last executing test programs:

2.117761027s ago: executing program 1 (id=1763):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3", 0x12}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000700010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)

2.117123063s ago: executing program 0 (id=1764):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
r3 = socket$kcm(0xa, 0x5, 0x0)
recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2041)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2041) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)

2.029093599s ago: executing program 0 (id=1766):
close(0x3)
socket$kcm(0xa, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x200007fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802ac01000000000000000085000000414ebd00850000000800000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})

1.813673805s ago: executing program 1 (id=1768):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)=').--q\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

1.811156812s ago: executing program 1 (id=1769):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000002680)={&(0x7f0000000180)=@in={0x2, 0x4e21, @private=0xa010102}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)="99", 0x1}], 0x1}, 0x40800)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70d000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b0000000000d1650800040000009500000000000000950d675388aa27a7337197043b6c4ce5dd6170169d40c5935bbce47b5a3be0c25e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

874.218493ms ago: executing program 1 (id=1770):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x9, 0x0}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x81}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffbfffffffff}, 0x808, 0x0, 0x6, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x44ec, 0x0, 0x40}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0)
r5 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x891b, 0x0)
socket$kcm(0x23, 0x2, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x4000)
setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000640), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8682, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="240000000012"})
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
socket(0x10, 0x3, 0x9)

631.484656ms ago: executing program 2 (id=1772):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000900000000000000090000009500000000000000f3968e88728b95c6574df971f3d6be6f66f40440f819938125ca5f6b8264e2bdeb41998870c6b14cb01fc0984d95d23966e0455a54154adce9b1c2756fd4d6653158766fe469dd7487c394a48d0ba5354f0b736ba7c2532c72"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r0, 0xfca804a0, 0x10, 0xf, &(0x7f0000001b40)="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"/266, &(0x7f0000001a40)=""/15, 0xfffffffe, 0x0, 0x0, 0x604, 0x0, 0x0, 0x1, 0x0, 0xfffffff8}, 0x14)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x27dcbe6a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x3, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}], 0x1}, 0x40012100)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001480)={0x10, 0x39, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x10}, {&(0x7f0000000d00)={0x10, 0x15, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x10}], 0x2, 0x0, 0x0, 0x20000000}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffff7fffffff}, 0x0, 0xca, 0x6, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0xffffff9d, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00')
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000500)}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20)

554.614206ms ago: executing program 0 (id=1773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000025997fee4708a8d787f07ad819f000d20200000000000000558fbe195626da3941db8fabe042a988f78374726739f0cf963d08602c5a5368603eba207da7747043da52261ed6012f95671db01692d7f000903545cdc301742f1d579660d33b04fa07130ed3fcd9be4040335de7d6a9b664357b6753c1244a00089ce338fc5a003d5215899ed68f81c471003e0635174366fc41fbd0391cdec43e7fd337616e3011bc1d0015ac48a9faa6fded19bc1877f4b8f3e7"], 0x48)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xf, &(0x7f00000001c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002, 0x4, @perf_bp={0x0, 0xf}, 0x109808, 0x4, 0xffffffff, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r6=>0xffffffffffffffff}, 0x0, &(0x7f0000000240)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f00000003c0)}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r4, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000ac0), &(0x7f0000001180), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001400)=@o_path={&(0x7f00000013c0)='./file0\x00', 0x0, 0x4000, r8}, 0x18)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000020100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000005400085000000030020009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="033409000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000181f0000", @ANYRES32=r0, @ANYBLOB="000000000000181800000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='syzkaller\x00', 0xb, 0xe0, &(0x7f0000000d80)=""/224, 0x100, 0x2, '\x00', r9, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0xa, 0x1, 0x3}, 0x10, r5, r10, 0x8, &(0x7f0000001480)=[r11, r0, r0, r0, r0, r0], &(0x7f00000014c0)=[{0x5, 0x5, 0xb, 0x9}, {0x5, 0x2, 0xd, 0xc}, {0x0, 0x1, 0x7, 0x6}, {0x5, 0x5, 0x3}, {0x3, 0x4, 0x5, 0x8}, {0x5, 0x5}, {0x4, 0x1, 0x10, 0x6}, {0x1, 0x1, 0x10, 0xb}], 0x10, 0x10}, 0x94)
r12 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpu.stat\x00', 0x0, 0x0)
r14 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r13, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[0x0], 0x0, 0xae, &(0x7f0000000b40)=[{}, {}], 0x10, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000fc0)=ANY=[@ANYRES32=r12, @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x7, 0x98, &(0x7f00000009c0)=""/152, 0x41100, 0xa6, '\x00', r15, 0x1b, r8, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x2, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x3, 0x4, 0x0, 0xb}, {0x0, 0x4, 0xc, 0x2}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000080000008bc304220557586b18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1740, 0x0)
ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r17 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r17, 0x6, 0x1e, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)

493.040315ms ago: executing program 2 (id=1774):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x1f}], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x8, 0x2, 0xb}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r0, r0, r1, r0], &(0x7f0000000300)=[{0x2, 0x1, 0x4, 0x7}, {0x3, 0x1, 0x9}, {0x1, 0x1, 0x4}, {0x0, 0x3, 0x7, 0x9}, {0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x3, 0x8}, {0x0, 0x4, 0x4, 0x7}], 0x10, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000440)=r3, 0x4)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x11}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x10c, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5600000}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x194, 0x3, 0xb, 0x301, 0x70bd2b, 0x25dfdbfc, {0xa}, [@nested={0x8, 0x18, 0x0, 0x1, [@nested={0x4, 0x92}]}, @typed={0x4, 0xad}, @generic="4ea578f6c7f8d50e15b6bf13c01f6449658ef40743b32998a28115d6ccfeeb040b68c175190f130a90d053146528d9b253c64a50531a3a4e1adbe7d503be40dce9755096656e2dbc228d7ac02a5849b3fbccbf445ed1ad311f1a5a957e872d4536fb0fabbec62abfed9f6ff58cea1ad83bde17529f45f7686be479838d316c", @nested={0xc, 0xaa, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @str='GPL\x00'}]}, @nested={0x18, 0x45, 0x0, 0x1, [@typed={0x14, 0x95, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @typed={0x4, 0x6c}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0xbe}, @typed={0xbd, 0x63, 0x0, 0x0, @binary="c1b0358c33dd5bc5de5f955e95d97ceeccf10c8bf22b9d9c788e245d0140469d8a095f3153a22cce73e065f72e7667b932acfc863e688c0061a1eb55243bdbbf772dd4b46b79a87ac68f17f87c968e43354ab036d266714de2e65e27898fe3d134bd5347f7778907a3ed65405347f672139bebaa0f93157a45fff5b9a21ce12a4745082ef7cfd158d0c40c9a8f0b2e03be0d2ee4644b166d2a9afdba3c53118410438e35b0c430dcad0e2f2ceca99d275088affc06a25b797e"}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x48800)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x90, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_LABELS_MASK={0x2c, 0x17, [0x7, 0x6, 0x9, 0x1, 0x9, 0x1, 0x24a, 0xfffffff6, 0x5, 0x4]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xdce7be017af96ad0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xf}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4005080}, 0x8000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x7, [@datasec={0x5, 0x6, 0x0, 0xf, 0x3, [{0x5, 0xdcca, 0x2}, {0x2, 0xb68c, 0xd1}, {0x1, 0x2aeb1b5d, 0x6}, {0x5, 0x8, 0x5}, {0x4, 0xff, 0x1}, {0x4, 0x0, 0x5a784c38}], "02d60e"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x2}}]}, {0x0, [0x5f, 0x0, 0x5f, 0x58, 0x30]}}, &(0x7f0000000d40)=""/4096, 0x8f, 0x1000, 0x1, 0x52d}, 0x28)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f00)={r0, &(0x7f0000001d80)="8237daa7e91fb29b2a4d85706a666fe868edce087786ff6d9722559a52b224492359866c2e6eb445ae9093b692c308ea2625054262f32bd5e06458d822f2928a209a9f3c21012e3f6099af539e802854659ffba884c8819815e8823ed66e8e", &(0x7f0000001e00)=""/224}, 0x20)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x38, 0x1412, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x70, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5dbe}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004100}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x30, 0x1405, 0x10, 0x70bd25, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20048044)
r7 = gettid()
syz_open_procfs$namespace(r7, &(0x7f0000002280)='ns/time\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000023c0)={@fallback=r6, 0x5, 0x1, 0x5, &(0x7f00000022c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002440)={0xe, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002400)={@fallback=r6, r3, 0x0, 0x20, 0x0, @void, @void, @void, @value=r9, r8}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002600)={r0, 0x58, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000026c0)={r0, <r11=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x6, 0x3, &(0x7f0000002480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffa}, @exit, @jmp={0x5, 0x0, 0x4, 0xb, 0x1, 0xa0, 0x1}], &(0x7f00000024c0)='syzkaller\x00', 0xfffffffd, 0x76, &(0x7f0000002500)=""/118, 0x41000, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0xc, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002700)=[r11, r0, r0, r1], &(0x7f0000002740)=[{0x5, 0x1, 0x2, 0x7}, {0x1, 0x3, 0xe, 0x8}, {0x1, 0x5, 0x6, 0x8}], 0x10, 0xffffffff}, 0x94)
socketpair(0x22, 0x6, 0x6, &(0x7f0000002840))
close(r6)
socket$kcm(0x29, 0x0, 0x0)

489.894579ms ago: executing program 0 (id=1775):
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf2, 0x5}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0000000040a298eb9230f08b01b1b0300000000000000000015000005"], 0xf0}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (rerun: 64)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000081000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200301, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000c40)={'veth1\x00', 0x2300}) (async)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b00)={0x10, 0x1407, 0x1, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)

486.921771ms ago: executing program 2 (id=1776):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)='blkio.bfq.sectors\x00'}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x34, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = gettid()
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x200000000000001}, 0x104022, 0xffffffffffffffff, 0x0, 0x0, 0x93, 0x44020008, 0x4, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(0x0, r3, 0xffffffffffffffff, r4, 0xb)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x900, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r1, 0x25, 0xc, @val=@iter={&(0x7f0000000540)=@task={r2, r3, r7}, 0x10}}, 0x20)

393.205216ms ago: executing program 1 (id=1777):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000003100)=""/4083, 0xff3}, {&(0x7f00000002c0)=""/169, 0xa9}, {0x0}, {&(0x7f0000000d40)=""/4099, 0x1003}, {0x0}, {0x0}, {&(0x7f0000000c40)=""/222, 0xde}], 0xb}, 0x2122)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x5d, 0x0, 0x0, 0x0, 0x46}, 0x2002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)={'c', ' *:* ', 'w\x00'}, 0x8)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x1e2)
perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa96, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_config_ext={0xf, 0x8}, 0xa100, 0xc8, 0x3, 0x658a89a2c6d24982, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3b05}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
close(r4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0xffca}, 0x164)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))

392.543089ms ago: executing program 2 (id=1778):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e26}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40408, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @redir={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x0, 0x3, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT]}], {0x14}}, 0xc0}}, 0x800)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

207.789923ms ago: executing program 0 (id=1779):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2d, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async)
r0 = socket$kcm(0xa, 0x922000000003, 0x11) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x18125, 0x2e, 0xfffffbff, 0x8, 0x2, 0x100000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x1000000}, 0x94)
socket$kcm(0x10, 0x3, 0x10) (async)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x20044841) (async)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) (async)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000008c0)) (async)
close(r1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="720ac4ff000000007110b200000000f0940000000000000043128d4a5c3541ba2fc72775d30549bfd39df414d3ccc5c5f756968763b56928b9fdfe1d40f3954dd0afbebddee6003a292776cb0b387a953ead94899e725705ebe062c77de954060265980646808f2c5503164fca7163df0900000000000000f1c78f26c4399cdeca1e172956b5b3797b89ea124e25b5f8c35bdf7c0e"], &(0x7f0000000480)='GPL\x00'}, 0x80)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="010068150001", @ANYRES16=r3, @ANYRES16=0x0], 0xffdd) (async)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3}, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) (async)
r5 = openat$cgroup_ro(r1, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r5}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) (async)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840) (async)
socketpair(0x24, 0xa, 0x3ff, &(0x7f0000000600)) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)

142.428526ms ago: executing program 1 (id=1780):
socket$kcm(0x10, 0x400000002, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000600)=@xdp={0x2c, 0x3, 0x0, 0x26}, 0x80, 0x0}, 0x200c68c4) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000600)=@xdp={0x2c, 0x3, 0x0, 0x26}, 0x80, 0x0}, 0x200c68c4)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040c5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x202, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0xc25, 0x7, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d08", 0x13}], 0xfffffffffffffdda, 0x0, 0xfd5b}, 0x20000090)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r5, 0x88, 0xa, &(0x7f0000000680)=r4, 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000009000400000000000000000085000000250000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000009000400000000000000000085000000250000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400"/20, @ANYRES32=r4, @ANYBLOB="0600"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="05000000010000000400"/28], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400"/20, @ANYRES32=r4, @ANYBLOB="0600"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="05000000010000000400"/28], 0x50)
socket$kcm(0xa, 0x2, 0x88) (async)
r8 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x80, 0x0}, 0x8a8c1)
sendmsg$inet(r8, 0x0, 0x20000081) (async)
sendmsg$inet(r8, 0x0, 0x20000081)

72.683791ms ago: executing program 2 (id=1781):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r2=>0xffffffffffffffff}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x189100, 0x0)
ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000001c0)=0x1)
socket$key(0xf, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x2)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0xb0a2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0xffff, <r7=>0x0}, 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000600)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}], &(0x7f0000000680)='GPL\x00', 0x1, 0x46, &(0x7f00000006c0)=""/70, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0xc, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, r0], 0x0, 0x10, 0x17f33987}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x23, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @ldst={0x3, 0x2, 0x6, 0x5, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ldst={0x0, 0x2, 0x3, 0xa, 0xa, 0x40}, @cb_func={0x18, 0xa66dbd046818d2fe, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x10, '\x00', r6, @fallback=0xf, r1, 0x8, &(0x7f0000000540)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x10000, 0x4}, 0x10, r7, r8, 0x5, &(0x7f0000000900)=[r2, r1, r9, r2, r1, r0, r1, r0], &(0x7f0000000940)=[{0x0, 0x4, 0x7, 0x2}, {0x3, 0x5, 0xa, 0x5}, {0x0, 0x2, 0xd, 0x5}, {0x3, 0x4, 0x4, 0xa}, {0x5, 0x3, 0x6, 0xc}], 0x10, 0x101}, 0x94)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a80)={0x400, <r11=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ac0)={r11}, 0x4)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000d80)=""/162, 0x27, 0xa2, 0x0, 0x4a8f}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x15, 0x23, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7452, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x41}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000c40)='syzkaller\x00', 0x4, 0x95, &(0x7f0000000c80)=""/149, 0x41000, 0x89, '\x00', r6, @fallback, r12, 0x8, &(0x7f0000000e80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x3, 0xb, 0xa0e3, 0x4}, 0x10, r7, r8, 0x1, 0x0, &(0x7f0000000f00)=[{0x1, 0x2, 0xa, 0xb}], 0x10, 0x7}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001000)=[0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000010c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000001180)}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001300)='cgroup.procs\x00', 0x2, 0x0)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x9, 0x0, r5, 0x0, '\x00', r13, r12, 0x2, 0x2, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={r0, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r15=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x2, 0x16, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e39, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x7a0e9fc33e80129b, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='GPL\x00', 0x8, 0x0, &(0x7f00000014c0), 0x41100, 0x50, '\x00', r15, @fallback, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x4, 0x6, 0x0, 0xe0}, 0x10, 0xffffffffffffffff, r10, 0x9, 0x0, &(0x7f0000001600)=[{0x2, 0x4, 0xc, 0x7}, {0x1, 0x1, 0x5, 0x4}, {0x1, 0x3, 0x0, 0x7}, {0x1, 0x5, 0x7, 0x9}, {0x1, 0x4, 0x3, 0xb}, {0x4, 0x1, 0xe, 0x3}, {0x2, 0x1, 0xe}, {0x0, 0x5, 0x2, 0xc}, {0x2, 0x1, 0x3}]}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={&(0x7f0000001780)="5106be198eb18c2ada0a991e52a5bf6d5c576c0992d3fe4a06fd54cfbdce127c96728f", &(0x7f00000017c0)=""/251, &(0x7f00000018c0)="886061a1dc4a5a1f9a598d660573b34edcff6ce6401c15c6d6f5ad93bc92966a14f2a283323203425519423a7e34f8118c32ed24f9bf6c78f4c5c5ee0ce9ff3f24f3c3795af47a382987e5d3a54861d146b442860ed17748f21df2a2fa178c30e76a420c3d87dc45e443fbc71ca59d989aeca8edb86673cbaa0bd91a6d9b422aca8c0bf238c54c899878beb7cc33df01bc68ac10daedff367151d8363ce999ff7e2abf28ecbbfa96f957a4f631ac02edf48853061c32f1c4", &(0x7f0000001980)="773a8d5bd7a57f73bac919d0818f20573157334ea9b9affdb4832b42f87e19e6eaf05cbfc8920fa073bb4917", 0x2f6, r14, 0x4}, 0x38)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r2}, &(0x7f0000001a00), &(0x7f0000001a40)='%pi6   \x00'}, 0x20)
r16 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r16, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, 0x3fa, 0x1, 0x70bd29, 0x4054, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000001bc0)=r13)

2.480051ms ago: executing program 2 (id=1782):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x2, 0x9, 0x5, 0x0, 0x0, {0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000080)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
fstat(r0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x4, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x7a, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x1405, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x8081)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffffffffffffff82, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0)

0s ago: executing program 0 (id=1783):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
socket$key(0xf, 0x3, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56433' (ED25519) to the list of known hosts.
syzkaller login: [   48.218303][ T5772] cgroup: Unknown subsys name 'net'
[   48.326844][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.336236][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.230215][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.420239][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.424752][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.427301][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.430557][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.433485][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.452869][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.456231][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.459332][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.463516][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.466930][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.528646][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.531411][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.534948][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.538765][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.542279][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.791807][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   55.916007][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.966549][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.970021][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.973747][ T5840] bridge_slave_0: entered allmulticast mode
[   55.977539][ T5840] bridge_slave_0: entered promiscuous mode
[   56.015342][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.018161][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.021033][ T5840] bridge_slave_1: entered allmulticast mode
[   56.025333][ T5840] bridge_slave_1: entered promiscuous mode
[   56.083456][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.095280][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.106421][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.183620][ T5840] team0: Port device team_slave_0 added
[   56.185979][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.188781][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.191565][ T5844] bridge_slave_0: entered allmulticast mode
[   56.195751][ T5844] bridge_slave_0: entered promiscuous mode
[   56.236809][ T5840] team0: Port device team_slave_1 added
[   56.245403][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.248289][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.251359][ T5844] bridge_slave_1: entered allmulticast mode
[   56.256080][ T5844] bridge_slave_1: entered promiscuous mode
[   56.335698][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.338605][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.341379][ T5849] bridge_slave_0: entered allmulticast mode
[   56.347141][ T5849] bridge_slave_0: entered promiscuous mode
[   56.352003][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.355603][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.358373][ T5849] bridge_slave_1: entered allmulticast mode
[   56.363465][ T5849] bridge_slave_1: entered promiscuous mode
[   56.369390][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.376015][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.379530][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.381789][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.392764][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.424438][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.427276][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.438598][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.459065][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.486234][ T5844] team0: Port device team_slave_0 added
[   56.491490][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.499501][ T5844] team0: Port device team_slave_1 added
[   56.564090][ T5840] hsr_slave_0: entered promiscuous mode
[   56.567213][ T5840] hsr_slave_1: entered promiscuous mode
[   56.570912][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.573598][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.581856][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.587210][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.589789][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.598398][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.604511][ T5849] team0: Port device team_slave_0 added
[   56.608332][ T5849] team0: Port device team_slave_1 added
[   56.667145][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.669556][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.678644][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.684044][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.686307][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.694831][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.750602][ T5844] hsr_slave_0: entered promiscuous mode
[   56.754394][ T5844] hsr_slave_1: entered promiscuous mode
[   56.756570][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   56.758651][ T5844] Cannot create hsr debugfs directory
[   56.855322][ T5849] hsr_slave_0: entered promiscuous mode
[   56.858303][ T5849] hsr_slave_1: entered promiscuous mode
[   56.861234][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.863816][ T5849] Cannot create hsr debugfs directory
[   57.057627][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.084709][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.096752][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.113845][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.170200][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.181052][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.193776][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.214440][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.274406][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.284583][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.291653][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.298325][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.415748][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.440742][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.462801][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   57.468483][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.478722][ T1883] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.481133][ T1883] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.485136][ T5846] Bluetooth: hci1: command tx timeout
[   57.487402][ T5846] Bluetooth: hci0: command tx timeout
[   57.492177][ T1883] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.494353][ T1883] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.512041][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.524822][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.527585][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.550460][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.553150][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.558587][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   57.571351][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.576520][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.588076][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.590165][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.616572][  T324] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.618971][  T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.649024][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.655501][ T5842] Bluetooth: hci2: command tx timeout
[   57.717595][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.751011][ T5840] veth0_vlan: entered promiscuous mode
[   57.779655][ T5840] veth1_vlan: entered promiscuous mode
[   57.811776][ T5840] veth0_macvtap: entered promiscuous mode
[   57.819107][ T5840] veth1_macvtap: entered promiscuous mode
[   57.850369][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.859711][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.866917][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.878649][ T5713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.884693][ T5713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.889989][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.893614][ T5713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.906962][ T5713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.987426][ T5849] veth0_vlan: entered promiscuous mode
[   58.008203][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.011291][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.019466][ T5849] veth1_vlan: entered promiscuous mode
[   58.029684][ T5844] veth0_vlan: entered promiscuous mode
[   58.064656][ T5844] veth1_vlan: entered promiscuous mode
[   58.069550][  T324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.072942][  T324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.108927][ T5849] veth0_macvtap: entered promiscuous mode
[   58.121937][ T5844] veth0_macvtap: entered promiscuous mode
[   58.128399][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.132067][ T5844] veth1_macvtap: entered promiscuous mode
[   58.139744][ T5849] veth1_macvtap: entered promiscuous mode
[   58.191738][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.206498][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.216558][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.221786][ T5868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.228010][ T5868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.228500][   T33] audit: type=1107 audit(1758914638.518:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[   58.228500][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[   58.228500][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[   58.228500][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[   58.230833][ T5868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.250566][ T5908] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   58.278313][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.298799][ T5908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.306355][ T5868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.324758][ T5868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.328250][ T5868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.357260][ T5868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.364307][ T5868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.468609][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.486562][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.542037][  T324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.547034][  T324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.551091][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.558877][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.626834][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.633827][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.745394][ T5915] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.779691][ T5918] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   58.786377][ T5918] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   58.790371][ T5918] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   58.887117][ T5913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4'.
[   58.917219][    C1] hrtimer: interrupt took 52534 ns
[   58.989521][ T5926] Zero length message leads to an empty skb
[   59.170957][ T5937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.420428][ T5948] netlink: 'syz.0.9': attribute type 3 has an invalid length.
[   59.425166][ T5948] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   59.428428][ T5948] netlink: 'syz.0.9': attribute type 2 has an invalid length.
[   59.434556][ T5948] netlink: 'syz.0.9': attribute type 8 has an invalid length.
[   59.438979][ T5948] netlink: 'syz.0.9': attribute type 10 has an invalid length.
[   59.441965][ T5948] netlink: 'syz.0.9': attribute type 11 has an invalid length.
[   59.444983][ T5948] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.9'.
[   59.514529][ T5950] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10'.
[   59.573387][ T5842] Bluetooth: hci0: command tx timeout
[   59.575528][ T5842] Bluetooth: hci1: command tx timeout
[   59.722517][ T5846] Bluetooth: hci2: command tx timeout
[   59.741708][ T5957] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13'.
[   60.135412][ T5973] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16'.
[   60.484395][ T5985] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET)
[   60.555505][ T5988] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.22'.
[   60.610992][ T5990] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.23'.
[   60.614747][ T5990] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.23'.
[   61.412811][ T6024] netlink: get zone limit has 4 unknown bytes
[   61.642937][ T5846] Bluetooth: hci1: command tx timeout
[   61.644857][ T5846] Bluetooth: hci0: command tx timeout
[   61.713310][ T6031] raw_sendmsg: syz.1.36 forgot to set AF_INET. Fix it!
[   61.803853][ T5846] Bluetooth: hci2: command tx timeout
[   61.816259][ T6043] netlink: del zone limit has 4 unknown bytes
[   62.077619][ T6054] =======================================================
[   62.077619][ T6054] WARNING: The mand mount option has been deprecated and
[   62.077619][ T6054]          and is ignored by this kernel. Remove the mand
[   62.077619][ T6054]          option from the mount to silence this warning.
[   62.077619][ T6054] =======================================================
[   62.132849][ T6051] syzkaller0: entered promiscuous mode
[   62.138174][ T6051] syzkaller0: entered allmulticast mode
[   63.438548][ T6080] validate_nla: 11 callbacks suppressed
[   63.438570][ T6080] netlink: 'syz.1.48': attribute type 3 has an invalid length.
[   63.722320][ T5846] Bluetooth: hci1: command tx timeout
[   63.734412][ T5846] Bluetooth: hci0: command tx timeout
[   63.895911][ T5846] Bluetooth: hci2: command tx timeout
[   64.724490][ T6073] sit0: entered allmulticast mode
[   64.737685][ T6074] sit0: entered promiscuous mode
[   65.547771][ T6096] __nla_validate_parse: 7 callbacks suppressed
[   65.547783][ T6096] netlink: 10 bytes leftover after parsing attributes in process `syz.1.55'.
[   65.612749][ T6104] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   65.615918][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'.
[   65.754572][ T6111] netlink: 'syz.1.60': attribute type 3 has an invalid length.
[   65.773095][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'.
[   65.980809][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'.
[   66.097515][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.104995][ T6125] netlink: 43 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.115422][ T6125] netlink: 'syz.2.65': attribute type 6 has an invalid length.
[   66.130165][ T6125] netlink: 'syz.2.65': attribute type 5 has an invalid length.
[   66.134121][ T6125] netlink: 43 bytes leftover after parsing attributes in process `syz.2.65'.
[   67.190641][ T6143] netlink: 304 bytes leftover after parsing attributes in process `syz.2.69'.
[   67.379815][ T6158] netlink: 'syz.2.74': attribute type 10 has an invalid length.
[   67.382777][ T6157] netlink: 'syz.2.74': attribute type 10 has an invalid length.
[   67.389257][ T6158] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   67.411821][ T6157] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   68.148086][ T6166] netlink: 'syz.0.77': attribute type 10 has an invalid length.
[   68.403581][ T6188] netlink: 'syz.0.81': attribute type 29 has an invalid length.
[   68.406643][ T6188] netlink: 'syz.0.81': attribute type 29 has an invalid length.
[   68.438276][ T6182] netlink: 188 bytes leftover after parsing attributes in process `syz.1.80'.
[   68.570873][ T6195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'.
[   68.578013][ T6197] validate_nla: 2 callbacks suppressed
[   68.578027][ T6197] netlink: 'syz.2.84': attribute type 37 has an invalid length.
[   68.635938][ T6200] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   68.638454][ T6200] netlink: 'syz.0.86': attribute type 1 has an invalid length.
[   68.652720][ T6200] bridge0: port 1(bridge_slave_0) entered learning state
[   68.817471][ T6208] syzkaller0: entered promiscuous mode
[   68.819720][ T6208] syzkaller0: entered allmulticast mode
[   70.570098][ T6242] netlink: 'syz.1.99': attribute type 29 has an invalid length.
[   70.576060][ T6242] netlink: 'syz.1.99': attribute type 29 has an invalid length.
[   70.579122][ T6242] netlink: 'syz.1.99': attribute type 29 has an invalid length.
[   70.581850][ T6242] netlink: 'syz.1.99': attribute type 29 has an invalid length.
[   70.615368][ T6241] __nla_validate_parse: 3 callbacks suppressed
[   70.615390][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   71.025565][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[   71.161937][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'.
[   71.318210][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.320484][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.496284][ T6267] netlink: 100 bytes leftover after parsing attributes in process `syz.2.106'.
[   71.835305][ T6290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'.
[   71.841185][ T6291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'.
[   71.955717][ T6301] netlink: 'syz.1.116': attribute type 10 has an invalid length.
[   71.981130][ T6301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   72.080231][ T6309] netlink: 104 bytes leftover after parsing attributes in process `syz.2.119'.
[   72.146102][ T6311] netlink: 'syz.1.120': attribute type 29 has an invalid length.
[   72.155905][ T6311] netlink: 'syz.1.120': attribute type 29 has an invalid length.
[   72.264369][ T6311] netlink: zone id is out of range
[   72.274398][ T6311] netlink: zone id is out of range
[   72.278338][ T6311] netlink: zone id is out of range
[   72.280312][ T6311] netlink: zone id is out of range
[   72.282690][ T6311] netlink: zone id is out of range
[   72.284691][ T6311] netlink: zone id is out of range
[   72.286762][ T6311] netlink: zone id is out of range
[   72.289547][ T6311] netlink: zone id is out of range
[   72.291800][ T6311] netlink: zone id is out of range
[   72.298845][ T6311] netlink: zone id is out of range
[   72.593826][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'.
[   72.971235][ T6322] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.123'.
[   73.167134][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.193556][ T6321] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.123'.
[   73.551063][ T6341] syzkaller0: create flow: hash 1873146682 index 1
[   73.566657][   T12] syzkaller0: tun_net_xmit 76
[   73.568905][   T12] syzkaller0: tun_net_xmit 48
[   73.596549][   T52] syzkaller0: tun_net_xmit 76
[   73.609379][ T6339] warning: `syz.1.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.613450][ T6334] syzkaller0: delete flow: hash 1873146682 index 1
[   74.111972][ T6358] validate_nla: 1 callbacks suppressed
[   74.111985][ T6358] netlink: 'syz.0.131': attribute type 4 has an invalid length.
[   74.225043][ T6360] netlink: 'syz.0.132': attribute type 21 has an invalid length.
[   74.745668][ T6350] netlink: 'syz.1.129': attribute type 4 has an invalid length.
[   74.933149][ T6366] netlink: 'syz.2.133': attribute type 27 has an invalid length.
[   74.936506][ T6366] netlink: 'syz.2.133': attribute type 4 has an invalid length.
[   74.991750][ T6362] C: renamed from team_slave_0 (while UP)
[   74.996542][ T6362] netlink: 'syz.0.132': attribute type 4 has an invalid length.
[   75.818978][ T6369] netlink: 'syz.2.134': attribute type 16 has an invalid length.
[   75.830365][ T6369] __nla_validate_parse: 5 callbacks suppressed
[   75.830432][ T6369] netlink: 156 bytes leftover after parsing attributes in process `syz.2.134'.
[   75.885754][ T6370] netlink: 809 bytes leftover after parsing attributes in process `syz.2.134'.
[   75.888941][ T6370] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.134'.
[   75.931616][ T6370] netlink: 809 bytes leftover after parsing attributes in process `syz.2.134'.
[   76.036307][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.136'.
[   76.518915][ T6400] netlink: 'syz.2.139': attribute type 2 has an invalid length.
[   76.528000][ T6400] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   76.530513][ T6400] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.139'.
[   76.533553][ T6400] block nbd5: not configured, cannot reconfigure
[   76.640564][ T6405] netlink: 160 bytes leftover after parsing attributes in process `syz.0.143'.
[   76.840114][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[   76.865757][ T6413] netlink: 120 bytes leftover after parsing attributes in process `syz.0.145'.
[   77.122234][ T6425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.148'.
[   77.241208][ T6425] : renamed from vlan0 (while UP)
[   77.767078][ T6445] netlink: 'syz.0.154': attribute type 10 has an invalid length.
[   78.311775][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   78.335724][ T6469] net_ratelimit: 15 callbacks suppressed
[   78.335756][ T6469] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   78.341237][ T6469] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   79.455189][ T6500] validate_nla: 1 callbacks suppressed
[   79.455200][ T6500] netlink: 'syz.0.170': attribute type 10 has an invalid length.
[   80.514511][ T6511] xt_bpf: check failed: parse error
[   80.586286][ T6518] netlink: 'syz.2.176': attribute type 29 has an invalid length.
[   80.601868][ T6518] netlink: 'syz.2.176': attribute type 29 has an invalid length.
[   80.608437][ T6518] netlink: 'syz.2.176': attribute type 29 has an invalid length.
[   80.622579][ T6518] netlink: 'syz.2.176': attribute type 29 has an invalid length.
[   80.877317][ T6544] __nla_validate_parse: 14 callbacks suppressed
[   80.877328][ T6544] netlink: 72 bytes leftover after parsing attributes in process `syz.2.178'.
[   81.232351][ T5846] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[   81.493749][   T62] cfg80211: failed to load regulatory.db
[   81.595916][ T6559] netlink: 'syz.0.183': attribute type 29 has an invalid length.
[   81.600150][ T6554] netlink: 'syz.1.182': attribute type 11 has an invalid length.
[   81.605590][ T6554] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.182'.
[   81.605967][ T6559] netlink: 'syz.0.183': attribute type 29 has an invalid length.
[   81.610083][ T6554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.613793][ T6559] netlink: 'syz.0.183': attribute type 29 has an invalid length.
[   81.619205][ T6559] netlink: 'syz.0.183': attribute type 29 has an invalid length.
[   82.068851][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[   82.108191][ T6585] netlink: 'syz.1.191': attribute type 29 has an invalid length.
[   82.358074][ T6601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.194'.
[   82.775426][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[   82.819595][ T6609] veth1_macvtap: left promiscuous mode
[   82.821844][ T6609] macsec0: entered promiscuous mode
[   83.262718][ T5842] Bluetooth: hci0: command 0x0406 tx timeout
[   83.699187][ T6660] netlink: 152 bytes leftover after parsing attributes in process `syz.2.204'.
[   83.716906][ T6660] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   84.481918][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'.
[   84.799410][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[   84.830807][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[   85.451977][ T6717] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.222'.
[   86.356444][ T6724] validate_nla: 5 callbacks suppressed
[   86.356455][ T6724] netlink: 'syz.1.224': attribute type 4 has an invalid length.
[   86.359402][ T6726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.361583][ T6724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.224'.
[   86.364995][ T6726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.469136][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   86.477539][ T6724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.224'.
[   86.487733][ T6724] syzkaller0: entered promiscuous mode
[   86.490429][ T6724] syzkaller0: entered allmulticast mode
[   86.524788][ T6724] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   86.848627][ T6736] netlink: 'syz.0.228': attribute type 4 has an invalid length.
[   87.025588][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.028837][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.034372][ T6742] bridge0: entered allmulticast mode
[   87.068701][ T6747] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.232'.
[   87.365917][ T6771] Driver unsupported XDP return value 0 on prog  (id 174) dev N/A, expect packet loss!
[   87.664561][ T6796] netlink: 1 bytes leftover after parsing attributes in process `syz.2.244'.
[   87.763544][ T6801] nbd: must specify an index to disconnect
[   87.946249][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'.
[   87.961147][ T6818] netlink: 'syz.1.251': attribute type 9 has an invalid length.
[   88.109190][ T6823] netlink: 'syz.2.252': attribute type 39 has an invalid length.
[   88.710407][ T6842] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   88.713334][ T6842] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   88.896759][ T6847] netlink: 'syz.0.256': attribute type 29 has an invalid length.
[   88.900749][ T6847] netlink: 'syz.0.256': attribute type 29 has an invalid length.
[   88.906759][ T6847] netlink: 'syz.0.256': attribute type 29 has an invalid length.
[   89.026851][ T6848] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.256'.
[   89.244783][ T6849] netlink: 'syz.0.256': attribute type 29 has an invalid length.
[   89.315256][ T6862] netlink: 'syz.1.259': attribute type 10 has an invalid length.
[   89.318674][ T6862] netlink: 55 bytes leftover after parsing attributes in process `syz.1.259'.
[   89.436551][ T6859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.258'.
[   89.720684][ T6886] netlink: 'syz.1.266': attribute type 29 has an invalid length.
[   89.811265][ T6893] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.268'.
[   90.165860][ T6905] bridge0: port 3(ip6gretap0) entered blocking state
[   90.168360][ T6905] bridge0: port 3(ip6gretap0) entered disabled state
[   90.170725][ T6905] ip6gretap0: entered allmulticast mode
[   90.174418][ T6905] ip6gretap0: entered promiscuous mode
[   90.548092][ T6925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.757143][ T6928] batman_adv: batadv0: Adding interface: netdevsim0
[   90.759699][ T6928] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   91.457985][ T6940] __nla_validate_parse: 4 callbacks suppressed
[   91.457995][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'.
[   95.188417][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'.
[   95.224570][ T6989] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   95.271297][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'.
[   95.536525][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'.
[   95.680627][ T7000] validate_nla: 11 callbacks suppressed
[   95.680669][ T7000] netlink: 'syz.1.300': attribute type 4 has an invalid length.
[   95.711741][ T7003] netlink: 'syz.2.301': attribute type 29 has an invalid length.
[   95.719429][ T7003] netlink: 'syz.2.301': attribute type 29 has an invalid length.
[   95.741580][ T7003] netlink: 'syz.2.301': attribute type 29 has an invalid length.
[   95.748321][ T7003] netlink: 'syz.2.301': attribute type 29 has an invalid length.
[   95.885162][ T7014] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   95.898813][ T7014] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   95.909681][ T7014] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   96.017843][ T7017] syzkaller0: entered promiscuous mode
[   96.020032][ T7017] syzkaller0: entered allmulticast mode
[   96.025171][ T7014] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   96.215030][ T7026] netlink: 'syz.2.307': attribute type 10 has an invalid length.
[   96.217467][ T7026] netlink: 168 bytes leftover after parsing attributes in process `syz.2.307'.
[   96.223504][ T7025] netlink: 119 bytes leftover after parsing attributes in process `syz.0.306'.
[   97.466359][ T7038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.311'.
[   97.473538][ T7038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.311'.
[   97.488002][ T7038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.311'.
[   97.665193][ T7047] ip6gretap0: left allmulticast mode
[   97.666913][ T7047] ip6gretap0: left promiscuous mode
[   97.669295][ T7047] bridge0: port 3(ip6gretap0) entered disabled state
[   97.680813][ T7047] bridge_slave_1: left allmulticast mode
[   97.684574][ T7047] bridge_slave_1: left promiscuous mode
[   97.686456][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.694623][ T7047] bridge_slave_0: left allmulticast mode
[   97.697813][ T7047] bridge_slave_0: left promiscuous mode
[   97.717117][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.724742][  T324] wlan1: Trigger new scan to find an IBSS to join
[   97.966179][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'.
[   98.148039][ T7073] netlink: zone id is out of range
[   98.152501][ T7073] netlink: zone id is out of range
[   98.156702][ T7073] netlink: del zone limit has 4 unknown bytes
[   98.613910][ T7084] wg2: entered allmulticast mode
[   98.621003][ T7084] wg2: entered promiscuous mode
[   98.679104][ T7087] netlink: 44 bytes leftover after parsing attributes in process `syz.2.321'.
[   98.684304][ T7084] netlink: 44 bytes leftover after parsing attributes in process `syz.2.321'.
[   98.687058][ T7087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'.
[   98.741998][ T7091] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[   98.877781][ T7096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.323'.
[   99.619928][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'.
[   99.631549][ T5846] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   99.631825][ T5846] Bluetooth: hci2: connection err: -111
[  100.059005][ T7104] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.326'.
[  100.499904][ T7135] team0: Port device macvlan1 added
[  100.560258][ T7138] xt_bpf: check failed: parse error
[  100.682387][   T36] wlan1: Trigger new scan to find an IBSS to join
[  100.686669][ T7142] validate_nla: 12 callbacks suppressed
[  100.686678][ T7142] netlink: 'syz.1.337': attribute type 3 has an invalid length.
[  100.898910][ T7148] netlink: 'syz.1.339': attribute type 11 has an invalid length.
[  100.902394][ T7148] netlink: 'syz.1.339': attribute type 5 has an invalid length.
[  102.151030][ T7174] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  103.341180][ T7191] __nla_validate_parse: 4 callbacks suppressed
[  103.341336][ T7191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.354'.
[  103.519043][ T7198] netlink: 14 bytes leftover after parsing attributes in process `syz.0.357'.
[  103.587051][ T7198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.596890][ T7198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.603302][ T7198] bond0 (unregistering): Released all slaves
[  103.722233][ T6520] wlan1: Trigger new scan to find an IBSS to join
[  103.945911][ T7213] netlink: 'syz.0.361': attribute type 21 has an invalid length.
[  104.245577][ T7227] net veth1_virt_wifi : renamed from virt_wifi0
[  104.327160][ T7232] syzkaller0: entered promiscuous mode
[  104.332151][ T7232] syzkaller0: entered allmulticast mode
[  104.654198][   T28] wlan1: Creating new IBSS network, BSSID 12:6b:2d:98:9c:fe
[  104.720596][ T7249] netlink: 830 bytes leftover after parsing attributes in process `syz.1.373'.
[  105.237982][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[  105.292407][ T7261] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  105.322336][ T7261] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  105.338108][ T7261] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  107.110580][ T7290] netlink: 'syz.1.386': attribute type 29 has an invalid length.
[  107.117084][ T7290] netlink: 'syz.1.386': attribute type 29 has an invalid length.
[  107.120976][ T7290] netlink: 'syz.1.386': attribute type 29 has an invalid length.
[  107.300668][ T7299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.390'.
[  107.306474][ T7299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.390'.
[  107.589266][ T7309] netlink: 'syz.0.393': attribute type 21 has an invalid length.
[  107.654441][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'.
[  108.135785][ T7327] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  108.181215][ T7332] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  108.197213][ T7332] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  108.908277][ T7374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.411'.
[  108.960045][ T7374] netlink: 'syz.1.411': attribute type 29 has an invalid length.
[  108.966753][ T7374] netlink: 'syz.1.411': attribute type 29 has an invalid length.
[  109.651872][ T7406] netlink: 'syz.2.415': attribute type 39 has an invalid length.
[  109.749863][ T7410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.416'.
[  109.754542][ T7410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.416'.
[  109.758818][ T7410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.416'.
[  109.938072][ T7415] wg2: entered promiscuous mode
[  109.956364][ T7415] wg2: entered allmulticast mode
[  110.087420][ T7419] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  110.090027][ T7419] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  110.099416][ T7419] netlink: 'syz.1.418': attribute type 21 has an invalid length.
[  110.194988][ T7427] netlink: 188 bytes leftover after parsing attributes in process `syz.0.419'.
[  110.250859][ T7429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.422'.
[  110.289404][ T7431] netlink: 'syz.1.421': attribute type 29 has an invalid length.
[  110.481210][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'.
[  110.667977][ T7445] netlink: 830 bytes leftover after parsing attributes in process `syz.1.426'.
[  110.833923][ T7453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.102157][ T7466] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.431'.
[  111.114827][ T7466] netlink: 5 bytes leftover after parsing attributes in process `syz.2.431'.
[  112.329714][ T7505] validate_nla: 3 callbacks suppressed
[  112.329725][ T7505] netlink: 'syz.0.443': attribute type 10 has an invalid length.
[  112.450598][ T7511] netlink: 'syz.1.445': attribute type 3 has an invalid length.
[  112.649424][ T7512] : entered promiscuous mode
[  112.651307][ T7512] : entered allmulticast mode
[  112.881081][ T7523] netlink: 'syz.1.448': attribute type 9 has an invalid length.
[  113.019376][ T7536] netlink: 'syz.2.452': attribute type 21 has an invalid length.
[  113.471900][ T7552] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  113.721871][ T7559] netlink: 'syz.1.460': attribute type 9 has an invalid length.
[  114.161045][ T7575] netlink: 'syz.0.464': attribute type 21 has an invalid length.
[  114.167850][ T7575] __nla_validate_parse: 8 callbacks suppressed
[  114.168034][ T7575] netlink: 128 bytes leftover after parsing attributes in process `syz.0.464'.
[  114.174715][ T7575] netlink: 'syz.0.464': attribute type 4 has an invalid length.
[  114.177563][ T7575] netlink: 'syz.0.464': attribute type 5 has an invalid length.
[  114.181111][ T7575] netlink: 3 bytes leftover after parsing attributes in process `syz.0.464'.
[  114.954743][ T7596] netlink: 'syz.0.469': attribute type 10 has an invalid length.
[  115.186215][ T7608] netlink: 'syz.0.474': attribute type 10 has an invalid length.
[  117.301273][ T7627] bridge0: port 3(veth0_to_team) entered blocking state
[  117.319805][ T7627] bridge0: port 3(veth0_to_team) entered disabled state
[  117.347044][ T7627] veth0_to_team: entered allmulticast mode
[  117.364941][ T7627] veth0_to_team: entered promiscuous mode
[  117.380635][ T7627] bridge0: port 3(veth0_to_team) entered blocking state
[  117.383478][ T7627] bridge0: port 3(veth0_to_team) entered forwarding state
[  117.436906][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.479'.
[  117.676519][ T7641] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.482'.
[  117.818879][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'.
[  117.926890][ T7651] nft_compat: unsupported protocol 0
[  118.324730][ T7668] xt_bpf: check failed: parse error
[  118.425298][ T7668] netlink: 212172 bytes leftover after parsing attributes in process `syz.2.490'.
[  118.861194][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'.
[  119.166183][ T7699] netlink: 'syz.2.498': attribute type 10 has an invalid length.
[  119.201099][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.214107][ T7699] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  119.339868][ T7700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'.
[  119.345653][ T7700] unsupported nlmsg_type 40
[  119.347850][ T7699] netlink: 'syz.2.498': attribute type 10 has an invalid length.
[  119.350643][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.498'.
[  119.354619][ T7699] batadv0: entered promiscuous mode
[  119.356247][ T7699] batadv0: entered allmulticast mode
[  119.361140][ T7699] bond0: (slave batadv0): Releasing backup interface
[  119.373033][ T7699] bridge0: port 4(batadv0) entered blocking state
[  119.375332][ T7699] bridge0: port 4(batadv0) entered disabled state
[  119.538942][ T7707] @: renamed from bond_slave_0
[  119.627056][ T7713] netlink: 'syz.0.500': attribute type 21 has an invalid length.
[  119.630216][ T7713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.500'.
[  119.635986][ T7713] netlink: 'syz.0.500': attribute type 4 has an invalid length.
[  119.819545][ T7717] netlink: 17 bytes leftover after parsing attributes in process `syz.2.504'.
[  119.826877][ T7717] netlink: zone id is out of range
[  119.828864][ T7717] netlink: zone id is out of range
[  119.830774][ T7717] netlink: zone id is out of range
[  119.832740][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  119.832775][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  119.839727][ T7717] netlink: zone id is out of range
[  119.841832][ T7717] netlink: zone id is out of range
[  119.848392][ T7717] netlink: zone id is out of range
[  119.850312][ T7717] netlink: zone id is out of range
[  119.852266][ T7717] netlink: zone id is out of range
[  119.854367][ T7717] netlink: zone id is out of range
[  119.856482][ T7717] netlink: zone id is out of range
[  119.865717][ T7717] netlink: 'syz.2.504': attribute type 21 has an invalid length.
[  119.869142][ T7717] netlink: 'syz.2.504': attribute type 4 has an invalid length.
[  119.871853][ T7717] netlink: 14453 bytes leftover after parsing attributes in process `syz.2.504'.
[  120.900306][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.905813][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.927621][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.929913][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.005999][ T7745] bridge0: port 4(batadv0) entered disabled state
[  121.069040][ T7747] netlink: 348 bytes leftover after parsing attributes in process `syz.0.513'.
[  121.159247][ T7747] lo speed is unknown, defaulting to 1000
[  121.182752][ T7747] lo speed is unknown, defaulting to 1000
[  121.210819][ T7747] lo speed is unknown, defaulting to 1000
[  121.285578][ T7747] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.425161][ T7747] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  121.637387][ T7747] lo speed is unknown, defaulting to 1000
[  121.667163][ T7747] lo speed is unknown, defaulting to 1000
[  121.684466][ T7747] lo speed is unknown, defaulting to 1000
[  121.901028][ T7778] netlink: 'syz.0.522': attribute type 10 has an invalid length.
[  122.342427][ T7788] netlink: 188 bytes leftover after parsing attributes in process `syz.0.524'.
[  122.535789][ T7771] delete_channel: no stack
[  123.058431][ T7802] netlink: 'syz.2.529': attribute type 16 has an invalid length.
[  123.060931][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'.
[  123.119439][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'.
[  123.235117][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'.
[  123.764927][ T7841] lo speed is unknown, defaulting to 1000
[  124.687606][ T7871] __nla_validate_parse: 3 callbacks suppressed
[  124.687621][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'.
[  125.328663][ T7887] netlink: 'syz.1.557': attribute type 46 has an invalid length.
[  128.310764][ T7927] rdma_rxe: rxe_newlink: failed to add erspan0
[  128.677627][ T7934] netlink: 'syz.2.568': attribute type 10 has an invalid length.
[  128.702032][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  128.709587][ T7934] netlink: 55 bytes leftover after parsing attributes in process `syz.2.568'.
[  129.352043][ T7949] syzkaller0: tun_chr_ioctl cmd 1074025677
[  129.356481][ T7949] syzkaller0: linktype set to 801
[  129.893912][ T7963] netlink: 'syz.1.577': attribute type 23 has an invalid length.
[  129.941476][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.577'.
[  130.258715][ T7982] syzkaller0: tun_chr_ioctl cmd 1074025677
[  130.263563][ T7982] syzkaller0: linktype set to 801
[  130.265480][ T7979] syzkaller0: tun_chr_ioctl cmd 1074025673
[  130.586456][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.584'.
[  130.590143][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.584'.
[  130.594193][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.584'.
[  130.599709][ T7987] syzkaller0: entered promiscuous mode
[  130.601736][ T7987] syzkaller0: entered allmulticast mode
[  130.778008][ T7995] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.587'.
[  131.089881][ T8005] netlink: 'syz.1.591': attribute type 4 has an invalid length.
[  131.093567][ T8006] netlink: 'syz.1.591': attribute type 4 has an invalid length.
[  131.096456][ T8006] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.591'.
[  131.099540][ T8005] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.591'.
[  131.269997][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'.
[  131.433729][ T8023] lo speed is unknown, defaulting to 1000
[  131.441219][ T8026] netlink: 'syz.1.597': attribute type 7 has an invalid length.
[  131.542475][ T8023] netlink: 'syz.2.596': attribute type 10 has an invalid length.
[  131.546426][ T8023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.596'.
[  131.561323][ T8023] net_ratelimit: 60 callbacks suppressed
[  131.561341][ T8023] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  131.846344][ T8037] netlink: 120 bytes leftover after parsing attributes in process `syz.1.599'.
[  131.934597][ T8041] netlink: 'syz.2.600': attribute type 17 has an invalid length.
[  131.937782][ T8041] netlink: 'syz.2.600': attribute type 16 has an invalid length.
[  132.126505][ T8043] netlink: 'syz.1.601': attribute type 29 has an invalid length.
[  132.142654][ T8043] netlink: 'syz.1.601': attribute type 29 has an invalid length.
[  132.147189][ T8043] netlink: 'syz.1.601': attribute type 29 has an invalid length.
[  132.154925][ T8043] netlink: 'syz.1.601': attribute type 29 has an invalid length.
[  132.700786][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.712423][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  134.737760][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  135.080064][ T8092] __nla_validate_parse: 3 callbacks suppressed
[  135.080113][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'.
[  135.235551][ T8100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.816492][ T8114] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.820443][ T8114] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.955781][ T8123] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.624'.
[  136.001872][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'.
[  136.181892][ T8131] validate_nla: 5 callbacks suppressed
[  136.181907][ T8131] netlink: 'syz.1.627': attribute type 1 has an invalid length.
[  136.187547][ T8131] netlink: 2 bytes leftover after parsing attributes in process `syz.1.627'.
[  136.192969][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  136.196504][ T8131] netlink: 312 bytes leftover after parsing attributes in process `syz.1.627'.
[  136.200143][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  136.258928][ T8136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.651324][ T8161] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.633'.
[  136.663449][ T8159] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.633'.
[  136.667876][ T8159] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.633'.
[  136.685645][ T8165] netlink: 'syz.1.632': attribute type 2 has an invalid length.
[  136.701099][ T8165] nbd: must specify at least one socket
[  137.228587][ T8180] netlink: 'syz.2.638': attribute type 29 has an invalid length.
[  137.236617][ T8180] netlink: 'syz.2.638': attribute type 29 has an invalid length.
[  137.244000][ T8180] netlink: 'syz.2.638': attribute type 29 has an invalid length.
[  137.247911][ T8180] netlink: 'syz.2.638': attribute type 29 has an invalid length.
[  137.308200][ T8184] netlink: 'syz.0.640': attribute type 21 has an invalid length.
[  137.434335][ T8195] : renamed from dummy0 (while UP)
[  137.810577][ T8209] netlink: 'syz.1.647': attribute type 29 has an invalid length.
[  137.817641][ T8209] netlink: 'syz.1.647': attribute type 29 has an invalid length.
[  137.821693][ T8209] netlink: 'syz.1.647': attribute type 29 has an invalid length.
[  138.575579][ T8223] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.579824][ T8223] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.461846][ T8236] batadv0: entered promiscuous mode
[  139.466300][ T8236] batadv0: entered allmulticast mode
[  139.469767][ T8236] bridge0: port 3(batadv0) entered blocking state
[  139.485463][ T8236] bridge0: port 3(batadv0) entered disabled state
[  139.765731][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  139.769554][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  140.120474][ T8261] __nla_validate_parse: 15 callbacks suppressed
[  140.120492][ T8261] netlink: 17 bytes leftover after parsing attributes in process `syz.0.665'.
[  140.368492][ T8276] netlink: 7 bytes leftover after parsing attributes in process `syz.2.670'.
[  141.218465][ T8288] validate_nla: 14 callbacks suppressed
[  141.218481][ T8288] netlink: 'syz.2.674': attribute type 29 has an invalid length.
[  141.239148][ T8288] netlink: 'syz.2.674': attribute type 29 has an invalid length.
[  141.254130][ T8288] netlink: 'syz.2.674': attribute type 29 has an invalid length.
[  141.259738][ T8288] netlink: 'syz.2.674': attribute type 29 has an invalid length.
[  141.609663][ T8319] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  141.614202][ T8319] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  141.617470][ T8319] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  141.620957][ T8319] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  141.806021][ T8332] netlink: 'syz.2.685': attribute type 10 has an invalid length.
[  141.809102][ T8332] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  141.985817][ T8340] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.690'.
[  142.189005][ T8349] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.693'.
[  142.199312][ T8349] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.693'.
[  142.283843][ T8351] netlink: 128 bytes leftover after parsing attributes in process `syz.1.694'.
[  142.287174][ T8351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  142.377755][ T8353] lo speed is unknown, defaulting to 1000
[  142.753823][ T8373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.701'.
[  142.798266][ T8377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.702'.
[  143.885805][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'.
[  144.596950][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'.
[  145.865494][ T8439] __nla_validate_parse: 1 callbacks suppressed
[  145.865510][ T8439] netlink: 65031 bytes leftover after parsing attributes in process `syz.1.719'.
[  146.381147][ T8448] syzkaller0: entered promiscuous mode
[  146.383616][ T8448] syzkaller0: entered allmulticast mode
[  148.175069][ T8479] netlink: 'syz.0.731': attribute type 9 has an invalid length.
[  148.178490][ T8479] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.731'.
[  148.187758][ T8482] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  148.591563][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  148.602007][ T8504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.738'.
[  148.605196][ T8504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'.
[  148.885812][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'.
[  148.913839][ T8514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.042822][ T8533] netlink: 'syz.1.743': attribute type 1 has an invalid length.
[  149.451287][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'.
[  149.670583][ T8629] netlink: 48 bytes leftover after parsing attributes in process `syz.2.748'.
[  149.710567][ T8633] netlink: 72 bytes leftover after parsing attributes in process `syz.1.750'.
[  149.716058][ T8633] netlink: 'syz.1.750': attribute type 22 has an invalid length.
[  149.719416][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  149.847507][ T8636] netlink: 'syz.1.752': attribute type 10 has an invalid length.
[  149.967356][ T8636] bond0: (slave netdevsim0): Releasing backup interface
[  149.995933][ T8636] batman_adv: batadv0: Adding interface: netdevsim0
[  149.998304][ T8636] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.009582][ T8636] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  150.129445][ T8647] C: renamed from team_slave_0 (while UP)
[  150.134605][ T8647] netlink: 'syz.1.756': attribute type 1 has an invalid length.
[  150.137555][ T8647] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.291868][ T8656] netlink: 'syz.0.757': attribute type 12 has an invalid length.
[  150.591856][ T8662] netlink: 'syz.1.760': attribute type 9 has an invalid length.
[  150.944025][ T8667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.951488][ T8667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.959104][ T8667] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  150.972395][ T8667] bond0 (unregistering): Released all slaves
[  151.336108][ T8689] netlink: 'syz.1.767': attribute type 39 has an invalid length.
[  151.885252][ T8698] netlink: 'syz.1.771': attribute type 21 has an invalid length.
[  151.915037][ T8703] __nla_validate_parse: 5 callbacks suppressed
[  151.915049][ T8703] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.772'.
[  151.920099][ T8703] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.772'.
[  151.923465][ T8703] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.772'.
[  151.961383][ T8705] netlink: 'syz.1.773': attribute type 10 has an invalid length.
[  151.978688][ T8705] team0: Port device syz_tun added
[  152.010659][ T8707] netlink: 164 bytes leftover after parsing attributes in process `syz.0.774'.
[  152.858715][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'.
[  152.861711][ T8723] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  153.086438][ T8735] netlink: 220 bytes leftover after parsing attributes in process `syz.1.780'.
[  153.561978][ T8747] validate_nla: 1 callbacks suppressed
[  153.561995][ T8747] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  153.577492][ T8747] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.786'.
[  153.858935][ T8761] delete_channel: no stack
[  153.860927][ T8761] delete_channel: no stack
[  153.889817][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.893148][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.899477][ T8765] bridge0: entered allmulticast mode
[  153.911034][ T8765] bridge0: port 3(batadv0) entered disabled state
[  153.920619][ T8765] bridge_slave_1: left allmulticast mode
[  153.923058][ T8765] bridge_slave_1: left promiscuous mode
[  153.925234][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.931587][ T8765] bridge_slave_0: left allmulticast mode
[  153.935424][ T8765] bridge_slave_0: left promiscuous mode
[  153.938139][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.248339][ T8777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.384187][ T8785] netlink: 'syz.0.796': attribute type 3 has an invalid length.
[  154.387724][ T8785] netlink: 'syz.0.796': attribute type 3 has an invalid length.
[  154.396377][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'.
[  154.482713][ T8786] netlink: 84 bytes leftover after parsing attributes in process `syz.2.797'.
[  154.837585][ T8803] netlink: 84 bytes leftover after parsing attributes in process `syz.0.803'.
[  154.881982][ T8801] netlink: 'syz.1.802': attribute type 2 has an invalid length.
[  154.884913][ T8801] nbd: must specify a device to reconfigure
[  155.516536][ T8819] delete_channel: no stack
[  155.646222][ T8825] netlink: 'syz.1.807': attribute type 2 has an invalid length.
[  155.649494][ T8825] nbd: must specify a device to reconfigure
[  155.801379][ T8839] bridge0: port 4(ip6gretap0) entered blocking state
[  155.811309][ T8839] bridge0: port 4(ip6gretap0) entered disabled state
[  155.822366][ T8839] ip6gretap0: entered allmulticast mode
[  155.826929][ T8839] ip6gretap0: entered promiscuous mode
[  155.829886][ T8839] bridge0: port 4(ip6gretap0) entered blocking state
[  155.832830][ T8839] bridge0: port 4(ip6gretap0) entered forwarding state
[  155.975961][ T8848] netlink: 'syz.2.816': attribute type 11 has an invalid length.
[  156.327444][ T8869] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[  157.790348][ T8893] netlink: 'syz.2.827': attribute type 21 has an invalid length.
[  157.800070][ T8893] netlink: 'syz.2.827': attribute type 15 has an invalid length.
[  157.809440][ T8893] __nla_validate_parse: 8 callbacks suppressed
[  157.809512][ T8893] netlink: 156 bytes leftover after parsing attributes in process `syz.2.827'.
[  157.819397][ T8893] IPv6: NLM_F_CREATE should be specified when creating new route
[  157.833344][ T8893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.836882][ T8893] IPv6: NLM_F_CREATE should be set when creating new route
[  157.840540][ T8893] IPv6: NLM_F_CREATE should be set when creating new route
[  157.843771][ T8893] IPv6: NLM_F_CREATE should be set when creating new route
[  157.913431][ T8897] lo speed is unknown, defaulting to 1000
[  158.378212][ T8917] openvswitch: netlink: Invalid VLAN frame
[  158.408942][ T8917] netlink: 'syz.1.833': attribute type 29 has an invalid length.
[  158.441359][ T8917] netlink: 'syz.1.833': attribute type 10 has an invalid length.
[  158.830801][ T8922] netlink: 'syz.1.834': attribute type 29 has an invalid length.
[  158.835808][ T8922] netlink: 'syz.1.834': attribute type 29 has an invalid length.
[  158.866189][ T8925] netlink: 'syz.0.835': attribute type 13 has an invalid length.
[  158.985904][ T5846] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  159.124941][ T8939] netlink: 'syz.2.841': attribute type 29 has an invalid length.
[  159.131049][ T8939] netlink: 'syz.2.841': attribute type 29 has an invalid length.
[  159.317025][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[  159.980692][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'.
[  159.990165][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'.
[  159.994891][ T8965] netlink: 108 bytes leftover after parsing attributes in process `syz.1.850'.
[  160.000811][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'.
[  160.020016][ T8965] netlink: 108 bytes leftover after parsing attributes in process `syz.1.850'.
[  160.028788][ T8965] netlink: 84 bytes leftover after parsing attributes in process `syz.1.850'.
[  160.268194][ T8979] netlink: 'syz.0.855': attribute type 21 has an invalid length.
[  160.271612][ T8979] netlink: 'syz.0.855': attribute type 15 has an invalid length.
[  160.276621][ T8979] netlink: 156 bytes leftover after parsing attributes in process `syz.0.855'.
[  160.280320][ T8979] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.289812][ T8979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.293345][ T8979] IPv6: NLM_F_CREATE should be set when creating new route
[  160.297736][ T8979] IPv6: NLM_F_CREATE should be set when creating new route
[  160.301354][ T8979] IPv6: NLM_F_CREATE should be set when creating new route
[  160.468606][ T8992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.859'.
[  160.577242][ T9003] netlink: 'syz.2.864': attribute type 3 has an invalid length.
[  160.583971][ T9003] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[  160.587490][ T9003] netlink: 'syz.2.864': attribute type 2 has an invalid length.
[  161.399835][ T9018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.893042][ T9026] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.898169][ T9026] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  162.606655][ T9051] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  162.919120][ T9064] __nla_validate_parse: 7 callbacks suppressed
[  162.919137][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.882'.
[  163.350736][ T9068] netlink: 156 bytes leftover after parsing attributes in process `syz.2.884'.
[  163.356987][ T9068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.414950][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'.
[  163.588257][ T9088] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.889'.
[  163.594304][ T9088] xt_HMARK: spi-set and port-set can't be combined
[  163.959025][ T9107] validate_nla: 12 callbacks suppressed
[  163.959043][ T9107] netlink: 'syz.2.895': attribute type 21 has an invalid length.
[  163.967318][ T9107] netlink: 'syz.2.895': attribute type 15 has an invalid length.
[  163.970416][ T9107] netlink: 156 bytes leftover after parsing attributes in process `syz.2.895'.
[  163.989089][ T9113] lo speed is unknown, defaulting to 1000
[  163.992886][ T9107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.108599][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'.
[  164.347635][ T9130] netlink: 'syz.1.901': attribute type 21 has an invalid length.
[  164.774336][   T36] wlan1: Trigger new scan to find an IBSS to join
[  165.084737][ T9143] netlink: 116 bytes leftover after parsing attributes in process `syz.0.904'.
[  165.087468][ T9143] netlink: 6 bytes leftover after parsing attributes in process `syz.0.904'.
[  165.091050][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'.
[  165.094840][ T9143] netlink: 5 bytes leftover after parsing attributes in process `syz.0.904'.
[  165.163967][ T9146] batadv0: left allmulticast mode
[  165.169119][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.321949][ T9159] netlink: 'syz.2.909': attribute type 2 has an invalid length.
[  166.906498][ T5846] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  166.906543][ T5846] Bluetooth: hci0: connection err: -111
[  167.461481][ T9210] lo speed is unknown, defaulting to 1000
[  167.673296][ T9220] syzkaller0: tun_chr_ioctl cmd 1074025677
[  167.675792][ T9220] syzkaller0: linktype set to 801
[  168.110555][ T9237] netlink: 'syz.1.926': attribute type 46 has an invalid length.
[  168.260438][ T9251] __nla_validate_parse: 13 callbacks suppressed
[  168.260452][ T9251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.930'.
[  168.536166][ T9265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'.
[  168.540511][ T9265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'.
[  168.545845][ T9265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'.
[  168.957436][ T9276] netlink: 'syz.0.937': attribute type 2 has an invalid length.
[  168.960356][ T9276] netlink: 'syz.0.937': attribute type 1 has an invalid length.
[  168.979477][ T9276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.937'.
[  168.983935][ T9276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.937'.
[  168.990310][ T9276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.937'.
[  169.097921][ T9285] netlink: 'syz.1.940': attribute type 1 has an invalid length.
[  169.157919][ T9290] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[  169.162011][ T9290] netlink: 'syz.2.942': attribute type 2 has an invalid length.
[  169.255507][ T9298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.944'.
[  169.269070][ T9298] netlink: 796 bytes leftover after parsing attributes in process `syz.0.944'.
[  169.518529][ T9311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.947'.
[  169.573352][ T9313] netlink: 'syz.0.948': attribute type 1 has an invalid length.
[  170.005366][ T9327] netlink: 'syz.1.953': attribute type 21 has an invalid length.
[  170.008750][ T9327] netlink: 'syz.1.953': attribute type 15 has an invalid length.
[  170.011572][ T9327] IPv6: NLM_F_CREATE should be specified when creating new route
[  170.016144][ T9327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.018595][ T9327] IPv6: NLM_F_CREATE should be set when creating new route
[  170.021003][ T9327] IPv6: NLM_F_CREATE should be set when creating new route
[  170.024780][ T9327] IPv6: NLM_F_CREATE should be set when creating new route
[  170.197171][ T9332] netlink: 'syz.1.955': attribute type 4 has an invalid length.
[  170.614739][ T9351] netlink: 'syz.2.961': attribute type 21 has an invalid length.
[  170.621266][ T9351] netlink: 'syz.2.961': attribute type 15 has an invalid length.
[  170.626643][ T9351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.718454][ T9353] netlink: 'syz.0.962': attribute type 21 has an invalid length.
[  170.724546][ T9353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.704953][ T9416] validate_nla: 1 callbacks suppressed
[  176.705021][ T9416] netlink: 'syz.0.980': attribute type 39 has an invalid length.
[  176.718124][ T9416] veth0_macvtap: left promiscuous mode
[  177.045530][ T9420] __nla_validate_parse: 6 callbacks suppressed
[  177.045688][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  177.299476][ T9433] netlink: 'syz.2.986': attribute type 21 has an invalid length.
[  177.302010][ T9433] netlink: 156 bytes leftover after parsing attributes in process `syz.2.986'.
[  177.601381][ T9443] netlink: 'syz.1.990': attribute type 10 has an invalid length.
[  177.697831][ T9446] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.990'.
[  177.704397][ T9442] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.990'.
[  177.708588][ T9446] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.990'.
[  177.939797][ T9449] netlink: 'syz.0.992': attribute type 10 has an invalid length.
[  177.940786][ T9458] netlink: 'syz.1.994': attribute type 29 has an invalid length.
[  177.945932][ T9449] netlink: 152 bytes leftover after parsing attributes in process `syz.0.992'.
[  177.948947][ T9458] netlink: 'syz.1.994': attribute type 29 has an invalid length.
[  177.960640][ T9449] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  177.988137][ T9458] netlink: 'syz.1.994': attribute type 29 has an invalid length.
[  179.007549][ T9493] netlink: 'syz.1.1005': attribute type 29 has an invalid length.
[  179.012485][ T9493] netlink: 'syz.1.1005': attribute type 29 has an invalid length.
[  179.188637][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1008'.
[  179.503840][ T9509] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1009'.
[  180.672716][ T9561] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1026'.
[  180.685174][ T9561] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  180.738099][ T9559] netlink: 'syz.1.1025': attribute type 3 has an invalid length.
[  180.741523][ T9559] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1025'.
[  180.843668][ T9486] Bluetooth: hci2: command 0x0406 tx timeout
[  180.846525][ T9486] Bluetooth: hci0: command 0x0406 tx timeout
[  180.849561][ T9486] Bluetooth: hci1: command 0x0406 tx timeout
[  181.061582][ T9584] syzkaller0: entered promiscuous mode
[  181.065801][ T9584] syzkaller0: entered allmulticast mode
[  181.790709][   T33] audit: type=1107 audit(1758914762.088:3): pid=9585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  182.427418][ T9592] netlink: 'syz.2.1036': attribute type 10 has an invalid length.
[  182.430681][ T9592] __nla_validate_parse: 1 callbacks suppressed
[  182.430696][ T9592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1036'.
[  182.486191][ T9592] team0: entered promiscuous mode
[  182.488246][ T9592] team_slave_0: entered promiscuous mode
[  182.492500][ T9592] team_slave_1: entered promiscuous mode
[  182.495081][ T9592] team0: entered allmulticast mode
[  182.496843][ T9592] team_slave_0: entered allmulticast mode
[  182.498796][ T9592] team_slave_1: entered allmulticast mode
[  182.501148][ T9592] bridge0: port 5(team0) entered blocking state
[  182.504025][ T9592] bridge0: port 5(team0) entered disabled state
[  182.508660][ T9592] bridge0: port 5(team0) entered blocking state
[  182.511123][ T9592] bridge0: port 5(team0) entered forwarding state
[  182.657485][ T9598] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1038'.
[  182.664014][ T9599] tmpfs: Bad value for 'gid'
[  182.668329][ T9599] tmpfs: Bad value for 'gid'
[  182.831861][ T9603] netlink: 'syz.0.1039': attribute type 3 has an invalid length.
[  182.836479][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'.
[  182.977008][ T9607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.046561][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'.
[  183.120414][ T9611] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  183.713781][ T9626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1047'.
[  183.768617][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  184.028371][ T9631] sit0: left allmulticast mode
[  184.633798][ T9639] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1051'.
[  185.025898][ T9664] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1057'.
[  185.671365][ T9687] netlink: 'syz.1.1064': attribute type 46 has an invalid length.
[  185.674075][ T9687] netlink: 'syz.1.1064': attribute type 19 has an invalid length.
[  186.025102][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1072'.
[  186.410658][ T9730] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1079'.
[  186.970569][ T9753] netlink: 'syz.0.1086': attribute type 10 has an invalid length.
[  187.013378][ T9753] netlink: 'syz.0.1086': attribute type 2 has an invalid length.
[  187.749034][ T9776] xt_time: unknown flags 0xf4
[  187.944836][ T9786] __nla_validate_parse: 1 callbacks suppressed
[  187.944846][ T9786] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1096'.
[  188.308315][ T9805] netlink: 'syz.0.1103': attribute type 21 has an invalid length.
[  188.311400][ T9805] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1103'.
[  188.316760][ T9805] IPv6: NLM_F_CREATE should be specified when creating new route
[  188.319959][ T9805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.322353][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  188.325579][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  188.327805][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  188.395301][ T9807] netlink: 'syz.0.1103': attribute type 11 has an invalid length.
[  188.398404][ T9807] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1103'.
[  188.459572][ T9807] lo speed is unknown, defaulting to 1000
[  188.931527][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.598354][ T9845] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.627019][ T9845] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.730151][ T9847] pim6reg1: entered allmulticast mode
[  189.952408][ T9862] netlink: 'syz.0.1117': attribute type 4 has an invalid length.
[  189.955534][ T9862] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1117'.
[  190.238047][ T9871] sit0: entered allmulticast mode
[  190.298705][ T9872] netlink: 'syz.0.1120': attribute type 21 has an invalid length.
[  191.274721][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.344639][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1122'.
[  192.489316][ T9901] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1129'.
[  192.494375][ T9901] tc_dump_action: action bad kind
[  192.570966][ T9906] netlink: 400 bytes leftover after parsing attributes in process `syz.1.1130'.
[  192.611650][ T9905] xt_HMARK: proto mask must be zero with L3 mode
[  193.044568][ T9938] netlink: 'syz.2.1139': attribute type 4 has an invalid length.
[  193.047080][ T9938] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  193.049398][ T9938] netlink: 'syz.2.1139': attribute type 2 has an invalid length.
[  193.051865][ T9938] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.1139'.
[  193.971412][ T9949] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1142'.
[  194.129472][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.132054][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.152715][ T9949] wg2: left promiscuous mode
[  194.154337][ T9949] wg2: left allmulticast mode
[  194.234778][ T9966] netlink: 'syz.2.1148': attribute type 29 has an invalid length.
[  194.239134][ T9966] netlink: 'syz.2.1148': attribute type 29 has an invalid length.
[  194.301451][ T9971] netlink: 'syz.2.1150': attribute type 1 has an invalid length.
[  194.305734][ T9971] netlink: 'syz.2.1150': attribute type 4 has an invalid length.
[  194.308482][ T9971] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1150'.
[  194.314523][ T9971] netlink: 'syz.2.1150': attribute type 1 has an invalid length.
[  194.317742][ T9971] netlink: 'syz.2.1150': attribute type 4 has an invalid length.
[  194.320914][ T9971] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1150'.
[  194.337794][ T9973] netlink: 'syz.1.1151': attribute type 21 has an invalid length.
[  194.340942][ T9973] netlink: 'syz.1.1151': attribute type 1 has an invalid length.
[  194.590120][ T9981] netlink: 'syz.2.1154': attribute type 5 has an invalid length.
[  194.593278][ T9981] netlink: 'syz.2.1154': attribute type 7 has an invalid length.
[  194.596107][ T9981] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.1154'.
[  194.953195][ T9993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1158'.
[  195.226676][T10005] sctp: [Deprecated]: syz.0.1161 (pid 10005) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.226676][T10005] Use struct sctp_sack_info instead
[  195.718101][T10018] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1165'.
[  195.909523][T10016] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1164'.
[  196.983921][T10035] can: request_module (can-proto-3) failed.
[  197.216070][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'.
[  197.290888][T10040] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  197.499245][T10028] delete_channel: no stack
[  197.631619][T10052] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1176'.
[  198.078332][T10081] __nla_validate_parse: 3 callbacks suppressed
[  198.078342][T10081] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1186'.
[  198.311885][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.317952][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.326411][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.339212][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.375330][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.385734][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.391586][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.396359][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  198.411358][T10094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1188'.
[  199.649939][T10123] validate_nla: 15 callbacks suppressed
[  199.650006][T10123] netlink: 'syz.2.1200': attribute type 1 has an invalid length.
[  199.658972][T10123] netlink: 'syz.2.1200': attribute type 1 has an invalid length.
[  200.876387][T10185] netlink: 'syz.0.1220': attribute type 29 has an invalid length.
[  200.880187][T10185] netlink: 'syz.0.1220': attribute type 29 has an invalid length.
[  200.995266][T10187] netlink: 'syz.0.1221': attribute type 64 has an invalid length.
[  201.329800][ T5235] Bluetooth: hci1: ISO packet for unknown connection handle 8
[  201.403346][T10220] netlink: 'syz.0.1231': attribute type 29 has an invalid length.
[  201.681564][T10234] netlink: 'syz.2.1234': attribute type 21 has an invalid length.
[  201.692315][T10234] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  201.915719][T10248] netlink: 'syz.2.1241': attribute type 4 has an invalid length.
[  201.918899][T10248] netlink: 'syz.2.1241': attribute type 4 has an invalid length.
[  202.495969][ T5235] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  203.833863][T10309] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  204.593579][T10323] __nla_validate_parse: 70 callbacks suppressed
[  204.593598][T10323] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1262'.
[  204.600404][T10323] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  204.617422][T10323] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1262'.
[  204.729073][T10337] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1269'.
[  205.471769][T10368] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1281'.
[  205.548524][   T33] audit: type=1107 audit(1758914785.838:4): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Bf4KwyBO3V3MZyG̽w<'^ZY(UhQc񓐌SBZ6Pm^J($$\;jԔIe'~$VBmil`I<D2v+w1lg!ۺL
[  205.548524][   T33] сec}V(g௬dxP<=9]BxN 5YHZj>@(YyL?F)թCp!jD?*QZ29RKF.fp;fڿx^C*!FVU8L|czg$D_{3HZ!7d*'
[  205.576865][T10370] can: request_module (can-proto-0) failed.
[  206.154840][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  206.231325][T10394] validate_nla: 2 callbacks suppressed
[  206.231341][T10394] netlink: 'syz.0.1289': attribute type 29 has an invalid length.
[  206.246462][T10394] netlink: 'syz.0.1289': attribute type 29 has an invalid length.
[  206.250914][T10394] netlink: 'syz.0.1289': attribute type 29 has an invalid length.
[  206.255983][T10394] netlink: 'syz.0.1289': attribute type 29 has an invalid length.
[  206.259201][T10396] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1291'.
[  206.264668][T10396] netlink: 'syz.1.1291': attribute type 21 has an invalid length.
[  206.267142][T10396] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1291'.
[  206.387155][T10402] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1293'.
[  206.431449][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'.
[  206.432583][T10407] sit0: entered promiscuous mode
[  206.458277][T10404] netlink: 'syz.1.1294': attribute type 21 has an invalid length.
[  206.565622][T10418] netlink: 'syz.0.1296': attribute type 7 has an invalid length.
[  206.983629][T10433] veth1_macvtap: entered allmulticast mode
[  208.046534][T10441] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  208.116957][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'.
[  209.245933][T10495] netlink: 'syz.2.1321': attribute type 21 has an invalid length.
[  211.163197][ T5235] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  211.595337][T10579] __nla_validate_parse: 2 callbacks suppressed
[  211.595351][T10579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1345'.
[  211.645436][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  211.745138][T10589] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1348'.
[  211.991105][T10602] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1351'.
[  214.314182][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'.
[  214.400363][T10666] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1370'.
[  214.939606][T10675] netlink: 'syz.2.1372': attribute type 21 has an invalid length.
[  214.946802][T10675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1372'.
[  215.670157][T10698] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1380'.
[  217.070623][T10725] netlink: 'syz.0.1388': attribute type 10 has an invalid length.
[  217.073425][T10725] netlink: 'syz.0.1388': attribute type 19 has an invalid length.
[  217.076048][T10725] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1388'.
[  217.133058][T10726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1388'.
[  217.144810][T10725] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1388'.
[  217.173524][T10726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1388'.
[  217.778849][T10758] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1399'.
[  217.786879][T10758] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1399'.
[  218.070520][T10771] netlink: 'syz.2.1403': attribute type 29 has an invalid length.
[  218.083057][T10771] netlink: 'syz.2.1403': attribute type 29 has an invalid length.
[  218.089040][T10771] netlink: 'syz.2.1403': attribute type 29 has an invalid length.
[  218.099443][T10771] netlink: 'syz.2.1403': attribute type 29 has an invalid length.
[  218.163666][T10773] netlink: 'syz.2.1404': attribute type 2 has an invalid length.
[  218.166154][T10773] netlink: 'syz.2.1404': attribute type 1 has an invalid length.
[  218.168814][T10773] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1404'.
[  218.171829][T10773] nbd: couldn't find device at index 65542
[  218.941931][T10805] netlink: 'syz.1.1414': attribute type 3 has an invalid length.
[  218.962279][T10805] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1414'.
[  218.984379][T10805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1414'.
[  219.313986][T10822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1420'.
[  219.454861][T10831] batadv0: left promiscuous mode
[  219.682064][T10839] : entered promiscuous mode
[  220.538468][T10869] validate_nla: 1 callbacks suppressed
[  220.538600][T10869] netlink: 'syz.2.1435': attribute type 2 has an invalid length.
[  221.260173][T10876] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.292642][T10876] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.690784][T10897] netlink: 'syz.0.1443': attribute type 64 has an invalid length.
[  221.700520][    T9] lo speed is unknown, defaulting to 1000
[  222.053296][T10900] netlink: 'syz.2.1445': attribute type 1 has an invalid length.
[  222.129360][T10910] __nla_validate_parse: 8 callbacks suppressed
[  222.129375][T10910] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1447'.
[  223.788916][T10950] netlink: 'syz.2.1459': attribute type 7 has an invalid length.
[  224.077664][T10958] syzkaller1: tun_chr_ioctl cmd 1074025677
[  224.081539][T10958] syzkaller1: linktype set to 823
[  224.106442][T10958] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1462'.
[  224.224754][T10967] netlink: 'syz.0.1463': attribute type 10 has an invalid length.
[  224.283382][T10973] rdma_rxe: rxe_newlink: failed to add erspan0
[  224.440817][T10980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1468'.
[  224.495833][T10980] openvswitch: netlink: Message has 12 unknown bytes.
[  224.607191][T10983] netlink: 'syz.0.1469': attribute type 4 has an invalid length.
[  224.609813][T10983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1469'.
[  224.638249][T10983] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  227.508105][ T5235] Bluetooth: hci1: ISO packet for unknown connection handle 2
[  227.860744][T11089] tap0: tun_chr_ioctl cmd 2147767507
[  229.006005][T11105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1503'.
[  229.281146][T11112] team0: Port device C removed
[  229.283763][T11112] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  230.075916][T11139] netlink: 'syz.1.1515': attribute type 21 has an invalid length.
[  230.453965][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.456506][T11172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.481568][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.488229][T11172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.495843][T11172] batman_adv: batadv0: Removing interface: netdevsim0
[  231.387874][T11200] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1535'.
[  231.421032][T11202] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1536'.
[  231.845562][T11220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'.
[  231.848616][T11220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'.
[  231.881321][T11223] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1542'.
[  232.258193][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'.
[  232.767398][T11270] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1550'.
[  233.207801][T11298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1556'.
[  233.260648][T11300] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1557'.
[  233.265946][T11300] bridge: RTM_NEWNEIGH with invalid ether address
[  233.310394][T11302] C: renamed from team_slave_0 (while UP)
[  233.314874][T11302] netlink: 'syz.2.1558': attribute type 3 has an invalid length.
[  233.318193][T11302] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  233.381214][T11305] netlink: 'syz.2.1558': attribute type 2 has an invalid length.
[  234.991113][T11315] netlink: 'syz.2.1563': attribute type 1 has an invalid length.
[  234.994725][T11315] __nla_validate_parse: 1 callbacks suppressed
[  234.994737][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  235.094372][T11315] netlink: 'syz.2.1563': attribute type 21 has an invalid length.
[  235.123317][T11319] netlink: 'syz.1.1564': attribute type 29 has an invalid length.
[  235.910349][T11356] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  236.107170][T11370] netlink: 'syz.0.1577': attribute type 21 has an invalid length.
[  237.345135][T11405] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1587'.
[  237.348603][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'.
[  237.352060][T11405] netlink: 125920 bytes leftover after parsing attributes in process `syz.0.1587'.
[  237.536925][T11413] netlink: 'syz.0.1590': attribute type 10 has an invalid length.
[  237.611019][T11417] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1591'.
[  237.727288][T11419] netlink: 'syz.0.1593': attribute type 10 has an invalid length.
[  237.768115][T11419] veth0_vlan: entered allmulticast mode
[  237.788915][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'.
[  237.811476][T11420] openvswitch: netlink: Unknown nsh attribute 0
[  237.825966][T11420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.828169][T11419] veth0_vlan: left promiscuous mode
[  237.855079][T11419] veth0_vlan: entered promiscuous mode
[  237.884764][T11419] team0: Device veth0_vlan failed to register rx_handler
[  238.013408][T11419] syz.0.1593 (11419) used greatest stack depth: 18168 bytes left
[  238.685715][T11434] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1599'.
[  238.771412][T11443] netlink: 'syz.2.1602': attribute type 10 has an invalid length.
[  238.817491][T11446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1604'.
[  238.821728][T11446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1604'.
[  238.885838][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1606'.
[  239.997964][T11448] : renamed from gre0 (while UP)
[  240.007151][T11450] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1605'.
[  240.040885][T11454] netlink: 'syz.2.1607': attribute type 29 has an invalid length.
[  240.072694][T11456] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1608'.
[  240.076339][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1608'.
[  240.093965][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  240.114460][T11454] netlink: 'syz.2.1607': attribute type 29 has an invalid length.
[  240.118448][T11454] netlink: 'syz.2.1607': attribute type 29 has an invalid length.
[  240.136028][T11454] netlink: 'syz.2.1607': attribute type 29 has an invalid length.
[  240.410430][T11467] openvswitch: netlink: EtherType 50a is less than min 600
[  240.561419][T11471] ksmbd: Unknown IPC event: 1, ignore.
[  240.793539][T11477] syz.0.1617: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  240.803057][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.0.1617 Not tainted syzkaller #0 PREEMPT(full) 
[  240.803074][T11477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.803084][T11477] Call Trace:
[  240.803089][T11477]  <TASK>
[  240.803097][T11477]  dump_stack_lvl+0x189/0x250
[  240.803121][T11477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.803138][T11477]  ? __pfx__printk+0x10/0x10
[  240.803157][T11477]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  240.803173][T11477]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  240.803210][T11477]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  240.803227][T11477]  warn_alloc+0x214/0x310
[  240.803248][T11477]  ? __pfx_warn_alloc+0x10/0x10
[  240.803297][T11477]  ? __get_vm_area_node+0x28f/0x300
[  240.803311][T11477]  ? hash_netport_create+0x358/0xfe0
[  240.803333][T11477]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  240.803346][T11477]  ? do_syscall_64+0xfa/0x3b0
[  240.803386][T11477]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  240.803404][T11477]  ? rcu_is_watching+0x15/0xb0
[  240.803419][T11477]  ? hash_netport_create+0x358/0xfe0
[  240.803435][T11477]  ? hash_netport_create+0x358/0xfe0
[  240.803450][T11477]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  240.803464][T11477]  ? hash_netport_create+0x358/0xfe0
[  240.803482][T11477]  ? hash_netport_create+0x2fe/0xfe0
[  240.803502][T11477]  hash_netport_create+0x358/0xfe0
[  240.803526][T11477]  ? __nla_parse+0x40/0x60
[  240.803543][T11477]  ? __pfx_hash_netport_create+0x10/0x10
[  240.803562][T11477]  ip_set_create+0xa97/0x1940
[  240.803575][T11477]  ? perf_trace_preemptirq_template+0x280/0x340
[  240.803593][T11477]  ? ip_set_create+0x4a2/0x1940
[  240.803615][T11477]  ? __pfx_ip_set_create+0x10/0x10
[  240.803648][T11477]  ? lock_is_held_type+0x137/0x190
[  240.803670][T11477]  nfnetlink_rcv_msg+0xb4d/0x1130
[  240.803688][T11477]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  240.803716][T11477]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  240.803750][T11477]  ? irqentry_exit+0x74/0x90
[  240.803766][T11477]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.803796][T11477]  netlink_rcv_skb+0x208/0x470
[  240.803814][T11477]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  240.803830][T11477]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.803855][T11477]  ? bpf_lsm_capable+0x9/0x20
[  240.803868][T11477]  ? security_capable+0x7e/0x2e0
[  240.803888][T11477]  nfnetlink_rcv+0x26a/0x2520
[  240.803906][T11477]  ? __dev_queue_xmit+0x1d79/0x3b50
[  240.803928][T11477]  ? __dev_queue_xmit+0x27b/0x3b50
[  240.803946][T11477]  ? perf_trace_run_bpf_submit+0x100/0x170
[  240.803965][T11477]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  240.803979][T11477]  ? __pfx___dev_queue_xmit+0x10/0x10
[  240.803991][T11477]  ? irqentry_enter+0x3d/0x60
[  240.804007][T11477]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  240.804031][T11477]  ? ref_tracker_free+0x63a/0x7d0
[  240.804049][T11477]  ? __pfx_ref_tracker_free+0x10/0x10
[  240.804062][T11477]  ? irqentry_exit+0x74/0x90
[  240.804076][T11477]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.804107][T11477]  ? __netlink_deliver_tap+0x807/0x850
[  240.804122][T11477]  ? netlink_deliver_tap+0x2e/0x1b0
[  240.804144][T11477]  ? netlink_deliver_tap+0x2e/0x1b0
[  240.804165][T11477]  netlink_unicast+0x82f/0x9e0
[  240.804196][T11477]  ? __pfx_netlink_unicast+0x10/0x10
[  240.804211][T11477]  ? netlink_sendmsg+0x6c0/0xb30
[  240.804233][T11477]  netlink_sendmsg+0x805/0xb30
[  240.804256][T11477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.804303][T11477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.804321][T11477]  __sock_sendmsg+0x21c/0x270
[  240.804339][T11477]  ____sys_sendmsg+0x505/0x830
[  240.804363][T11477]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.804389][T11477]  ? import_iovec+0x74/0xa0
[  240.804412][T11477]  ___sys_sendmsg+0x21f/0x2a0
[  240.804432][T11477]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.804478][T11477]  ? __fget_files+0x2a/0x420
[  240.804492][T11477]  ? __fget_files+0x3a0/0x420
[  240.804514][T11477]  __x64_sys_sendmsg+0x19b/0x260
[  240.804534][T11477]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  240.804571][T11477]  do_syscall_64+0xfa/0x3b0
[  240.804589][T11477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.804601][T11477]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  240.804618][T11477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.804631][T11477] RIP: 0033:0x7f742938ec29
[  240.804644][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.804654][T11477] RSP: 002b:00007f742a1a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.804669][T11477] RAX: ffffffffffffffda RBX: 00007f74295d5fa0 RCX: 00007f742938ec29
[  240.804678][T11477] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006
[  240.804686][T11477] RBP: 00007f7429411e41 R08: 0000000000000000 R09: 0000000000000000
[  240.804694][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.804701][T11477] R13: 00007f74295d6038 R14: 00007f74295d5fa0 R15: 00007ffd8dc15a88
[  240.804722][T11477]  </TASK>
[  240.804842][T11477] Mem-Info:
[  241.035600][T11477] active_anon:7703 inactive_anon:0 isolated_anon:0
[  241.035600][T11477]  active_file:16049 inactive_file:38314 isolated_file:0
[  241.035600][T11477]  unevictable:1768 dirty:38 writeback:0
[  241.035600][T11477]  slab_reclaimable:10036 slab_unreclaimable:54179
[  241.035600][T11477]  mapped:18512 shmem:2411 pagetables:996
[  241.035600][T11477]  sec_pagetables:0 bounce:0
[  241.035600][T11477]  kernel_misc_reclaimable:0
[  241.035600][T11477]  free:274972 free_pcp:21901 free_cma:0
[  241.054864][T11477] Node 0 active_anon:22404kB inactive_anon:0kB active_file:37540kB inactive_file:22040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38440kB dirty:144kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8164kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.068500][T11477] Node 1 active_anon:8408kB inactive_anon:0kB active_file:26656kB inactive_file:131216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35608kB dirty:8kB writeback:0kB shmem:4596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3600kB pagetables:1904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.081899][T11477] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.096921][T11477] lowmem_reserve[]: 0 811 811 811 811
[  241.102380][T11477] Node 0 DMA32 free:315012kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22404kB inactive_anon:0kB active_file:37540kB inactive_file:22040kB unevictable:3536kB writepending:144kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:50756kB local_pcp:37384kB free_cma:0kB
[  241.116196][T11477] lowmem_reserve[]: 0 0 0 0 0
[  241.122315][T11477] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.141282][T11477] lowmem_reserve[]: 0 0 854 854 854
[  241.148761][T11477] Node 1 Normal free:310900kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8340kB inactive_anon:0kB active_file:26656kB inactive_file:131216kB unevictable:3536kB writepending:8kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36552kB local_pcp:17584kB free_cma:0kB
[  241.179308][T11477] lowmem_reserve[]: 0 0 0 0 0
[  241.185191][T11477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  241.257498][T11488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1619'.
[  241.271778][T11477] Node 0 DMA32: 1264*4kB (UME) 793*8kB (UME) 507*16kB (UME) 351*32kB (UME) 154*64kB (UME) 86*128kB (UME) 36*256kB (UM) 16*512kB (UM) 12*1024kB (ME) 6*2048kB (UME) 54*4096kB (M) = 314776kB
[  241.292938][T11477] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  241.314070][T11477] Node 1 Normal: 995*4kB (UME) 713*8kB (UME) 470*16kB (UM) 300*32kB (UME) 221*64kB (UME) 145*128kB (UME) 72*256kB (UM) 53*512kB (UM) 49*1024kB (UME) 2*2048kB (UE) 37*4096kB (UM) = 310900kB
[  241.354109][T11477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.357915][T11477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.364945][T11477] 56774 total pagecache pages
[  241.367393][T11477] 0 pages in swap cache
[  241.369507][T11477] Free swap  = 124996kB
[  241.371645][T11477] Total swap = 124996kB
[  241.374300][T11477] 786301 pages RAM
[  241.376655][T11477] 0 pages HighMem/MovableOnly
[  241.379148][T11477] 241359 pages reserved
[  241.381047][T11477] 0 pages cma reserved
[  241.938562][T11508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1624'.
[  241.943305][T11508] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1624'.
[  241.946822][T11508] netlink: 'syz.2.1624': attribute type 5 has an invalid length.
[  241.949854][T11508] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1624'.
[  242.067021][T11514] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  242.739012][T11515] bridge0: port 5(team0) entered disabled state
[  242.741225][T11515] bridge0: port 4(ip6gretap0) entered disabled state
[  242.743698][T11515] bridge0: port 3(veth0_to_team) entered disabled state
[  242.746030][T11515] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.748762][T11515] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.751964][T11515] bridge0: entered allmulticast mode
[  242.788447][T11520] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  242.850111][T11523] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  242.880378][T11520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1628'.
[  243.008171][T11528] netlink: 'syz.0.1631': attribute type 3 has an invalid length.
[  243.010614][T11528] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1631'.
[  243.013604][T11528] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  243.069483][T11530] xt_bpf: check failed: parse error
[  243.125258][T11533] netlink: 'syz.2.1633': attribute type 1 has an invalid length.
[  243.138384][T11533] netlink: 'syz.2.1633': attribute type 1 has an invalid length.
[  244.175238][T11570] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  244.861207][T11600] xt_l2tp: missing protocol rule (udp|l2tpip)
[  244.988210][T11605] bridge0: port 5(team0) entered disabled state
[  245.003396][T11605] ip6gretap0: left allmulticast mode
[  245.005110][T11605] ip6gretap0: left promiscuous mode
[  245.007082][T11605] bridge0: port 4(ip6gretap0) entered disabled state
[  245.018927][T11605] veth0_to_team: left allmulticast mode
[  245.020766][T11605] veth0_to_team: left promiscuous mode
[  245.023843][T11605] bridge0: port 3(veth0_to_team) entered disabled state
[  245.027683][T11605] bridge_slave_1: left allmulticast mode
[  245.029543][T11605] bridge_slave_1: left promiscuous mode
[  245.031435][T11605] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.035102][T11605] bridge_slave_0: left allmulticast mode
[  245.037328][T11605] bridge_slave_0: left promiscuous mode
[  245.039269][T11605] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.188597][T11611] __nla_validate_parse: 2 callbacks suppressed
[  245.188607][T11611] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1659'.
[  245.336853][T11622] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  245.357321][T11622] validate_nla: 1 callbacks suppressed
[  245.357374][T11622] netlink: 'syz.2.1662': attribute type 3 has an invalid length.
[  245.363623][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'.
[  245.378814][T11624] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1663'.
[  246.434488][T11668] netlink: 'syz.0.1676': attribute type 11 has an invalid length.
[  246.437798][T11668] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1676'.
[  246.447904][T11667] netlink: 'syz.0.1676': attribute type 11 has an invalid length.
[  246.452499][T11667] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1676'.
[  246.891372][ T5235] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  247.017544][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'.
[  247.131847][T11693] pim6reg1: entered allmulticast mode
[  247.189486][T11701] pim6reg1: left allmulticast mode
[  247.224500][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1687'.
[  247.508610][T11716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1691'.
[  248.158541][T11738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.271371][T11744] netlink: 'syz.0.1702': attribute type 10 has an invalid length.
[  248.274649][T11744] batman_adv: batadv0: Removing interface: netdevsim0
[  248.355347][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'.
[  249.329266][T11783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1713'.
[  250.482292][T11801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1716'.
[  250.827020][T11815] netlink: 'syz.1.1720': attribute type 11 has an invalid length.
[  250.835566][T11815] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.1720'.
[  250.919137][T11814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.439639][T11827] netlink: 'syz.1.1724': attribute type 2 has an invalid length.
[  251.846383][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'.
[  252.889405][T11872] netlink: 'syz.0.1739': attribute type 1 has an invalid length.
[  252.891867][T11872] netlink: 'syz.0.1739': attribute type 2 has an invalid length.
[  252.894355][T11872] netlink: 'syz.0.1739': attribute type 7 has an invalid length.
[  252.896663][T11872] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1739'.
[  252.899614][T11872] netlink: 'syz.0.1739': attribute type 1 has an invalid length.
[  252.904008][T11872] netlink: 'syz.0.1739': attribute type 2 has an invalid length.
[  252.906385][T11872] netlink: 130076 bytes leftover after parsing attributes in process `syz.0.1739'.
[  252.918260][T11874] @: renamed from bond_slave_0 (while UP)
[  252.981305][T11874] netlink: 'syz.2.1737': attribute type 21 has an invalid length.
[  252.986907][T11874] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1737'.
[  252.990322][T11874] netlink: 'syz.2.1737': attribute type 4 has an invalid length.
[  253.114666][T11881] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1741'.
[  253.127960][T11883] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  253.131080][T11883] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1742'.
[  253.156427][T11886] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1743'.
[  253.476045][T11905] netlink: 'syz.1.1749': attribute type 41 has an invalid length.
[  253.476280][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1749'.
[  254.559791][T11950] syzkaller0: entered promiscuous mode
[  254.561564][T11950] syzkaller0: entered allmulticast mode
[  254.754731][T11960] sctp: [Deprecated]: syz.1.1769 (pid 11960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  254.754731][T11960] Use struct sctp_sack_info instead
[  255.566907][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.569334][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.819560][T11965] __nla_validate_parse: 10 callbacks suppressed
[  255.819573][T11965] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1771'.
[  256.001150][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.008969][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.015115][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.018905][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.022973][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.025980][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.028925][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.032033][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.042401][T11974] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1775'.
[  256.440844][T11991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  256.444823][T11991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  256.537933][T12002] validate_nla: 31 callbacks suppressed
[  256.537989][T12002] netlink: 'syz.2.1782': attribute type 4 has an invalid length.
[  361.612125][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  361.614960][    C0] rcu: 	1-...!: (1 GPs behind) idle=908c/1/0x4000000000000000 softirq=41662/41663 fqs=2
[  361.620272][    C0] rcu: 	(detected by 0, t=10505 jiffies, g=37665, q=74 ncpus=2)
[  361.622640][    C0] Sending NMI from CPU 0 to CPUs 1:
[  361.622712][    C1] NMI backtrace for cpu 1
[  361.622732][    C1] CPU: 1 UID: 0 PID: 12001 Comm: syz.0.1783 Not tainted syzkaller #0 PREEMPT(full) 
[  361.622746][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.622755][    C1] RIP: 0010:__lock_acquire+0x606/0xd20
[  361.622781][    C1] Code: 13 69 06 0e 00 0f 84 1a 05 00 00 83 7c 24 0c 00 0f 84 a9 00 00 00 41 8b 46 20 66 85 c0 0f 88 8d 00 00 00 65 8b 0d 86 af 03 11 <a9> 00 00 03 00 74 38 85 c9 74 1d 48 8b 3c 24 4c 89 f6 ba 01 00 00
[  361.622792][    C1] RSP: 0018:ffffc900001e0750 EFLAGS: 00000002
[  361.622803][    C1] RAX: 00000000000c4067 RBX: 0000000000000000 RCX: 0000000000000001
[  361.622812][    C1] RDX: 0000000000000002 RSI: 0000000000004000 RDI: ffff888029595640
[  361.622819][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81adabcb
[  361.622826][    C1] R10: dffffc0000000000 R11: ffffed1026cc4f51 R12: ffffffffffffff02
[  361.622835][    C1] R13: 0000000000000002 R14: ffff888029596158 R15: 0000000000000001
[  361.622842][    C1] FS:  00007f742a1a66c0(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  361.622852][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.622861][    C1] CR2: 000000110c2be1c8 CR3: 000000010f7d8000 CR4: 00000000000006f0
[  361.622890][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  361.622900][    C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  361.622907][    C1] Call Trace:
[  361.622915][    C1]  <IRQ>
[  361.622927][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  361.622939][    C1]  lock_acquire+0x120/0x360
[  361.622956][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  361.622974][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[  361.622990][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  361.623001][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  361.623015][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  361.623028][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  361.623044][    C1]  hrtimer_try_to_cancel+0x22b/0x420
[  361.623060][    C1]  hrtimer_cancel+0x3b/0x50
[  361.623072][    C1]  cpu_clock_event_stop+0xd9/0x130
[  361.623085][    C1]  __perf_event_overflow+0x580/0xe40
[  361.623105][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  361.623120][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  361.623131][    C1]  ? perf_trace_lock+0xec/0x3b0
[  361.623147][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  361.623162][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  361.623188][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  361.623209][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  361.623226][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  361.623237][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  361.623249][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  361.623271][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  361.623289][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  361.623314][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  361.623363][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  361.623380][    C1]  </IRQ>
[  361.623384][    C1]  <TASK>
[  361.623391][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  361.623404][    C1] RIP: 0010:preempt_count_sub+0x65/0x170
[  361.623422][    C1] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 f4 db 10 11 f7 df 65 01 3d eb db 10 11 <5b> 5d e9 d4 e7 ed 09 cc 90 e8 dd af 35 03 85 c0 74 39 48 c7 c0 64
[  361.623432][    C1] RSP: 0018:ffffc90007fffb18 EFLAGS: 00000293
[  361.623442][    C1] RAX: 0000000080000002 RBX: dffffc0000000000 RCX: 0000000000000000
[  361.623451][    C1] RDX: ffffc90003d09000 RSI: ffffffff8be34460 RDI: 00000000ffffffff
[  361.623458][    C1] RBP: ffffc90007fffcd0 R08: ffff888029595647 R09: 1ffff110052b2ac8
[  361.623468][    C1] R10: dffffc0000000000 R11: ffffed10052b2ac9 R12: dffffc0000000000
[  361.623475][    C1] R13: 1ffff110052b2b50 R14: ffff88813663ada0 R15: ffffffff8dbe2d18
[  361.623494][    C1]  migrate_disable+0xd5/0x190
[  361.623510][    C1]  bpf_prog_test_run_sk_lookup+0x517/0xb60
[  361.623536][    C1]  ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10
[  361.623555][    C1]  ? __fget_files+0x3a0/0x420
[  361.623568][    C1]  ? __fget_files+0x2a/0x420
[  361.623584][    C1]  ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10
[  361.623600][    C1]  bpf_prog_test_run+0x2c7/0x340
[  361.623619][    C1]  __sys_bpf+0x562/0x860
[  361.623636][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  361.623660][    C1]  ? rcu_read_unlock_trace_special+0x246/0x350
[  361.623678][    C1]  ? rcu_is_watching+0x15/0xb0
[  361.623693][    C1]  __x64_sys_bpf+0x7c/0x90
[  361.623708][    C1]  do_syscall_64+0xfa/0x3b0
[  361.623725][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.623735][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  361.623750][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.623762][    C1] RIP: 0033:0x7f742938ec29
[  361.623774][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.623784][    C1] RSP: 002b:00007f742a1a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  361.623795][    C1] RAX: ffffffffffffffda RBX: 00007f74295d5fa0 RCX: 00007f742938ec29
[  361.623804][    C1] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a
[  361.623811][    C1] RBP: 00007f7429411e41 R08: 0000000000000000 R09: 0000000000000000
[  361.623818][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.623826][    C1] R13: 00007f74295d6038 R14: 00007f74295d5fa0 R15: 00007ffd8dc15a88
[  361.623842][    C1]  </TASK>
[  361.624668][    C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g37665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  361.801657][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  361.804684][    C0] rcu: RCU grace-period kthread stack dump:
[  361.806488][    C0] task:rcu_preempt     state:R  running task     stack:26792 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  361.810944][    C0] Call Trace:
[  361.811995][    C0]  <TASK>
[  361.812918][    C0]  __schedule+0x1798/0x4cc0
[  361.814349][    C0]  ? __mod_timer+0xb37/0xf30
[  361.815773][    C0]  ? __pfx___schedule+0x10/0x10
[  361.817277][    C0]  ? schedule+0x91/0x360
[  361.818597][    C0]  ? schedule+0x91/0x360
[  361.820017][    C0]  schedule+0x165/0x360
[  361.821382][    C0]  schedule_timeout+0x12b/0x270
[  361.822875][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  361.824517][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  361.826343][    C0]  ? __pfx_process_timeout+0x10/0x10
[  361.827961][    C0]  ? prepare_to_swait_event+0x341/0x380
[  361.829874][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  361.831840][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  361.834262][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  361.836233][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  361.837855][    C0]  ? finish_swait+0xcd/0x1f0
[  361.839511][    C0]  rcu_gp_kthread+0x99/0x390
[  361.841200][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  361.843000][    C0]  ? __kthread_parkme+0x7b/0x200
[  361.844864][    C0]  ? __kthread_parkme+0x1a1/0x200
[  361.846609][    C0]  kthread+0x711/0x8a0
[  361.847836][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  361.849451][    C0]  ? __pfx_kthread+0x10/0x10
[  361.850869][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.852481][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.854072][    C0]  ? __pfx_kthread+0x10/0x10
[  361.855505][    C0]  ret_from_fork+0x439/0x7d0
[  361.856928][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  361.858500][    C0]  ? __switch_to_asm+0x39/0x70
[  361.859966][    C0]  ? __switch_to_asm+0x33/0x70
[  361.861440][    C0]  ? __pfx_kthread+0x10/0x10
[  361.862870][    C0]  ret_from_fork_asm+0x1a/0x30
[  361.864362][    C0]  </TASK>
[  361.865322][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  361.867231][    C0] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  361.870029][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.873060][    C0] Workqueue: events_unbound toggle_allocation_gate
[  361.875102][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  361.877188][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  361.883092][    C0] RSP: 0018:ffffc900007bf660 EFLAGS: 00000293
[  361.885005][    C0] RAX: ffffffff81b4665b RBX: 1ffff11026cc7f61 RCX: ffff88801bb10000
[  361.887476][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  361.890131][    C0] RBP: ffffc900007bf7e0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  361.892671][    C0] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffff88813663fb08
[  361.895110][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  361.897592][    C0] FS:  0000000000000000(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  361.900424][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.902419][    C0] CR2: 000000110c35a8eb CR3: 000000000df36000 CR4: 00000000000006f0
[  361.904845][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  361.907347][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  361.910019][    C0] Call Trace:
[  361.911327][    C0]  <TASK>
[  361.912206][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  361.913727][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  361.915629][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  361.917428][    C0]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  361.919346][    C0]  ? __pfx___text_poke+0x10/0x10
[  361.920793][    C0]  ? rcu_is_watching+0x15/0xb0
[  361.922224][    C0]  ? trace_contention_end+0x39/0x120
[  361.923869][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  361.925420][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  361.927272][    C0]  smp_text_poke_batch_finish+0x5f9/0x1130
[  361.929229][    C0]  ? arch_jump_label_transform_apply+0x17/0x30
[  361.931459][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  361.933001][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  361.934944][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  361.936929][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  361.938821][    C0]  static_key_enable_cpuslocked+0x128/0x250
[  361.941128][    C0]  static_key_enable+0x1a/0x20
[  361.943044][    C0]  toggle_allocation_gate+0xad/0x240
[  361.945153][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  361.947205][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  361.949008][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  361.951253][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  361.953053][    C0]  process_scheduled_works+0xae1/0x17b0
[  361.954758][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  361.956674][    C0]  worker_thread+0x8a0/0xda0
[  361.958137][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  361.960098][    C0]  ? __kthread_parkme+0x7b/0x200
[  361.961620][    C0]  kthread+0x711/0x8a0
[  361.962867][    C0]  ? __pfx_worker_thread+0x10/0x10
[  361.964436][    C0]  ? __pfx_kthread+0x10/0x10
[  361.965859][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.967566][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.969251][    C0]  ? __pfx_kthread+0x10/0x10
[  361.971057][    C0]  ret_from_fork+0x439/0x7d0
[  361.972499][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  361.974076][    C0]  ? __switch_to_asm+0x39/0x70
[  361.975605][    C0]  ? __switch_to_asm+0x33/0x70
[  361.977138][    C0]  ? __pfx_kthread+0x10/0x10
[  361.978673][    C0]  ret_from_fork_asm+0x1a/0x30
[  361.980268][    C0]  </TASK>

VM DIAGNOSIS:
19:29:02  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888106368237 R9 =1ffff11020c6d046 R10=dffffc0000000000 R11=ffffffff85504a80
R12=dffffc0000000000 R13=ffffffff99b04915 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504afc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c35a8eb CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=85062421f994258c 64805ad2630b0016
XMM02=0065766973727563 65725f7365747962 XMM03=5f65636976726573 5f6f692e656c7474
XMM04=00007f228a90d100 00007f2289da7460 XMM05=00007f2289da7478 00007f2289da74c0
XMM06=00007f2289da74b8 00007f2289da74b0 XMM07=00007f2289da74a8 00007f2289da74a0
XMM08=0000000000000000 00007f2289c12f0f XMM09=0000000000000000 00007f2289c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000001 RCX=0000000090213bdc RDX=00000000001a71fd
RSI=00000000727d5714 RDI=ffff888029595640 RBP=0000000000000001 RSP=ffffc900001e0750
R8 =0000000000000000 R9 =ffffffff81adabcb R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000000068 R13=ffff888029596130 R14=ffff888029596158 R15=d6bf87c490213bdc
RIP=ffffffff819d8009 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f742a1a66c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2be1c8 CR3=000000010f7d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f7429412f0f XMM09=0000000000000000 00007f7429412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
