9263] netlink: 'syz.4.1082': attribute type 28 has an invalid length.
[  140.813478][ T9263] netlink: 'syz.4.1082': attribute type 3 has an invalid length.
[  140.908054][ T9270] netlink: 'syz.4.1085': attribute type 4 has an invalid length.
[  140.922258][ T9269] raw_sendmsg: syz.1.1084 forgot to set AF_INET. Fix it!
[  141.758776][ T9298] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  141.761527][ T9298] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  141.982590][ T9312] __nla_validate_parse: 14 callbacks suppressed
[  141.982631][ T9312] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1098'.
[  143.275391][ T9328] netlink: 'syz.3.1102': attribute type 3 has an invalid length.
[  143.277993][ T9328] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1102'.
[  143.360618][ T9337] netlink: 'syz.4.1107': attribute type 4 has an invalid length.
[  144.607670][ T9378] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1119'.
[  144.727752][ T9382] netlink: 'syz.3.1121': attribute type 28 has an invalid length.
[  144.732473][ T9382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1121'.
[  145.065958][ T9398] validate_nla: 1 callbacks suppressed
[  145.065968][ T9398] netlink: 'syz.1.1127': attribute type 4 has an invalid length.
[  145.103094][ T9399] netlink: 'syz.3.1125': attribute type 2 has an invalid length.
[  145.188237][ T9406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1129'.
[  145.197696][ T9406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1129'.
[  145.489343][ T9419] netlink: 'syz.1.1134': attribute type 4 has an invalid length.
[  146.899418][ T9458] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1150'.
[  147.331827][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1151'.
[  147.349768][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1151'.
[  147.379868][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1151'.
[  147.468271][ T9464] netlink: 'syz.1.1152': attribute type 28 has an invalid length.
[  147.476581][ T9464] netlink: 'syz.1.1152': attribute type 3 has an invalid length.
[  147.483868][ T9464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1152'.
[  147.822832][ T9484] netlink: 'syz.4.1159': attribute type 4 has an invalid length.
[  147.877285][ T9489] netlink: 'syz.3.1162': attribute type 28 has an invalid length.
[  147.882681][ T9489] netlink: 'syz.3.1162': attribute type 3 has an invalid length.
[  147.886167][ T9489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1162'.
[  148.091139][ T9493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.095049][ T9493] IPv6: NLM_F_CREATE should be set when creating new route
[  148.098095][ T9493] IPv6: NLM_F_CREATE should be set when creating new route
[  148.302079][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1167'.
[  148.306715][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1167'.
[  148.355868][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'.
[  148.451832][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'.
[  148.455633][ T9511] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1169'.
[  149.648038][ T9531] netlink: 'syz.1.1177': attribute type 28 has an invalid length.
[  149.651600][ T9531] netlink: 'syz.1.1177': attribute type 3 has an invalid length.
[  150.015574][ T9565] lo: entered allmulticast mode
[  150.021261][ T9565] lo: entered promiscuous mode
[  150.022928][ T9565] lo: left allmulticast mode
[  150.214426][ T9586] validate_nla: 3 callbacks suppressed
[  150.214435][ T9586] netlink: 'syz.1.1197': attribute type 28 has an invalid length.
[  150.220065][ T9586] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  150.250463][ T9589] netlink: 'syz.4.1198': attribute type 29 has an invalid length.
[  150.419378][ T9604] openvswitch: netlink: Key type 50 is out of range max 32
[  150.475250][ T9604] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  151.718374][ T9659] netlink: 'syz.4.1218': attribute type 4 has an invalid length.
[  151.855308][ T9668] syzkaller0: entered promiscuous mode
[  151.857546][ T9668] syzkaller0: entered allmulticast mode
[  152.038070][ T9674] netlink: 'syz.3.1224': attribute type 3 has an invalid length.
[  152.045814][ T9674] netlink: 'syz.3.1224': attribute type 3 has an invalid length.
[  152.880142][ T9680] netlink: 'syz.3.1227': attribute type 4 has an invalid length.
[  152.883692][ T9684] __nla_validate_parse: 20 callbacks suppressed
[  152.883703][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1229'.
[  152.891422][ T9685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1229'.
[  153.023552][ T9692] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1233'.
[  153.050920][ T9697] netlink: 'syz.4.1235': attribute type 28 has an invalid length.
[  153.054376][ T9697] netlink: 'syz.4.1235': attribute type 3 has an invalid length.
[  153.058260][ T9697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1235'.
[  153.177716][ T9699] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  153.346594][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'.
[  153.401732][ T9707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  153.405178][ T9707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  153.585714][ T9720] netlink: 'syz.1.1243': attribute type 4 has an invalid length.
[  153.588358][ T9720] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1243'.
[  154.081980][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'.
[  154.113677][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'.
[  154.141312][ T9734] sock: sock_timestamping_bind_phc: sock not bind to device
[  154.949485][ T9782] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  154.952284][ T9781] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  154.971427][ T9784] dummy0: entered promiscuous mode
[  155.253934][ T9807] validate_nla: 5 callbacks suppressed
[  155.253950][ T9807] netlink: 'syz.3.1277': attribute type 28 has an invalid length.
[  155.260886][ T9807] netlink: 'syz.3.1277': attribute type 3 has an invalid length.
[  155.316106][ T9815] netlink: 'syz.3.1280': attribute type 10 has an invalid length.
[  155.442878][ T9825] netlink: 'syz.4.1286': attribute type 28 has an invalid length.
[  155.446381][ T9825] netlink: 'syz.4.1286': attribute type 3 has an invalid length.
[  156.256942][ T9874] netlink: 'syz.3.1304': attribute type 1 has an invalid length.
[  156.433098][ T9888] netlink: 'syz.1.1309': attribute type 4 has an invalid length.
[  156.593089][ T9899] netlink: 'syz.1.1313': attribute type 11 has an invalid length.
[  156.757998][ T9899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.962021][ T9923] openvswitch: netlink: Invalid VLAN frame
[  157.012740][ T9928] netlink: 'syz.4.1325': attribute type 4 has an invalid length.
[  157.181430][ T9939] : entered promiscuous mode
[  157.432714][ T9961] netlink: 'syz.4.1337': attribute type 32 has an invalid length.
[  157.843837][T10003] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  157.951176][   T33] audit: type=1107 audit(1757557368.051:3): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='BM v˿?h't9ՊQTɸIAeY.{$'
[  157.951489][T10017] netlink: 'syz.1.1355': attribute type 1 has an invalid length.
[  157.972022][T10021] __nla_validate_parse: 25 callbacks suppressed
[  157.972030][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'.
[  158.105462][T10034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1361'.
[  158.116311][T10034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1361'.
[  158.129157][T10034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1361'.
[  158.421884][T10069] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  158.424276][T10071] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1376'.
[  158.739981][T10097] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1386'.
[  159.535450][T10117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1394'.
[  159.723850][T10135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1403'.
[  160.196606][T10162] IPv6: Can't replace route, no match found
[  160.617557][T10166] validate_nla: 7 callbacks suppressed
[  160.617572][T10166] netlink: 'syz.3.1415': attribute type 10 has an invalid length.
[  160.695754][T10172] netlink: 'syz.4.1417': attribute type 10 has an invalid length.
[  160.765604][T10175] netlink: 'syz.1.1418': attribute type 4 has an invalid length.
[  161.960009][T10202] netlink: 'syz.1.1428': attribute type 6 has an invalid length.
[  161.963636][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1427'.
[  161.970135][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1427'.
[  162.317429][T10246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.320502][T10246] IPv6: NLM_F_CREATE should be set when creating new route
[  162.323632][T10246] IPv6: NLM_F_CREATE should be set when creating new route
[  162.326682][T10246] IPv6: NLM_F_CREATE should be set when creating new route
[  162.338501][T10251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.967915][T10274] IPv6: NLM_F_REPLACE set, but no existing node found!
[  163.128144][T10286] netlink: 'syz.3.1457': attribute type 8 has an invalid length.
[  163.161730][T10286] ==================================================================
[  163.164847][T10286] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  163.167819][T10286] Read of size 1 at addr ffff8881181f5530 by task syz.3.1457/10286
[  163.171605][T10286] 
[  163.172587][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.3.1457 Not tainted syzkaller #0 PREEMPT(full) 
[  163.172600][T10286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.172607][T10286] Call Trace:
[  163.172612][T10286]  <TASK>
[  163.172628][T10286]  dump_stack_lvl+0x189/0x250
[  163.172648][T10286]  ? __kasan_check_byte+0x12/0x40
[  163.172666][T10286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.172678][T10286]  ? lock_release+0x4b/0x3e0
[  163.172695][T10286]  ? __virt_addr_valid+0x4a5/0x5c0
[  163.172709][T10286]  print_report+0xca/0x240
[  163.172720][T10286]  ? xfrm_state_find+0x2cf2/0x5400
[  163.172729][T10286]  kasan_report+0x118/0x150
[  163.172744][T10286]  ? xfrm_state_find+0x2cf2/0x5400
[  163.172755][T10286]  xfrm_state_find+0x2cf2/0x5400
[  163.172771][T10286]  ? xfrm_state_find+0x1da/0x5400
[  163.172782][T10286]  ? __pfx_xfrm_state_find+0x10/0x10
[  163.172796][T10286]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.172815][T10286]  ? xfrm_resolve_and_create_bundle+0x4eb/0x2f80
[  163.172829][T10286]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  163.172847][T10286]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  163.172860][T10286]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  163.172874][T10286]  ? __rcu_read_unlock+0x84/0xe0
[  163.172887][T10286]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  163.172908][T10286]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  163.172922][T10286]  ? xfrm_expand_policies+0x41f/0x6a0
[  163.172936][T10286]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  163.172950][T10286]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.172964][T10286]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  163.172980][T10286]  xfrm_lookup_route+0x3c/0x1c0
[  163.172992][T10286]  sctp_v4_get_dst+0x3c7/0x1200
[  163.173009][T10286]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[  163.173021][T10286]  ? _get_random_bytes+0x1bd/0x210
[  163.173035][T10286]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.173051][T10286]  ? dst_release+0x72/0x1b0
[  163.173063][T10286]  sctp_transport_route+0x118/0x2f0
[  163.173076][T10286]  sctp_assoc_add_peer+0x657/0x13b0
[  163.173090][T10286]  sctp_connect_new_asoc+0x30a/0x690
[  163.173103][T10286]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  163.173113][T10286]  ? __local_bh_enable_ip+0x12d/0x1c0
[  163.173125][T10286]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  163.173138][T10286]  ? security_sctp_bind_connect+0x7e/0x2e0
[  163.173153][T10286]  sctp_sendmsg+0x155c/0x2810
[  163.173165][T10286]  ? __pfx_sctp_sendmsg+0x10/0x10
[  163.173175][T10286]  ? aa_sk_perm+0x81e/0x950
[  163.173191][T10286]  ? __pfx_aa_sk_perm+0x10/0x10
[  163.173206][T10286]  ? sock_rps_record_flow+0x19/0x410
[  163.173219][T10286]  ? inet_sendmsg+0x2f4/0x370
[  163.173236][T10286]  __sock_sendmsg+0x19c/0x270
[  163.173250][T10286]  ____sys_sendmsg+0x505/0x830
[  163.173262][T10286]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.173274][T10286]  ? import_iovec+0x74/0xa0
[  163.173287][T10286]  ___sys_sendmsg+0x21f/0x2a0
[  163.173298][T10286]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.173318][T10286]  ? __fget_files+0x2a/0x420
[  163.173327][T10286]  ? __fget_files+0x3a0/0x420
[  163.173339][T10286]  __x64_sys_sendmsg+0x19b/0x260
[  163.173350][T10286]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.173369][T10286]  do_syscall_64+0xfa/0x3b0
[  163.173406][T10286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.173416][T10286]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.173428][T10286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.173438][T10286] RIP: 0033:0x7eff4f78eba9
[  163.173448][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.173457][T10286] RSP: 002b:00007eff50633038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.173469][T10286] RAX: ffffffffffffffda RBX: 00007eff4f9d5fa0 RCX: 00007eff4f78eba9
[  163.173477][T10286] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000009
[  163.173483][T10286] RBP: 00007eff4f811e19 R08: 0000000000000000 R09: 0000000000000000
[  163.173490][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.173496][T10286] R13: 00007eff4f9d6038 R14: 00007eff4f9d5fa0 R15: 00007ffcf0d9ade8
[  163.173509][T10286]  </TASK>
[  163.173513][T10286] 
[  163.317098][T10286] Allocated by task 7767:
[  163.318752][T10286]  kasan_save_track+0x3e/0x80
[  163.320398][T10286]  __kasan_slab_alloc+0x6c/0x80
[  163.322246][T10286]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  163.324242][T10286]  xfrm_state_alloc+0x24/0x2f0
[  163.325905][T10286]  __find_acq_core+0x8a7/0x1c00
[  163.327579][T10286]  xfrm_find_acq+0x78/0xa0
[  163.329122][T10286]  xfrm_alloc_userspi+0x6b3/0xc90
[  163.330974][T10286]  xfrm_user_rcv_msg+0x7a3/0xab0
[  163.332738][T10286]  netlink_rcv_skb+0x208/0x470
[  163.334419][T10286]  xfrm_netlink_rcv+0x79/0x90
[  163.336062][T10286]  netlink_unicast+0x82f/0x9e0
[  163.337710][T10286]  netlink_sendmsg+0x805/0xb30
[  163.339345][T10286]  __sock_sendmsg+0x21c/0x270
[  163.340967][T10286]  ____sys_sendmsg+0x505/0x830
[  163.342626][T10286]  ___sys_sendmsg+0x21f/0x2a0
[  163.344235][T10286]  __x64_sys_sendmsg+0x19b/0x260
[  163.345950][T10286]  do_syscall_64+0xfa/0x3b0
[  163.347521][T10286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.349546][T10286] 
[  163.350443][T10286] Freed by task 51:
[  163.351853][T10286]  kasan_save_track+0x3e/0x80
[  163.353613][T10286]  kasan_save_free_info+0x46/0x50
[  163.355619][T10286]  __kasan_slab_free+0x5b/0x80
[  163.357431][T10286]  kmem_cache_free+0x18f/0x400
[  163.359130][T10286]  xfrm_state_gc_task+0x52d/0x6b0
[  163.360945][T10286]  process_scheduled_works+0xae1/0x17b0
[  163.363192][T10286]  worker_thread+0x8a0/0xda0
[  163.365051][T10286]  kthread+0x711/0x8a0
[  163.366695][T10286]  ret_from_fork+0x3fc/0x770
[  163.368543][T10286]  ret_from_fork_asm+0x1a/0x30
[  163.370362][T10286] 
[  163.371349][T10286] The buggy address belongs to the object at ffff8881181f5200
[  163.371349][T10286]  which belongs to the cache xfrm_state of size 928
[  163.376682][T10286] The buggy address is located 816 bytes inside of
[  163.376682][T10286]  freed 928-byte region [ffff8881181f5200, ffff8881181f55a0)
[  163.381676][T10286] 
[  163.382575][T10286] The buggy address belongs to the physical page:
[  163.384965][T10286] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881181f5200 pfn:0x1181f4
[  163.388505][T10286] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  163.391202][T10286] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  163.393693][T10286] page_type: f5(slab)
[  163.395247][T10286] raw: 057ff00000000040 ffff88801bf80c80 dead000000000122 0000000000000000
[  163.398293][T10286] raw: ffff8881181f5200 00000000800e000a 00000000f5000000 0000000000000000
[  163.401594][T10286] head: 057ff00000000040 ffff88801bf80c80 dead000000000122 0000000000000000
[  163.404725][T10286] head: ffff8881181f5200 00000000800e000a 00000000f5000000 0000000000000000
[  163.408152][T10286] head: 057ff00000000002 ffffea0004607d01 00000000ffffffff 00000000ffffffff
[  163.411160][T10286] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  163.414183][T10286] page dumped because: kasan: bad access detected
[  163.416494][T10286] page_owner tracks the page as allocated
[  163.418465][T10286] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6157, tgid 6156 (syz.1.79), ts 65320665612, free_ts 64941311701
[  163.424859][T10286]  post_alloc_hook+0x240/0x2a0
[  163.426578][T10286]  get_page_from_freelist+0x21e4/0x22c0
[  163.428491][T10286]  __alloc_frozen_pages_noprof+0x181/0x370
[  163.430667][T10286]  alloc_pages_mpol+0x232/0x4a0
[  163.432735][T10286]  allocate_slab+0x8a/0x370
[  163.434432][T10286]  ___slab_alloc+0xbeb/0x1410
[  163.436046][T10286]  kmem_cache_alloc_noprof+0x283/0x3c0
[  163.437952][T10286]  xfrm_state_alloc+0x24/0x2f0
[  163.439748][T10286]  xfrm_add_sa+0x17d1/0x4070
[  163.441520][T10286]  xfrm_user_rcv_msg+0x7a3/0xab0
[  163.443204][T10286]  netlink_rcv_skb+0x208/0x470
[  163.444867][T10286]  xfrm_netlink_rcv+0x79/0x90
[  163.446481][T10286]  netlink_unicast+0x82f/0x9e0
[  163.448223][T10286]  netlink_sendmsg+0x805/0xb30
[  163.449963][T10286]  __sock_sendmsg+0x21c/0x270
[  163.451657][T10286]  ____sys_sendmsg+0x505/0x830
[  163.453366][T10286] page last free pid 6140 tgid 6140 stack trace:
[  163.455646][T10286]  __free_frozen_pages+0xbc4/0xd30
[  163.457467][T10286]  __put_partials+0x156/0x1a0
[  163.459062][T10286]  put_cpu_partial+0x17c/0x250
[  163.460696][T10286]  __slab_free+0x2d5/0x3c0
[  163.462303][T10286]  qlist_free_all+0x97/0x140
[  163.463967][T10286]  kasan_quarantine_reduce+0x148/0x160
[  163.465804][T10286]  __kasan_slab_alloc+0x22/0x80
[  163.467458][T10286]  __kmalloc_noprof+0x224/0x4f0
[  163.469104][T10286]  load_elf_binary+0x326/0x2740
[  163.470765][T10286]  bprm_execve+0x99c/0x1450
[  163.472313][T10286]  kernel_execve+0x8f0/0x9f0
[  163.473897][T10286]  call_usermodehelper_exec_async+0x210/0x360
[  163.475993][T10286]  ret_from_fork+0x3fc/0x770
[  163.477580][T10286]  ret_from_fork_asm+0x1a/0x30
[  163.479240][T10286] 
[  163.480066][T10286] Memory state around the buggy address:
[  163.481947][T10286]  ffff8881181f5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.485033][T10286]  ffff8881181f5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.488073][T10286] >ffff8881181f5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.490802][T10286]                                      ^
[  163.492707][T10286]  ffff8881181f5580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  163.495753][T10286]  ffff8881181f5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  163.498496][T10286] ==================================================================
[  163.511428][T10286] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  163.514109][T10286] CPU: 0 UID: 0 PID: 10286 Comm: syz.3.1457 Not tainted syzkaller #0 PREEMPT(full) 
[  163.517245][T10286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.520668][T10286] Call Trace:
[  163.521816][T10286]  <TASK>
[  163.522844][T10286]  dump_stack_lvl+0x99/0x250
[  163.524461][T10286]  ? __asan_memcpy+0x40/0x70
[  163.526035][T10286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.527808][T10286]  ? __pfx__printk+0x10/0x10
[  163.529394][T10286]  vpanic+0x281/0x750
[  163.530767][T10286]  ? preempt_schedule+0xae/0xc0
[  163.532420][T10286]  ? __pfx_vpanic+0x10/0x10
[  163.533964][T10286]  ? preempt_schedule_common+0x83/0xd0
[  163.535856][T10286]  ? preempt_schedule+0xae/0xc0
[  163.537518][T10286]  ? __pfx_preempt_schedule+0x10/0x10
[  163.539325][T10286]  panic+0xb9/0xc0
[  163.540646][T10286]  ? __pfx_panic+0x10/0x10
[  163.542394][T10286]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  163.544831][T10286]  ? xfrm_state_find+0x2cf2/0x5400
[  163.546961][T10286]  check_panic_on_warn+0x89/0xb0
[  163.549053][T10286]  ? xfrm_state_find+0x2cf2/0x5400
[  163.551128][T10286]  end_report+0x78/0x160
[  163.552865][T10286]  kasan_report+0x129/0x150
[  163.554764][T10286]  ? xfrm_state_find+0x2cf2/0x5400
[  163.556931][T10286]  xfrm_state_find+0x2cf2/0x5400
[  163.559052][T10286]  ? xfrm_state_find+0x1da/0x5400
[  163.561162][T10286]  ? __pfx_xfrm_state_find+0x10/0x10
[  163.563363][T10286]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.565537][T10286]  ? xfrm_resolve_and_create_bundle+0x4eb/0x2f80
[  163.567756][T10286]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  163.569838][T10286]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  163.571827][T10286]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  163.574036][T10286]  ? __rcu_read_unlock+0x84/0xe0
[  163.575739][T10286]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  163.577917][T10286]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  163.580558][T10286]  ? xfrm_expand_policies+0x41f/0x6a0
[  163.582539][T10286]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  163.584447][T10286]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.586419][T10286]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  163.588711][T10286]  xfrm_lookup_route+0x3c/0x1c0
[  163.590635][T10286]  sctp_v4_get_dst+0x3c7/0x1200
[  163.592508][T10286]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[  163.594284][T10286]  ? _get_random_bytes+0x1bd/0x210
[  163.596067][T10286]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.598226][T10286]  ? dst_release+0x72/0x1b0
[  163.599939][T10286]  sctp_transport_route+0x118/0x2f0
[  163.601824][T10286]  sctp_assoc_add_peer+0x657/0x13b0
[  163.603593][T10286]  sctp_connect_new_asoc+0x30a/0x690
[  163.605657][T10286]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  163.607870][T10286]  ? __local_bh_enable_ip+0x12d/0x1c0
[  163.609748][T10286]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  163.611658][T10286]  ? security_sctp_bind_connect+0x7e/0x2e0
[  163.613676][T10286]  sctp_sendmsg+0x155c/0x2810
[  163.615692][T10286]  ? __pfx_sctp_sendmsg+0x10/0x10
[  163.617800][T10286]  ? aa_sk_perm+0x81e/0x950
[  163.619730][T10286]  ? __pfx_aa_sk_perm+0x10/0x10
[  163.621772][T10286]  ? sock_rps_record_flow+0x19/0x410
[  163.623977][T10286]  ? inet_sendmsg+0x2f4/0x370
[  163.625960][T10286]  __sock_sendmsg+0x19c/0x270
[  163.627616][T10286]  ____sys_sendmsg+0x505/0x830
[  163.629238][T10286]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.631015][T10286]  ? import_iovec+0x74/0xa0
[  163.632564][T10286]  ___sys_sendmsg+0x21f/0x2a0
[  163.634154][T10286]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.635920][T10286]  ? __fget_files+0x2a/0x420
[  163.637483][T10286]  ? __fget_files+0x3a0/0x420
[  163.639078][T10286]  __x64_sys_sendmsg+0x19b/0x260
[  163.640753][T10286]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.642604][T10286]  do_syscall_64+0xfa/0x3b0
[  163.644131][T10286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.646162][T10286]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.648235][T10286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.650235][T10286] RIP: 0033:0x7eff4f78eba9
[  163.651748][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.658142][T10286] RSP: 002b:00007eff50633038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.661393][T10286] RAX: ffffffffffffffda RBX: 00007eff4f9d5fa0 RCX: 00007eff4f78eba9
[  163.664045][T10286] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000009
[  163.666702][T10286] RBP: 00007eff4f811e19 R08: 0000000000000000 R09: 0000000000000000
[  163.669346][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.671991][T10286] R13: 00007eff4f9d6038 R14: 00007eff4f9d5fa0 R15: 00007ffcf0d9ade8
[  163.674651][T10286]  </TASK>
[  163.676393][T10286] Kernel Offset: disabled
[  163.677855][T10286] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:22:53  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000039f RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000039f RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e50
R8 =0000000000000000 R9 =ffffffff81ae033e R10=0000000000000003 R11=ffffffff81703490
R12=000000000ffff0e6 R13=dffffc0000000000 R14=000000000000039f R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa8ea5f66c0 ffffffff 00c00000
GS =0000 ffff8880b8619000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c33f999 CR3=000000003d73a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007eff4f9a7498 00007eff4f9a7470 XMM03=00007eff4f9a74a8 00007eff4f9a74a0
XMM04=00007eff5050d100 00007eff4f9a7460 XMM05=00007eff4f9a7478 00007eff4f9a74c0
XMM06=00007eff4f9a74b8 00007eff4f9a74b0 XMM07=00007eff4f9a74a8 00007eff4f9a74a0
XMM08=0000000000000000 00007eff4f812ee7 XMM09=0000000000000000 00007eff4f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003505 RDI=0000000000003506 RBP=00000000000003f8 RSP=ffffc9000806e630
R8 =ffff8880218d8237 R9 =1ffff1100431b046 R10=dffffc0000000000 R11=ffffffff854f62b0
R12=dffffc0000000000 R13=ffffffff99afc8f7 R14=ffffffff99df13a0 R15=0000000000000000
RIP=ffffffff854f632c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007eff506336c0 ffffffff 00c00000
GS =0000 ffff8881a3c19000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3a1884 CR3=0000000024eaa000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=24c359b8ddd88899 d93e4a9feb2e4e5b XMM03=3186162ecdcdf2ea f4594552040b93c6
XMM04=3fccc8c36501c084 83a652848e8d0ba1 XMM05=363925e374d8e055 035315f9168252bb
XMM06=aebdfe2df5199e19 c733ff1166e93cac XMM07=e1a2b2193fc83fcc c8c36501c08483a6
XMM08=52848e8d0ba13186 162ecdcdf2eaf459 XMM09=0000000000000000 00007fa63ec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
