last executing test programs:

10.611664949s ago: executing program 1 (id=1264):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000002980)="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", 0xa91}], 0x3}, 0x8) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x0, 0x8}, {0xffffffff, 0x5, 0xa}, {0xf, 0x0, 0x81}, {0x7, 0x2, 0x3ff}, {0xd, 0x3, 0x10}, {0x807, 0x3, 0x800}]}]}}, 0x0, 0x6e}, 0x28) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000000a080002400000000208000340000000020900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) (async)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x62, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffbffffffdff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={r1, 0x20, &(0x7f0000001840)={&(0x7f0000000700)=""/80, 0x50, <r10=>0x0, &(0x7f0000000840)=""/4096, 0x1000}}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00', 0x0, 0x8, r3}, 0x18)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a00)={0xffffffffffffffff, 0x9, 0x8}, 0xc) (async)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6a, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1f, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000091200"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018440000fcffffff0000000000000000990d0000ad00000018170000", @ANYRES32=r7, @ANYBLOB="000000000000000018570000030000000000000000000000185b00000800000000000000000000006d091000fcffffff85100000f9ffffff9500000000000000"], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', r9, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x3, 0x101}, 0x10, r10, 0xffffffffffffffff, 0x3, &(0x7f0000001a40)=[r11, r12, r13, r14], &(0x7f0000001a80)=[{0x1, 0x1, 0x5, 0xb}, {0x2, 0x5, 0xb, 0x7}, {0x4, 0x2, 0x8, 0xb}]}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r15, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r16 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) (async)
r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r17)

10.292381999s ago: executing program 1 (id=1265):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)

10.291279646s ago: executing program 2 (id=1266):
r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000380)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095", @ANYRESDEC=0x0, @ANYRES8=r0], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)

10.291056639s ago: executing program 1 (id=1267):
r0 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010000100000000fffffffffffffff50a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

10.241809398s ago: executing program 2 (id=1268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtaction={0x90, 0x32, 0x10b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffff91d1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x2000, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x3f}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}}, 0x0)

10.161803186s ago: executing program 2 (id=1269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a010200000000000000050000000309000200"], 0x2c}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a31000000000500010007"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050)

10.159705679s ago: executing program 1 (id=1271):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x72}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001240)="7f4d23", 0x3}], 0x1, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480340001800b000100657874686472000024000280050002000700000008000340000000f508000440000000010800014000000013100001800b000100736f636b657400000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a6bf147667bce7642cbb89f1fa3d0197a66cd2571b097b60374990d9c0eb52cea661a"], 0x9c}}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="1800000040000511d25a35400c0002000200002037153e371d0401", 0x1b}], 0x1}, 0x10049014)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))

10.071691256s ago: executing program 0 (id=1272):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007910830000000000070000000000000095000000000000000637f79d237f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112be000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

10.070569876s ago: executing program 0 (id=1273):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async, rerun: 64)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (rerun: 64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x6, 0x4, 0x80, 0xc080, r1, 0x4c800000, '\x00', r2, r3, 0x5, 0x4, 0x2, 0x8}, 0x50) (async)
r5 = socket$kcm(0x2b, 0x1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b02000000000000020000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x6, 0x21, 0x0, 0x20) (async)
r7 = socket$kcm(0x2c, 0x3, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1700000000000000040000000101000000000000", @ANYRES32=0x1, @ANYBLOB="1e28314feceb54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20) (async)
setsockopt$sock_attach_bpf(r7, 0x84, 0x8, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111420000000000851000000200000085ee00006300000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

10.012516392s ago: executing program 0 (id=1274):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

10.012242334s ago: executing program 2 (id=1275):
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3, 0x56, 0xb4, 0xff, 0x0, 0xa, 0x4, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x8000, 0xc11, 0x8ed7, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa0b2, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x41, 0xc0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r0, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x41, 0xc0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xc537, 0x8, 0x8, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

10.01105524s ago: executing program 0 (id=1276):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/4, 0x0, 0x4, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3)
r4 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000080000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2b, 0x1, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
setsockopt$sock_attach_bpf(r5, 0x6, 0x25, &(0x7f0000000200), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[@ANYBLOB="a001000010000100512d680000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700ff80000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r8}, 0x18)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x11, 0xa, 0x300)

9.881319458s ago: executing program 1 (id=1277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702ff070000000000000000000000008500000083000000bf090000000000005509010000000000950000000000000018530000050000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x2}, 0x94)
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x136159ed2df562d7, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x54, 0x7, 0x1, 0x0, "e7b5ea19e696563cbf47eddd418c610a51dcea177b6eb9a08de757f5e81935232dabbe2e1a327f876e6413a1599e1412dd7ec1263a2fc6554bc6610d8fc2605d1fa5054be298bfb1056dd668ff49d2e5"}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

9.880709767s ago: executing program 0 (id=1278):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x24004004) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000540)="d80000001a0081044e81f782db4cb9040a1de5007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004035c0461c902006f94007134732325c12e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775670d16a4683f5aeb4edbb57a50262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f295000000000000000000", 0xd9}], 0x1}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000c4f466c4d7bde7c01c330000000000000000"], 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000040)="76389e147583ddd0", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080))

9.780155373s ago: executing program 2 (id=1279):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114100000000008510000002000000850000007600000095000810000000009500000500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94)

9.642690781s ago: executing program 1 (id=1280):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

9.567487206s ago: executing program 32 (id=1280):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b400000000000000611154000000000006001000000058009500000c00000000b5520495e0181c588f628255e371481ce6fa1f1f17af04927fdc048ad0e6606f8d3992ea05f4e2ab71182e524771624296533470102806678d4bbfd36637705b7adc40842eba1a7002f1ba9ee8c13667a2ffb35c02903700cd0157f99ecba867b990f2992e3b52c9355a3cb0a8fe6b1556fea3bc043eec30a6185533b83e80d05fa3bdcf8b2534ab94eeeb2f1d348437d81ca48de0cfb9910b19ca38d1e2d0d16702edf23d3ab044370382d5f490d735ce0a4bb06e0896098cef4bbb801d14a885e868dc7fab53eb8f05da0ef35e881cf420c5ee983f181c6115138c03723bb0e3ccb4e551787ada58d2be"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

9.522599567s ago: executing program 0 (id=1282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

9.519728777s ago: executing program 33 (id=1282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

9.462574103s ago: executing program 2 (id=1283):
perf_event_open(&(0x7f0000002040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x844}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

9.420981517s ago: executing program 34 (id=1283):
perf_event_open(&(0x7f0000002040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x844}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

3.072256141s ago: executing program 4 (id=1318):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000810000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008700000083000000bf0900000000fb00550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)

3.021430319s ago: executing program 4 (id=1319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x11000000, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0)

3.019882215s ago: executing program 4 (id=1320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x9, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, 0x0, 0x800)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xff, 0x101, 0x8, 0x4110, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0xf}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0xfff, 0x12)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3b, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x0, 0x4237, 0xf565}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r10, r5], &(0x7f0000000780), 0x10, 0xd555}, 0x94)
close(r7)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10021)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

2.289747302s ago: executing program 3 (id=1325):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x40)
sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000a00000000800000000006000000000000000000000000000000ac1e0001000000000000000000000000fc01000000000000000000000000000105000500000000000a00000000000000fc0000000000000000000000000000000000000000000000070019"], 0xd8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xc, 0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4c000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x1)
r12 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
openat$cgroup_type(r1, &(0x7f00000005c0), 0x2, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000340), 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r7, r1, 0x15, 0x0, @void}, 0x10)

2.284265179s ago: executing program 5 (id=1326):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000011000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008700000083000000bf0900000000fb00550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)

2.211949272s ago: executing program 3 (id=1327):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000080000f0371d5b11001300000000000085000800390000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000028000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="f02deb6b79fbff77", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x19)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa4)

2.211702397s ago: executing program 5 (id=1328):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x8, 0x4, 0x4, 0x4, 0x6040, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70)

2.13238901s ago: executing program 5 (id=1329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x9, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.132108689s ago: executing program 3 (id=1330):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
socket$kcm(0x29, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000), 0x8)
sendmsg$inet(r1, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.062123333s ago: executing program 3 (id=1331):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1d, &(0x7f0000000100), 0x120)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
syz_clone(0x28c2000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./cgroup\x00', 0x0, 0x4008, r4}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="de3bf3949b7b3c7b3cc12a285362ffaa0f6b15884f58c2b06a792b61ed41c95e7c8f0f69f9f5c8836946f729b8972092c39ff26185a693f5e42d66680a796f6c6bb070f84b74578c7b522c094c", &(0x7f0000000400)=""/91, 0x4}, 0xf)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1dbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740f6df546c14000f"], 0xa8}}, 0x74800)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007fc0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7f5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
r9 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r9, 0x0, 0x1a, 0x0, 0x0)

2.061553708s ago: executing program 5 (id=1332):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x74, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb1", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x9, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query], &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x56, &(0x7f00000002c0)=""/86, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xd, 0x10000, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0xc, 0x8}, {0x0, 0x2, 0xc, 0x7}, {0x3, 0x1, 0x4, 0x8}], 0x10, 0x2}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000680)=r3)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x62, &(0x7f0000000000)=""/98, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2.000187245s ago: executing program 4 (id=1333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtaction={0x90, 0x32, 0x10b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffff91d1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x20000000, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x3f}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}}, 0x0)

1.852190069s ago: executing program 4 (id=1334):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'net_cls'}]}, 0x1c)

1.736927443s ago: executing program 5 (id=1335):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000001000000000000005c0461c1d67f6f94007134cf6ee08008a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x29, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r3, &(0x7f0000000580), &(0x7f0000001600)=""/108}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f0000000000)=""/164, 0x0, 0x2d, '\x00', 0x0, @fallback=0x36}, 0x94)

1.16033931s ago: executing program 4 (id=1336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4092, 0xffc}, {&(0x7f00000003c0)=""/112, 0xfffffe6d}], 0x6}, 0x10002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0xf, 0x1, 0xfffff028}, {0x6, 0x5, 0x4, 0x5}]})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000ff27000780240001800b0008000000000000000000140002800800034000000000080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x7c}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080))
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x3f7, 0x300, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x91)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)

1.154986559s ago: executing program 5 (id=1337):
socket$kcm(0x1e, 0x4, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x98001, 0x0)
r3 = gettid()
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x8d, 0x2b, 0x7, 0x7, 0x0, 0xb, 0x81024, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x152}, 0xffbb7aeb8e8b7ede, 0x100, 0x1, 0x1, 0xf0, 0x3, 0x7, 0x0, 0x100, 0x0, 0x3}, r3, 0xc, 0xffffffffffffffff, 0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$TUNSETGROUP(r2, 0x400454ce, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x2d, 0x2, 0x0)
recvmsg$kcm(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)
r7 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x26, 0x20}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r7, 0xe, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0]}, 0x40)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x110, 0x4, 0x0, 0x4)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe5100000071101a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)

1.051954659s ago: executing program 3 (id=1338):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x240008c0)
close(r0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0d0000020000"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="189500000000dfffffff0000001000"/24], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4) (async)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) (async)
r7 = socket$kcm(0x11, 0x5, 0x0) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffead}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
setsockopt$sock_attach_bpf(r7, 0x107, 0xe, &(0x7f0000000000)=r10, 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r11}, 0x38) (async)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_ro(r12, &(0x7f0000000600)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000200)=0x2, 0x12)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4, 0x0, 0x2d, 0xf7, &(0x7f0000000240)="30e3f15fe2fbd2f63010aebb79dcbf0554b009bc6cf272abaab9024e82b5db35305577c04406c3902eb5b73f12", &(0x7f00000007c0)="25582c10ce442a3b51c41c3b04b07d3c064c33e5721f430a2c1bc0390eba951f930359d09011ff74e5194c4d071a9c78bd6c9100b431bb093f5e29fab95f3b2bb69680f0bf70771bd1f1f17969b7d68625acee11520553829c3994a5998c1e1104db3bc6b865de8c00676f26a487e214ba124f04b678334e3a6690a95f9e64de5fdd69ed9f67813da5d34b60ef6cb1f2a3688621a687aaea6786e4b4b44e6197c44d9cbf438f7b2802a0c5f93719d8092cbe403e8b921f1505f22bc43c121c566b682f25b253192a0f25bda2daf2f5646679e050523c49ead5e02c09eadd911465510ba041aeca6e7dcdeaf9f3082428229ecdb946e85b", 0x2}, 0x50)
close(r14)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000043) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x6616, 0x0, 0x0, 0x2, 0x38}, 0x0, 0xe, 0xffffffffffffffff, 0x9)

617.055716ms ago: executing program 35 (id=1336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4092, 0xffc}, {&(0x7f00000003c0)=""/112, 0xfffffe6d}], 0x6}, 0x10002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0xf, 0x1, 0xfffff028}, {0x6, 0x5, 0x4, 0x5}]})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000ff27000780240001800b0008000000000000000000140002800800034000000000080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x7c}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080))
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x3f7, 0x300, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x91)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)

419.827494ms ago: executing program 36 (id=1337):
socket$kcm(0x1e, 0x4, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x98001, 0x0)
r3 = gettid()
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x8d, 0x2b, 0x7, 0x7, 0x0, 0xb, 0x81024, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x152}, 0xffbb7aeb8e8b7ede, 0x100, 0x1, 0x1, 0xf0, 0x3, 0x7, 0x0, 0x100, 0x0, 0x3}, r3, 0xc, 0xffffffffffffffff, 0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$TUNSETGROUP(r2, 0x400454ce, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x2d, 0x2, 0x0)
recvmsg$kcm(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)
r7 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x26, 0x20}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r7, 0xe, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0]}, 0x40)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x110, 0x4, 0x0, 0x4)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe5100000071101a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)

259.379627ms ago: executing program 3 (id=1341):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000000000000000003000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001f00)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f00000006c0)=""/163, 0xa3}], 0x7}, 0x100)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3b90}, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)

0s ago: executing program 37 (id=1341):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000000000000000003000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001f00)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f00000006c0)=""/163, 0xa3}], 0x7}, 0x100)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3b90}, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15276' (ED25519) to the list of known hosts.
syzkaller login: [   49.661356][ T5841] cgroup: Unknown subsys name 'net'
[   49.747693][ T5841] cgroup: Unknown subsys name 'cpuset'
[   49.752320][ T5841] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.449608][ T5841] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.317131][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.325539][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.329451][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.333008][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.337627][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.341199][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.360203][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.366081][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.370673][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.374363][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.419783][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.422550][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.426353][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.429691][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.433439][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.677175][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.737389][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   56.802506][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   56.888808][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.891780][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.896791][ T5850] bridge_slave_0: entered allmulticast mode
[   56.900366][ T5850] bridge_slave_0: entered promiscuous mode
[   56.915840][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.918682][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.921506][ T5854] bridge_slave_0: entered allmulticast mode
[   56.925161][ T5854] bridge_slave_0: entered promiscuous mode
[   56.941075][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.943881][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.947011][ T5850] bridge_slave_1: entered allmulticast mode
[   56.950473][ T5850] bridge_slave_1: entered promiscuous mode
[   56.954206][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.957795][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.960627][ T5854] bridge_slave_1: entered allmulticast mode
[   56.964110][ T5854] bridge_slave_1: entered promiscuous mode
[   57.022254][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.025333][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.028128][ T5859] bridge_slave_0: entered allmulticast mode
[   57.031668][ T5859] bridge_slave_0: entered promiscuous mode
[   57.036343][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.039203][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.042040][ T5859] bridge_slave_1: entered allmulticast mode
[   57.045662][ T5859] bridge_slave_1: entered promiscuous mode
[   57.062609][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.090633][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.097042][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.102449][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.108972][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.134429][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.183827][ T5854] team0: Port device team_slave_0 added
[   57.188522][ T5854] team0: Port device team_slave_1 added
[   57.202609][ T5850] team0: Port device team_slave_0 added
[   57.208100][ T5850] team0: Port device team_slave_1 added
[   57.211688][ T5859] team0: Port device team_slave_0 added
[   57.237454][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.240210][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.250182][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.256541][ T5859] team0: Port device team_slave_1 added
[   57.280857][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.283611][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.293588][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.298576][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.301159][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.312493][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.331668][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.334619][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.345657][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.358613][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.361278][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.371666][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.383516][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.386498][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.396659][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.451301][ T5854] hsr_slave_0: entered promiscuous mode
[   57.455147][ T5854] hsr_slave_1: entered promiscuous mode
[   57.497476][ T5859] hsr_slave_0: entered promiscuous mode
[   57.500367][ T5859] hsr_slave_1: entered promiscuous mode
[   57.503049][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   57.506809][ T5859] Cannot create hsr debugfs directory
[   57.526077][ T5850] hsr_slave_0: entered promiscuous mode
[   57.528951][ T5850] hsr_slave_1: entered promiscuous mode
[   57.531571][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.533813][ T5850] Cannot create hsr debugfs directory
[   57.854993][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.865968][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.878084][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.890704][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.945170][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.962980][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.983945][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.002020][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.052036][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.065242][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.076224][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.081998][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.149276][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.196426][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   58.218488][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.221142][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.241292][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.248080][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.251256][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.282429][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   58.297643][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.307104][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.310319][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.326797][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.329957][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.352799][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   58.376887][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.380028][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.401031][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.404222][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.416981][ T5235] Bluetooth: hci1: command tx timeout
[   58.419640][ T5858] Bluetooth: hci0: command tx timeout
[   58.495068][ T5858] Bluetooth: hci2: command tx timeout
[   58.561157][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.627337][ T5859] veth0_vlan: entered promiscuous mode
[   58.653345][ T5859] veth1_vlan: entered promiscuous mode
[   58.698118][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.714617][ T5859] veth0_macvtap: entered promiscuous mode
[   58.724612][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.736027][ T5859] veth1_macvtap: entered promiscuous mode
[   58.780446][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.800103][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.803804][ T5854] veth0_vlan: entered promiscuous mode
[   58.823305][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.830947][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.850337][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.868041][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.873773][ T5854] veth1_vlan: entered promiscuous mode
[   58.897992][ T5850] veth0_vlan: entered promiscuous mode
[   58.936804][ T5850] veth1_vlan: entered promiscuous mode
[   58.957666][ T5854] veth0_macvtap: entered promiscuous mode
[   58.963703][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.970102][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.983275][ T5854] veth1_macvtap: entered promiscuous mode
[   59.022810][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.027583][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.029426][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.044087][ T5850] veth0_macvtap: entered promiscuous mode
[   59.051275][ T5850] veth1_macvtap: entered promiscuous mode
[   59.057489][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.080351][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.088176][ T5913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.091687][ T5913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.102800][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.106778][ T5913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.121175][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.126751][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.157004][ T5913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.160788][ T5913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.177100][ T5913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.200209][ T5913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.253411][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.263165][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.284447][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.288547][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.340821][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.356063][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.397442][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.403064][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.604671][    C1] hrtimer: interrupt took 41693 ns
[   59.677224][ T5919] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   59.967318][ T5919] syz.0.1 (5919) used greatest stack depth: 18304 bytes left
[   60.133993][ T5937] netlink: 'syz.0.8': attribute type 46 has an invalid length.
[   60.300844][ T5951] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.505686][ T5235] Bluetooth: hci1: command tx timeout
[   60.507563][ T5858] Bluetooth: hci0: command tx timeout
[   60.585821][ T5858] Bluetooth: hci2: command tx timeout
[   60.649555][ T5963] netlink: 'syz.2.17': attribute type 41 has an invalid length.
[   60.654201][ T5963] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.898313][ T5979] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET)
[   60.923148][ T5978] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.22'.
[   60.934812][ T5978] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   60.938249][ T5979] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.22'.
[   60.943604][ T5979] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   61.091400][ T5987] Zero length message leads to an empty skb
[   61.658657][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'.
[   61.963605][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'.
[   61.983691][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'.
[   61.988295][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'.
[   61.992265][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'.
[   62.005036][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'.
[   62.053016][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.323509][ T6039] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.335409][ T6039] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   62.575411][ T5235] Bluetooth: hci1: command tx timeout
[   62.577461][ T5858] Bluetooth: hci0: command tx timeout
[   62.655788][ T5858] Bluetooth: hci2: command tx timeout
[   62.724295][ T6054] tc_dump_action: action bad kind
[   62.860395][ T6063] netlink: 'syz.2.50': attribute type 3 has an invalid length.
[   62.864266][ T6063] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[   63.222834][ T6083] netlink: 'syz.2.55': attribute type 4 has an invalid length.
[   63.607991][ T6099] sit0: entered allmulticast mode
[   63.657964][ T6097] sit0: entered promiscuous mode
[   64.145243][ T6101] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   64.425594][ T1088] wlan1: Trigger new scan to find an IBSS to join
[   64.540775][ T6112] netlink: 'syz.1.67': attribute type 3 has an invalid length.
[   64.543503][ T6112] netlink: 'syz.1.67': attribute type 3 has an invalid length.
[   64.687372][ T5858] Bluetooth: hci0: command tx timeout
[   64.689803][ T5858] Bluetooth: hci1: command tx timeout
[   64.735047][ T5235] Bluetooth: hci2: command tx timeout
[   65.424052][ T6128] __nla_validate_parse: 70 callbacks suppressed
[   65.424068][ T6128] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.71'.
[   65.706598][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'.
[   65.710397][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'.
[   66.049847][ T6153] netlink: 'syz.0.81': attribute type 29 has an invalid length.
[   66.106285][ T6153] netlink: 'syz.0.81': attribute type 29 has an invalid length.
[   66.597028][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'.
[   67.402529][ T6208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'.
[   67.407479][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'.
[   67.413916][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.432750][ T6208] bridge_slave_0 (unregistering): left allmulticast mode
[   67.436013][ T6208] bridge_slave_0 (unregistering): left promiscuous mode
[   67.439373][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.497177][ T6217] netlink: 'syz.1.104': attribute type 3 has an invalid length.
[   67.502792][ T6217] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   67.514909][ T6217] netlink: 201352 bytes leftover after parsing attributes in process `syz.1.104'.
[   67.866247][ T6237] netlink: 'syz.0.110': attribute type 3 has an invalid length.
[   67.869130][ T6237] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   67.871871][ T6237] netlink: 201352 bytes leftover after parsing attributes in process `syz.0.110'.
[   68.213063][ T6267] netlink: 'syz.1.123': attribute type 21 has an invalid length.
[   68.215767][ T6267] netlink: 'syz.1.123': attribute type 6 has an invalid length.
[   68.218222][ T6267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.123'.
[   68.342614][ T6277] netlink: 'syz.1.129': attribute type 2 has an invalid length.
[   68.345665][ T6277] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.129'.
[   68.583007][ T6290] Illegal XDP return value 2667893269 on prog  (id 95) dev N/A, expect packet loss!
[   68.853740][ T6305] sctp: [Deprecated]: syz.1.137 (pid 6305) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.853740][ T6305] Use struct sctp_sack_info instead
[   69.193372][ T6313] netlink: 'syz.2.141': attribute type 3 has an invalid length.
[   69.471226][   T32] wlan1: Trigger new scan to find an IBSS to join
[   69.516164][ T6324] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   69.592623][ T6328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.399811][   T69] wlan1: Creating new IBSS network, BSSID c2:8e:b8:5c:2f:f7
[   70.466050][ T6394] __nla_validate_parse: 5 callbacks suppressed
[   70.466061][ T6394] netlink: 164 bytes leftover after parsing attributes in process `syz.1.169'.
[   70.737336][ T6403] netlink: 10 bytes leftover after parsing attributes in process `syz.1.173'.
[   70.981035][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.983441][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.393232][ T6422] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.179'.
[   71.483369][ T6422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.490231][ T6427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'.
[   71.496057][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'.
[   71.510370][ T6423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'.
[   71.517358][ T6427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'.
[   71.547497][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'.
[   72.072834][ T6458] netlink: 72 bytes leftover after parsing attributes in process `syz.0.192'.
[   72.076175][ T6460] openvswitch: netlink: Flow key attr not present in new flow.
[   72.133663][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'.
[   72.143279][ T6464] validate_nla: 7 callbacks suppressed
[   72.143289][ T6464] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[   72.737111][ T6495] netlink: 'syz.2.206': attribute type 6 has an invalid length.
[   73.234385][ T6520] netlink: 'syz.0.215': attribute type 2 has an invalid length.
[   73.242755][ T6520] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   73.564562][ T6525] cgroup: fork rejected by pids controller in /syz1
[   73.987568][ T5913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.050283][ T5913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.207468][ T5913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.212261][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.218284][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.221251][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.225173][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.228599][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.279826][ T5913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.288821][ T6672] netlink: 'syz.2.236': attribute type 3 has an invalid length.
[   74.292189][ T6672] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   74.450571][ T5913] bridge_slave_1: left allmulticast mode
[   74.455470][ T5913] bridge_slave_1: left promiscuous mode
[   74.458011][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.468055][ T5913] bridge_slave_0: left allmulticast mode
[   74.474582][ T5913] bridge_slave_0: left promiscuous mode
[   74.482436][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.627732][ T6703] netlink: 'syz.2.242': attribute type 2 has an invalid length.
[   74.800851][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.810468][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.814204][ T5913] bond0 (unregistering): Released all slaves
[   74.873688][ T6664] chnl_net:caif_netlink_parms(): no params data found
[   75.040608][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.043074][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.047365][ T6664] bridge_slave_0: entered allmulticast mode
[   75.050683][ T6664] bridge_slave_0: entered promiscuous mode
[   75.083392][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.089243][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.092385][ T6664] bridge_slave_1: entered allmulticast mode
[   75.097833][ T6664] bridge_slave_1: entered promiscuous mode
[   75.111096][ T6738] netlink: 'syz.0.250': attribute type 3 has an invalid length.
[   75.116612][ T6738] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   75.186366][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.191311][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.241920][ T5913] hsr_slave_0: left promiscuous mode
[   75.244291][ T5913] hsr_slave_1: left promiscuous mode
[   75.247079][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.250134][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.253103][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.256520][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.267254][ T5913] veth1_macvtap: left promiscuous mode
[   75.269560][ T5913] veth0_macvtap: left promiscuous mode
[   75.271735][ T5913] veth1_vlan: left promiscuous mode
[   75.273677][ T5913] veth0_vlan: left promiscuous mode
[   75.541852][ T5913] team0 (unregistering): Port device team_slave_1 removed
[   75.564270][ T5913] team0 (unregistering): Port device team_slave_0 removed
[   75.751515][ T6664] team0: Port device team_slave_0 added
[   75.754323][ T6748] __nla_validate_parse: 13 callbacks suppressed
[   75.754334][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'.
[   75.766488][ T6664] team0: Port device team_slave_1 added
[   75.812681][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   75.826417][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   75.833448][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.846214][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.860906][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.876862][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.888583][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.898602][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.010158][ T6664] hsr_slave_0: entered promiscuous mode
[   76.012663][ T6664] hsr_slave_1: entered promiscuous mode
[   76.017365][ T6664] debugfs: 'hsr0' already exists in 'hsr'
[   76.019290][ T6664] Cannot create hsr debugfs directory
[   76.255877][ T5235] Bluetooth: hci0: command tx timeout
[   76.623858][ T6664] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.631156][ T6664] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.636982][ T6664] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.642800][ T6664] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.704371][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.717422][ T6664] 8021q: adding VLAN 0 to HW filter on device team0
[   76.722654][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.726379][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.749827][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.752271][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.890495][ T6664] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.937526][ T6664] veth0_vlan: entered promiscuous mode
[   76.950836][ T6664] veth1_vlan: entered promiscuous mode
[   76.983408][ T6664] veth0_macvtap: entered promiscuous mode
[   76.993405][ T6664] veth1_macvtap: entered promiscuous mode
[   76.999792][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[   77.022825][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.037522][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.051145][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.057066][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.066455][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.074337][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.149212][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.160469][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.228462][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.232624][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.806135][ T6844] netlink: 'syz.0.269': attribute type 29 has an invalid length.
[   77.810104][ T6844] netlink: 'syz.0.269': attribute type 29 has an invalid length.
[   77.935444][ T6852] netlink: 'syz.1.271': attribute type 10 has an invalid length.
[   77.942978][ T6852] team0: Device veth1_macvtap failed to register rx_handler
[   78.132531][ T6860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.275'.
[   78.150094][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.191420][ T6860] bridge_slave_0 (unregistering): left allmulticast mode
[   78.205293][ T6860] bridge_slave_0 (unregistering): left promiscuous mode
[   78.210169][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.336837][ T5235] Bluetooth: hci0: command tx timeout
[   78.533172][ T5235] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[   78.818032][ T6894] netlink: 'syz.0.288': attribute type 29 has an invalid length.
[   78.831075][ T6895] netlink: 'syz.0.288': attribute type 29 has an invalid length.
[   79.791294][ T6954] netlink: 'syz.2.310': attribute type 4 has an invalid length.
[   79.820187][ T6957] syzkaller1: tun_chr_ioctl cmd 1074025673
[   79.822774][ T6958] syzkaller1: tun_chr_ioctl cmd 1074025676
[   79.827750][ T6958] syzkaller1: owner set to 778
[   80.162107][ T6970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.316'.
[   80.287309][ T6970] netlink: 'syz.0.316': attribute type 21 has an invalid length.
[   80.431794][ T5235] Bluetooth: hci0: command tx timeout
[   80.714440][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.322'.
[   81.226924][ T1272] cfg80211: failed to load regulatory.db
[   81.401125][ T7014] netlink: 164 bytes leftover after parsing attributes in process `syz.0.332'.
[   81.525478][ T7023] netlink: 'syz.0.335': attribute type 16 has an invalid length.
[   81.528038][ T7023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.335'.
[   81.629461][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.338'.
[   81.649796][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'.
[   81.653133][ T7034] netlink: 'syz.0.339': attribute type 4 has an invalid length.
[   81.726751][ T7040] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   81.729354][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[   82.135985][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[   82.175457][ T7061] netlink: 56 bytes leftover after parsing attributes in process `syz.2.349'.
[   82.444490][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[   82.495008][ T5235] Bluetooth: hci0: command tx timeout
[   83.041088][ T7096] validate_nla: 1 callbacks suppressed
[   83.041103][ T7096] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   83.048780][ T7096] netlink: 44 bytes leftover after parsing attributes in process `syz.0.363'.
[   84.678290][ T7197] netlink: 'syz.2.401': attribute type 4 has an invalid length.
[   84.681710][ T7197] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.401'.
[   86.712123][ T7252] __nla_validate_parse: 2 callbacks suppressed
[   86.712133][ T7252] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.422'.
[   87.173353][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.309856][ T7293] netlink: 76 bytes leftover after parsing attributes in process `syz.1.437'.
[   87.429273][ T5235] Bluetooth: hci0: ISO packet for unknown connection handle 17
[   87.468751][ T7310] netlink: 'syz.0.444': attribute type 6 has an invalid length.
[   87.482698][ T7310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.444'.
[   87.488195][ T7310] netlink: 'syz.0.444': attribute type 6 has an invalid length.
[   87.490914][ T7310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.444'.
[   87.498155][ T7310] netlink: 'syz.0.444': attribute type 6 has an invalid length.
[   87.501487][ T7310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.444'.
[   87.509776][ T7310] netlink: 'syz.0.444': attribute type 6 has an invalid length.
[   87.512924][ T7310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.444'.
[   87.517742][ T7310] netlink: 'syz.0.444': attribute type 6 has an invalid length.
[   87.520716][ T7310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.444'.
[   87.577247][ T7319] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.447'.
[   88.792069][ T7342] netlink: 5348 bytes leftover after parsing attributes in process `syz.0.456'.
[   89.127229][ T7366] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.463'.
[   89.391317][ T7384] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   89.394124][ T7384] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   89.398752][ T7384] netlink: 'syz.0.472': attribute type 7 has an invalid length.
[   89.404944][ T7384] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   89.415232][ T7384] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   91.038288][ T7436] netlink: 'syz.0.490': attribute type 6 has an invalid length.
[   91.322092][ T7440] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   91.326766][ T7440] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   91.332468][ T7441] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   91.338344][ T7440] sctp: [Deprecated]: syz.1.491 (pid 7440) Use of int in maxseg socket option.
[   91.338344][ T7440] Use struct sctp_assoc_value instead
[   91.659319][ T7448] netlink: 'syz.2.494': attribute type 3 has an invalid length.
[   92.145747][ T7467] __nla_validate_parse: 4 callbacks suppressed
[   92.145757][ T7467] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.500'.
[   92.235753][ T7471] netlink: 164 bytes leftover after parsing attributes in process `syz.2.502'.
[   92.474579][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.504'.
[   92.716290][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'.
[   92.844111][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[   93.205007][ T7507] netlink: 201352 bytes leftover after parsing attributes in process `syz.2.514'.
[   93.301858][ T7515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.518'.
[   93.312422][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'.
[   93.318689][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'.
[   93.335077][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'.
[   94.862438][ T7587] validate_nla: 12 callbacks suppressed
[   94.862480][ T7587] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[   96.498228][ T7641] netlink: 'syz.1.560': attribute type 2 has an invalid length.
[   96.501423][ T7641] netlink: 'syz.1.560': attribute type 1 has an invalid length.
[   96.643099][ T7648] netlink: 'syz.0.563': attribute type 3 has an invalid length.
[   96.648874][ T7648] netlink: 'syz.0.563': attribute type 1 has an invalid length.
[   97.469392][ T7679] netlink: 'syz.0.574': attribute type 3 has an invalid length.
[   97.478020][ T7679] netlink: 'syz.0.574': attribute type 1 has an invalid length.
[   97.513113][ T7679] __nla_validate_parse: 12 callbacks suppressed
[   97.513126][ T7679] netlink: 201352 bytes leftover after parsing attributes in process `syz.0.574'.
[   97.749032][ T7691] netlink: 'syz.1.577': attribute type 29 has an invalid length.
[   97.765864][ T7691] netlink: 'syz.1.577': attribute type 29 has an invalid length.
[   97.774242][ T7691] netlink: 'syz.1.577': attribute type 29 has an invalid length.
[   97.980400][ T7699] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   98.073528][ T7699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.580'.
[   98.436660][ T7711] netlink: 201352 bytes leftover after parsing attributes in process `syz.0.584'.
[   98.720682][ T7739] netlink: 201352 bytes leftover after parsing attributes in process `syz.1.595'.
[   99.009062][ T7764] netlink: 201352 bytes leftover after parsing attributes in process `syz.1.604'.
[   99.026685][ T7765] netlink: 104 bytes leftover after parsing attributes in process `syz.2.605'.
[   99.561211][ T7782] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.610'.
[  100.009424][ T7791] validate_nla: 7 callbacks suppressed
[  100.009439][ T7791] netlink: 'syz.2.614': attribute type 3 has an invalid length.
[  100.015943][ T7791] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  100.019244][ T7791] netlink: 201352 bytes leftover after parsing attributes in process `syz.2.614'.
[  100.116308][ T7793] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.613'.
[  100.444026][   T26] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  101.054217][ T7811] netlink: 'syz.2.620': attribute type 2 has an invalid length.
[  101.061702][ T7811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.620'.
[  101.083412][ T7811] nbd: must specify at least one socket
[  101.147112][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.299062][ T7836] netlink: 'syz.1.629': attribute type 29 has an invalid length.
[  101.303794][ T7836] netlink: 'syz.1.629': attribute type 29 has an invalid length.
[  101.975096][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1060384695 wd_nsec: 1060384827
[  104.514426][ T7873] __nla_validate_parse: 1 callbacks suppressed
[  104.514436][ T7873] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.641'.
[  104.614262][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  104.893619][ T7893] syzkaller0: entered promiscuous mode
[  104.897686][ T7893] syzkaller0: entered allmulticast mode
[  105.196306][ T7919] tc_dump_action: action bad kind
[  105.446871][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'.
[  105.672197][ T7940] netlink: 'syz.0.663': attribute type 16 has an invalid length.
[  105.677000][ T7940] netlink: 'syz.0.663': attribute type 3 has an invalid length.
[  105.680460][ T7940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.663'.
[  106.191383][ T5235] Bluetooth: hci1: adv larger than maximum supported
[  106.191438][ T5235] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  106.193942][ T5235] Bluetooth: hci1: Malformed LE Event: 0x0d
[  106.224423][ T7961] tc_dump_action: action bad kind
[  106.473024][ T7972] tc_dump_action: action bad kind
[  106.509866][ T7974] openvswitch: netlink: EtherType 50a is less than min 600
[  106.623582][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'.
[  106.641337][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'.
[  106.984846][ T7985] tc_dump_action: action bad kind
[  107.038831][ T7989] netlink: 'syz.1.682': attribute type 28 has an invalid length.
[  107.044728][ T7989] netlink: 'syz.1.682': attribute type 3 has an invalid length.
[  107.047535][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.682'.
[  107.119792][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'.
[  107.123568][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'.
[  107.134359][ T5235] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[  107.303603][ T8008] tc_dump_action: action bad kind
[  107.336815][ T8010] tc_dump_action: action bad kind
[  107.820979][ T8035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.696'.
[  107.915005][ T8047] sock: sock_set_timeout: `syz.0.697' (pid 8047) tries to set negative timeout
[  108.039261][ T8064] netlink: 'syz.1.704': attribute type 21 has an invalid length.
[  108.277675][ T8085] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  108.867093][ T8109] netlink: 'syz.2.722': attribute type 10 has an invalid length.
[  108.876332][ T8109] dummy0: entered promiscuous mode
[  109.125985][ T8119] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  109.952991][ T8154] __nla_validate_parse: 6 callbacks suppressed
[  109.953001][ T8154] netlink: 495 bytes leftover after parsing attributes in process `syz.2.735'.
[  110.290428][ T8164] tc_dump_action: action bad kind
[  110.461334][ T8173] netlink: 'syz.2.739': attribute type 9 has an invalid length.
[  110.832358][ T8175] tc_dump_action: action bad kind
[  111.510316][ T8186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.075043][ T8196] netlink: 'syz.2.748': attribute type 27 has an invalid length.
[  112.078505][ T8196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.748'.
[  112.094392][ T8196] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  112.286089][ T8201] netlink: 14 bytes leftover after parsing attributes in process `syz.2.749'.
[  112.401915][ T8201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.407611][ T8201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.412589][ T8201] bond0 (unregistering): Released all slaves
[  112.715419][ T8212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.752'.
[  112.729461][ T8212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.752'.
[  112.763598][ T8212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.752'.
[  112.838108][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[  112.867858][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.
[  112.870831][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.
[  112.878492][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.
[  113.951880][ T8274] tc_dump_action: action bad kind
[  113.959864][ T8275] tc_dump_action: action bad kind
[  114.180656][ T8298] tc_dump_action: action bad kind
[  114.380752][ T8304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.383342][ T8304] IPv6: NLM_F_CREATE should be set when creating new route
[  114.385846][ T8304] IPv6: NLM_F_CREATE should be set when creating new route
[  114.439685][ T8308] syzkaller0: entered promiscuous mode
[  114.441689][ T8308] syzkaller0: entered allmulticast mode
[  114.675387][ T8314] lo speed is unknown, defaulting to 1000
[  114.680992][ T8314] lo speed is unknown, defaulting to 1000
[  114.689780][ T8314] lo speed is unknown, defaulting to 1000
[  114.699413][ T8314] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  114.707248][ T8314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  114.738566][ T8314] lo speed is unknown, defaulting to 1000
[  114.750756][ T8314] lo speed is unknown, defaulting to 1000
[  114.759731][ T8314] lo speed is unknown, defaulting to 1000
[  114.838084][ T8327] tc_dump_action: action bad kind
[  114.875095][   T33] audit: type=1107 audit(1755209348.790:2): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  114.941291][ T8336] tc_dump_action: action bad kind
[  115.412439][ T8370] tc_dump_action: action bad kind
[  115.611638][ T8379] __nla_validate_parse: 32 callbacks suppressed
[  115.611654][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.810'.
[  115.618345][ T8379] netlink: 128 bytes leftover after parsing attributes in process `syz.2.810'.
[  115.635560][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.810'.
[  115.639306][ T8383] netlink: 128 bytes leftover after parsing attributes in process `syz.2.810'.
[  115.839558][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'.
[  115.842892][ T8387] netlink: 'syz.2.811': attribute type 2 has an invalid length.
[  117.079470][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.104313][ T8399] bridge0: entered allmulticast mode
[  117.121993][ T8411] netlink: 148 bytes leftover after parsing attributes in process `syz.0.818'.
[  117.128326][ T8413] netlink: 'syz.1.819': attribute type 21 has an invalid length.
[  117.131358][ T8413] netlink: 164 bytes leftover after parsing attributes in process `syz.1.819'.
[  118.121056][ T8454] syz.1.829: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  118.129253][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.1.829 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  118.129271][ T8454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.129277][ T8454] Call Trace:
[  118.129282][ T8454]  <TASK>
[  118.129287][ T8454]  dump_stack_lvl+0x189/0x250
[  118.129303][ T8454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.129313][ T8454]  ? __pfx__printk+0x10/0x10
[  118.129325][ T8454]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  118.129336][ T8454]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  118.129347][ T8454]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  118.129359][ T8454]  warn_alloc+0x214/0x310
[  118.129372][ T8454]  ? stack_depot_save_flags+0x41b/0x860
[  118.129384][ T8454]  ? __pfx_warn_alloc+0x10/0x10
[  118.129396][ T8454]  ? kasan_save_track+0x4f/0x80
[  118.129407][ T8454]  ? xskq_create+0x56/0x170
[  118.129417][ T8454]  ? xsk_init_queue+0xb0/0x110
[  118.129426][ T8454]  ? xsk_setsockopt+0x57b/0x8d0
[  118.129435][ T8454]  ? do_sock_setsockopt+0x17c/0x1b0
[  118.129443][ T8454]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  118.129450][ T8454]  ? do_syscall_64+0xfa/0x3b0
[  118.129461][ T8454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.129472][ T8454]  __vmalloc_node_range_noprof+0x125/0x12f0
[  118.129495][ T8454]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  118.129509][ T8454]  ? __kasan_kmalloc+0x93/0xb0
[  118.129522][ T8454]  vmalloc_user_noprof+0xad/0xf0
[  118.129534][ T8454]  ? xskq_create+0xbf/0x170
[  118.129545][ T8454]  xskq_create+0xbf/0x170
[  118.129556][ T8454]  xsk_init_queue+0xb0/0x110
[  118.129567][ T8454]  xsk_setsockopt+0x57b/0x8d0
[  118.129578][ T8454]  ? __pfx_xsk_setsockopt+0x10/0x10
[  118.129587][ T8454]  ? __pfx_aa_sk_perm+0x10/0x10
[  118.129600][ T8454]  ? __fget_files+0x2a/0x420
[  118.129607][ T8454]  ? aa_sock_opt_perm+0xff/0x1b0
[  118.129616][ T8454]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  118.129625][ T8454]  ? __pfx_xsk_setsockopt+0x10/0x10
[  118.129635][ T8454]  do_sock_setsockopt+0x17c/0x1b0
[  118.129645][ T8454]  __x64_sys_setsockopt+0x13f/0x1b0
[  118.129655][ T8454]  do_syscall_64+0xfa/0x3b0
[  118.129665][ T8454]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.129675][ T8454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.129683][ T8454]  ? exc_page_fault+0x9f/0xf0
[  118.129694][ T8454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.129702][ T8454] RIP: 0033:0x7f431d18ebe9
[  118.129711][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.129718][ T8454] RSP: 002b:00007f431dfa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  118.129729][ T8454] RAX: ffffffffffffffda RBX: 00007f431d3b6180 RCX: 00007f431d18ebe9
[  118.129735][ T8454] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  118.129741][ T8454] RBP: 00007f431d211e19 R08: 0000000000000004 R09: 0000000000000000
[  118.129746][ T8454] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  118.129752][ T8454] R13: 00007f431d3b6218 R14: 00007f431d3b6180 R15: 00007ffeab17d678
[  118.129764][ T8454]  </TASK>
[  118.129768][ T8454] Mem-Info:
[  118.258894][ T8454] active_anon:4910 inactive_anon:0 isolated_anon:0
[  118.258894][ T8454]  active_file:13111 inactive_file:38234 isolated_file:0
[  118.258894][ T8454]  unevictable:1768 dirty:307 writeback:0
[  118.258894][ T8454]  slab_reclaimable:9655 slab_unreclaimable:51756
[  118.258894][ T8454]  mapped:19258 shmem:2442 pagetables:1043
[  118.258894][ T8454]  sec_pagetables:0 bounce:0
[  118.258894][ T8454]  kernel_misc_reclaimable:0
[  118.258894][ T8454]  free:281283 free_pcp:26136 free_cma:0
[  118.280207][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  118.284027][ T8454] Node 0 active_anon:9576kB inactive_anon:0kB active_file:23948kB inactive_file:25084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10704kB dirty:352kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6748kB pagetables:1776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  118.298963][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  118.303176][ T8454] Node 1 active_anon:9996kB inactive_anon:0kB active_file:28496kB inactive_file:127852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:66328kB dirty:876kB writeback:0kB shmem:4880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4664kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  118.316709][ T8454] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  118.332858][ T8462] tc_dump_action: action bad kind
[  118.335326][ T8454] lowmem_reserve[]: 0 811 811 811 811
[  118.337928][ T8454] Node 0 DMA32 free:393136kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9576kB inactive_anon:0kB active_file:23948kB inactive_file:25084kB unevictable:3536kB writepending:352kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:56544kB local_pcp:15632kB free_cma:0kB
[  118.349512][ T8454] lowmem_reserve[]: 0 0 0 0 0
[  118.351304][ T8454] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  118.368789][ T8471] tc_dump_action: action bad kind
[  118.374783][ T8454] lowmem_reserve[]: 0 0 854 854 854
[  118.376674][ T8454] Node 1 Normal free:263752kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10064kB inactive_anon:0kB active_file:28496kB inactive_file:127852kB unevictable:3536kB writepending:876kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43020kB local_pcp:21080kB free_cma:0kB
[  118.391682][ T8454] lowmem_reserve[]: 0 0 0 0 0
[  118.393291][ T8454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  118.398293][ T8454] Node 0 DMA32: 1377*4kB (UME) 624*8kB (UME) 380*16kB (UME) 183*32kB (UME) 305*64kB (UME) 152*128kB (UME) 23*256kB (UM) 12*512kB (UE) 8*1024kB (UM) 2*2048kB (ME) 75*4096kB (M) = 392932kB
[  118.404420][ T8454] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  118.410217][ T8454] Node 1 Normal: 660*4kB (UME) 879*8kB (UME) 496*16kB (UME) 272*32kB (UME) 154*64kB (UME) 66*128kB (UME) 26*256kB (ME) 15*512kB (ME) 12*1024kB (ME) 6*2048kB (UME) 44*4096kB (UM) = 263752kB
[  118.416584][ T8454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  118.419635][ T8454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  118.422681][ T8454] 53789 total pagecache pages
[  118.424474][ T8454] 0 pages in swap cache
[  118.430708][ T8454] Free swap  = 124996kB
[  118.432106][ T8454] Total swap = 124996kB
[  118.433493][ T8454] 786301 pages RAM
[  118.435550][ T8454] 0 pages HighMem/MovableOnly
[  118.437130][ T8454] 241329 pages reserved
[  118.438511][ T8454] 0 pages cma reserved
[  118.503998][ T8477] netlink: 'syz.2.840': attribute type 10 has an invalid length.
[  118.736847][ T8481] : entered promiscuous mode
[  118.743667][ T8482] netlink: 128 bytes leftover after parsing attributes in process `syz.2.842'.
[  118.993487][ T8486] tc_dump_action: action bad kind
[  119.862358][ T8532] nft_compat: unsupported protocol 5
[  119.938207][ T8537] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[  120.659521][ T8551] netlink: 'syz.1.864': attribute type 2 has an invalid length.
[  121.298338][ T8573] netlink: 'syz.0.873': attribute type 21 has an invalid length.
[  121.301303][ T8573] netlink: 'syz.0.873': attribute type 5 has an invalid length.
[  121.650662][ T8598] Can't find ip_set type hath:ip,mak
[  121.673211][ T8589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.677603][ T8589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.204460][ T8643] netlink: 'syz.1.890': attribute type 10 has an invalid length.
[  122.244898][ T8643] veth0_macvtap: left promiscuous mode
[  122.253270][ T8643] veth0_macvtap: entered promiscuous mode
[  122.259445][ T8643] team0: Device macvtap0 failed to register rx_handler
[  122.262394][ T8643] veth0_macvtap: left promiscuous mode
[  122.280755][ T8641] netlink: 'syz.1.890': attribute type 29 has an invalid length.
[  122.284052][ T8641] netlink: 'syz.1.890': attribute type 29 has an invalid length.
[  122.592903][ T8646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.595809][ T8646] IPv6: NLM_F_CREATE should be set when creating new route
[  122.598234][ T8646] IPv6: NLM_F_CREATE should be set when creating new route
[  122.698416][ T8653] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  122.700695][ T8653] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  123.377785][ T8694] tc_dump_action: action bad kind
[  123.469457][ T8697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.992431][ T8714] tc_dump_action: action bad kind
[  124.465593][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'.
[  124.469363][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'.
[  124.527485][ T5235] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  128.631599][ T8743] syzkaller0: entered promiscuous mode
[  128.634002][ T8743] syzkaller0: entered allmulticast mode
[  128.641465][ T8743] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  128.786714][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'.
[  128.786892][ T8752] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  128.803294][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'.
[  128.814902][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'.
[  129.016255][ T8767] tc_dump_action: action bad kind
[  129.195864][ T8775] netlink: 'syz.1.933': attribute type 11 has an invalid length.
[  129.364523][ T8788] netlink: 'syz.1.935': attribute type 3 has an invalid length.
[  129.367894][ T8788] netlink: 152 bytes leftover after parsing attributes in process `syz.1.935'.
[  129.572290][ T8801] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.942'.
[  130.170076][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'.
[  130.276908][ T8836] netlink: 'syz.0.955': attribute type 6 has an invalid length.
[  130.279483][ T8836] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.955'.
[  130.283745][ T8836] delete_channel: no stack
[  130.285792][ T8836] delete_channel: no stack
[  130.327729][ T8845] tc_dump_action: action bad kind
[  130.454338][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'.
[  130.484832][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'.
[  130.662291][ T8865] netlink: 'syz.1.965': attribute type 11 has an invalid length.
[  130.688364][ T8867] tc_dump_action: action bad kind
[  130.823531][ T8874] netlink: 'syz.1.969': attribute type 1 has an invalid length.
[  130.827061][ T8874] netlink: 'syz.1.969': attribute type 3 has an invalid length.
[  130.829480][ T8874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.969'.
[  131.454775][   T52] wlan1: Trigger new scan to find an IBSS to join
[  131.747931][ T8883] lo speed is unknown, defaulting to 1000
[  131.910444][ T8895] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.975'.
[  132.027027][ T8897] netlink: 144 bytes leftover after parsing attributes in process `syz.2.976'.
[  132.280696][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'.
[  132.287465][ T8911] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.983'.
[  132.419370][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.421606][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.561731][ T8919] tc_dump_action: action bad kind
[  134.350597][ T8988] !: renamed from bond_slave_0 (while UP)
[  134.500091][ T8998] netlink: 'syz.1.1012': attribute type 22 has an invalid length.
[  134.508696][ T8998] netlink: 'syz.1.1012': attribute type 3 has an invalid length.
[  135.262917][ T9005] netlink: 'syz.1.1014': attribute type 29 has an invalid length.
[  135.270153][ T9005] netlink: 'syz.1.1014': attribute type 29 has an invalid length.
[  135.273670][ T9005] netlink: 'syz.1.1014': attribute type 29 has an invalid length.
[  135.550062][ T9029] tc_dump_action: action bad kind
[  135.899371][ T9044] __nla_validate_parse: 27 callbacks suppressed
[  135.899383][ T9044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1027'.
[  136.395219][ T9062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1034'.
[  137.556401][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'.
[  137.640341][ T9138] tc_dump_action: action bad kind
[  137.928196][ T9162] tc_dump_action: action bad kind
[  137.979311][ T9169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1071'.
[  138.259322][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1075'.
[  138.263511][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1075'.
[  138.268973][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1075'.
[  138.350462][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'.
[  138.363550][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'.
[  138.371783][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'.
[  139.781639][ T9306] lo speed is unknown, defaulting to 1000
[  140.064550][ T9318] tc_dump_action: action bad kind
[  140.571690][ T5916] lo speed is unknown, defaulting to 1000
[  140.779052][ T9343] lo speed is unknown, defaulting to 1000
[  141.115961][ T9353] __nla_validate_parse: 2 callbacks suppressed
[  141.115977][ T9353] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1131'.
[  141.319843][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'.
[  141.574029][ T9368] tc_dump_action: action bad kind
[  142.183833][ T9396] veth1_macvtap: left promiscuous mode
[  142.239521][ T9396] macsec0: entered promiscuous mode
[  142.505461][ T9399] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1147'.
[  142.575407][ T9399] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  142.578459][ T9399] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1147'.
[  142.582417][ T9401] netlink: 'syz.2.1148': attribute type 4 has an invalid length.
[  142.644278][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  142.891992][ T9431] tc_dump_action: action bad kind
[  142.974227][ T9439] openvswitch: netlink: Message has 4 unknown bytes.
[  143.199708][ T9455] tc_dump_action: action bad kind
[  143.338028][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1168'.
[  143.714332][ T9478] tc_dump_action: action bad kind
[  144.196170][ T9489] macsec0: left promiscuous mode
[  144.357411][ T9489] veth1_macvtap: entered promiscuous mode
[  144.380471][ T9489] macsec0: entered promiscuous mode
[  144.399160][ T9489] macsec0: entered allmulticast mode
[  144.401503][ T9489] veth1_macvtap: entered allmulticast mode
[  144.439150][ T9492] C: renamed from team_slave_0
[  144.445846][ T9492] netlink: 'syz.0.1177': attribute type 4 has an invalid length.
[  144.449325][ T9492] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1177'.
[  144.453282][ T9492] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.676684][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'.
[  145.733859][ T9505] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1183'.
[  145.828478][ T9514] netlink: 824 bytes leftover after parsing attributes in process `syz.1.1187'.
[  145.874215][ T9517] tc_dump_action: action bad kind
[  148.129735][ T9568] tc_dump_action: action bad kind
[  148.528266][ T9597] tc_dump_action: action bad kind
[  148.567457][ T9599] __nla_validate_parse: 1 callbacks suppressed
[  148.567473][ T9599] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1217'.
[  148.773267][ T9621] netlink: 'syz.1.1225': attribute type 21 has an invalid length.
[  148.776205][ T9621] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1225'.
[  148.860362][   T33] audit: type=1107 audit(1755209382.780:3): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  149.090364][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'.
[  149.217152][ T9638] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  149.374047][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1230'.
[  149.389236][ T9640] tap0: tun_chr_ioctl cmd 1074025678
[  149.392202][ T9640] tap0: group set to 0
[  149.403405][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'.
[  149.622617][ T9642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.754233][ T9655] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1235'.
[  150.656624][ T9675] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1243'.
[  150.890240][ T9681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1245'.
[  150.894060][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1245'.
[  150.933389][ T9683] tc_dump_action: action bad kind
[  151.150075][ T9699] tc_dump_action: action bad kind
[  151.383772][ T9724] tc_dump_action: action bad kind
[  152.170964][ T9735] netlink: 'syz.1.1263': attribute type 2 has an invalid length.
[  152.173861][ T9735] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1263'.
[  152.730052][ T9748] tc_dump_action: action bad kind
[  153.000565][ T9775] TCP: TCP_TX_DELAY enabled
[  153.003356][ T9775] openvswitch: netlink: Message has 6 unknown bytes.
[  153.306947][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.433263][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.517313][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.576488][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.599984][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.604487][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.610875][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.616848][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.619735][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.683676][ T9792] lo speed is unknown, defaulting to 1000
[  153.698469][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.701218][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.704463][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.707782][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.710676][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.768558][ T9794] lo speed is unknown, defaulting to 1000
[  153.791236][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.794605][   T12] bridge_slave_1: left allmulticast mode
[  153.797919][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.801227][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.803858][   T12] bridge_slave_1: left promiscuous mode
[  153.807028][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.810240][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.814586][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.818547][   T12] bridge_slave_0: left allmulticast mode
[  153.820613][   T12] bridge_slave_0: left promiscuous mode
[  153.823752][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.994880][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.000182][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.003688][   T12] bond0 (unregistering): Released all slaves
[  154.099967][ T9797] lo speed is unknown, defaulting to 1000
[  154.267866][ T9792] chnl_net:caif_netlink_parms(): no params data found
[  154.309923][   T12] hsr_slave_0: left promiscuous mode
[  154.312722][   T12] hsr_slave_1: left promiscuous mode
[  154.316819][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.319982][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.323438][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.325985][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.334071][   T12] veth1_vlan: left promiscuous mode
[  154.337832][   T12] veth0_vlan: left promiscuous mode
[  154.571625][   T12] team0 (unregistering): Port device team_slave_1 removed
[  154.594617][   T12] team0 (unregistering): Port device team_slave_0 removed
[  154.781625][ T9794] chnl_net:caif_netlink_parms(): no params data found
[  154.984177][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.994906][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.998158][ T9792] bridge_slave_0: entered allmulticast mode
[  155.002039][ T9792] bridge_slave_0: entered promiscuous mode
[  155.007600][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.010721][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.013820][ T9792] bridge_slave_1: entered allmulticast mode
[  155.018286][ T9792] bridge_slave_1: entered promiscuous mode
[  155.028345][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.030874][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.033822][ T9794] bridge_slave_0: entered allmulticast mode
[  155.044562][ T9794] bridge_slave_0: entered promiscuous mode
[  155.082860][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.087159][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.090274][ T9794] bridge_slave_1: entered allmulticast mode
[  155.094088][ T9794] bridge_slave_1: entered promiscuous mode
[  155.126780][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.132299][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.142750][ T9797] chnl_net:caif_netlink_parms(): no params data found
[  155.172905][ T9794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.180966][ T9794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.253848][ T9794] team0: Port device team_slave_0 added
[  155.259658][ T9792] team0: Port device team_slave_0 added
[  155.270357][ T9792] team0: Port device team_slave_1 added
[  155.279655][ T9794] team0: Port device team_slave_1 added
[  155.357313][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.360318][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.374371][ T9794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.381186][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.384136][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.399339][ T9794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.404598][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.408058][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.421442][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.426589][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.429580][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.432853][ T9797] bridge_slave_0: entered allmulticast mode
[  155.439441][ T9797] bridge_slave_0: entered promiscuous mode
[  155.461801][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.464096][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.473552][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.477589][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.480034][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.482496][ T9797] bridge_slave_1: entered allmulticast mode
[  155.486245][ T9797] bridge_slave_1: entered promiscuous mode
[  155.530922][ T9794] hsr_slave_0: entered promiscuous mode
[  155.533479][ T9794] hsr_slave_1: entered promiscuous mode
[  155.536180][ T9794] debugfs: 'hsr0' already exists in 'hsr'
[  155.538467][ T9794] Cannot create hsr debugfs directory
[  155.553865][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.563727][ T9792] hsr_slave_0: entered promiscuous mode
[  155.568746][ T9792] hsr_slave_1: entered promiscuous mode
[  155.571553][ T9792] debugfs: 'hsr0' already exists in 'hsr'
[  155.573953][ T9792] Cannot create hsr debugfs directory
[  155.591987][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.684324][ T9797] team0: Port device team_slave_0 added
[  155.695299][ T5858] Bluetooth: hci0: command tx timeout
[  155.709363][ T9797] team0: Port device team_slave_1 added
[  155.758036][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.760995][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.772069][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.774794][ T5858] Bluetooth: hci1: command tx timeout
[  155.784984][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.788457][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.803255][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.855046][ T5858] Bluetooth: hci2: command tx timeout
[  155.901749][ T9797] hsr_slave_0: entered promiscuous mode
[  155.905323][ T9797] hsr_slave_1: entered promiscuous mode
[  155.908277][ T9797] debugfs: 'hsr0' already exists in 'hsr'
[  155.910718][ T9797] Cannot create hsr debugfs directory
[  156.106432][ T9794] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  156.117879][ T9794] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  156.141786][ T9794] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  156.152519][ T9794] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  156.187255][ T9792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  156.217948][ T9792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  156.223161][ T9792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  156.250082][ T9792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  156.323213][ T9797] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.329354][ T9797] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  156.334499][ T9797] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  156.340753][ T9797] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.412131][ T9794] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.445618][ T9794] 8021q: adding VLAN 0 to HW filter on device team0
[  156.484286][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.491240][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.493776][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.503786][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.520457][ T9797] 8021q: adding VLAN 0 to HW filter on device team0
[  156.537209][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.539644][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.546022][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.548828][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.560642][ T9792] 8021q: adding VLAN 0 to HW filter on device team0
[  156.569301][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.571732][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.586572][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.589372][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.594178][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.597029][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.631389][ T9797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.648528][ T9794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.818241][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.822257][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.830848][ T9794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.861328][ T9792] veth0_vlan: entered promiscuous mode
[  156.888880][ T9792] veth1_vlan: entered promiscuous mode
[  156.923075][ T9792] veth0_macvtap: entered promiscuous mode
[  156.939199][ T9792] veth1_macvtap: entered promiscuous mode
[  156.965918][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.987621][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.000756][ T5694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.003552][ T5694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.017083][ T5694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.020330][ T5694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.077202][ T9794] veth0_vlan: entered promiscuous mode
[  157.093921][ T9794] veth1_vlan: entered promiscuous mode
[  157.108928][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.113265][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.132393][ T9797] veth0_vlan: entered promiscuous mode
[  157.152718][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.153311][ T9797] veth1_vlan: entered promiscuous mode
[  157.157820][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.177231][ T9794] veth0_macvtap: entered promiscuous mode
[  157.192298][ T9794] veth1_macvtap: entered promiscuous mode
[  157.208089][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.221786][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.250193][ T5913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.256575][ T9797] veth0_macvtap: entered promiscuous mode
[  157.262874][ T5913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.266703][ T5913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.269689][ T5913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.287768][ T9797] veth1_macvtap: entered promiscuous mode
[  157.342398][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.348952][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.407238][ T5913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.433584][ T5913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.440144][ T5913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.443194][ T5913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.463823][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.469272][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.509489][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.512145][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.563066][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.571825][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.594337][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.601991][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.750712][ T9929] tc_dump_action: action bad kind
[  157.776724][ T5858] Bluetooth: hci0: command tx timeout
[  157.842278][ T9934] lo speed is unknown, defaulting to 1000
[  157.855353][ T5235] Bluetooth: hci1: command tx timeout
[  157.937139][ T5235] Bluetooth: hci2: command tx timeout
[  158.084280][ T9951] netlink: 'syz.4.1292': attribute type 4 has an invalid length.
[  158.093170][ T9950] netlink: 'syz.4.1292': attribute type 4 has an invalid length.
[  158.109970][ T9951] __nla_validate_parse: 5 callbacks suppressed
[  158.109980][ T9951] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1292'.
[  158.117003][ T9950] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1292'.
[  158.240609][ T9962] netlink: 'syz.5.1296': attribute type 7 has an invalid length.
[  158.902496][ T9991] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1303'.
[  159.023444][ T9997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1304'.
[  159.028149][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.072860][ T9997] bridge_slave_0 (unregistering): left allmulticast mode
[  159.077796][ T9997] bridge_slave_0 (unregistering): left promiscuous mode
[  159.080498][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.117321][T10005] tc_dump_action: action bad kind
[  159.630714][T10023] netlink: 'syz.4.1312': attribute type 17 has an invalid length.
[  159.731775][   T33] audit: type=1107 audit(1755209393.650:4): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Xvw{;SQ%7xbs;)pt!K"_:7h{8цƉpc$c\"4],R/0iXsl\ơp?CddR:6QP]xГp4p>:0xXG&<Dߵo{vg Asƣ0+8+nv59'
[  159.854954][ T5235] Bluetooth: hci0: command tx timeout
[  159.935960][ T5235] Bluetooth: hci1: command tx timeout
[  160.014979][ T5235] Bluetooth: hci2: command tx timeout
[  160.327679][T10051] netlink: 'syz.3.1323': attribute type 1 has an invalid length.
[  160.881290][T10070] netlink: 'syz.3.1331': attribute type 29 has an invalid length.
[  161.011886][T10074] tc_dump_action: action bad kind
[  161.044592][T10073] netlink: 'syz.5.1332': attribute type 1 has an invalid length.
[  161.060729][T10073] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1332'.
[  161.944990][ T5235] Bluetooth: hci0: command tx timeout
[  162.023109][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.279933][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.463541][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.586742][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.776717][   T13] bridge_slave_1: left allmulticast mode
[  162.778656][   T13] bridge_slave_1: left promiscuous mode
[  162.780582][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.795126][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.798087][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.802010][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.807264][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.810220][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.813365][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.817084][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.820310][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.823347][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.828820][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.843546][   T13] bridge_slave_0: left allmulticast mode
[  162.847152][   T13] bridge_slave_0: left promiscuous mode
[  162.856261][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.089244][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  163.092450][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  163.096206][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  163.099225][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  163.102009][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.199695][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.207105][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.212028][   T13] bond0 (unregistering): Released all slaves
[  163.285914][T10096] lo speed is unknown, defaulting to 1000
[  163.364322][T10097] lo speed is unknown, defaulting to 1000
[  163.384758][T10106] lo speed is unknown, defaulting to 1000
[  163.574843][   T13] hsr_slave_0: left promiscuous mode
[  163.577055][   T13] hsr_slave_1: left promiscuous mode
[  163.579131][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.581613][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.584501][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.587182][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.597365][   T13] veth1_macvtap: left promiscuous mode
[  163.599279][   T13] veth0_macvtap: left promiscuous mode
[  163.601187][   T13] veth1_vlan: left promiscuous mode
[  163.603018][   T13] veth0_vlan: left promiscuous mode
[  163.839850][   T13] team0 (unregistering): Port device team_slave_1 removed
[  163.859073][   T13] team0 (unregistering): Port device team_slave_0 removed
[  164.338954][T10097] chnl_net:caif_netlink_parms(): no params data found
[  164.347009][T10096] chnl_net:caif_netlink_parms(): no params data found
[  164.453343][T10106] chnl_net:caif_netlink_parms(): no params data found
[  164.586094][T10097] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.592969][T10097] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.597301][T10097] bridge_slave_0: entered allmulticast mode
[  164.601365][T10097] bridge_slave_0: entered promiscuous mode
[  164.642160][T10097] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.645455][T10097] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.649540][T10097] bridge_slave_1: entered allmulticast mode
[  164.653538][T10097] bridge_slave_1: entered promiscuous mode
[  164.670253][T10096] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.673350][T10096] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.677855][T10096] bridge_slave_0: entered allmulticast mode
[  164.681885][T10096] bridge_slave_0: entered promiscuous mode
[  164.691972][T10096] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.695490][T10096] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.698717][T10096] bridge_slave_1: entered allmulticast mode
[  164.702784][T10096] bridge_slave_1: entered promiscuous mode
[  164.786896][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.793312][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.801726][T10106] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.806314][T10106] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.809751][T10106] bridge_slave_0: entered allmulticast mode
[  164.813999][T10106] bridge_slave_0: entered promiscuous mode
[  164.821051][T10106] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.824293][T10106] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.828160][T10106] bridge_slave_1: entered allmulticast mode
[  164.832260][T10106] bridge_slave_1: entered promiscuous mode
[  164.838413][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.846595][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.894941][   T54] Bluetooth: hci0: command tx timeout
[  164.897146][ T5235] Bluetooth: hci1: command tx timeout
[  164.901148][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.934112][T10097] team0: Port device team_slave_0 added
[  164.959213][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.965601][T10096] team0: Port device team_slave_0 added
[  164.969748][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.973900][T10097] team0: Port device team_slave_1 added
[  164.992445][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.006252][T10096] team0: Port device team_slave_1 added
[  165.059985][T10106] team0: Port device team_slave_0 added
[  165.081056][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.084142][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.096431][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.102659][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.105845][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.114199][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.120456][T10106] team0: Port device team_slave_1 added
[  165.123121][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.134702][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.146492][ T5235] Bluetooth: hci2: command tx timeout
[  165.153128][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.168997][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.198908][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.201242][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.216147][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.235524][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.238372][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.248512][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.287348][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.296801][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.299660][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.308889][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.338705][T10097] hsr_slave_0: entered promiscuous mode
[  165.341187][T10097] hsr_slave_1: entered promiscuous mode
[  165.343817][T10097] debugfs: 'hsr0' already exists in 'hsr'
[  165.349662][T10097] Cannot create hsr debugfs directory
[  165.363975][T10096] hsr_slave_0: entered promiscuous mode
[  165.369192][T10096] hsr_slave_1: entered promiscuous mode
[  165.372013][T10096] debugfs: 'hsr0' already exists in 'hsr'
[  165.374078][T10096] Cannot create hsr debugfs directory
[  165.429091][T10106] hsr_slave_0: entered promiscuous mode
[  165.432589][T10106] hsr_slave_1: entered promiscuous mode
[  165.439417][T10106] debugfs: 'hsr0' already exists in 'hsr'
[  165.441920][T10106] Cannot create hsr debugfs directory
[  165.626940][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.716243][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.817396][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.860704][T10097] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  165.866414][T10097] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  165.902754][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.917474][T10097] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  165.924527][T10097] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  166.004212][T10096] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  166.068737][T10096] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  166.108289][T10096] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  166.115282][T10096] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  166.142119][   T13] bridge_slave_1: left allmulticast mode
[  166.150574][   T13] bridge_slave_1: left promiscuous mode
[  166.153176][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.160752][   T13] bridge_slave_1: left allmulticast mode
[  166.163270][   T13] bridge_slave_1: left promiscuous mode
[  166.170671][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.179368][   T13] bridge_slave_0: left allmulticast mode
[  166.181823][   T13] bridge_slave_0: left promiscuous mode
[  166.184393][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.515828][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.521486][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.527586][   T13] bond0 (unregistering): Released all slaves
[  166.763375][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.769276][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.774189][   T13] bond0 (unregistering): Released all slaves
[  166.855685][T10106] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  166.894184][T10106] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  166.914273][T10106] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  166.949262][T10106] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  166.974876][ T5235] Bluetooth: hci1: command tx timeout
[  166.976930][ T5235] Bluetooth: hci0: command tx timeout
[  167.071615][T10097] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.138793][T10097] 8021q: adding VLAN 0 to HW filter on device team0
[  167.160499][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.163737][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.217989][   T54] Bluetooth: hci2: command tx timeout
[  167.224169][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.227363][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.240929][T10096] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.312244][T10096] 8021q: adding VLAN 0 to HW filter on device team0
[  167.332818][T10106] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.348117][   T13] hsr_slave_0: left promiscuous mode
[  167.350213][   T13] hsr_slave_1: left promiscuous mode
[  167.352308][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.355202][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.358007][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.360481][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.368142][   T13] hsr_slave_0: left promiscuous mode
[  167.370304][   T13] hsr_slave_1: left promiscuous mode
[  167.372431][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.380423][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.383724][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.386679][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.402867][   T13] veth1_macvtap: left promiscuous mode
[  167.405997][   T13] veth0_macvtap: left promiscuous mode
[  167.407957][   T13] veth1_vlan: left promiscuous mode
[  167.409764][   T13] veth0_vlan: left promiscuous mode
[  167.412425][   T13] veth1_macvtap: left promiscuous mode
[  167.414349][   T13] veth0_macvtap: left promiscuous mode
[  167.417501][   T13] veth1_vlan: left promiscuous mode
[  167.419809][   T13] veth0_vlan: left promiscuous mode
[  167.742344][   T13] team0 (unregistering): Port device team_slave_1 removed
[  167.767857][   T13] team0 (unregistering): Port device team_slave_0 removed
[  168.191466][   T13] team0 (unregistering): Port device team_slave_1 removed
[  168.213598][   T13] team0 (unregistering): Port device team_slave_0 removed
[  168.457976][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.460811][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.505157][T10106] 8021q: adding VLAN 0 to HW filter on device team0
[  168.527193][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.529500][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.534051][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.536509][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.550383][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.552796][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.641225][T10106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.650965][T10106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.753388][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.839505][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.928473][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.057578][   T54] Bluetooth: hci0: command tx timeout
[  169.060389][   T54] Bluetooth: hci1: command tx timeout
[  169.170677][   T13] ------------[ cut here ]------------
[  169.172994][   T13] WARNING: CPU: 1 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  169.177407][   T13] Modules linked in:
[  169.178193][T10097] veth0_vlan: entered promiscuous mode
[  169.179481][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  169.187343][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.191086][   T13] Workqueue: netns cleanup_net
[  169.192989][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  169.195607][   T13] Code: 65 a1 df f7 4b 83 3c 2c 00 75 19 e8 49 2e 7c f7 49 81 fd f8 07 00 00 74 1d e8 3b 2e 7c f7 49 83 c5 08 eb c9 e8 30 2e 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  169.203071][   T13] RSP: 0000:ffffc900001078b0 EFLAGS: 00010293
[  169.204178][T10097] veth1_vlan: entered promiscuous mode
[  169.205745][   T13] RAX: ffffffff8a437d80 RBX: ffff88811fa34000 RCX: ffff88801c688000
[  169.210806][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b6df1 RDI: ffff88811fa347e0
[  169.213932][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  169.217374][   T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88811fa34000
[  169.220496][   T13] R13: 00000000000007e0 R14: ffff888124682440 R15: dffffc0000000000
[  169.223646][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  169.227428][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.229987][   T13] CR2: 00007f227471a095 CR3: 0000000107068000 CR4: 00000000000006f0
[  169.233176][   T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.236839][   T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  169.239939][   T13] Call Trace:
[  169.241280][   T13]  <TASK>
[  169.242476][   T13]  ops_undo_list+0x49a/0x990
[  169.244322][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  169.246604][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  169.248551][   T13]  cleanup_net+0x4c5/0x800
[  169.250334][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  169.252287][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.254353][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  169.256684][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  169.258920][   T13]  process_scheduled_works+0xae1/0x17b0
[  169.261046][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.263492][   T13]  worker_thread+0x8a0/0xda0
[  169.265555][   T13]  kthread+0x711/0x8a0
[  169.267184][   T13]  ? __pfx_worker_thread+0x10/0x10
[  169.269216][   T13]  ? __pfx_kthread+0x10/0x10
[  169.271035][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.272721][T10106] veth0_vlan: entered promiscuous mode
[  169.273096][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.277411][   T13]  ? __pfx_kthread+0x10/0x10
[  169.279282][   T13]  ret_from_fork+0x3fc/0x770
[  169.281128][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  169.283173][   T13]  ? __switch_to_asm+0x39/0x70
[  169.285170][   T13]  ? __switch_to_asm+0x33/0x70
[  169.287038][   T13]  ? __pfx_kthread+0x10/0x10
[  169.288881][   T13]  ret_from_fork_asm+0x1a/0x30
[  169.290794][   T13]  </TASK>
[  169.292014][T10097] veth0_macvtap: entered promiscuous mode
[  169.292035][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  169.292046][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  169.292059][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.292067][   T13] Workqueue: netns cleanup_net
[  169.292085][   T13] Call Trace:
[  169.292091][   T13]  <TASK>
[  169.292096][   T13]  dump_stack_lvl+0x99/0x250
[  169.292109][   T13]  ? __asan_memcpy+0x40/0x70
[  169.292123][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.292135][   T13]  ? __pfx__printk+0x10/0x10
[  169.292158][   T13]  vpanic+0x281/0x750
[  169.292171][   T13]  ? __pfx__printk+0x10/0x10
[  169.292185][   T13]  ? __pfx_vpanic+0x10/0x10
[  169.292197][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  169.292219][   T13]  panic+0xb9/0xc0
[  169.292230][   T13]  ? __pfx_panic+0x10/0x10
[  169.292252][   T13]  __warn+0x31b/0x4b0
[  169.292263][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  169.292276][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  169.292286][   T13]  report_bug+0x2be/0x4f0
[  169.292300][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  169.292311][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  169.292321][   T13]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  169.292331][   T13]  handle_bug+0x84/0x160
[  169.292342][   T13]  exc_invalid_op+0x1a/0x50
[  169.292352][   T13]  asm_exc_invalid_op+0x1a/0x20
[  169.292363][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  169.292374][   T13] Code: 65 a1 df f7 4b 83 3c 2c 00 75 19 e8 49 2e 7c f7 49 81 fd f8 07 00 00 74 1d e8 3b 2e 7c f7 49 83 c5 08 eb c9 e8 30 2e 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  169.292382][   T13] RSP: 0000:ffffc900001078b0 EFLAGS: 00010293
[  169.292392][   T13] RAX: ffffffff8a437d80 RBX: ffff88811fa34000 RCX: ffff88801c688000
[  169.292400][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b6df1 RDI: ffff88811fa347e0
[  169.292407][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  169.292415][   T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88811fa34000
[  169.292423][   T13] R13: 00000000000007e0 R14: ffff888124682440 R15: dffffc0000000000
[  169.292435][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  169.292452][   T13]  ops_undo_list+0x49a/0x990
[  169.292471][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  169.292489][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  169.292528][   T13]  cleanup_net+0x4c5/0x800
[  169.292547][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  169.292564][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.292576][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  169.292586][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  169.292598][   T13]  process_scheduled_works+0xae1/0x17b0
[  169.292625][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.292646][   T13]  worker_thread+0x8a0/0xda0
[  169.292672][   T13]  kthread+0x711/0x8a0
[  169.292687][   T13]  ? __pfx_worker_thread+0x10/0x10
[  169.292704][   T13]  ? __pfx_kthread+0x10/0x10
[  169.292719][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.292731][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.292743][   T13]  ? __pfx_kthread+0x10/0x10
[  169.292757][   T13]  ret_from_fork+0x3fc/0x770
[  169.292770][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  169.292785][   T13]  ? __switch_to_asm+0x39/0x70
[  169.292797][   T13]  ? __switch_to_asm+0x33/0x70
[  169.292810][   T13]  ? __pfx_kthread+0x10/0x10
[  169.292824][   T13]  ret_from_fork_asm+0x1a/0x30
[  169.292847][   T13]  </TASK>
[  169.294987][   T13] Kernel Offset: disabled

VM DIAGNOSIS:
22:10:03  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a023e5 RBX=ffffffff81a023a4 RCX=ffff88811da39cc0 RDX=0000000000000000
RSI=ffffffff8dba603a RDI=ffffffff8be33300 RBP=ffffc900066c6a10 RSP=ffffc900066c6900
R8 =ffffc900066c6680 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dcc60
R12=dffffc0000000000 R13=1ffff92000cd8d24 R14=0000000000000200 R15=0000000000000024
RIP=ffffffff81a023d3 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555591e5b500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1987c138e5 CR3=0000000124b3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000100000001 0000003700000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 0000ff0000000000 XMM05=0000000000000000 00007fe6d5e12e53
XMM06=0000000000000000 00007fe6d5e12e4d XMM07=0000000000000000 00007fe6d5e12e61
XMM08=0000000000000000 00007fe6d5e12ee7 XMM09=0000000000000000 00007fe6d5e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a023e5 RBX=ffffffff81a023a4 RCX=ffff88801c688000 RDX=0000000000000000
RSI=ffffffff8dba603a RDI=ffffffff8be33300 RBP=ffffc90000107570 RSP=ffffc90000107460
R8 =ffffc900001071e0 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dcc60
R12=dffffc0000000000 R13=1ffff92000020e90 R14=0000000000000200 R15=0000000000000075
RIP=ffffffff81a023da RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f227471a095 CR3=0000000107068000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
