last executing test programs:

1m28.608961725s ago: executing program 1 (id=326):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180024b168f44432eab300000008000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r1, 0x0, 0x1, 0xd34, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r2, r2, 0x4, 0xc, r2, @void, @value=r2, @void, @void, r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r2})
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000001100)=""/4070, 0xfe6}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000340)=""/179, 0xb3}], 0x9}, 0x40012100)

1m28.490882652s ago: executing program 1 (id=327):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0000000005000100000000000000000000001400000008000000000000000200000000000000000000001400000000000000000000000200000000000000000000001165747f6e00000000000000cfb94448ab5bd75de3ca92ae5d81010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000200070000108300000000960000206a"], 0xf}, 0x0)

1m28.410940371s ago: executing program 1 (id=328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xe0}, @alu={0x7, 0x1, 0xc, 0x6, 0x3, 0x80, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x63}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, &(0x7f0000000080), 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1m28.219016577s ago: executing program 1 (id=329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100e400}, 0xc, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x5, 0x0, 0x0, {0xeea31d7a82b12b36, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x15b0, 0xc, 0xa, 0x503, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1578, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "e6a578e8c0f25cc6c6b4281cb25468af20907d9d92c8fbdec25809e76c92e841c5959092de304675337f51cbbd5d3b25d6b8284fbc4ae19e69cd99625a142f72c262cd8b3467a1d858e0133676363dfcced4905f16997e2d865ac7a0ae6eea07a39f9930fb5940541f3a54c978f79d688dad0fc94d3b246c8bffe25aeae7a8a9a91b72106682dbf31353228e55f36486278a8fe191e5e76d04d0f2cac673ee76ffc1a5a7b0"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, {0x14a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1074, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "3b70bdc8ae3bd3e0d0c3b7bde769617166a941d59e06da8c25520d6303ee7b50fe3d80bbc9394647ebef68c17858ba3d5c60d06ca5bf0fd0853851bea283f27ed29b54b2a9ccbd95f01b2d992b95069d63d34f08b5d33c3e876807dd6d9702aaa5844e48dcb5dcb6f0c9502b751c2cb835506538c44320a30096283989a72bcaffa3354faefcbf24730da2c5d5f7a61c37f44f14c52a94ea2c30759332c096084b1abb8e01fc1ee5c897c486d67d23157e79351e0a03a4775b2b82278bcf01d0b7fdfa1116021d048016ebdada93185bc388ce7759cd0efe716ea3509f37e1cf968ba6994c620fa54ca507fd09ff53e054bcc5e39367b5edf5cfad7028971eafc5f42516b23fefbab5e77d64a451e875b6e8ea865430aa8595952084349a865a706a3a616b4d4dca352881ba0b367846bccd44fc23f55405e1c9be7a765efd32251d522d326b7337ec388cba6dc2136f1b64634f906c25c67d5cae15daf12a96304203967ee9528e0944c54203434f2afa62cf30e7458275184bde7f9d377efa436ab706111c2334da76cd6536577bbb29163db37c355687c4217b8dcd79973f4c334d8f69e565e9b3a52813fcbf6da5d19956e0fa8cfc0140b27f6d2f7f999526e4fb11121d56c606b01ee6aeb35a90b248e2e17e1ad310ce4689d950da54bd02740ab5a3758217d834841318c0ae7b005267f2cdbd7d0048bea3962222847b3dd2e12aab27560cfec41959b59bb9f109af74c20dfe020254677a022d4605a5455d99fa403e13ee184ef0a9717a817512353243f93bc36754d327d94e48a89327ee1dd22db169970e1dae2d51ff76605cf2b15d0295c9ddec64a0e020afc04edfd92d128a634df589351a957f3c6290407118a29c587577e017a7c8307f934e677b1d996a2d8c6e65810c56d85875db5b14d65dc520eca96d2b356fe828d64e577dc8e7803acb47a3f1bba722d316fb139c3c0362a523ec51bb8395aafe6a132920e23295d742eccb90def4895c38cee68b1dbf5432c1575c2fe9a88eda7d5934e79891de3d3e471d710c5fd1f7f68cb25288cfe0385fae484ec7b6d3aec8fa95bbe168efeca345970d447a14463703f472f0eb2d4f9fb23880eca529b66c70ee03c18bc52b0282194041549545a1c92e13d4f2c74e3d845dbc9f90e0534a1801b8cf7ea509e0100d5bd130d9a129fc4fecd2b139e29e5e66bb8dd7c470ae3c548209649cf1507ec46ac9443208257737c95f824235e9e28aaab94e300596d3fb7ad283efea23aba061d1b3ffa9c54f1bac77408ebe326e3824fb83b4d58a9af9ae4108c83958d9e1f9e6a332fb97f2b2bacc5953a50048a4510695984d69463e1732baecb4332c3116fd86d9fa286475f950c977184c5b38a9107b2b08577b389d912edc77679bce2a941f000a95a770719b15c634c5036999ffd9d8683743bf00e2f1b5462113547161c37541549a94eb9cdbf5ebeee3f7167a74faaddc5de8ef8303098416a66257669a5983471eb9d0e53fa5993bd0c9a21a922eea03a43d38c97767496615b9e2cfb7508fce4a6a68ab9c3c220929ceb0f2f4525d1c66ce30167ed890ef9c23801543727e61b7ecc94516629ff4a4e53e6df68b38ae6ad4d0c49fc0562402317b542bc9b17ba9082dbdcbbfb351777fc73b20fca73cec3e397ea5f2f855408be6514d822b36e78caa0b439e9116453e82da0653f34a77cbe0cc57bda09a8a7dbee786d1fbdea9b756bacf13622c1444d9df2e066d4890df9392baf70487b2dc4400e8d3a1e4b28f0efa574fc920d4c704997d48d758ec2438581b4f927c68f5244021acef634bdffc034597d83272ced7070bc2e0557eba761e32b337d8b974d50a04d0327bc2e905afd835cbdc73d54cfff574d7dd7b065161c37de4e05842d602ec8a2576b5f6c608aab0c7f8af638098a366198a63064cd19a89e067a037132a063a896111d8bf1c44ce7742271d0f263efadfee4fbbad540a4164220de52793033c2c02dd7ea8c38beefdda81bed10b357e14c97c62d8ac63d4a0c35ed350f714c225a48bd911eab8879157bcfc19be16bd30678b6a950ea835ee10dab007c70d0f786a81412b620f8ca6832534370d178b68ced9248adaaab9360dcd76158dded7ccbd643c57d420782a72c0d6d7c7b4bd5e3bdd60d117c390a7a302ceada7cc79e0c90ba7f192acc04fda20b9fcb9d86f1635a16312b7f0faca056489cc5ee005ea44cb770b40964a009310638451360c27aeb3607a348c509c66aa9d696c00ff0a7e4deda16728f842e84af241afdb54c16836b5d8b8bdf0d2da4c20c4440ee5bab41e4fa228c68677c45fb7b28724b316e749015cc226c8e51da57e84aa7fc241fea720a0ecfaa37d35ebb0ffbac2ed3fd04015471f2bd4551293638e885cc44c5e34e50d74e986dec9920fc5444a72df8b72bcef90c349762e7a3d115d30941ee75455afac70482993f6191dfd5245bee33e5205cb2265b0a8b5a08962d7c90611d706e1569a5d0bae8c95b136898614b8fc9dbbfcc618ce6bfea628254ae0f446c8886c14b555a7ede184a8b4fabfc35795eb74484f4c5bd958dea0828bd34dc0ecf81de2ca5226df493d68fa644e4e7b245e09c5379ad2b26f55636c25d7f1d93ec25ad2835571712eae37e7b4d757f7a28646bdb6ba74aadd6e32635ccab80c4832b91d4f962344a82428d006ee3b386f946dd4dbfe5e313835c2b657572fd9d04eb135f8f2a458f2f17e791f569fbd04f9816369de84d677c1b2eb44e763f5c7061ef2d0f2cd047614fc32ef754eb06580b6a7fec9ee7e01a53acc7fd4d3f06332d9345f3a8c9d4b8a64505710826ea201a9b9eed56a36781eac203a7e479b61e61590b92040326786acbee0eb938373afb2452b3a216981dd8dc6f8ae2a9f910d887484576f8b6717653ee27a4880b15e971549a465829de84bb6c3732a4599c14e83d4f6d0800e8fecb80df3a226e477d3c79b015ff4555fca47d2310bb2b77c322a3e620d9289471d172a8413cf3a0fd91e632bf9733fdb56036194a1629e9318f27e06959464d9280bd272ff5a6f5be9a9181a9c87ce748209d6f13306b07ad4031fdb916f94bd86f9c37f05e3394b823d8595594ff65c5e7f7829d4edaaa660aa5cacc7cfc8b9718d40055099aba0bedce2a2cc1a253a580b18a92a6dff08a97c2d758d4d36b32c5f8096bc1cf1c0f4fffd4458311ccf34e312990e2a8e43eda45d6c0a56e778d86e0d7a4f87b1a90640650f33d396f60f08822c4ac86880249bcb0904b3794721d739d8399d5c819e4bbdfb85eac9797496d201629cd5600a085d73375c9bbae69dfb825669979e8c71e9859e852197f1c3811405792dc6cd6e24a6afec89079553cde6e908507379f8420dcd0c39b16c67f81ecadc58a6248f730a18daf8e78f50c324ec364d12dc683fd9e0ed73045bb4df2032ec538d3db4fb3ef9e5c4376fe757246c5864ba400c9ef18d00c4f729acd1b55843a5941d0693f60687fe2e441256cf207774f1631664d056a43efa1ccd58f91298cc64be0e7206e7753e4d0b5ff953e299016ddd847b8ca6c683f96a84b6af6f8c6ba3f5ecf2a19d4b239b48533ab256122310a75783e24281189a641c56716f178ecf9bd7333313a9e89329fe7ed1ddaf481e282265b9880559b313a1ab0cc99dcf35b6fd864a99d0742dc9cca6556f049d7f1af9ddc7aab07a48db211c431db850ad2f469129b8060bcd55d2ae15987928df0bf8a8461030c916ce8e01f8867b16d8e8fe4fb29835239eef4fe1409f7b3aefbb6d33d98cb5c3449e53c4ee6a85f79c96b15e0f5aee7d60bc69a8814616632754d8b55b334f458f7e421863d624d496e47f6eac831748e20e5430e48492537fb280318c6a45625432a5a7f732bf0b8de4e21cfa65bb7d6706ef40575482f3b50dd6280e8db5e9c056e1512d599314d571fc5f0cfb3b830af22e03bc92a8d8eee07b814bf194a8811ac17d0f9f01b983ba03044ab10a3a8928a522a60b1ab74dab7e79ff4d39e4419e41a7a83eddb7f29b5698f207beb9851293376729bb5dc435b342df7bb5a0a911db65b47ffd488b237865e71d912852b7e99b6ccbce6256ee9555c4fd4efc1ad5d8fff9dd00f94c7bd702adf98978ebee07673a95e3fdb424a6f9d59d61ae9834c25043dc74dc45f718e16b352870aae199d51b570224840d7f36fd947b856f233e7eadfa74dd3095797f6448bc56dbe24c28026b27984e8f278c3bb8bcc8b44a0773fac0dc39770e268b4967622cf2a5f6ca932e80d1e7f523bcfce7d9bfd91be50f7343a70f3069091521f452ed59a8ae05be85be4d54e110eeed0cc032adb6c3e35b00383cf6f4747287d2f0c2ec9470919d8714f21d9a1fd45beeef055757809e353ed77f765b1e8460748b86efa198958a42404a947616e33fb98bb82309c943a6f4945e53b02755df2a9f50e9fd4b8dbcc7a30eefe3a65aa768352b8d6f0d5a0a835a9efd2d21c8696de6e1251853aadca8261f226fe0918ab3523c8b8c991330d86518b4b2abf092a6128f7865da18bf487af3f63ed5e08b1baf704bcbfeddf3d3a7af53ca9ea9ee03a048db41d25316262354e8293ebf8f9511d3246ae444af7e81ff804cdfda2471dc5ab8032c471276fbccf5e5420018ff2aa6ca466ae43419251c6898543316eb64397c43c366568aa7ce64091e65487039e16b9bc112dce35a5531d450bd710454a34101e6a867ee53b7ef772601dccc3544f4913b68c35c92a1d6ffb6193a166c570b4798d7f2b8328c8c4c832d12165e4cddd0f2c5ef1d5616bc91d623de7a3c95aa510c86d54ecd823fcf32734673d2206baa7a5a2dbd8026c8f2e7f00cb2a3bf543291b365253ba7497ca72115a351278067c0fce9ba6018bb7907d398496cd84f1fc3013ceb35294e67f48a6b4746bba053ca8f98bd9005166ea4bcfd1d44022734666ba9c136fe9ee92063a73d00ba1eb441cb3117206fcfbf2bebb9180dfdc12bd11fd9927c36242645b4778620758e7b547024865240c40dc6ad35406fd488641c853c363da929e7cf51c89271d45dbbc27161cb67d864de8883ad05c715c4b7c4c37d037ba9e459608c752ecd09ed4874e1684428cbc6150270683ff928eaea5cce96432e7a97fabbb30113d54672f1570b1b9ac862f69662a4216503b8f48cd5b04bad6babf8cd7fc42f9face94b6d3468860d8bc377b341ba453635bfb4db3b17e241b09ec0e8c742dffcb8fb16d4d0c7f23ca4b20268010895a12940c818fc4b3e2905f48ed25c468c240190e2196269f6d14989da76bcd3b40b982fb8ebe186573bcc80e8bdc94c253349d171348f70ee035f342cbfb28ad08d1f26d3725e1e74573743deb050b59f0c5599895b3f01f73fab30e8cf16d75a8a1698da699414b89e79497f99ee52c9e5b0bb9f87420f59e4e69174c891be5468da4c152f0fd898841f5001a29d1818bfd9ec7fa8fc7442ff03fcf5c43385fd5289850d198f865863101db009151b6f92e6c46e54cf90e7bc609613eb2dd29f664c528a3657ae95c2692c6c15fbab155b476f53b59eb294a6029c7f488af1c98442edea32169c57dac57a3b9db51d877b7b2a51ef44ff7475e3879d770201584c53c342aeabc37f24c931fe8595131ff4ed0711bbddec689540c18665f53bc0c9b9abe1ef9f38b8c35488580de90347872b03d933460f44d8629573cfaed6fec9f29d0302e8f4962aaba9b0d4e0c82d22b49f8d936e48d8d46ff3bce583e9ff0be4a5b94c5d7cec2d68fa"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1dc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x198, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x188, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_FROM_DATA={0x140, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "4f689eca8c4d81707b1eb9df590d7f76e1f030c30f442d1ffcc61b7bf66b5f756f9728fcd39f60e32d6286"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa, 0x1, "f66c9933efad"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x22c, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x21c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_MASK={0x44, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "6bda267a07b71d9849fefa6bdb32a6c5fb6b575e743896764843b29e4f63bb54ecd9c7ac7db65e546e17a1bf0f505957f896b9bbaa31e8dd6f27ca33"}]}, @NFTA_BITWISE_MASK={0x1a4, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "740c0b9bd974e325f54c1e7bbb098adaa84d44071bb8b9224ae239472b799254d43feb7eac86fc51bd32747bd8a2477ac1478cf617ab47c304398d19e58a0ce8586ac3d232316f7d489de682395ea7d55d15f832875cc9fdfe3dd72525e2417bfa937a52e1308024d471f01ac01dfdd379f21687c4c7cc4cf2b55c17b16f9d95ef05cbfc2db7e5a2a591daa50a8e69a3c6c14c25947ee76d6dbd1d84cbba19114e4e101e8467a055191689384d8ffc4aae932ea5984e01761014cf4e1bbc448efd58618daffd6dc68350996dec2fa171e5f59185ba333c5d5e3e1e1839f25aa4bf101c84eb2d558de02f598bccc5940e849ab29f6d"}, @NFTA_DATA_VALUE={0x79, 0x1, "dd999bc07c112e649eeeb0786e892a250a19c8b726cfa647e848eb26c09c5fa381f8739469871a2a0d06e1d2e53258e2d50eea9549a82276a2c11ddaac604bea457a7a7072ca2ae65683652db73f23f26c72f20a82ca489a86e2765e8f7a0eb96279a4be1c45f43df40526bdac2b61c3976b1c3a93"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "cc790aaa32e096cc23c1f61ea8db37c8dfb281d77fc7"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x77}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe6b2}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x25, 0xc, "c56c846b4904bd74baa2c291b6f2f6e5d05a3da7812a9034a18bb2e5b346fd0f24"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x29, 0x8, "c3d06bcfd5cd184893c87ae60f4fd80885fd6b8f870090285176b7532b6b93bca9f38c03a9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x212c2fdb6033025}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x188c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008044)

1m28.216869362s ago: executing program 1 (id=330):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x80108906, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5)
r7 = socket$kcm(0xa, 0x3, 0x73)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg(r7, 0x0, 0x2102)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5d, 0x5d, 0x2, [@enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x12, 0x12000000}, {0x10, 0xff, 0x5}]}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x80003, 0x1}]}, @datasec={0x5, 0x0, 0x0, 0xf, 0x1, [], "bd"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x3f80000}}]}}, &(0x7f0000000580)=""/199, 0x7a, 0xc7, 0x1, 0x7, 0x10000, @value=r0}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="c3e8ee915f00000084000000000000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000970000007600ffff800000009500000000000000abb7c49040cee3a98b8565ca3bedea4732be7fefe6fc278284b768dc66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0)

1m27.741132211s ago: executing program 1 (id=332):
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000006000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0)

1m12.70626119s ago: executing program 32 (id=332):
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000006000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0)

24.587267152s ago: executing program 2 (id=805):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r7}, 0xc)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020100030a00000000000000fcdbdf25030006000010000002004e23640101000000000000000000030005003200000002004e23ac1414aa000000000000000002001300030020002abd700007350000"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

23.657739716s ago: executing program 2 (id=814):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18fe0000009e0000f1ffffffffffffff95141d46de6df1481d67507f6250b7e97d0987ff491a9f91b66fb705e49210846794a6c70390b27f31d33ad9e70ccbff5d062388032df1b0820d19099c008e4536d2708da6e8f46542f2da1c252b7ef131174ebc27a86c772e7fce55208cef0bbce65964bcc727a2d51535d0b1e4a39ca2282ca658ecb610679621b663f93a4e2184ca4a1e120edb15ef03bb5fbbb20ca7447f843aac451383ef1b85f725ac6bc10588577304b84df5bb0b107a710ab700fc3c95422ba87cd88c162af2e24eff6df950ac346727f5b7ba2a4dc134c0ef9298d87065d79349e77f28382327"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x100000000000000}, 0x18)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000640)}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unlink(&(0x7f0000000200)='./cgroup\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2], &(0x7f0000000680)='syzkaller\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff03}, 0x94)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637288fb"], 0xe)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r8}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

22.758002469s ago: executing program 2 (id=824):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000600040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

21.790855473s ago: executing program 2 (id=834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x1f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x44)

21.73992564s ago: executing program 2 (id=835):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r2 = socket$kcm(0x2b, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004084)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8905, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
r4 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0xfffffdef, 0x7, 0xdf, 0x7f, 0xf9, 0x0, 0x9, 0x6001, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0xc}, 0x104140, 0x8000000000000000, 0x5, 0x5, 0x8, 0x4e, 0xf, 0x0, 0xb, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r0, 0x6)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x3f7, 0x0, 0x70bd29, 0x25dfdbfb, {0x10, 0x7, './file0/../file0', './file0'}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x48001)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003d0007010080000008001b00047c0000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890c, &(0x7f0000000100))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_attach_bpf(r6, 0x65, 0x7b, 0x0, 0x14)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

21.500088564s ago: executing program 2 (id=837):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140e, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

6.170753562s ago: executing program 33 (id=837):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140e, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.277881979s ago: executing program 3 (id=977):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x99, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="c6", 0x1}], 0x1}, 0x20000850)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3", 0x12}], 0x1}, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x6314f53ae4cb53bd, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000008, 0x210, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x7fffffffffffffff}, 0x11efa, 0x4, 0x98, 0x6, 0x8, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004000000022c0703d7"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r8], 0xc4}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xb, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r5, 0x9, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d2", 0x9}], 0x1}, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)

1.208157657s ago: executing program 3 (id=979):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0xb3d8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x44f42a23c5719ff6, 0x80, 0x1, 0x85, 0x7f, 0x7, 0x0, 0x6, 0x10000, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x5, 0x2, 0x6, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0xad}, r1, 0x3, r0, 0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
close(0x3)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x1020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {0x20}, {}, {}, {0x6}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010080b5e9f19b6f174a00000000000f0300000000612e00"], 0x0, 0x28}, 0x28)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x30, 0x0, 0x90)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afe0000000009000000000000000000ff003b", 0x29}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000006000000faffffff000000008400", @ANYRES32, @ANYBLOB="0100"/15, @ANYRES32, @ANYRES32=r5, @ANYBLOB], 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.158178287s ago: executing program 0 (id=981):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r1)
write$cgroup_subtree(r1, 0x0, 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@ptr={0x10, 0x0, 0x0, 0x2, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xffff}}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f00000001c0), 0x4f, 0x0, 0x0, 0x2, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x1, '\x00', r2, r3, 0x2, 0x3}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="25e200ea3f5b3179d7b52eb343fc", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.070335408s ago: executing program 0 (id=982):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x79, &(0x7f0000000000)=r5, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='?', 0x1}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000060a010400000000000000000a0000010900010073797a3100000000600004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd000000080001400000001430000180080001006669620024000280080002400000000008000240000000010800024000000001080001400000000d0900020073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x40008d1}, 0x24002840)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c, 0x0}, 0x20040811)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaac2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50)

414.859262ms ago: executing program 0 (id=985):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x830d}, 0x80, 0x0, 0xfffffffe, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925001400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ccc", 0x55}], 0x1}, 0x80040c4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd)
r4 = socket$kcm(0x11, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000c040000", @ANYRES32, @ANYRESOCT, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=r4], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000000605"], 0x60}}, 0x20004000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_int(r6, &(0x7f0000000380)='memory.swap.max\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000561c7a748b44fb9900000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

414.535383ms ago: executing program 3 (id=986):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40600, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x2000000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="1100000011008b88040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000002c0)=""/4096)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @private=0xa010100}, 0x2, 0x2, 0x3, 0x1}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000180)="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", 0xfa}], 0x1, &(0x7f0000001300)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x4)

360.765298ms ago: executing program 4 (id=987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="62a044"], 0x8) (async)
r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xb, 0x5, 0x9, 0x0, 0x9, 0x80000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x9290, 0x1000, 0x3, 0x3, 0x7ff, 0x7, 0x6, 0x0, 0xd0b, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r0, 0x5}, 0x10) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)

360.30038ms ago: executing program 3 (id=988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000002ed90e0c00"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x84, 0x0, 0x0, 0x8e}}}], 0x58}, 0x20040000)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

309.839582ms ago: executing program 4 (id=989):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000}, [@ldst={0x1, 0x0, 0x2, 0x0, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x94)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800}, 0x802)

308.972592ms ago: executing program 0 (id=990):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0xfb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000000)=r3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x1e, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%ps    \x00'}, 0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x300000, '\x00', 0x0, r9, 0x4, 0x3, 0x4}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x70bd25, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0xfffffffc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xac}}, 0x0)

240.287279ms ago: executing program 3 (id=991):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x8}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x800000, 0x4, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x75)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0xff4c)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9785, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000200)=r2, 0x21)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf250900000006000300"], 0x5c}, 0x1, 0x0, 0x0, 0x48044}, 0x800)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x80002, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190081002dbd700000000000fe880000000000000054000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c, 0x0}, 0x20040811)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x8, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9791}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff81}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

239.060874ms ago: executing program 4 (id=992):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x29, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0xfe, 0xf, 0x1, 0x10, 0x3}, @ldst={0x1, 0x3, 0x6, 0x8, 0x4, 0xfffffffffffffffe, 0xffffffffffffffd8}, @tail_call, @generic={0x1, 0x6, 0x8, 0x7, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='syzkaller\x00', 0x7fffffff, 0x8e, &(0x7f0000001540)=""/142, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x4, 0x6, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={0xffffffffffffffff, 0x100}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0x2000000, 0x6, 0x0, 0x41, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x2}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0xcd4, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x0, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7e, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0x3, 0x2, 0x7, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0xcd, '\x00', r2, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0x0, 0x1, 0x70}, 0x10, 0x0, r3, 0x5, &(0x7f0000001a00)=[r4, r5, r6, r7, r8], &(0x7f0000001a40)=[{0x5, 0x2, 0xb, 0x8}, {0x0, 0x1}, {0x2, 0x3, 0xe, 0x8}, {0x1, 0x2, 0x4, 0x8}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x1ff}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x3d, 0x200, 0x70bd26, 0x25dfdbfb, {0x1b}, [@typed={0x5, 0x80, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x1)
r11 = socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r4, 0x58, &(0x7f0000001c80)={0x0, <r12=>0x0}}, 0x10)
sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x44, 0x3, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6a}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080)=0xffffffffffffffff, 0x4)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002140)={r12, 0x200, 0x8}, 0xc)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x4, 0x27, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x175, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xac}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0xffffffff, 0x80, &(0x7f0000002000)=""/128, 0x40e00, 0x69, '\x00', r2, @fallback=0x21, r13, 0x8, &(0x7f00000020c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002100)={0x4, 0xb, 0x2, 0x1}, 0x10, 0x0, r9, 0x2, &(0x7f0000002180)=[r0, r14, r1, r8, r4], &(0x7f00000021c0)=[{0x2, 0x4, 0x1, 0xb}, {0x1, 0x1, 0x3, 0x1}], 0x10, 0x7}, 0x94)
r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002300)=@generic={&(0x7f00000022c0)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000002340)=r16, 0x4)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002380)={r12, 0xd, 0x18}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r17}, &(0x7f00000023c0), &(0x7f0000002400)=r15}, 0x20)
r18 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r18, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000025c0)={&(0x7f00000024c0)={0xd4, 0x15, 0x100, 0x70bd25, 0x25dfdbfb, {0x10, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "deafa320646fdc64d399c4846f414093b4944f9c606fdbeab64dcb7e767e45500b4fb683755aabe4f32c0882679faf2b58a14e988dc9ee5e9bc94497e0cabf9784baa887e20fa4d23f032c91f027ca8504c814718dfce5468e3d5226462cc8088d70017f97b8566e8da6d330b505cf7c1208707b46842a23dcd5c4832cf21b4be1f59f660349ed195072f404ee851e2148496616ba6468dcc93291f931d63e0adfa0a83c682f46fe68306028ace10d78c0437d3e82e65907e92c003f"}]}, 0xd4}, 0x1, 0x0, 0x0, 0xfd1307f5528ea879}, 0x8000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002640)={0x1b, 0x0, 0x0, 0x1000, 0x0, r0, 0x1, '\x00', r2, r13, 0x4, 0x2, 0x5}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000027c0)={@fallback=<r19=>r4, 0x0, 0x0, 0x6, &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r20=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002800)={@fallback=r11, 0xffffffffffffffff, 0x37, 0x2003, r15, @value, @void, @void, @void, r20}, 0x20)
sendmsg$NFNL_MSG_ACCT_GET(r19, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x68, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x48010)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r13, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000029c0)=[0x0, 0x0], ""/16, <r21=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002a00)=[0x0, 0x0], &(0x7f0000002a40)=[0x0], 0x0, 0x4e, &(0x7f0000002a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x44, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10)
sendmsg$nl_xfrm(r10, &(0x7f0000002e80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d40)=@updpolicy={0xd0, 0x19, 0x100, 0x70bd29, 0x25dfdbfd, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x8, 0x4e22, 0x0, 0x2, 0xa0, 0xa0, 0xff, r21}, {0xbc, 0x14, 0xfffffffffffffffc, 0x1, 0xb30, 0x0, 0x7b}, {0x1db98e26, 0x2, 0xf279, 0x1000}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2}, [@policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0xfffffffffffffff9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)

156.883126ms ago: executing program 4 (id=993):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x10, 0x0, 0x3, 0x8, 0x800003fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a6000003f000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r3}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

155.69296ms ago: executing program 0 (id=994):
openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000000140)=""/42, 0x2a}], 0x3}, 0x10100)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1d4}, 0x1, 0x0, 0x0, 0xc0}, 0x4805)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x8000})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080))
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x25084c0}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x10)

89.981177ms ago: executing program 4 (id=995):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x8000, 0x0, 0x9, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="440100000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000004000000a0020005c00", @ANYRESOCT=r0, @ANYRES64=r3, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000fc0200000000000000000000000000010000000000000000fffffffffffffffffeffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000019000000000000000000000000000000000000000000000000000000000a00028000000000000000004c001400736d3300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600da0a0000"], 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x44000)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000003e0007012abd7000fcdbdf25047c000004006e002800018006000600800a00001c0015"], 0x40}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000087731ba7505a0e28ffff2500000010000000df9c1e7621fbf9a006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

85.664291ms ago: executing program 3 (id=996):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x35, 0x4, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

459.385µs ago: executing program 0 (id=997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000a0200000800000008"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000dc0)={r1, &(0x7f0000001b80), &(0x7f0000001bc0)=""/7, 0x2}, 0x20)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4b, 0x1, 0x0, 0x96, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x8080, 0x0, 0xffffffff, 0x6, 0x1003fe, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x2004080)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c081)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff)
sendmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="efa84c21442ebb447a5b323c99841ba328aaa6b56c3b39f7a33bbe19184d55", 0x1f}], 0x1, &(0x7f0000000c40)=ANY=[], 0x1208}, 0x40000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "9164b764dc2fe9c142704e3faa4f6e86c861a719a0c10615931dd9452c2e83e1bac64f06e6253e549949adcc9e09dd8dd61a52433ef798e633ae427b00cd159b66"}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x905, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x8, 0x0, 0x9, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500200000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x0)

0s ago: executing program 4 (id=998):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000060a010400000000000000000a000001200004801c0001800900010068617368000000000c0002800800024000000014140000001100010800000000000000000100000a7f26f69c7850c8e8389a98c71a4859a9a72c6a406807bc2f6326e1ef9418814b2a03931545350e89e62f3aa9a562604f1e44f4c015eefc3ee192bc258ab5d039774d648b57c92cb8764b988e15c9ecd6ac0b83383ba5e7bb3a626702acc4d292"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x558}, 0x1, 0x0, 0x0, 0x4008009}, 0x8008080)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40240' (ED25519) to the list of known hosts.
syzkaller login: [   48.529699][ T5773] cgroup: Unknown subsys name 'net'
[   48.622219][ T5773] cgroup: Unknown subsys name 'cpuset'
[   48.626139][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.321505][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.518760][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.522691][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.526667][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.531300][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.536180][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.550761][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.560620][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.570676][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.574771][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.577281][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.582195][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.582730][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.590617][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.594669][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.600867][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.897682][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   54.924621][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.990213][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.058868][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.062561][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.065029][ T5849] bridge_slave_0: entered allmulticast mode
[   55.067695][ T5849] bridge_slave_0: entered promiscuous mode
[   55.093743][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.096165][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.098479][ T5849] bridge_slave_1: entered allmulticast mode
[   55.101980][ T5849] bridge_slave_1: entered promiscuous mode
[   55.111698][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.114432][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.117199][ T5845] bridge_slave_0: entered allmulticast mode
[   55.120146][ T5845] bridge_slave_0: entered promiscuous mode
[   55.152416][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.154805][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.157240][ T5845] bridge_slave_1: entered allmulticast mode
[   55.160151][ T5845] bridge_slave_1: entered promiscuous mode
[   55.165467][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.177357][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.180205][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.183830][ T5841] bridge_slave_0: entered allmulticast mode
[   55.186455][ T5841] bridge_slave_0: entered promiscuous mode
[   55.189513][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.193224][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.195628][ T5841] bridge_slave_1: entered allmulticast mode
[   55.198402][ T5841] bridge_slave_1: entered promiscuous mode
[   55.203781][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.234239][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.238447][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.243599][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.254648][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.266236][ T5849] team0: Port device team_slave_0 added
[   55.283589][ T5849] team0: Port device team_slave_1 added
[   55.296063][ T5841] team0: Port device team_slave_0 added
[   55.306624][ T5845] team0: Port device team_slave_0 added
[   55.309552][ T5841] team0: Port device team_slave_1 added
[   55.319447][ T5845] team0: Port device team_slave_1 added
[   55.335731][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.338609][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.349277][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.364056][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.366358][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.375129][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.386093][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.389101][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.401523][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.406783][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.409613][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.421425][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.426198][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.429034][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.440027][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.445375][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.448221][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.458747][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.517698][ T5849] hsr_slave_0: entered promiscuous mode
[   55.521249][ T5849] hsr_slave_1: entered promiscuous mode
[   55.550284][ T5841] hsr_slave_0: entered promiscuous mode
[   55.553729][ T5841] hsr_slave_1: entered promiscuous mode
[   55.556381][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   55.558790][ T5841] Cannot create hsr debugfs directory
[   55.564809][ T5845] hsr_slave_0: entered promiscuous mode
[   55.567193][ T5845] hsr_slave_1: entered promiscuous mode
[   55.569359][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.572156][ T5845] Cannot create hsr debugfs directory
[   55.887083][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.899110][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.913220][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.925485][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.965323][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.973141][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.980967][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.999846][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.076182][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.087262][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.092839][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.098168][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.167787][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.204802][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.218712][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.221433][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.231350][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.249415][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.252718][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.277013][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.282045][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.299172][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.302454][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.319335][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.322335][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.336684][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.356698][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.359200][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.376787][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.379519][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.412232][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.416254][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.581963][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.589225][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.606548][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.628272][ T5841] veth0_vlan: entered promiscuous mode
[   56.642118][ T5844] Bluetooth: hci1: command tx timeout
[   56.644497][ T5844] Bluetooth: hci2: command tx timeout
[   56.646390][ T5844] Bluetooth: hci0: command tx timeout
[   56.649700][ T5841] veth1_vlan: entered promiscuous mode
[   56.696990][ T5845] veth0_vlan: entered promiscuous mode
[   56.700365][ T5849] veth0_vlan: entered promiscuous mode
[   56.712142][ T5845] veth1_vlan: entered promiscuous mode
[   56.717119][ T5841] veth0_macvtap: entered promiscuous mode
[   56.725487][ T5849] veth1_vlan: entered promiscuous mode
[   56.729073][ T5841] veth1_macvtap: entered promiscuous mode
[   56.765230][ T5845] veth0_macvtap: entered promiscuous mode
[   56.773274][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.781658][ T5845] veth1_macvtap: entered promiscuous mode
[   56.788231][ T5849] veth0_macvtap: entered promiscuous mode
[   56.797715][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.807420][ T5849] veth1_macvtap: entered promiscuous mode
[   56.830079][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.835655][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.849665][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.853637][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.862848][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.865366][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.879138][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.887867][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.900103][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.905948][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.909595][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.934858][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.950088][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.964365][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.975870][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.979699][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.053559][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.057022][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.100093][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.104074][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.137674][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.140306][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.172610][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.176106][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.197947][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.204319][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.225321][ T4653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.228158][ T4653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.242752][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.333251][ T5912] Zero length message leads to an empty skb
[   57.371645][ T5919] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.375283][ T5919] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.379431][ T5918] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.433824][ T5921] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.437203][ T5921] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   57.440011][ T5921] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   57.616234][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.716889][    C1] Illegal XDP return value 16128 on prog  (id 12) dev bond_slave_1, expect packet loss!
[   57.750401][    C1] hrtimer: interrupt took 29573 ns
[   58.016309][ T5947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11'.
[   58.022026][ T5946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11'.
[   58.137967][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.159590][ T5953] : entered promiscuous mode
[   58.705630][ T5966] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   58.708813][ T5965] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   58.733104][   T56] Bluetooth: hci0: command tx timeout
[   58.735002][   T56] Bluetooth: hci2: command tx timeout
[   58.737285][ T5844] Bluetooth: hci1: command tx timeout
[   59.057447][ T5968] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   59.194219][ T5979] syzkaller0: entered promiscuous mode
[   59.200169][ T5979] syzkaller0: entered allmulticast mode
[   59.216650][ T5979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22'.
[   59.278803][ T5983] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23'.
[   59.358002][ T5988] netlink: 'syz.0.25': attribute type 10 has an invalid length.
[   59.722363][ T6000] netlink: 'syz.1.28': attribute type 10 has an invalid length.
[   59.747758][ T6000] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.621260][ T6045] netlink: 'syz.2.39': attribute type 25 has an invalid length.
[   60.659191][ T6045] netlink: 'syz.2.39': attribute type 39 has an invalid length.
[   60.811666][ T5844] Bluetooth: hci1: command tx timeout
[   60.814205][   T56] Bluetooth: hci2: command tx timeout
[   60.816064][ T5848] Bluetooth: hci0: command tx timeout
[   61.313644][ T6058] warning: `syz.1.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.363461][ T6085] netlink: 'syz.0.49': attribute type 21 has an invalid length.
[   62.366246][ T6085] IPv6: NLM_F_CREATE should be specified when creating new route
[   62.614714][ T6106] __nla_validate_parse: 10 callbacks suppressed
[   62.614741][ T6106] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.55'.
[   62.628879][ T6104] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.55'.
[   62.634717][ T6106] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.55'.
[   62.777247][ T6113] =======================================================
[   62.777247][ T6113] WARNING: The mand mount option has been deprecated and
[   62.777247][ T6113]          and is ignored by this kernel. Remove the mand
[   62.777247][ T6113]          option from the mount to silence this warning.
[   62.777247][ T6113] =======================================================
[   62.813562][ T6113] tmpfs: Bad value for 'uid'
[   62.815505][ T6113] tmpfs: Bad value for 'uid'
[   62.831208][ T6117] tmpfs: Bad value for 'uid'
[   62.833091][ T6117] tmpfs: Bad value for 'uid'
[   62.890694][ T5844] Bluetooth: hci1: command tx timeout
[   62.892724][ T5844] Bluetooth: hci2: command tx timeout
[   62.894419][   T56] Bluetooth: hci0: command tx timeout
[   63.026352][ T6135] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.63'.
[   63.180874][ T6146] netlink: 'syz.0.66': attribute type 13 has an invalid length.
[   63.184113][ T6146] netlink: 152 bytes leftover after parsing attributes in process `syz.0.66'.
[   63.240445][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.438159][ T6152] openvswitch: netlink: IP tunnel TTL not specified.
[   63.793021][ T6161] netlink: 'syz.0.69': attribute type 39 has an invalid length.
[   65.346998][ T6246] netlink: 'syz.2.95': attribute type 3 has an invalid length.
[   65.355779][ T6246] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   65.369309][ T6246] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.95'.
[   65.393564][ T6258] netlink: 294 bytes leftover after parsing attributes in process `syz.0.98'.
[   65.479453][ T6263] netlink: 'syz.2.100': attribute type 21 has an invalid length.
[   65.485833][ T6263] netlink: 164 bytes leftover after parsing attributes in process `syz.2.100'.
[   65.699796][ T6274] syzkaller0: entered promiscuous mode
[   65.701790][ T6274] syzkaller0: entered allmulticast mode
[   65.859660][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'.
[   65.883725][ T6280] netlink: 'syz.1.106': attribute type 10 has an invalid length.
[   65.893837][ T6280] macvlan0: entered promiscuous mode
[   65.896100][ T6280] macvlan0: entered allmulticast mode
[   65.908736][ T6280] veth1_vlan: entered allmulticast mode
[   65.915562][ T6280] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   66.765815][ T6292] netlink: 92 bytes leftover after parsing attributes in process `syz.2.109'.
[   66.786963][ T6293] netlink: 'syz.0.110': attribute type 2 has an invalid length.
[   66.897741][ T6308] netlink: 'syz.0.115': attribute type 3 has an invalid length.
[   66.923085][ T6311] netlink: 'syz.2.116': attribute type 21 has an invalid length.
[   67.093698][ T6323] netlink: 'syz.2.119': attribute type 25 has an invalid length.
[   67.224912][ T6328] sit0: entered allmulticast mode
[   67.712485][ T6361] __nla_validate_parse: 5 callbacks suppressed
[   67.712541][ T6361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.130'.
[   68.187704][ T6371] netlink: 'syz.1.133': attribute type 7 has an invalid length.
[   68.685451][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.140'.
[   68.689216][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.140'.
[   68.717302][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'.
[   68.725770][ T6396] netlink: 208 bytes leftover after parsing attributes in process `syz.0.141'.
[   69.729984][ T6415] validate_nla: 1 callbacks suppressed
[   69.730039][ T6415] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   69.838226][ T6423] netlink: 'syz.1.150': attribute type 1 has an invalid length.
[   69.848256][ T6424] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.149'.
[   69.856947][ T6423] netlink: 17231 bytes leftover after parsing attributes in process `syz.1.150'.
[   69.866510][ T6421] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.149'.
[   69.870576][ T6424] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.149'.
[   69.897222][ T6429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'.
[   70.088794][ T6443] netlink: 'syz.0.158': attribute type 33 has an invalid length.
[   70.092123][ T6443] `: renamed from team0 (while UP)
[   70.132975][ T6445] netlink: 'syz.1.155': attribute type 21 has an invalid length.
[   70.136183][ T6445] netlink: 'syz.1.155': attribute type 6 has an invalid length.
[   70.425938][ T6460] netlink: 'syz.2.162': attribute type 11 has an invalid length.
[   70.504718][ T6455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.759499][ T6473] netlink: 'syz.2.169': attribute type 10 has an invalid length.
[   70.763219][ T6473] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   70.767149][ T6473] bridge0: port 1(bridge_slave_0) entered learning state
[   71.080980][ T6492] syz.2.172 uses obsolete (PF_INET,SOCK_PACKET)
[   71.179301][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.183168][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.273752][ T6499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.726818][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.794700][ T6531] netlink: 'syz.2.185': attribute type 25 has an invalid length.
[   71.834267][ T6538] netlink: 'syz.0.188': attribute type 16 has an invalid length.
[   71.938134][   T56] Bluetooth: hci0: Received unexpected HCI Event 0x00
[   71.958820][ T6544] netlink: 'syz.1.187': attribute type 27 has an invalid length.
[   73.523609][ T6560] syz.1.194 (6560) used greatest stack depth: 19984 bytes left
[   73.631037][ T6569] __nla_validate_parse: 19 callbacks suppressed
[   73.631052][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[   73.637205][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[   73.656414][ T6570] netlink: 17 bytes leftover after parsing attributes in process `syz.2.196'.
[   73.879266][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.203'.
[   73.885091][ T6594] batadv0: entered promiscuous mode
[   73.888973][ T6594] batadv0: entered allmulticast mode
[   73.892255][ T6594] bridge0: port 3(batadv0) entered blocking state
[   73.895629][ T6594] bridge0: port 3(batadv0) entered disabled state
[   73.906889][ T6594] bridge0: port 3(batadv0) entered blocking state
[   73.909786][ T6594] bridge0: port 3(batadv0) entered forwarding state
[   74.350771][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   74.354752][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   74.377573][ T6607] : renamed from team_slave_1 (while UP)
[   74.506832][ T6612] syzkaller0: entered promiscuous mode
[   74.508651][ T6612] syzkaller0: entered allmulticast mode
[   75.666019][ T6624] validate_nla: 6 callbacks suppressed
[   75.666035][ T6624] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[   75.673207][ T6624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.214'.
[   76.477644][ T6617] netlink: 56 bytes leftover after parsing attributes in process `syz.1.211'.
[   76.485775][ T6624] `: entered promiscuous mode
[   76.487548][ T6624] team_slave_0: entered promiscuous mode
[   76.489777][ T6624] : entered promiscuous mode
[   76.499197][ T6624] bridge0: port 3(`) entered blocking state
[   76.503489][ T6624] bridge0: port 3(`) entered disabled state
[   76.506560][ T6624] `: entered allmulticast mode
[   76.508365][ T6624] team_slave_0: entered allmulticast mode
[   76.511548][ T6624] : entered allmulticast mode
[   76.534993][ T6624] bridge0: port 3(`) entered blocking state
[   76.537279][ T6624] bridge0: port 3(`) entered forwarding state
[   76.624247][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   77.168217][ T6649] netlink: 'syz.1.223': attribute type 10 has an invalid length.
[   77.192382][ T6649] bond0: (slave wlan1): Releasing backup interface
[   77.447177][ T6631] delete_channel: no stack
[   79.758908][ T6631] delete_channel: no stack
[   79.983626][ T6665] netlink: 'syz.0.228': attribute type 10 has an invalid length.
[   79.987676][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.228'.
[   80.068585][ T6665] ipvlan1: entered promiscuous mode
[   80.072880][ T6665] ipvlan1: entered allmulticast mode
[   80.076189][ T6665] veth0_vlan: entered allmulticast mode
[   80.240164][ T6665] bridge0: port 4(ipvlan1) entered blocking state
[   80.246041][ T6665] bridge0: port 4(ipvlan1) entered disabled state
[   80.302490][ T6665] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   80.333462][ T6665] syz.0.228 (6665) used greatest stack depth: 18680 bytes left
[   80.630097][ T6695] xt_l2tp: unknown flags: 51
[   80.714426][ T6695] netlink: 'syz.0.234': attribute type 29 has an invalid length.
[   80.718374][ T6695] netlink: 'syz.0.234': attribute type 29 has an invalid length.
[   80.826380][ T6695] netlink: 500 bytes leftover after parsing attributes in process `syz.0.234'.
[   82.187168][ T6732] netlink: 104 bytes leftover after parsing attributes in process `syz.2.242'.
[   82.195683][ T6733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.242'.
[   82.305404][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   82.317632][ T6738] netlink: 763 bytes leftover after parsing attributes in process `syz.2.244'.
[   82.446534][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'.
[   82.855374][ T6766] netlink: 'syz.0.254': attribute type 23 has an invalid length.
[   86.417262][   T47] cfg80211: failed to load regulatory.db
[   87.230313][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3249732462 wd_nsec: 3249732519
[   89.790112][ T6778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.256'.
[   89.796954][ T6778] tmpfs: Bad value for 'gid'
[   89.798535][ T6778] tmpfs: Bad value for 'gid'
[   89.872908][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   89.886458][ T6783] : entered promiscuous mode
[   90.318408][ T6792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.262'.
[   90.333121][ T6792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.262'.
[   90.909247][ T6814] C: renamed from team_slave_0 (while UP)
[   90.954705][ T6818] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   91.238597][ T6814] netlink: 152 bytes leftover after parsing attributes in process `syz.2.269'.
[   91.496599][ T6835] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'.
[   91.527243][ T6832] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'.
[   91.531390][ T6835] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'.
[   92.196214][ T6858] netlink: 68 bytes leftover after parsing attributes in process `syz.2.283'.
[   92.505258][ T6874] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.287'.
[   92.744134][ T6884] bond_slave_0: entered promiscuous mode
[   92.746199][ T6884] bond_slave_1: entered promiscuous mode
[   93.058307][ T6905] syzkaller0: entered promiscuous mode
[   94.152764][ T6919] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   94.269360][ T6937] netlink: 'syz.1.307': attribute type 4 has an invalid length.
[   94.289609][ T5848] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[   94.292310][ T5848] Bluetooth: hci2: Unable to find connection with handle 0x0000
[   94.336437][ T6945] netlink: 'syz.1.310': attribute type 10 has an invalid length.
[   94.896571][ T6953] __nla_validate_parse: 12 callbacks suppressed
[   94.896584][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   95.095930][ T6959] netlink: 132 bytes leftover after parsing attributes in process `syz.2.312'.
[   95.177464][ T6962] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.313'.
[   95.182132][ T6961] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.313'.
[   95.697819][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'.
[   95.815661][ T6986] netlink: 'syz.1.320': attribute type 10 has an invalid length.
[   96.065128][ T6986] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   96.594714][ T7005] netlink: 'syz.1.326': attribute type 29 has an invalid length.
[   96.599658][ T7005] netlink: 'syz.1.326': attribute type 29 has an invalid length.
[   97.411828][ T7036] netlink: 92 bytes leftover after parsing attributes in process `syz.2.331'.
[   97.415165][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.331'.
[   97.419683][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.331'.
[   98.822903][ T5848] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[   99.173110][ T7059] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.340'.
[   99.177134][ T7058] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.340'.
[  100.882463][ T5848] Bluetooth: hci1: command tx timeout
[  101.485645][ T7080] netlink: 'syz.2.348': attribute type 3 has an invalid length.
[  101.488718][ T7080] __nla_validate_parse: 1 callbacks suppressed
[  101.488725][ T7080] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.348'.
[  102.724150][ T7098] netlink: 'syz.2.350': attribute type 6 has an invalid length.
[  102.726776][ T7098] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.350'.
[  102.744108][ T7098] netlink: 'syz.2.350': attribute type 11 has an invalid length.
[  102.746666][ T7098] netlink: 168 bytes leftover after parsing attributes in process `syz.2.350'.
[  102.762455][ T7098] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[  102.932981][ T7100] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.414279][ T7111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.419537][ T7111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.438488][ T7115] delete_channel: no stack
[  103.511621][ T7117] syzkaller0: entered promiscuous mode
[  103.521676][ T7117] syzkaller0: entered allmulticast mode
[  103.531506][ T7114] delete_channel: no stack
[  104.447126][ T7130] netlink: 104 bytes leftover after parsing attributes in process `syz.0.361'.
[  104.572145][ T7132] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[  104.574677][ T7132] netlink: 'syz.2.362': attribute type 4 has an invalid length.
[  104.577166][ T7132] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.362'.
[  104.968902][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'.
[  104.982340][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'.
[  104.991173][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'.
[  105.190903][ T7153] netlink: 'syz.2.369': attribute type 29 has an invalid length.
[  105.194671][ T7153] netlink: 'syz.2.369': attribute type 29 has an invalid length.
[  105.197935][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'.
[  105.294843][ T7160] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  105.358077][ T7162] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  108.455343][ T7166] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[  108.467424][ T7166] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[  108.582548][ T7166] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[  108.746331][ T7181] netlink: 'syz.0.378': attribute type 17 has an invalid length.
[  108.748970][ T7181] netlink: 'syz.0.378': attribute type 16 has an invalid length.
[  108.755412][ T7181] netlink: 152 bytes leftover after parsing attributes in process `syz.0.378'.
[  109.093041][ T7203] netlink: 'syz.2.387': attribute type 13 has an invalid length.
[  109.223832][ T5848] Bluetooth: hci1: ISO packet for unknown connection handle 2564
[  109.643868][ T7218] veth1_macvtap: left promiscuous mode
[  109.802789][ T7220] netlink: 'syz.2.392': attribute type 21 has an invalid length.
[  110.122615][ T7227] netlink: 'syz.0.394': attribute type 27 has an invalid length.
[  110.126121][ T7227] netlink: 'syz.0.394': attribute type 1 has an invalid length.
[  110.129549][ T7227] bridge0: port 1(bridge_slave_0) entered learning state
[  110.809175][ T7244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.399'.
[  110.919381][ T7246] netlink: 'syz.2.400': attribute type 11 has an invalid length.
[  110.922592][ T7246] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.400'.
[  111.156162][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.156313][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.401'.
[  111.169919][ T7248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.401'.
[  111.248807][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'.
[  111.259621][ T7251] unsupported nlmsg_type 40
[  111.269356][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.402'.
[  111.274033][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.402'.
[  111.274654][ T7248] netlink: 'syz.0.401': attribute type 22 has an invalid length.
[  111.280155][ T7248] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.401'.
[  111.431452][ T7256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.404'.
[  112.417795][ T7264] @: renamed from bond_slave_0 (while UP)
[  112.688573][ T7272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.731462][ T7272] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  112.878859][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.884854][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.888130][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.895828][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.898836][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.367952][ T7278] chnl_net:caif_netlink_parms(): no params data found
[  113.457098][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.459624][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.463683][ T7278] bridge_slave_0: entered allmulticast mode
[  113.466705][ T7278] bridge_slave_0: entered promiscuous mode
[  113.470095][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.479859][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.485196][ T7278] bridge_slave_1: entered allmulticast mode
[  113.487980][ T7278] bridge_slave_1: entered promiscuous mode
[  113.539264][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.548210][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.661533][ T7278] team0: Port device team_slave_0 added
[  113.668841][ T7278] team0: Port device team_slave_1 added
[  113.722070][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.724869][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.736866][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.751972][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.754802][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.772498][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.813935][ T7278] hsr_slave_0: entered promiscuous mode
[  113.816254][ T7278] hsr_slave_1: entered promiscuous mode
[  113.818347][ T7278] debugfs: 'hsr0' already exists in 'hsr'
[  113.820181][ T7278] Cannot create hsr debugfs directory
[  113.862270][ T7326] __nla_validate_parse: 2 callbacks suppressed
[  113.862279][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'.
[  113.867345][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'.
[  113.961672][ T7278] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.967253][ T7278] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.972583][ T7278] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.977147][ T7278] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.026264][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.036625][ T7278] 8021q: adding VLAN 0 to HW filter on device team0
[  114.042513][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.044954][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.054407][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.056871][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.188735][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.221097][ T7278] veth0_vlan: entered promiscuous mode
[  114.226841][ T7278] veth1_vlan: entered promiscuous mode
[  114.245478][ T7278] veth0_macvtap: entered promiscuous mode
[  114.249555][ T7278] veth1_macvtap: entered promiscuous mode
[  114.261975][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.268831][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.276003][ T5873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.279220][ T5873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.283640][ T5873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.286629][ T5873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.351982][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.355349][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.378287][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.382480][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.553787][ T7347] validate_nla: 4 callbacks suppressed
[  114.553843][ T7347] netlink: 'syz.3.426': attribute type 21 has an invalid length.
[  114.558849][ T7347] netlink: 'syz.3.426': attribute type 6 has an invalid length.
[  114.559905][ T7346] netlink: 'syz.3.426': attribute type 21 has an invalid length.
[  114.563762][ T7347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.426'.
[  114.587702][ T7346] netlink: 'syz.3.426': attribute type 6 has an invalid length.
[  114.596850][ T7346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.426'.
[  114.886930][ T7373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.433'.
[  114.921423][ T7368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'.
[  114.925536][ T7368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'.
[  114.970868][   T56] Bluetooth: hci2: command tx timeout
[  115.099598][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.435'.
[  115.189490][ T7380] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.435'.
[  115.624586][ T7406] netlink: 'syz.3.441': attribute type 16 has an invalid length.
[  115.628150][ T7406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[  115.635111][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.918578][ T7424] netlink: 'syz.0.446': attribute type 13 has an invalid length.
[  115.924300][ T7424] netlink: 'syz.0.446': attribute type 17 has an invalid length.
[  115.943557][ T7424] sit0: left allmulticast mode
[  116.012820][ T7424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.618629][ T7477] netlink: 'syz.3.459': attribute type 3 has an invalid length.
[  116.622959][ T7477] netlink: 'syz.3.459': attribute type 1 has an invalid length.
[  116.674793][   T56] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  116.806114][ T7483] netlink: 'syz.3.462': attribute type 39 has an invalid length.
[  117.040653][   T56] Bluetooth: hci2: command tx timeout
[  118.902390][ T7524] __nla_validate_parse: 12 callbacks suppressed
[  118.902402][ T7524] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.476'.
[  119.120739][   T56] Bluetooth: hci2: command tx timeout
[  119.151766][ T7531] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.477'.
[  119.156397][ T7528] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.477'.
[  119.165545][ T7531] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.477'.
[  119.485682][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.487567][ T7550] netlink: 211 bytes leftover after parsing attributes in process `syz.3.484'.
[  119.488551][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.495182][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.497730][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.504050][ T7551] netlink: 211 bytes leftover after parsing attributes in process `syz.3.484'.
[  119.608934][ T7558] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.486'.
[  119.619668][ T7557] : renamed from gre0 (while UP)
[  119.730231][ T7555] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.486'.
[  119.735218][ T7558] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.486'.
[  119.988101][ T7581] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.494'.
[  120.207019][ T7585] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  120.210863][ T7585] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.228967][   T56] Bluetooth: hci2: command tx timeout
[  121.695366][ T7589] validate_nla: 8 callbacks suppressed
[  121.695382][ T7589] netlink: 'syz.2.496': attribute type 3 has an invalid length.
[  121.711013][ T7589] netlink: 'syz.2.496': attribute type 1 has an invalid length.
[  121.725192][ T7589] netlink: 'syz.2.496': attribute type 8 has an invalid length.
[  121.767344][ T7592] nbd: must specify an index to disconnect
[  123.236870][ T7620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.253042][ T7620] netlink: 'syz.0.507': attribute type 21 has an invalid length.
[  123.265987][ T7622] netlink: 'syz.3.506': attribute type 2 has an invalid length.
[  123.268943][ T7622] netlink: 'syz.3.506': attribute type 9 has an invalid length.
[  124.051947][ T7660] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  124.155564][ T7670] C: renamed from team_slave_0 (while UP)
[  124.159912][ T7670] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[  124.169046][ T7670] __nla_validate_parse: 13 callbacks suppressed
[  124.169061][ T7670] netlink: 152 bytes leftover after parsing attributes in process `syz.0.515'.
[  124.176138][ T7670] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  124.908738][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'.
[  124.918483][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'.
[  125.504659][ T7693] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[  125.508471][ T7693] netlink: 17 bytes leftover after parsing attributes in process `syz.0.521'.
[  126.950593][ T7748] netlink: 'syz.0.536': attribute type 29 has an invalid length.
[  126.954803][ T7750] netlink: 'syz.0.536': attribute type 29 has an invalid length.
[  126.959483][ T7748] netlink: 'syz.0.536': attribute type 29 has an invalid length.
[  126.979732][ T7748] netlink: 'syz.0.536': attribute type 29 has an invalid length.
[  127.341158][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'.
[  127.759137][ T7787] veth1_to_bond: entered allmulticast mode
[  127.826912][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'.
[  127.830354][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'.
[  127.942909][ T7796] netlink: 'syz.3.549': attribute type 21 has an invalid length.
[  127.946434][ T7796] netlink: 128 bytes leftover after parsing attributes in process `syz.3.549'.
[  127.951491][ T7796] netlink: 'syz.3.549': attribute type 4 has an invalid length.
[  127.954952][ T7796] netlink: 'syz.3.549': attribute type 5 has an invalid length.
[  127.958507][ T7796] netlink: 3 bytes leftover after parsing attributes in process `syz.3.549'.
[  128.093726][ T7802] netlink: 192 bytes leftover after parsing attributes in process `syz.2.551'.
[  128.658158][ T7811] netlink: 'syz.2.555': attribute type 1 has an invalid length.
[  128.674622][ T7811] netlink: 'syz.2.555': attribute type 2 has an invalid length.
[  128.712052][ T7813] netlink: 'syz.0.556': attribute type 1 has an invalid length.
[  129.815642][ T7835] __nla_validate_parse: 5 callbacks suppressed
[  129.815683][ T7835] netlink: 152 bytes leftover after parsing attributes in process `syz.2.562'.
[  129.849988][ T7835] `: renamed from team0 (while UP)
[  130.756052][ T7884] netlink: 10 bytes leftover after parsing attributes in process `syz.3.577'.
[  130.759200][ T7885] netlink: 10 bytes leftover after parsing attributes in process `syz.3.577'.
[  130.801608][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.578'.
[  131.024079][ T7892] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.580'.
[  131.554411][ T7910] netlink: 7914 bytes leftover after parsing attributes in process `syz.0.585'.
[  131.564316][ T7910] netlink: 7914 bytes leftover after parsing attributes in process `syz.0.585'.
[  131.767893][ T7920] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  132.883394][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.886306][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.127638][ T7952] validate_nla: 7 callbacks suppressed
[  133.127678][ T7952] netlink: 'syz.2.599': attribute type 21 has an invalid length.
[  133.415383][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'.
[  133.847870][ T7988] netlink: 'syz.0.610': attribute type 2 has an invalid length.
[  133.851491][ T7988] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  133.909028][ T7987] netlink: 228 bytes leftover after parsing attributes in process `syz.0.610'.
[  134.201998][ T7991] netlink: 'syz.3.611': attribute type 11 has an invalid length.
[  134.205492][ T7991] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.611'.
[  134.237507][ T7996] bond_slave_0: entered promiscuous mode
[  134.240286][ T7996] bond_slave_1: entered promiscuous mode
[  134.432249][ T8002] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.440471][ T8002] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.526524][ T8007] netlink: 'syz.0.617': attribute type 6 has an invalid length.
[  134.530008][ T8007] netlink: 'syz.0.617': attribute type 3 has an invalid length.
[  134.572499][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.583034][ T8005] syzkaller0: entered promiscuous mode
[  134.585579][ T8005] syzkaller0: entered allmulticast mode
[  134.601921][ T8009] netlink: 'syz.0.618': attribute type 13 has an invalid length.
[  134.608094][ T8009] netlink: 'syz.0.618': attribute type 17 has an invalid length.
[  134.614437][ T8009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.847183][ T8027] __nla_validate_parse: 3 callbacks suppressed
[  134.847194][ T8027] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.622'.
[  134.853316][ T8024] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.622'.
[  134.857001][ T8027] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.622'.
[  135.003946][ T8032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.623'.
[  135.064604][ T8035] openvswitch: netlink: Duplicate or invalid key (type 0).
[  135.068004][ T8035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.325565][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  135.392457][ T8048] netlink: 830 bytes leftover after parsing attributes in process `syz.2.627'.
[  135.457755][ T8051] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'.
[  135.462354][ T8050] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'.
[  135.466543][ T8051] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'.
[  135.520105][ T8054] netlink: 96 bytes leftover after parsing attributes in process `syz.3.630'.
[  135.572092][ T8055] netlink: 'syz.2.629': attribute type 21 has an invalid length.
[  135.575363][ T8055] netlink: 'syz.2.629': attribute type 13 has an invalid length.
[  135.578377][ T8055] netlink: 'syz.2.629': attribute type 17 has an invalid length.
[  135.614509][ T8055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.695472][ T8089] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  136.785728][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.790080][ T8093] batadv0: entered promiscuous mode
[  136.793142][ T8093] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  137.759888][ T8112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.912251][ T8105] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.930824][ T8105] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.593091][ T8130] nbd: must specify a size in bytes for the device
[  138.959653][   T56] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  138.995050][ T8144] validate_nla: 4 callbacks suppressed
[  138.995066][ T8144] netlink: 'syz.0.657': attribute type 21 has an invalid length.
[  139.289959][ T8158] option changes via remount are deprecated (pid=8157 comm=syz.3.663)
[  142.313184][ T8169] __nla_validate_parse: 8 callbacks suppressed
[  142.313201][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'.
[  142.536751][ T8178] netlink: 'syz.2.668': attribute type 64 has an invalid length.
[  146.178914][ T8209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.678'.
[  146.190149][ T8209] netlink: 324 bytes leftover after parsing attributes in process `syz.2.678'.
[  146.206406][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.678'.
[  146.441486][ T8220] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  146.445231][ T8220] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  146.466574][ T8219] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  146.469513][ T8219] netlink: 'syz.2.682': attribute type 29 has an invalid length.
[  146.481235][ T8221] netlink: 'syz.0.681': attribute type 39 has an invalid length.
[  146.614969][ T8223] netlink: 'syz.3.683': attribute type 20 has an invalid length.
[  146.966000][ T8226] openvswitch: netlink: Key type 12565 is out of range max 32
[  147.931667][ T8249] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.942734][ T8249] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.977124][ T8253] netlink: 'syz.0.691': attribute type 21 has an invalid length.
[  147.985792][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.691'.
[  148.017457][ T8253] netlink: 'syz.0.691': attribute type 5 has an invalid length.
[  148.049189][ T8255] netlink: 56 bytes leftover after parsing attributes in process `syz.2.693'.
[  148.203184][ T8267] netlink: 92 bytes leftover after parsing attributes in process `syz.2.694'.
[  148.206858][ T8269] netlink: 92 bytes leftover after parsing attributes in process `syz.2.694'.
[  148.901960][ T8282] netlink: 'syz.0.699': attribute type 21 has an invalid length.
[  149.126405][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'.
[  149.187647][ T8293] netlink: 84 bytes leftover after parsing attributes in process `syz.0.703'.
[  149.709521][ T8330] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.714'.
[  149.830008][ T8342] netlink: 'syz.2.717': attribute type 2 has an invalid length.
[  150.836639][   T56] Bluetooth: hci1: ISO packet for unknown connection handle 2
[  150.907388][ T8375] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.729'.
[  152.375072][ T8393] validate_nla: 3 callbacks suppressed
[  152.375089][ T8393] netlink: 'syz.3.734': attribute type 2 has an invalid length.
[  152.386696][ T8395] netlink: 'syz.3.734': attribute type 2 has an invalid length.
[  152.596367][ T8411] netlink: 'syz.3.740': attribute type 1 has an invalid length.
[  152.600007][ T8411] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.740'.
[  153.032615][ T8431] netlink: 196 bytes leftover after parsing attributes in process `syz.0.747'.
[  153.735740][ T8445] netlink: 224 bytes leftover after parsing attributes in process `syz.3.751'.
[  154.012900][ T8451] netlink: 'syz.3.753': attribute type 21 has an invalid length.
[  154.065168][ T8457] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  154.077371][ T8457] netlink: 'syz.0.755': attribute type 10 has an invalid length.
[  154.085465][ T8457] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  154.096079][ T8457] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  154.116456][ T8461] can: request_module (can-proto-0) failed.
[  154.219109][ T8469] netlink: 'syz.0.759': attribute type 13 has an invalid length.
[  154.380623][ T8481] IPv6: NLM_F_CREATE should be specified when creating new route
[  155.010774][ T8469] bridge0: port 3(`) entered disabled state
[  155.014433][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.018703][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.036816][ T8469] bond_slave_0: left promiscuous mode
[  155.038829][ T8469] bond_slave_1: left promiscuous mode
[  155.042088][ T8469] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  155.215977][ T8481] netlink: 'syz.3.761': attribute type 29 has an invalid length.
[  155.228778][ T5907] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.232210][ T5907] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.235336][ T5907] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.240501][ T5907] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.396583][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'.
[  155.400242][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'.
[  155.424250][ T8496] netlink: 'syz.2.767': attribute type 21 has an invalid length.
[  155.438613][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.767'.
[  155.913436][ T8499] netlink: 84 bytes leftover after parsing attributes in process `syz.3.762'.
[  156.469463][ T8517] netlink: 7 bytes leftover after parsing attributes in process `syz.2.772'.
[  156.476599][ T8517] netlink: 76 bytes leftover after parsing attributes in process `syz.2.772'.
[  156.502359][ T8516] netlink: 'syz.3.773': attribute type 10 has an invalid length.
[  156.510640][ T8516] netlink: 2 bytes leftover after parsing attributes in process `syz.3.773'.
[  156.515248][ T8516] team0: entered promiscuous mode
[  156.528223][ T8516] team_slave_0: entered promiscuous mode
[  156.538620][ T8516] team_slave_1: entered promiscuous mode
[  156.547484][ T8516] bridge0: port 3(team0) entered blocking state
[  156.560176][ T8516] bridge0: port 3(team0) entered disabled state
[  156.627348][ T8516] team0: entered allmulticast mode
[  156.630281][ T8516] team_slave_0: entered allmulticast mode
[  156.633448][ T8516] team_slave_1: entered allmulticast mode
[  156.693984][ T8516] bridge0: port 3(team0) entered blocking state
[  156.698274][ T8516] bridge0: port 3(team0) entered forwarding state
[  156.785708][ T8517] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  156.878511][ T8533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.776'.
[  158.605601][ T8543] netlink: 10 bytes leftover after parsing attributes in process `syz.0.778'.
[  158.932078][ T8567] netlink: 148 bytes leftover after parsing attributes in process `syz.3.785'.
[  158.962871][ T8567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.785'.
[  159.061609][ T8572] veth1_macvtap: left promiscuous mode
[  159.171137][ T8578] netlink: 'syz.0.789': attribute type 2 has an invalid length.
[  159.174614][ T8578] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  159.261118][ T8578] netlink: 228 bytes leftover after parsing attributes in process `syz.0.789'.
[  159.395712][ T8590] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.792'.
[  160.530523][ T8625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.801'.
[  160.717863][ T8637] netlink: 'syz.3.803': attribute type 1 has an invalid length.
[  160.721676][ T8637] netlink: 17 bytes leftover after parsing attributes in process `syz.3.803'.
[  161.548353][ T8660] netlink: 380 bytes leftover after parsing attributes in process `syz.0.812'.
[  161.576778][ T8661] netlink: 380 bytes leftover after parsing attributes in process `syz.0.812'.
[  161.792212][ T8672] netlink: 120 bytes leftover after parsing attributes in process `syz.0.817'.
[  163.441741][ T8723] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  164.565057][ T8738] delete_channel: no stack
[  164.936911][ T8758] netlink: 'syz.3.845': attribute type 2 has an invalid length.
[  164.940387][ T8758] __nla_validate_parse: 2 callbacks suppressed
[  164.943452][ T8758] netlink: 119 bytes leftover after parsing attributes in process `syz.3.845'.
[  165.698121][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'.
[  165.703783][ T8770] openvswitch: netlink: nsh attr 165 is out of range max 3
[  165.707062][ T8770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.995905][ T8767] delete_channel: no stack
[  166.180341][ T8781] netlink: 516 bytes leftover after parsing attributes in process `syz.0.853'.
[  167.288864][   T56] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[  167.811867][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'.
[  168.278992][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'.
[  168.469139][ T8810] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.862'.
[  168.480494][ T8810] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.862'.
[  168.492577][ T8810] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.862'.
[  169.346325][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'.
[  169.350354][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  170.583922][ T8840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.871'.
[  170.606133][ T8840] netlink: 7 bytes leftover after parsing attributes in process `syz.3.871'.
[  170.610088][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.3.871'.
[  171.380951][ T8847] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.872'.
[  171.384310][ T8847] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.872'.
[  172.173435][ T8854] netlink: 'syz.0.875': attribute type 9 has an invalid length.
[  172.176493][ T8854] netlink: 195776 bytes leftover after parsing attributes in process `syz.0.875'.
[  173.423039][ T8879] netlink: 'syz.0.883': attribute type 28 has an invalid length.
[  173.431677][ T8879] netlink: 'syz.0.883': attribute type 29 has an invalid length.
[  173.444414][ T8879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.883'.
[  173.561775][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.883'.
[  174.354528][ T8900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.888'.
[  174.378059][ T8900] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  174.398038][ T8903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.889'.
[  176.008925][ T8957] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  176.021561][ T8957] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  177.421973][ T8972] __nla_validate_parse: 5 callbacks suppressed
[  177.421985][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  177.858198][ T8989] netlink: 'syz.3.917': attribute type 4 has an invalid length.
[  177.878291][ T8989] netlink: 'syz.3.917': attribute type 4 has an invalid length.
[  177.884156][ T8989] netlink: 'syz.3.917': attribute type 4 has an invalid length.
[  177.894869][ T8989] netlink: 'syz.3.917': attribute type 4 has an invalid length.
[  179.352691][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  179.357658][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  179.370183][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  179.374540][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  179.379147][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.596649][ T9028] chnl_net:caif_netlink_parms(): no params data found
[  179.691268][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.694446][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.697587][ T9028] bridge_slave_0: entered allmulticast mode
[  179.709395][ T9028] bridge_slave_0: entered promiscuous mode
[  179.717309][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.720770][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.724046][ T9028] bridge_slave_1: entered allmulticast mode
[  179.728211][ T9028] bridge_slave_1: entered promiscuous mode
[  179.761177][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.766272][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.773848][ T9048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.793339][ T9028] team0: Port device team_slave_0 added
[  179.796938][ T9028] team0: Port device team_slave_1 added
[  179.817936][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.820982][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.829976][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.836091][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.839017][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.850909][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.879582][ T9028] hsr_slave_0: entered promiscuous mode
[  179.891014][ T9028] hsr_slave_1: entered promiscuous mode
[  179.893461][ T9028] debugfs: 'hsr0' already exists in 'hsr'
[  179.895362][ T9028] Cannot create hsr debugfs directory
[  180.027025][ T9028] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  180.036509][ T9028] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.046886][ T9028] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.057983][ T9028] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  180.092431][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.095238][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.098363][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.101291][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.195968][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.210088][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.216437][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.243362][ T9028] 8021q: adding VLAN 0 to HW filter on device team0
[  180.259971][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.262538][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.284052][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.287099][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.542663][ T9078] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.938'.
[  180.567169][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.644396][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  180.687935][ T9070] tmpfs: Bad value for 'gid'
[  180.695819][ T9070] tmpfs: Bad value for 'gid'
[  180.723444][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  180.944898][ T9028] veth0_vlan: entered promiscuous mode
[  180.954802][ T9028] veth1_vlan: entered promiscuous mode
[  181.052326][ T9028] veth0_macvtap: entered promiscuous mode
[  181.062738][ T9028] veth1_macvtap: entered promiscuous mode
[  181.090235][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.099718][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.116707][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.126005][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.136987][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.145100][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.227589][ T9094] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.940'.
[  181.326264][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.329698][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.449221][ T5848] Bluetooth: hci3: command tx timeout
[  181.479903][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.490465][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.307147][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.947'.
[  182.637959][ T9140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'.
[  182.667078][ T9145] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  183.522116][ T5848] Bluetooth: hci3: command tx timeout
[  183.806763][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.971'.
[  183.823892][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.971'.
[  184.781716][ T9238] netlink: 144 bytes leftover after parsing attributes in process `syz.4.984'.
[  184.811287][ T9241] netlink: 17 bytes leftover after parsing attributes in process `syz.0.985'.
[  184.821031][ T9241] netlink: 76 bytes leftover after parsing attributes in process `syz.0.985'.
[  185.086148][ T9255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.991'.
[  185.095659][ T9260] netlink: 144 bytes leftover after parsing attributes in process `syz.4.993'.
[  185.104310][ T9255] sock: sock_timestamping_bind_phc: sock not bind to device
[  290.240396][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  290.243131][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=25629, q=441 ncpus=2)
[  290.246639][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294966176-4294955674), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  290.251297][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g25629 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x200
[  290.256345][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=10197
[  290.259575][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g25629 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x200 ->cpu=1
[  290.264082][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  290.268133][    C0] rcu: RCU grace-period kthread stack dump:
[  290.270665][    C0] task:rcu_preempt     state:R stack:26920 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  290.275626][    C0] Call Trace:
[  290.277115][    C0]  <TASK>
[  290.278412][    C0]  __schedule+0x1798/0x4cc0
[  290.280414][    C0]  ? __lock_acquire+0xab9/0xd20
[  290.282508][    C0]  ? __pfx___schedule+0x10/0x10
[  290.284616][    C0]  ? schedule+0x91/0x360
[  290.286475][    C0]  schedule+0x165/0x360
[  290.288276][    C0]  schedule_timeout+0x12b/0x270
[  290.290382][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  290.292692][    C0]  ? __pfx_process_timeout+0x10/0x10
[  290.294964][    C0]  ? prepare_to_swait_event+0x341/0x380
[  290.297344][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  290.299475][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  290.301608][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.303864][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  290.306168][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  290.308414][    C0]  ? finish_swait+0xcd/0x1f0
[  290.310411][    C0]  rcu_gp_kthread+0x99/0x390
[  290.312433][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  290.314657][    C0]  ? __kthread_parkme+0x7b/0x200
[  290.316732][    C0]  ? __kthread_parkme+0x1a1/0x200
[  290.318845][    C0]  kthread+0x711/0x8a0
[  290.320545][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  290.322802][    C0]  ? __pfx_kthread+0x10/0x10
[  290.324808][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  290.327023][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.329236][    C0]  ? __pfx_kthread+0x10/0x10
[  290.331240][    C0]  ret_from_fork+0x439/0x7d0
[  290.333220][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  290.335387][    C0]  ? __switch_to_asm+0x39/0x70
[  290.337456][    C0]  ? __switch_to_asm+0x33/0x70
[  290.339488][    C0]  ? __pfx_kthread+0x10/0x10
[  290.341499][    C0]  ret_from_fork_asm+0x1a/0x30
[  290.343581][    C0]  </TASK>
[  290.344941][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  290.347658][    C0] Sending NMI from CPU 0 to CPUs 1:
[  290.349963][    C1] NMI backtrace for cpu 1
[  290.349980][    C1] CPU: 1 UID: 0 PID: 9268 Comm: syz.0.997 Not tainted syzkaller #0 PREEMPT(full) 
[  290.349994][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.350001][    C1] RIP: 0010:lock_acquire+0x162/0x360
[  290.350020][    C1] Code: 05 c3 9f 03 11 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 <f7> 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 5f 03 11 48 3b 44
[  290.350029][    C1] RSP: 0018:ffffc900001e07e0 EFLAGS: 00000046
[  290.350040][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b6e96fad74750600
[  290.350048][    C1] RDX: 0000000000000000 RSI: ffffffff8dba9b9a RDI: ffffffff8be33e80
[  290.350055][    C1] RBP: ffffffff81ada78b R08: 0000000000000000 R09: ffffffff81ada78b
[  290.350062][    C1] R10: dffffc0000000000 R11: ffffed1026cc4f51 R12: 0000000000000000
[  290.350069][    C1] R13: ffff888136627a98 R14: 0000000000000001 R15: 0000000000000046
[  290.350077][    C1] FS:  00007f6b4d5556c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  290.350086][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.350120][    C1] CR2: 000000110c24a8ec CR3: 000000010e1e4000 CR4: 00000000000006f0
[  290.350153][    C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  290.350163][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  290.350169][    C1] Call Trace:
[  290.350176][    C1]  <IRQ>
[  290.350186][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[  290.350199][    C1]  ? hrtimer_try_to_cancel+0x22b/0x420
[  290.350210][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  290.350221][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  290.350233][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.350246][    C1]  hrtimer_try_to_cancel+0x22b/0x420
[  290.350259][    C1]  hrtimer_cancel+0x3b/0x50
[  290.350268][    C1]  cpu_clock_event_stop+0xd9/0x130
[  290.350283][    C1]  __perf_event_overflow+0x580/0xe40
[  290.350297][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  290.350307][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  290.350324][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  290.350340][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  290.350354][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  290.350372][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  290.350381][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.350392][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  290.350405][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  290.350419][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  290.350434][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  290.350447][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  290.350465][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  290.350480][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  290.350493][    C1]  </IRQ>
[  290.350496][    C1]  <TASK>
[  290.350500][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  290.350512][    C1] RIP: 0010:preempt_count_add+0x0/0x1a0
[  290.350529][    C1] Code: c1 7c 97 48 8b 3c 24 e8 4e 5a 93 00 eb 8c e9 f1 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0
[  290.350538][    C1] RSP: 0018:ffffc900044e7e88 EFLAGS: 00000283
[  290.350549][    C1] RAX: ffffffff8234b312 RBX: ffff88810d6bd000 RCX: 0000000000080000
[  290.350556][    C1] RDX: ffffc90003c5b000 RSI: 00000000000006f7 RDI: 0000000000000001
[  290.350563][    C1] RBP: 0000000000000000 R08: ffff88810675952b R09: 1ffff11020ceb2a5
[  290.350570][    C1] R10: dffffc0000000000 R11: ffffed1020ceb2a6 R12: 0000000000002402
[  290.350577][    C1] R13: ffffffff81f29e00 R14: ffff88810d6bd160 R15: 0000000000000000
[  290.350585][    C1]  ? __pfx_perf_ioctl+0x10/0x10
[  290.350600][    C1]  ? fput+0x12/0xd0
[  290.350614][    C1]  fput+0x23/0xd0
[  290.350627][    C1]  __se_sys_ioctl+0x168/0x170
[  290.350642][    C1]  do_syscall_64+0xfa/0x3b0
[  290.350656][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.350667][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  290.350680][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.350691][    C1] RIP: 0033:0x7f6b4c78eba9
[  290.350703][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.350711][    C1] RSP: 002b:00007f6b4d555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.350722][    C1] RAX: ffffffffffffffda RBX: 00007f6b4c9d5fa0 RCX: 00007f6b4c78eba9
[  290.350729][    C1] RDX: 0000000000000001 RSI: 0000000000002402 RDI: 0000000000000006
[  290.350736][    C1] RBP: 00007f6b4c811e19 R08: 0000000000000000 R09: 0000000000000000
[  290.350743][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.350749][    C1] R13: 00007f6b4c9d6038 R14: 00007f6b4c9d5fa0 R15: 00007ffff50e1cf8
[  290.350762][    C1]  </TASK>

VM DIAGNOSIS:
01:03:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007430
R8 =ffff888106e78237 R9 =1ffff11020dcf046 R10=dffffc0000000000 R11=ffffffff854fc840
R12=dffffc0000000000 R13=ffffffff99b02912 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fc8bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc8945d020 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f6b4c812ee7 XMM09=0000000000000000 00007f6b4c812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=b6e96fad74750600 RDX=0000000000000000
RSI=ffffffff8b7d0bf7 RDI=1ffff11026cc4f53 RBP=ffffffff81ada78b RSP=ffffc900001e07e0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000000000 R13=ffff888136627a98 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff819d6fd1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6b4d5556c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24a8ec CR3=000000010e1e4000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6b4c9a7498 00007f6b4c9a7470 XMM03=00007f6b4c9a74a8 00007f6b4c9a74a0
XMM04=00007f6b4d50d100 00007f6b4c9a7460 XMM05=00007f6b4c9a7478 00007f6b4c9a74c0
XMM06=00007f6b4c9a74b8 00007f6b4c9a74b0 XMM07=00007f6b4c9a74a8 00007f6b4c9a74a0
XMM08=0000000000000000 00007f6b4c812ee7 XMM09=0000000000000000 00007f6b4c812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
