last executing test programs:

2.893286963s ago: executing program 0 (id=934):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000611940000000dfabb805f2bdf7d80000eed3c2f77f3c7fae0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000007a014000000000009500000000000020e30a40b83449ff7aad7081b86f01e2d7bc289ca5f37b9f5c1afc2ce5bb205c8425240f93abbb936fb2ecaa9fc3ddbd7fa1d5d9471967ec7680107732f205043fce7b300de8e3a114a9ddffcaca8e88068b6ba814474a11c6667ce97b14e119155a5bac86acfd58f99c08b38ccde8b47bfdd67ab4fb7e890eb58976cb3121cd30"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xd339903add3f4e53}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1a0, 0x1403, 0x800, 0x70bd2a, 0x8000, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20}, 0x40040)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008050)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='\\<-}&+!-]\'\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

2.892276826s ago: executing program 1 (id=935):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x10, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="9500000000000000000000000000a92067c0ff14389db888879ef71094f332031f61715e23e77b9007bd758a3ef0c42bcba7d750692f872e8f09b6642452cc0f70b9dc3988503baeb943bcaaae142b67cf8f3c4709ca73acac1dc63664340411a8f26f12fb687b8161ee04beeab819e9fc664cae855730244b838f089b2a7d8008407bf1a32b5f9a0098d17b7bed76788005b4eafff001515edb35623f292ea569894dd885632d3e1de5b3c8b253b65cf42cfd9e7c2f3fbe3b58367c43962eed11247254126bcd4a6f", @ANYBLOB="b75901e69862ae3813fd99bb91d9e2387977d060ded29de60d0ce7f2ce31490ec4fcedccf6e3afc609c7ad2f3e9819e6665157aafb950e2d664ef7f7dfef66eabc87faca2ec20b4f28774e685dc799e95cdd75985d1aff487ce7f38086ace2973bb91bbea2dad6158577", @ANYBLOB="a2649a5f36315d23585a2b9bc565a5c16aca717c983c6e25ed085eac4bbf5419296d9b6d5b05ad342b4a4c4f8437100d859095cf8f146abb16c8f931ab3b187be4b093ad3cee14d138bbc826fa737ba53e4511143184ea54e13ce725086ce8935016e9b1e9352e4d5f"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$kcm(r0, &(0x7f0000002540)={&(0x7f00000000c0)=@ethernet={0x306, @local}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000140)="ec5b5daeb2868464717b50e2dbf2df22b4491a9b7d0ab435794d190b54b424fed760a832405c198879cdb3782cbca7839001e35b86af215b17792982607fdb438da2056c52d9d8bb77a94276358db35273d7ddba31fff422521615ef89bef8195199359672db2367595e66e3535fc3595762bb7424917aec21b624450eae0ee7db089c2347cb425680185d50f59c017cd2feb3816d3f6a2969cfe65c6fc95c2d9d87f040c2519a57e84296d6d96a2e09989b5577ac8984fed5b8253d15aa2d2e85d2199272edacfc9f17cecb73c0c82b68af66617ec5634648bb845f37c7b5c4768b0190fa2cd314401fae764e5784642eb580c44dd46607f4c08e1daf53b71d2748991a01a0c4a7a9bdb8673dbf45e3cc6db68ba2eec29e9e22d3203a8bd3945cde5c566682a9814560ee10a928c0e1a4eb66265be6982baea7bd122745b0c1d8ba830e0d563947596b4f9fae134cce4fab3ce3b32edee44553d4580db9f762e377d5c503c2a9ec6b6bcd9f3cf1571f67f9bef3e50701f313c389afa4d1ab7f25bc8d391bf06857f8838a28ac3a03abf5591b70b4dbdf93dc4eb2cb1bc88e9e64e50dfb7c06620194dbc9728462a2dbbe56b50d429b51229f81e9c9e302ce0cd5a27b6c6fd65caef94fe1f2d4ff008b9cd7cc5f37564d28e6dd0e69dfbeff869dac2edd6573c7c4706a0e33c0fbd5fe7ec957912979fab884cbe8964595abf5bf91046d30fbf7110986fff5044e03f913f9473c7126da50b7be447a1b14c1926ed2c210e818332bfef21da1ba305e900d0b067ff4d49a72ad8dc7a0b006fcfb3ed390202657c09a03c939b9877f6b0859580e6fc7454fa239ff9175df53c6382aad5aef6a3792505f9536af4becdbabacfd1353cfb7f822398476225461ef2f800f2bff4ffe8f7ac0c63cb56b4b553b80081813e93c4b7fd12105eba7887e914efac66d498c97573d1ec4e759cf1b027641a03efb7029b517a9cb53317d7bf475f4ed27e86603ab8106653d29a65b266e9017a0fee9c27d651d95f0a1e2e6db9438fb132a7aadce41432e0306e13bd184502e9c1dcf9d309357c67dfc1d2973856f091ae2c4d0e2fb1aa1c100739e43901509b1f6b5f9cdca2ec314a0317c88cc2c8bb92a1e237968858ab83ae4402a42d53340d64c5f7ce68352546970f5d51b0e9c01acc8e9da925b0415f7356b2bb0be98ddf58c5eb45a92e7e80d3f9c9251f3730f0f8becf860f166ce35253792a5e038fcdd2dd5317332b5703a1e81388a085479d579383d832894204b1543931be63587e6e82a3e227dd963fb1c0d2df50416256a2384a5ea20c0b4fff356cd3d8bde799b2870dcaa1177d1a05032fe7a4c07a301a45d9420e5490744899ce2ed33e8d32eea59166e0bb5090ed42680e3fbc932916641ba01ef46412aa58edc35afa9afee0a0e8a1cf30f4acc94809fb7924caaa27fd1310b5dc94be09ff9e8ca3a7c4cb533e67064e4e384c3cf7f73e60c8279875364f31cab219813a0bd1960988cc2107747095776ef6a76396bddd771b399b49d10cfe6f4b613503e6e739e729fc67aa6806da57af249aba22a2bbcb52bc9d9ec9d673b5987eb361038af8b982fe536e9dca3b7a46c82e3f7b8a66468f021151158d42490d470a099af8e449088484e6febe6ca4ac9452648108167ab075cdea6822e075c3761e3662467860473de6ab9c5bda47c96a008c52c807b977a48b02e79d072e0c1c2be7cfcdffc8e9fd75bf9c7961997079d6933b81cf2193338d2be651addabc120556310a789fb0fb36fdce513dc06dbedc9a836ddd7fb1cf23b85624ba9e1db6819e897f6e158d1471bcc35e8dbd7b1fbc85b936eddb76265b2b8df6876ca220d2b1ff6ee04fdac80634ad1c911b19cc27afa7c52525babb73dbe45884c857af54cb10bef2e050dd06951cda426ac72b33079b1f4e2a88d828a4a897c88473cf2bc4ae6ba40c667227ed3ba6796fe6e281db39905dc1652590459634429425da6672322fb7b98a9c66e748d3f5776e53de1966eca9ce0913411384a7d41cf5fc17a9273c140ff89fce83d5addc1ef4444a07ff9755afa14836a57b225af0b4accc63f58d160b49358768660ec032851fce13fb587e75007745093364abfaeb753b2acc7d40228a01921fdfc8898b70fbc3d629106aba02179d6f382d0349dbbdae120767468b574b81bac620c5c20b27cb94ce61142e8fbd2ec786056cd24def584643e81a2c58b91500ccf4d732cd430e1519fd9eace303ee6a405d2b957f3c76709d7b101fb0a9ac24b48617c5bcf478acc51c2827ab0b0503a83d902f0f7535329617c2e5ff542b671baee616cccffc23cbecdc7c33fef75e2c6d613b89682c8dbcdf99d68d962d14b62babb18add3e0d200f96d2f315d637e4474340e8a357c4f090d3d3ca60bdb92a5f0f833180b64a5bd30766bc862e985a5963748db7b55d82f850e8adf4a6d46fa6aca1b8e2dc47ee6bc3a51d5a969ce5a847cd898f19590cdfa17709956e43c79019588f3de9bc32e2f7f0a847ebfa42b04e4cf18f22361c9180a1f7e8c339bb0264ccb3dc39f0da1f20be2fe25e7947cd4ed1ee271f9b52be39fe1c057ccb40f7aedd5c248293d80319ad5fe5d4fb526acf9344d2994f1f929d4f9819f1acbb8e1d99445bd709ee6aeac1eee461f2496f14358c3e92f21c2331a53c2cb7c85225eb0b3ebbfaee6973e3391c4a8fb95d931b88379f71fb82bc2cb7443a23947acd788af7a117c442d1f55491f162016d3ae3f350df985ebc22eff7bff9baf31236b20a7c2baae2e44ecb5cbbf3156650e2e373426d5554a5ffdf6de8e4735a3ed3b94a571f92feede0b9c60e3e3a3d18b23ad27c1f651e67a6255e317441df70eb2fb61157a87045b6adaa9a4aa8e2eb9bbd0f4496e710e846e2e08076cbb1a81edf42913b8711dd724121ea3e8e3e6c15f3296970303f7df02a69f3b74ab478080fd3e1ac3b1af3c1333a75510ea02ffce28a52875f4f11183593aef1f5b4c3dbe6408f18a8c26f7a5c9f57357929c9bec7e956e26dde7124f6321d60af38230f312f5d47d351633041b1625af44dddbf0838fa97024ec673904bf2214b4cae34c5e8cb45b49be911590fbb229473f1a662f7c77e21b54f52f1b60e4e16269784f090f7c97c6d7ae44a9b02b4fd6330b255b18fa16e410aa734bab0d75a211536f9a0334e812131827c036cd042afc7a00f42b2739d4fce87b7375c3b42e058b463b5afba2c851e0e79187417bc3626b42c1859692ca911299a781b5803c341eb2efe9ffad132e3efbd9f76bf0f260b0b836d0a46891a0a2e5aef268102fdd508b7bc1c45c82eab419537c48a44306ccfd589530af547ea95483ccfd394c640494571c84c4382220918ddeb9afc38751218e7dfa14ec563e02c44781a7f243c3e7b7bc580e347ed91e326147be9e6f561e11f567ce3261f9d2e6db6df1635358c9c545d8d3ada41e020f021d71cadb77dc81abb6484c42e8650f119acdf50020f4fb7439e7810202a24d09a60405f95bbba7cdf8acb8880ac8976c7ca8d5f992bcd947d8a8fd7c4fde041053080a7c420cf314fb53a13ed5e39b04d8064bd7d303b06e3da47e021c3dc5938ce4cb02b4cb7c4954808d8b80e0629122f1ade6cd8ce9844045c00e7ec86466b20be54a6255e615be55f8732c35d9673fa194e09c455ea7c9d3576fac3e4692d60ce1ba01fdb23cb71542fc4c0afd6bc0669c51b9c75f6d10b8b4afe984fd28778c68061fd589a08af5d2bd904f99944b75c94574464aa1366c31c37b50206730648db4a2f67e4fc05c0613807fbd6dd6f2051fef545c2cb9187d6f742d7a3cec58f46322806feebbccc4bf28773dfe2278be079adbe47236436f44e7b15b83692d6a91ec9f896a9a17ce945166c424149a8636ed6db17c4a2ec2eb8d26dfbd1bc086b1e9154c83b7fc9565b5549d262507d2eec9a099a76f4412325366de4d2e2045663d027f275158f87431379da974ef4d4352bddbf9e01a573bcf2a908ee0f924b90c29a4e49a24566a81ca7371db551d39bafd591afed168119aec6ba66b6a9d0fe1907085e09ed03feb20b4094605116d013d58adde806723e3de913fe783c807937b4df6ffda4ac6489005b3a8b3c086b80ebe894e9d2411b86a4705853dd57afeaa16ef0ac70dd4a9294389775f42dd3f1db743ab4246ba2dd4fb051219f9d11d48ea8ddb0d9726c3f7fa787639bcf9f7799cf4b2f4efe550b556f6aee6ff10292858df872299ad47acf9dd2a5c702d79a45ce278cf95a7b283c80be2b30add54ff62184a7d8fbbbe74014daf7f14de7aaf5b245665a1b367c557ba98efe34aca4a4c4ff0bc87fa986377791a2420665a3977b90fd35afa167e4144ad7ae8a8fffa8bd3a599a3620467960c37b6f2b675e6717c8c98a0a54985dac67ae6d16045ad11546d9f0f3df435f144acb741711291ffad295fa0ec7cb1b341ee1207c5387e86ac2e6c0be8034670b431946a96937dff8d3bc0e8c88eacf7b8bf8efe22dc9f247cde4610504691d286a61a1e72bf5c51e0c36137b912efbb1995591a44dbf25a6e59ee3f93c42b3fbc6cae6ab3997cb5fa4590bc80abc1207104de3fdcce811a27ea84b18034e94aa16b772b735674ca8f4bb8e514fe68132942b7101324f8f31c3e7ee2162770f19efee8d2f931b12b1b31c8ed03e838b0eea5a4e2375fea9d16f11b24c92ba4c4793256f77d25afbd82935f016fabf4e6e1a684b50d06e4a312d0dd68ac60dba355de33b1d616b076d60267853088e425b1cdbd67dbccc169297922fd56f9e6ab00ce4dd49a01df5480987fd163a3d3831f64f21d7f7492b9510622d3d123195a28303b555983137767c686a8da1394d451ad564d77bf38619ab1912b6992011ed30edcc7b82035b9224d4657ab3db2373ef14429ff0330e2317e93a023d9c7f9021ea7c61c81339f39efc0112372566b264034b6fe2ee672b5d48f560411b074c824c465f8eb8c0a68c50e9669eb7cefcfdf41f12a1d6d64d557598d8f3e41f18b8984954f30dc3b9f5f853910eb237603b7f8baef421b3e0729c8efb1fbe3b12727629ddab1fcdf4f0ae000747f819b7260326721a67e8e44a42c0d481ba4d1113d17b22fb162c61be165851b3028e68608e81005d579c9c154922244a48a31d431e29ce28a27e5bf8e1ad6641c51a144f0b1979fe54d2f443c20796ac61b4d9e43855978b8eb4bc824601cea50645d08a219e455530fe71c016ae8ac42a9a10b079f0dc35d30b5ee32523774ef6dc898badf3c0d65318927c25c844ce12ef6e4f532b53c9002de0c911e801dd48d08e714256cff9a08dfcea6faa91469e20a9cbbabcb4a7c2e73ae76bd58e5b10969345722e741970f09e8afd65eddfbbd0395eafdb4b1866e4d27368e139f7ffa5a87e5a4c970418b4b948d9e18fd3c2adfe2b122ab536cf7158497e5499a731b54b505673f6b5bcb23c9d4bc61355ec92206ea8ba5be96710edafd8a410bb02fce13c84d2ad727a57e059ac47cac8b21c7e46fdbe242b70095fb8942950b7d5578d6791319fccc273ed7dab3e40109e0cad49be82fbd4ea2cfc2a43e8f255eadfcf423f9925f5c5bfd1ca68d0c7dc5f4ba3b3b53effb06cae6ea84869a7090675b6ec96e7bd984c75a2e1030a9315b9b6d96e58e7a3decbab222a693bf2820644e5bd713b12acf4a54e42e64f0a3362fb539236a7ff0131170a6544ed4bca93d33b7f209228b82ddc92540a126eae7d0dc77101edb07765132562f07819c8f33", 0x1000}, {&(0x7f0000001140)="13fcb7e168a0cbbbd7b2ec6779fc782eabc04aa3e1c43a559ec18a53a75120176721d93adeade914eeea5b4be8e479796a602af76634e8d86a254db14d990148dcb5c32bfa4665338a1a804da2bb58985d9d5bb36244dd8ad3d467d001247fdc29cb245df507bec378f391ee2e7ca03916eecaf8ac7749b8db276382a4532a060209d53cdde674efb186aaca2fbe3a0bd62843c12377de822ba83da6ac7ac2234c59c574d08b3a7ca7ca3ffac13c8c50665006016a86e849e694c582fcdf5d487d2e5f8b1bffef4220fe86446d0392e0308c6a151b1379454b", 0xd9}], 0x2, &(0x7f0000002580)=ANY=[], 0x1298}, 0x4004840)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x87e78538bd254cbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x20, 0x0, 0x0, 0x7, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001280)='io.pressure\x00', 0x2, 0x0)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x61443, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x10}, 0x50)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
close(r5)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127)
close(r3)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8410, 0x0, 0x0, 0x8, 0x3fb, 0xb, 0x48f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x83c10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100, 0x6, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

2.780171541s ago: executing program 1 (id=937):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r5, 0x0, 0x0)
r6 = syz_clone(0x0, &(0x7f0000000340)="fc5af288b63bb279724d3fea989cb3eebf3d10b5c6ebdd047b91197ee6b52c6d644d252ca48bf371", 0x28, &(0x7f0000000140), &(0x7f0000000280), 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x81, 0x1, 0x41, 0x6, 0x0, 0x4, 0x20800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x100001, 0x5, 0x2, 0x7, 0x7, 0x3, 0x0, 0x0, 0x5, 0x0, 0x3c4e}, r6, 0x7, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="260a0000000000005d8ccf66e30c91b1180000000000000000000000000000009500000000000000bd4e949d3826ea95d7a23a9db25189187018d069911727bdf43b00248bfe95f96b8b0fbd1bab52669e9d6d606427c6c15ee8450c76712864553974e0806d0716a6ddba5c3fbae630eacd65dc960de3d9bc6e42d7bb5c"], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x40020000)
sendmsg$inet(r2, 0x0, 0x0)

2.662846433s ago: executing program 0 (id=939):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e007d9a21d77f39fb6f4d000c000000010000000000008004000180"], 0x20}], 0x1}, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="852000000200000018001500fdffffff00000000b1000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x3b, &(0x7f0000000140)=""/59, 0x40f00, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x20002, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x10, 0x6}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0x2000000000a, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000300))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6c4900000200"/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000734bf1c686a10b000000000000000000000018118000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x10, 0x4, 0x10, 0x8, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27}, 0x94)

1.903157697s ago: executing program 1 (id=940):
socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xf, 0x4, 0x8, 0xfffff800}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbfc, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x2, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
unlink(0x0) (async)
unlink(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='((]\x86\xde\xb5\xe9T)') (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='((]\x86\xde\xb5\xe9T)')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) (async)
sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)
sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8010) (async)
sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8010)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'net_prio'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2d, 'net_prio'}]}, 0x1f)

1.77337229s ago: executing program 2 (id=941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

1.772200827s ago: executing program 2 (id=942):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10000, 0x2, 0xfffffffe, 0x0, 0x2b9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x4af, r1}, 0x38) (async)
write$cgroup_subtree(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81", @ANYBLOB="8f83e2"], 0xfe33)

1.652219103s ago: executing program 2 (id=943):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async, rerun: 64)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0) (rerun: 64)
sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x20) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x2806c8cd}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)

1.563897412s ago: executing program 0 (id=944):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0x29, 0x7, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000040)={'vlan0\x00', @random="18faff000020"})

1.513541459s ago: executing program 0 (id=945):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032900fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0xa, 0x0, 0x0, 0x0, 0xb, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x4100, 0x5, 0x0, 0x2, 0x7efe9c32, 0xfffff6f4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1a}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x814)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

653.376156ms ago: executing program 2 (id=946):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0}) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10020324}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xc8, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_ID={0x8}, @CTA_MARK={0x8}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}, @CTA_STATUS={0x8}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xbf2}]}}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0xa, 0x8001, 0x1, 0x4, 0x9, 0x1a2]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24010}, 0x20004041) (async)
fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3ff}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x50) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x74, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x1a, 0xc, "8b6e6966bfaf1bed3e7febcd5a8f626d88cbe9c9950d"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x801) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1a0000000200000000000000080000001811006e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x25a, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x10, 0xeda0, 0xfffffc27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0xffffffffffffffff, r6], &(0x7f0000000a40)=[{0x2, 0x1, 0x0, 0x1}], 0x10, 0x7}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e0000000f000000090000000100000090900400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000000001000000060000000000000070e92590dcc5678da943425b88601ac2f2244b1022390ecdd77be6ffa6cdbbfc726251cea89ad7b419a5e380a775839a8f575e7b4796dc8e4954e2b59578e830b00db5958ce5e00cfc02ff90d6f3a07ed52ea776d817f1fe32249510ac127c4d108ad77bed63", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000bc0)={r7, r8}, 0xc) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x81}, 0x8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r9 = socket$nl_crypto(0x10, 0x3, 0x15) (async)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0xe0}}, 0x4850)
sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}, 0x20000804)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x1a, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x8000) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000000000800000"], 0xb8}}, 0x4000) (async)
close(r1)

493.65748ms ago: executing program 0 (id=947):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = syz_clone(0x800, &(0x7f0000000100)="d6db", 0x2, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000500)="9cafbdaf7f78edc9e4b4edd9b6c58afdf2f070f7ca41baf5aee0286fa1d6630c81b94a5542d24c79")
perf_event_open(0x0, r1, 0xd, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x0, 0xc, 0x559, 0xa, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x12, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8722b14, 0x80000001}, 0x0, 0x5, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x8000, 0x0, 0x1, 0x0, 0x3fffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

490.290525ms ago: executing program 2 (id=948):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x80000000, 0x2, 0xb, 0x0, 0xd2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1943}, 0x0, 0x1, 0x0, 0x2, 0x200003fe, 0x7fffffff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9037}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r2}, 0x8)
sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0x98, 0x7, 0xb, 0x101, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x3}, [@generic="15d5bb51c687b5eb86e3d344a1fe9373aea664997f352ee0c55ad46299f4cd581f53a5cb959629e8a382710cef5ca222fce4be4ea40971d3aeb0a1f999ed300dd67576fccfad8042bd0f32f92e7c3cc18e8f9516544c8b831351", @typed={0xc, 0x29, 0x0, 0x0, @u64}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8d, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x40}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11e, 0x1e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x148, 0x148, 0x3, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x6}, {0x8, 0x2}]}, @enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x9}, @union={0x6, 0x7, 0x0, 0x5, 0x1, 0x5, [{0xa, 0x1, 0x6}, {0xd, 0x5, 0xfffffff9}, {0x9, 0x8, 0x5}, {0xe, 0x4}, {0x7, 0x3, 0x3}, {0xa, 0x2, 0x3}, {0xe, 0x0, 0x5}]}, @var={0x6, 0x0, 0x0, 0xe, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0xc, [{0xa, 0x4, 0x2}, {0xe, 0x7, 0x9}, {0xc, 0x7ff, 0x95}, {0x9, 0x4, 0x5}, {0x10, 0x9, 0xb2}]}, @var={0x5, 0x0, 0x0, 0xe, 0x5}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x75, 0x0, 0x3e, 0x2}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x6, [{0x10, 0x0, 0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000ec0)=""/40, 0x163, 0x28, 0x0, 0xe350}, 0x28)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000f40)={0x3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r6], 0x50)
r8 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000240)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)="c9357543258f5ba23d02c7fb784ee34989ef5129f8631e11f6ef", 0x1a}, {&(0x7f0000000580)="cbe650408150f939d035b666e68038d022c965977327ccae4376bc96610c7f0e2db618616d9906a50fe139cc2174cbf6a86bb50b2cab81d66013c9b253476e2a4c8f9cb991ee383b04ab5913a55a67ab6ebdbc4bd4f88090d53e3c62f6907ac15b082e22df0b0baf7c9421cbc79896801f85d13ba847e837528df6be1c12434ed276ed379b634d7bdf878d6d1196416093e8b5855bbedf8ed9b363", 0x9b}, {&(0x7f0000000640)="33698e456fac7b758e1a4aa4338d96c94dfb26ce01e2353d22fdd30d8a46339dd523b4929bf3f0a6466069ade80769a4ba7812ff53ca402612a383cd1cb6ff7fd3514e9c77e424e871d77e108da0a3e82ae4763bd923aef9e4c1b1ce418aa7f18323d14267787bdb4052bb2a7f3c4780a6149d2557d04462591d7e6fbc09bccff5bd2da2a1362c098d8a3689e744", 0x8e}, {&(0x7f0000000700)="8f8fff90c67560f4c6e63b0f2cb8aa29d60a8bc79fc9934e0c80b483b57b7ec5c9f590100b6a7ea137882cdc96d7487c6649677b5fa28dff8355ae7cb2ee39e4a40896b97f88e9c2aabc8b52f505e007650c1d9f3c33d51c1db1eadd9a31a4326a84ce12a6c65322eb0b1a4ee0f4a022943c37d985851a727f478b06030d2ea8fdf0763369fb3e6aa12ccfd8285497a5fa4f2c67ebb52bd76eae6bcb28bb3828416eebf631f15091cf6414c17b889b5e523971755a83d6e64939293c15", 0xbd}], 0x4, &(0x7f0000001400)=[{0x10, 0x10b, 0x10001}, {0x18, 0x102, 0x8, '*('}, {0x88, 0x112, 0x4, "2eb4f458c6c219ce425380ad17f708cf489e595a955efb71987e4fc0f847dac8c88cc0feb6647c12872563e48de8b07d87f8d949b06fbf196df38cdf4393f38b35fe5853c63f1c4847c2f1fdda6329a523e61af070aab2626d69c0ce37d9c201f7e7d228062856c8d2834ef0ba0295614ca3"}, {0xfd0, 0x109, 0x1, "5f2fabbe0270d9c42e09c7bf85c3093e8569f83fedc2b9cf55d261ab8bee26d29c05c23e578a100be704a7e0809b2197b59e907d18617d7a6db2b7485d86aa73650b2f20e425a2166be534d299d86cd8cc68b0938c9ee5b0394cd52419abcf92430b6577cda9f36bc989fdfac47f3af495bf196d8750d008b87d19ff11235b7e27eec28d13ebc30d3943f44aa56756060f156be7ca75e47303acdd8524df817bd6e2ee64ac7c816915bf7972f0e38d8311a14d12da7136ac08198a32918c8bd926b1f0f418b4519b8ef2964823843de220f320b3842b34ee87136f7e2a261cd2149b55d86a82400fc723e8f25b2d8a123377516aa90e50628004e80f546bfa66916788c994135fa52c7773e19ec80cd1d84ed489f6b414660e0d074e576d421b811b8c4c33a0a453e7c70421a02908abe3ef1c3cc60a69b8aabeb989bf68038a79705831ffcd102090993577b31b0a98cc68e221bd61d206c98d45a10c93fa7cb28de6b543a025c254b7362313bf3e46cb4bd8084358cb3920ad7ef53fa603464ddd744531891b4a06d2afd71af589d6e7d172f368431b98165432a3e174a7f617d90ebcc0fbf9ad93ac47c38bc1927cd5e331f6218f192ed0373c7c469c10d13ddd9c9e5f8d7b361319f1cae9071dbf1c2bdb190d6862419bd4b8f6391e77b311d4e8797a46440231db941d96212eec1ab2f5b06dc87db1a74672a9eaa20852dac03850210d8b63e9a567cc9d3c1b78ed8a41d17904d378132004522432bc9807d6a6284f36d05daed1fe0529ba97e83e67357dbcdd5207c05087d35979ec0aa3cac24442ee60328b2d0caa44c1fd65d61cdddf140d29b046c998fb9e95566ac77826e49297250110904cca6516d280e6abcdd378fd6f7a95b562c2113991da4c8e892f925363b23ec88dfe91613eb9e5dd5a8ca6ae0488fdbe1b0d5ec469eee217f156180b5a877d4a27cb7b4d4c745ec76c9b5aa6ac32fa69d0606f5a53d6873b5bffa014fae3b8ce3100fc8090a691564b24ef309533b32d1802ed448644aedeb8ef04d0759c848f1e5e5e8f2486c97dbbb3ee5fba48ae0e60b9fd179c05cf0816a22cee32927120b9628c77261af428d212c157ba937c74d8f95928154229de7e5985caa0626baa6827d76215dc8b288a2a53832458711e50282b458cab839340a0fffcec192aa942e200e38b1f82f5356b539350e037733d60153e288ecc5ee572f373b25628b9ab36c3ab672eb89c011d99a6fe340e18dea438a831539c73f700741d50564299d702ec1ae575ca68ca4f39fc0c0e70f8514d6794ecb7293d0e5a59b7cf95223235ce29685c3556c538aeb7eb112314c3ec335f76caff01457daf3b806900e9318ce420ada01e225f439f576b4e1b9036c471a7ffc6de83059b7cae0a7a9b05630433f7761a6e1620d2213220698bf0b732ffd206863c5fd7397caee80c4df4f6d2eb7a909372e900ff3732461d03c9ad9cfffe9d4963f791c731a03c8ecead6d3ec10177e8316d05f88cc1e80c3b3623a0a2464e1626b074a2047198865633053be64a5a32a75d7843ad687cae94609c522d85093566dfba455779def63a869e40da9d31b716180e305e76c7ecc6762c0cd06980446f045fc451536903ac050d1d085ed09070bbd1f0b3dec72410a6c96d317cd82488408cad0d3e9a2e973b7da2950f64fac2d3061d22678367155fba2dd4647fd324ad7da9ca46dced22b4618e514931f6b1aacf19f5acaafbfeb64cf39e1db287ecacab8fd6f2bb1e8ce31e3455d3e5b8acbbde91422bb393775a217062f76065fd850777ea2c8ca7e7d61782ae4d1f7ae403cb7393235a1a07b6c5564145ce661bad4500a04c2d2ad5d2fbae997f8f43dab942b6b661357042fbc66f2b0587bc961026f4fc5d378491cb5582ff326bd5e0a46c2790632be0356494bf39fee75f01af741a709c9b0e1fb419ffdea4ac232a8fb2cc07af337272af5e989a02b273e1f59767b62916295770df54e4327e5cd0978e8a18d478c175cb5636494eeb7b1303fb72efb0cbe14ebae9ab6d1407f8a67e75f800a08e7b650b78deb8d437f3c721b87810961ad990cf0af1f180cbad8cc1af9a43714410fb3a9305c7fa7b859224a2d08d12fc013d988e4fdfb80327515576fbc9d2ffc98e84346c9ceabf9ce2eaca39ebf9fa49b5aa8fef99cb5496bbc2bdb62ed63eb0bcaac34be224181f7c2a817bae148c5b043843a976eee6ed887bf0e4570c9b48ba0b966d5598466dc6df55be64c1dcd176a5fff966a220f6d2b7e247271dc6c37548fe555405b8a735b8dde9d6797078d52b377f3ac992594902afab4cb7b99ed8cd5118fe7bed0f1abb56e36c443d0120dfed1f9912eae4e1e6ed24299e3651607b11819a3249a50d443993fbb05bcef57a073d81a38092d98c47a9da6b5e5f41eb0c1631774a6ed860c3cd71df96c901044c537ce98b4e0cd55217efd882e150bddcda5a71c43ab1eb8500eead75f11609589b64978aeb41641456ae54360da80605bfcbb7dd8c67de038339630196050c27ca7b00e48270e907eca06f6110a870d86353189e7844396c87fd0bc360641d381595131bc9ca4b437627590f8b12512be1c72876d399340ac7d7132a272bd940ec403b51f229a57197ea1854532b971562f0c7081d7bda2ecd74b4c4ae9a8dcbaca2747f9dab012b710c3193782f9a8278c50930ad068e024ff879e18e70d47bea978ebfc7c95d710c45a2b47ffde64e192420ce81f507dbe9816123c71db6fd11b3050729497a6ccaf727919033893a403b680381424da7b845757a7e135aebebbbdd9a75fd8a2dcb7ca55208785f9ce6552f5d6c43a43c08410502da522f11c00dd8ce94d240769ed5676eeabc6d40a1e94f139eef3dd60406793585c891b273d4d3b0840adcd60324c7de67a17eebdf9fb3f4aba329621883bb48f1dfb261c9e31fc52b39f3d4aff8411bbf9bf722000f1199adee6c1bd089245a4c23a0a10b9aca4fc729102fd39ad6dcb9ac6045dcd600d734dcf3de5d91e4620afdbb87af2d445ec3df39915da3b26481595ed8add1bb93fcc72c7cd985988c98b07243f867acf6b928f773595b93c29c9a0741d183defc86a71f1cd6ce22742b24fcdfb5bc4517a138d74f0206482598101b0b52166cad3de226634243679f67bb6a097409cdc14c83f1f9f46fff14534b6572e967a9edb530536e9a0fb9a772e7657e36f940133e5330c865a77757635564b1acf2567edbd80cd3724f30356465c3aac14569e2ec2a37e6b16f64d87670d4a8e3ea1f4288e5cdaa47e3ba91e06ceed167c92a010180f64051f0059d98afbb8cbb3ba85a7716bff4c25c6e3332c9f493879799fcda1203c2ca25bf320252295f6dc37756b7a52c9468369c6ce2c5d32bc0ddba82481ee4e07fccf2f40a7ad61fdac7ccbda3fc4cc18e686713c99f92736ec0ec845d470aa2a43294249ee9dc540a21dd7f8fed32bf4a6c85baee75daf3810cd5d0252b19b606ef2375a0c23a5fd07dc463927c67a4c3b6cbf7bf26dbc7aec69609583e0d977074d7e0cf013de3cf7d3a7bc8db8641f16e518e8427c74f0a782671b612a260b43dc439a459367fa357c7c208452e1a4ac6cb3f7419537565b2fa80c75645d6ca99e1c069ee9f04e52948eb2539d2ef2c27eae3ecd05bbf63c085943f12129926ed36c2093f09d42796269744a5bdff8257f2e0efc8c07b99940a3c2db78d5ec92acb58f09f09957cd6aa37eb18e807c9445a44fa94049d344173fb60947c30b83015030e60b0b3ca74d166267180fc633b15e4d4bddb9f03fa8df7f797d0fbbad08427afc0c292827f5a9a73ca63db2bc98de0473f8be8eed571a4a9a01d065920493f674ebbb7c981e409ad190a7648eb512d735b49ea8c15db8843cb0dc448761a4d501dfe8898695a92d184bae61d09006f914245364a7b74f3a3c04ee09c8430ed288c6899d3e874ac18d62f782fd6b2ef5ea139eb3be86e68fbe094302193eb644f8f25a68bd15f3762eeba87193238487bd3f7140eb3eb956f1732c65f2b3b3d2f524345260dad3ac49381ada8df94a8aa6fbd3fcd68aa64eb756e23a7faae553653796d6ef012e614398bffadfa5f2fbdb449cadbe6b9976222ff9a772d1dd1b5cf3ce8885383fce02e3ec31372c1f570fc32187cf575d3e71cb2d2ed69d8ae938f4997dbab55050eb78b93572804b6f0a353492a1c7c35ac768d2e00ebfb8f33719ff8ab652b284ad534863cf58c2b043a797b9484042c2791f989423ae05ca7497b24b158d37e848f8c9c2cb08ae3ece2916d4985eeb8dadb265f19b12d9f596d96505827fb03e1d67f984d223f1e62037feaa6a8b99ad8318c3668524c52b298000a69004b00e4628458e7ed8aab8a2b57d36d21dbb77670862afbf1120849b9b7c792482eb471f5582434b0bac064f7a14dbd4c7e644d66f335eb6d193902e0ee6196952ab2aa198fb9e97239236f89c9df1f6971da3c590f56988ebac91d5cb82ff424d1ded034122bc1611109a2108ea0a90de7c20ff3c864b14935cb3579d15aaea38cba78a41b3429e049c776540be32ce5e782bd9b1555bd2380f456fa39d01fd454674d957d56725b30f624380ed3391f618cbcc605edb752f99b8cb5ee43f066eb2a9ea88e5dc5581fb41983e97e1f3f50ca15558a476cb1d839a4ae7413eda31f61833db75228a69274dee5568525c9cca4a4ffdcd9b99661a66d1dba496c8ab166b4e2a8d521b97fc0aefc838d1f45888eccf226cdce013adac989b3f03dc7b4ac3b3156a333fc60a44a8fef0142063cd274bfd5f5a9649de24ccd90753532f9973a7cdf220c9d5c77da3bcc2a4a04fe25923f4ab14cd5d689b2943054b07ea1d4c8f6e12989d1d6369d1571c7e3dfb941f603fb7257fc9f405ce555b5ad5747ac5590a0704445f2df3af2b99fc25807782fe7c7c22fd836801bf0c279d43fcbfcbb489ac34f1d523da8a0c514b6d96bb78a4c2ff4848f2ce5c661209726bc1b41bbfb8a186078486997bfce6a386539d246507a7cc79d06b343621bc52974445e82a1e9e26f7167c9ddf8f79e3069d9ccd8106cb73d2436c6e67ddd02eb51f2177ad98519ce46c266e1e7994ece70b7d9f8ad6ceb0f0115270a292034e5f2c40d1e598e537d58e526bc5af6fd752c808e8862906f55609cba11e1df47293e0a1da9f4582217e88300e5ccb7371defccd1c9c7b3487458ef0f10db45352a9505e3881797319ed68161b40a689d768b3517444e20dd1a9cd920f054dc040f12942b364e272f2311bc0437fe3312022cbb951349c58cde5d7ff4c029545034ec0bb291bfa0b13568fba50ae4cfe1e245190756ca9f32520ae7709a61cfb93987b83ceb9d78f0569599cff65402caa40e7f2a35835f3b6296447de369197c0ec520b2776285a45c10657d084e4647aa11f601f998f6a705ef65bec316c8177384d126615566de126e1a5afff55117214cdeafde7fc73c6cc8e14f1cd02a89b4b99a5681870b31432fb52eaaf4a8407436bdd963a8a0fb0455928ad4316ee4a1948e03cc3fb4b816e8d57a9f68660511f6e3af1c85cd11b9798ff01ea01623c2ce5580b3719cd402f4199e0b9368657ab224d2d6afe46633d8b14bea68faa6652b3871489bf253da7b4024afdf561f0a4be409ea0c43d094c0f409d1c8736844fb"}], 0x1080}, 0x4c185)
r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd56, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38)
ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000000cc0))
socket$kcm(0x2, 0x5, 0x84)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000b030000000097813df69078762c83dd3d9bb4f1ee0000120002000003"], 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="76ea090000000000009ba56a886411", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

381.509663ms ago: executing program 1 (id=949):
syz_clone(0x40893000, &(0x7f0000000100)="8fd8a41d4256b11b2ddd0344628bf4a21461f7dc7eb74377e3f55381fe4dc84273a85df01e1206ac8d1ce0bcdad486", 0x2f, &(0x7f0000000240), &(0x7f00000004c0), &(0x7f0000000500)="e03e6481281f47650364dd2fd92b8b374821c051aa94218ed4ca0c")
socket$kcm(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000380)=0x21000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x8, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90a2, 0xca, 0x1, 0x1, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)

203.888936ms ago: executing program 1 (id=950):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xede3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9e}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x30, 0x0, 0x20000) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
r3 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@generic={0x10, "ac41d18b94c7a8574d577ff9cd0860579bd286850a7a8bac1368cd31d44fe476b9f9de5de841f5a787ea098bfa9284415455a0ef530875e48db75908eb75104d366a15664736f383c9248504f309210554c8e55f8defc58a1a3bbb077be790e1264ee613975a3fa9a52420e6cc7143019dcb0a14f645056e5d95a40e6b07"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200044e2400000a00006000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESOCT=r3], 0xb8}}, 0x0) (async)
r4 = socket$kcm(0x2, 0xa, 0x2) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8) (async)
recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r10], 0x12) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x21, 0x200, 0x6, 0xf65, 0x50, 0x1, 0x7, '\x00', r6, r9, 0x0, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000680), 0x1003, r11}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r11, &(0x7f0000000300), 0x0}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

73.161114ms ago: executing program 1 (id=951):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB='6\n\x00'], 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r5, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
mkdir(0x0, 0x44)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

1.277267ms ago: executing program 0 (id=952):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a8001604040001400300000003", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000300), 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 2 (id=953):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xda, 0x6, 0x4, 0x1, 0x0, 0x0, 0x3844, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x810000, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x40, 0x0, 0xc7c0, 0x6, 0x7fff, 0xfffffffd, 0x6, 0x0, 0x78, 0x0, 0x234e}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008040)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000003b5805a84f37c9ce00000000264a884f79d59d54000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015005e07350080000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000001800000000000000000000000000000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xb, 0x0, 0x2, 0x0, 0x0, 0x480000000000004b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x4000000020}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x5d31, 0x10082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r4, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89f6, &(0x7f0000000900)={'wlan0\x00', @random})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000010000000200000040f8fa06905600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=<r9=>0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r9, @ANYRES32=r8, @ANYRESDEC=r5], 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50242' (ED25519) to the list of known hosts.
syzkaller login: [   48.722657][ T5777] cgroup: Unknown subsys name 'net'
[   48.816605][ T5777] cgroup: Unknown subsys name 'cpuset'
[   48.822757][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.324620][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.071673][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.076207][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.081704][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.086361][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.090626][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.094152][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.098017][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.101163][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.107036][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.158269][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.213498][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.218245][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.228279][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.234722][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.238932][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.463774][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.539152][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.581935][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.682544][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.685962][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.688664][ T5845] bridge_slave_0: entered allmulticast mode
[   55.691923][ T5845] bridge_slave_0: entered promiscuous mode
[   55.695631][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.698587][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.700913][ T5849] bridge_slave_0: entered allmulticast mode
[   55.704113][ T5849] bridge_slave_0: entered promiscuous mode
[   55.724935][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.728551][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.731142][ T5845] bridge_slave_1: entered allmulticast mode
[   55.734288][ T5845] bridge_slave_1: entered promiscuous mode
[   55.737260][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.740907][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.743613][ T5849] bridge_slave_1: entered allmulticast mode
[   55.747024][ T5849] bridge_slave_1: entered promiscuous mode
[   55.752261][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.755045][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.758276][ T5854] bridge_slave_0: entered allmulticast mode
[   55.760916][ T5854] bridge_slave_0: entered promiscuous mode
[   55.793379][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.795740][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.798461][ T5854] bridge_slave_1: entered allmulticast mode
[   55.801568][ T5854] bridge_slave_1: entered promiscuous mode
[   55.815273][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.821371][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.873841][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.879980][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.886372][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.892362][ T5845] team0: Port device team_slave_0 added
[   55.920740][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.926192][ T5849] team0: Port device team_slave_0 added
[   55.931025][ T5845] team0: Port device team_slave_1 added
[   55.944089][ T5849] team0: Port device team_slave_1 added
[   55.995181][ T5854] team0: Port device team_slave_0 added
[   56.012207][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.015093][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.026292][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.032893][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.035597][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.045428][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.050596][ T5854] team0: Port device team_slave_1 added
[   56.053520][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.056449][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.068913][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.074145][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.076838][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.086757][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.149975][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.152617][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.162794][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.181470][ T5849] hsr_slave_0: entered promiscuous mode
[   56.184112][ T5849] hsr_slave_1: entered promiscuous mode
[   56.186806][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.189246][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.200187][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.225927][ T5845] hsr_slave_0: entered promiscuous mode
[   56.229980][ T5845] hsr_slave_1: entered promiscuous mode
[   56.232765][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   56.234921][ T5845] Cannot create hsr debugfs directory
[   56.312793][ T5854] hsr_slave_0: entered promiscuous mode
[   56.315296][ T5854] hsr_slave_1: entered promiscuous mode
[   56.318393][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.320532][ T5854] Cannot create hsr debugfs directory
[   56.597518][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.622059][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.634775][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.646656][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.682046][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.690516][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.697091][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.720049][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.751534][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.759915][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.770231][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.785324][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.894390][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.921387][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.941403][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.945930][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.948475][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.969284][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.975272][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.978270][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.990892][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.002841][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.005900][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.024416][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.035802][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.038944][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.053999][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.056995][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.077749][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.080301][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.148150][ T5237] Bluetooth: hci0: command tx timeout
[   57.229364][ T5237] Bluetooth: hci1: command tx timeout
[   57.318247][ T5237] Bluetooth: hci2: command tx timeout
[   57.331278][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.366678][ T5854] veth0_vlan: entered promiscuous mode
[   57.374889][ T5854] veth1_vlan: entered promiscuous mode
[   57.409376][ T5854] veth0_macvtap: entered promiscuous mode
[   57.418970][ T5854] veth1_macvtap: entered promiscuous mode
[   57.424278][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.433839][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.443017][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.453654][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.474697][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.479974][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.491699][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.503017][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.548214][ T5849] veth0_vlan: entered promiscuous mode
[   57.570550][ T5849] veth1_vlan: entered promiscuous mode
[   57.574660][ T5845] veth0_vlan: entered promiscuous mode
[   57.601538][ T5845] veth1_vlan: entered promiscuous mode
[   57.615902][ T1958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.624001][ T5849] veth0_macvtap: entered promiscuous mode
[   57.629848][ T1958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.668885][ T5849] veth1_macvtap: entered promiscuous mode
[   57.681610][ T5845] veth0_macvtap: entered promiscuous mode
[   57.682758][ T1958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.688300][ T1958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.694352][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.700064][ T5845] veth1_macvtap: entered promiscuous mode
[   57.706444][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.727964][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.733023][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.740145][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.749012][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.762374][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.776524][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.788489][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.794972][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.809572][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.839654][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.844368][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.905497][ T1958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.912084][ T1958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.954667][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.964607][ T1958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.971132][ T1958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.021196][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.023849][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.068727][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.077792][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.173586][ T5926] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.276190][    C0] hrtimer: interrupt took 36170 ns
[   58.295933][ T5932] netlink: 'syz.0.5': attribute type 6 has an invalid length.
[   58.317105][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.722216][ T5959] netlink: 'syz.1.9': attribute type 1 has an invalid length.
[   58.786653][ T5963] veth0_vlan: mtu less than device minimum
[   59.229341][ T5237] Bluetooth: hci0: command tx timeout
[   59.309173][ T5237] Bluetooth: hci1: command tx timeout
[   59.405124][ T5237] Bluetooth: hci2: command tx timeout
[   60.203228][ T6000] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   60.205906][ T6000] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   60.256908][ T6005] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   60.647309][ T6022] xt_l2tp: missing protocol rule (udp|l2tpip)
[   60.663889][ T6020] netlink: 72 bytes leftover after parsing attributes in process `syz.2.23'.
[   61.319336][ T5237] Bluetooth: hci0: command tx timeout
[   61.388536][ T5237] Bluetooth: hci1: command tx timeout
[   61.468202][ T5237] Bluetooth: hci2: command tx timeout
[   61.609014][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   61.669644][ T6026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25'.
[   61.995259][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'.
[   62.002597][ T6057] Zero length message leads to an empty skb
[   62.010746][ T6057] netlink: 7 bytes leftover after parsing attributes in process `syz.1.32'.
[   62.015062][ T6057] netlink: 76 bytes leftover after parsing attributes in process `syz.1.32'.
[   62.217356][ T6066] netlink: 'syz.2.35': attribute type 29 has an invalid length.
[   62.225044][ T6068] netlink: 84 bytes leftover after parsing attributes in process `syz.0.34'.
[   62.812010][ T6101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'.
[   63.184577][ T6124] wlan1 speed is unknown, defaulting to 1000
[   63.199027][ T6124] wlan1 speed is unknown, defaulting to 1000
[   63.229299][ T6124] wlan1 speed is unknown, defaulting to 1000
[   63.365264][ T6124] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.479948][ T5237] Bluetooth: hci0: command tx timeout
[   63.482331][ T5237] Bluetooth: hci1: command tx timeout
[   63.540927][ T6124] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   63.557712][   T55] Bluetooth: hci2: command tx timeout
[   63.575624][ T6124] wlan1 speed is unknown, defaulting to 1000
[   63.585113][ T6124] wlan1 speed is unknown, defaulting to 1000
[   63.590415][ T6124] wlan1 speed is unknown, defaulting to 1000
[   63.601498][ T6122] Driver unsupported XDP return value 0 on prog  (id 83) dev N/A, expect packet loss!
[   63.631277][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   63.867328][ T6139] __nla_validate_parse: 5 callbacks suppressed
[   63.867338][ T6139] netlink: 822 bytes leftover after parsing attributes in process `syz.0.49'.
[   64.588309][ T6159] netlink: 'syz.0.55': attribute type 9 has an invalid length.
[   64.984272][ T6165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.58'.
[   65.028826][ T6168] syzkaller0: entered promiscuous mode
[   65.031133][ T6168] syzkaller0: entered allmulticast mode
[   67.626035][ T6201] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   67.838830][ T6209] netlink: 'syz.0.72': attribute type 10 has an invalid length.
[   67.970497][ T6214] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.72'.
[   68.106013][ T6209] team0 (unregistering): Port device team_slave_0 removed
[   68.121832][ T6209] team0 (unregistering): Port device team_slave_1 removed
[   68.160587][ T6201] syz.2.69 (6201) used greatest stack depth: 18808 bytes left
[   68.255262][ T6221] netlink: 'syz.0.74': attribute type 10 has an invalid length.
[   68.262695][ T6221] netlink: 55 bytes leftover after parsing attributes in process `syz.0.74'.
[   68.345176][ T6227] netlink: 148 bytes leftover after parsing attributes in process `syz.1.75'.
[   68.407295][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'.
[   68.423919][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'.
[   68.445206][ T6240] netlink: 'syz.1.79': attribute type 29 has an invalid length.
[   68.448325][ T6240] netlink: 'syz.1.79': attribute type 29 has an invalid length.
[   68.549925][ T6247] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   68.605179][ T6255] netlink: 'syz.2.83': attribute type 10 has an invalid length.
[   68.614590][ T6256] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   68.618092][ T6256] netlink: 55 bytes leftover after parsing attributes in process `syz.0.81'.
[   68.639426][ T6254] netlink: 252 bytes leftover after parsing attributes in process `syz.1.82'.
[   68.837315][ T6261] netlink: 188 bytes leftover after parsing attributes in process `syz.1.84'.
[   68.881581][ T6262] netlink: 'syz.2.85': attribute type 29 has an invalid length.
[   68.885656][ T6263] netlink: 'syz.2.85': attribute type 29 has an invalid length.
[   68.918116][ T6262] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.85'.
[   69.333570][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   69.337056][ T6278] netlink: 6 bytes leftover after parsing attributes in process `syz.2.89'.
[   69.372241][ T6280] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.90'.
[   69.421274][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   69.428879][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[   69.506293][ T6285] bond0: (slave bond_slave_0): Releasing backup interface
[   69.595059][ T6291] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.93'.
[   69.599004][ T6289] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.93'.
[   69.609036][ T6291] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.93'.
[   69.662004][ T6287] openvswitch: netlink: Flow actions attr not present in new flow.
[   69.704925][ T6295] warning: `syz.2.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.721981][ T6297] validate_nla: 2 callbacks suppressed
[   69.721990][ T6297] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   69.883094][ T6305] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.98'.
[   70.042506][ T6318] netlink: 'syz.0.97': attribute type 29 has an invalid length.
[   70.052958][ T6318] netlink: 'syz.0.97': attribute type 29 has an invalid length.
[   70.157412][ T6328] netlink: 'syz.2.104': attribute type 11 has an invalid length.
[   70.165297][ T6328] netlink: 'syz.2.104': attribute type 11 has an invalid length.
[   71.073212][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.076394][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.328122][  T974] cfg80211: failed to load regulatory.db
[   71.592238][ T6380] netlink: 'syz.0.115': attribute type 10 has an invalid length.
[   72.076911][ T6398] syzkaller0: entered promiscuous mode
[   72.079325][ T6398] syzkaller0: entered allmulticast mode
[   72.966187][ T6411] netlink: 'syz.0.126': attribute type 12 has an invalid length.
[   73.062484][ T6414] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   73.065417][ T6414] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   73.359637][ T6426] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   73.990241][  T974] wlan1 speed is unknown, defaulting to 1000
[   73.993694][  T974] syz0: Port: 1 Link DOWN
[   74.164852][ T6457] __nla_validate_parse: 23 callbacks suppressed
[   74.164867][ T6457] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.143'.
[   74.262932][ T6462] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.047356][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'.
[   75.548815][   T29] wlan1: Trigger new scan to find an IBSS to join
[   76.250247][ T6504] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.155'.
[   76.733580][ T6509] syzkaller1: tun_chr_ioctl cmd 1074025677
[   76.736179][ T6509] syzkaller1: linktype set to 823
[   76.902207][ T6522] netlink: 'syz.0.156': attribute type 33 has an invalid length.
[   76.905476][ T6522] netlink: 152 bytes leftover after parsing attributes in process `syz.0.156'.
[   76.912490][ T6522] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP)
[   76.924672][ T6522] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   77.103384][ T6525] : port 1(veth0_to_bridge) entered blocking state
[   77.177121][ T6525] : port 1(veth0_to_bridge) entered disabled state
[   77.183214][ T6525] veth0_to_bridge: entered allmulticast mode
[   77.200961][ T6525] veth0_to_bridge: entered promiscuous mode
[   77.384191][ T6528] netlink: 'syz.1.158': attribute type 27 has an invalid length.
[   77.391105][ T6528] netlink: 'syz.1.158': attribute type 4 has an invalid length.
[   77.394568][ T6528] netlink: 136 bytes leftover after parsing attributes in process `syz.1.158'.
[   77.863202][ T6536] netlink: 'syz.0.160': attribute type 27 has an invalid length.
[   77.866025][ T6536] netlink: 164 bytes leftover after parsing attributes in process `syz.0.160'.
[   77.899710][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.160'.
[   78.013529][ T6543] netlink: 67 bytes leftover after parsing attributes in process `syz.1.162'.
[   78.025567][ T6542] netlink: 'syz.2.161': attribute type 10 has an invalid length.
[   78.071354][ T6542] team0: Port device macvlan1 added
[   78.654360][ T6546] netlink: 220 bytes leftover after parsing attributes in process `syz.0.163'.
[   79.026224][ T6569] netlink: 'syz.2.172': attribute type 39 has an invalid length.
[   79.382240][ T6573] netlink: 'syz.2.174': attribute type 7 has an invalid length.
[   79.755999][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.775641][ T6587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.778829][ T6587] IPv6: NLM_F_CREATE should be set when creating new route
[   79.781985][ T6587] IPv6: NLM_F_CREATE should be set when creating new route
[   79.785054][ T6587] IPv6: NLM_F_CREATE should be set when creating new route
[   79.792851][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'.
[   79.828983][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.854150][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.859188][ T6585] netlink: 48 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.883081][ T6585] netlink: 5 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.992402][ T6603] netlink: 'syz.1.183': attribute type 10 has an invalid length.
[   79.995770][ T6603] netlink: 168 bytes leftover after parsing attributes in process `syz.1.183'.
[   80.003707][ T6603] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.183'.
[   80.008586][ T6603] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.183'.
[   80.117532][ T6609] can: request_module (can-proto-0) failed.
[   80.232547][ T6623] netlink: 'syz.0.189': attribute type 10 has an invalid length.
[   80.248842][ T6623] bond0: (slave ): Enslaving as an active interface with an up link
[   80.251815][  T974]  speed is unknown, defaulting to 1000
[   81.851386][ T6632] syz.1.192 uses obsolete (PF_INET,SOCK_PACKET)
[   82.502292][ T6657] netlink: 'syz.0.197': attribute type 21 has an invalid length.
[   82.589651][  T152] : Trigger new scan to find an IBSS to join
[   82.964942][ T6668] netlink: 180 bytes leftover after parsing attributes in process `syz.1.200'.
[   83.180056][ T6676] netlink: 'syz.0.202': attribute type 2 has an invalid length.
[   83.293924][ T6676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.300453][ T6676] bond0 (unregistering): (slave ): Releasing backup interface
[   83.306818][ T6676] bond0 (unregistering): Released all slaves
[   83.317737][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.323240][ T5896]  speed is unknown, defaulting to 1000
[   83.329278][ T6680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.454229][ T6696] openvswitch: netlink: EtherType 50a is less than min 600
[   83.457099][ T6699] openvswitch: netlink: EtherType 50a is less than min 600
[   84.344699][ T6723] netlink: 'syz.2.217': attribute type 3 has an invalid length.
[   84.350493][ T6723] nbd: must specify an index to disconnect
[   85.887091][ T6750] netlink: 'syz.0.226': attribute type 8 has an invalid length.
[   85.891012][ T6750] __nla_validate_parse: 4 callbacks suppressed
[   85.891020][ T6750] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.226'.
[   86.110400][ T6759] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.224'.
[   86.402970][ T6762] netlink: 'syz.0.228': attribute type 21 has an invalid length.
[   86.515302][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'.
[   86.713607][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'.
[   86.913294][ T6785] netlink: 'syz.0.234': attribute type 13 has an invalid length.
[   86.916791][ T6785] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.234'.
[   87.024481][ T6793] netlink: 104 bytes leftover after parsing attributes in process `syz.2.236'.
[   87.034721][ T6793] netlink: 'syz.2.236': attribute type 3 has an invalid length.
[   87.038121][ T6793] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   87.040950][ T6793] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.236'.
[   87.689984][ T6801] netlink: 'syz.1.239': attribute type 6 has an invalid length.
[   87.692763][ T6801] netlink: 164 bytes leftover after parsing attributes in process `syz.1.239'.
[   87.825880][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'.
[   88.321169][ T6831] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   88.609837][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'.
[   88.878890][ T6863] netlink: 'syz.1.257': attribute type 39 has an invalid length.
[   89.281369][ T6874] =======================================================
[   89.281369][ T6874] WARNING: The mand mount option has been deprecated and
[   89.281369][ T6874]          and is ignored by this kernel. Remove the mand
[   89.281369][ T6874]          option from the mount to silence this warning.
[   89.281369][ T6874] =======================================================
[   89.834680][ T6903] netlink: 'syz.1.269': attribute type 10 has an invalid length.
[   89.843381][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.853984][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.885212][ T6903] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   89.896532][ T6912] C: renamed from team_slave_0
[   90.644416][ T6912] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[   90.653597][ T6912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   90.766131][ T6914] netlink: 'syz.2.273': attribute type 12 has an invalid length.
[   90.836776][ T6923] siw: device registration error -23
[   91.043610][ T6937] __nla_validate_parse: 10 callbacks suppressed
[   91.043628][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'.
[   91.055170][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'.
[   91.092383][ T6939] netlink: 'syz.2.280': attribute type 29 has an invalid length.
[   91.102103][ T6939] netlink: 'syz.2.280': attribute type 10 has an invalid length.
[   91.145584][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.159171][ T6939] team0: Port device bond0 added
[   91.219663][ T6946] netlink: 'syz.2.281': attribute type 13 has an invalid length.
[   91.222792][ T6946] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.281'.
[   91.702959][ T6961] netlink: 'syz.1.286': attribute type 29 has an invalid length.
[   91.796360][ T6970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.289'.
[   91.804174][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.820220][ T6968] raw_sendmsg: syz.1.288 forgot to set AF_INET. Fix it!
[   91.824744][ T6970] bridge_slave_0 (unregistering): left allmulticast mode
[   91.828942][ T6970] bridge_slave_0 (unregistering): left promiscuous mode
[   91.831638][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.853978][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[   91.869020][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[   91.872844][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[   92.295738][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[   92.442262][ T7017] netlink: 'syz.1.301': attribute type 10 has an invalid length.
[   92.739316][ T7029] syzkaller0: entered promiscuous mode
[   92.741947][ T7029] syzkaller0: entered allmulticast mode
[   92.857532][ T7032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.305'.
[   92.860954][ T7032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.305'.
[   92.941734][ T7035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.951049][ T7035] netlink: 'syz.1.307': attribute type 11 has an invalid length.
[   92.954917][ T7035] netlink: 'syz.1.307': attribute type 10 has an invalid length.
[   92.961249][ T7035] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   92.965806][ T7035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.553253][ T7063] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   93.738599][ T7066] netlink: 'syz.1.316': attribute type 12 has an invalid length.
[   93.741111][ T7068] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[   93.744436][ T7068] batadv0: entered promiscuous mode
[   93.746532][ T7068] batadv0: entered allmulticast mode
[   93.774540][ T7068] bridge0: port 1(batadv0) entered blocking state
[   93.781105][ T7068] bridge0: port 1(batadv0) entered disabled state
[   93.827940][ T5859] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   93.831989][ T5859] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   93.833034][ T7068] bridge0: port 1(batadv0) entered blocking state
[   93.839760][ T7068] bridge0: port 1(batadv0) entered forwarding state
[   95.322787][ T7137] netlink: 'syz.1.332': attribute type 39 has an invalid length.
[   95.702632][ T7157] openvswitch: netlink: EtherType 50a is less than min 600
[   96.116504][ T7175] delete_channel: no stack
[   96.405033][ T7190] __nla_validate_parse: 18 callbacks suppressed
[   96.405044][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[   96.413951][ T7190] netlink: 6 bytes leftover after parsing attributes in process `syz.1.349'.
[   96.451682][ T7195] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.456546][ T7194] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.462398][ T7193] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.466609][ T7194] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.473633][ T7194] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.477065][ T7194] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.480656][ T7194] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.483953][ T7194] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[   96.563162][ T7200] netlink: 'syz.1.352': attribute type 16 has an invalid length.
[   96.571522][ T7197] netlink: 'syz.2.351': attribute type 3 has an invalid length.
[   96.590848][ T7202] netlink: 'syz.1.353': attribute type 29 has an invalid length.
[   96.594202][ T7202] netlink: 'syz.1.353': attribute type 29 has an invalid length.
[   96.907703][ T7213] syzkaller0: entered promiscuous mode
[   96.910324][ T7213] syzkaller0: entered allmulticast mode
[   96.925727][ T7213] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   97.008751][ T7217] openvswitch: netlink: Multiple metadata blocks provided
[   97.284093][ T7230] sit0: entered promiscuous mode
[   97.568920][ T7261]  speed is unknown, defaulting to 1000
[   98.679250][ T7324] validate_nla: 3 callbacks suppressed
[   98.679263][ T7324] netlink: 'syz.1.389': attribute type 21 has an invalid length.
[   98.683635][ T7324] netlink: 'syz.1.389': attribute type 1 has an invalid length.
[   98.689684][ T7323] netlink: 'syz.1.389': attribute type 3 has an invalid length.
[   98.756899][ T7332] netlink: 'syz.0.392': attribute type 3 has an invalid length.
[   99.323937][ T7354] netlink: 'syz.1.398': attribute type 11 has an invalid length.
[   99.905548][ T7379] netlink: 'syz.0.404': attribute type 13 has an invalid length.
[   99.931064][ T7375] netlink: 'syz.2.403': attribute type 10 has an invalid length.
[   99.952490][ T7375] 8021q: adding VLAN 0 to HW filter on device team0
[  100.482669][ T7399] syzkaller0: entered allmulticast mode
[  101.883939][ T7427] __nla_validate_parse: 41 callbacks suppressed
[  101.883957][ T7427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'.
[  101.918878][ T7425] openvswitch: netlink: Multiple metadata blocks provided
[  102.788542][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[  102.985957][ T7459] netlink: 'syz.2.431': attribute type 4 has an invalid length.
[  103.111611][ T7464] netlink: 72 bytes leftover after parsing attributes in process `syz.2.432'.
[  104.260650][ T7497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.442'.
[  104.274443][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.442'.
[  104.443541][ T7509] netlink: 52 bytes leftover after parsing attributes in process `syz.2.444'.
[  104.446872][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'.
[  104.495089][ T7515] netlink: 'syz.1.446': attribute type 17 has an invalid length.
[  104.499115][ T7515] netlink: 'syz.1.446': attribute type 16 has an invalid length.
[  104.501794][ T7515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.446'.
[  104.660830][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'.
[  104.713200][ T7524] netlink: 'syz.1.448': attribute type 4 has an invalid length.
[  104.716233][ T7524] netlink: 'syz.1.448': attribute type 16 has an invalid length.
[  104.720225][ T7524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'.
[  105.518249][ T7547] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  105.594177][ T5859] syzkaller0: tun_net_xmit 76
[  105.596512][ T5859] syzkaller0: tun_net_xmit 48
[  105.618135][ T3147] syzkaller0: tun_net_xmit 76
[  106.715605][ T7576] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  106.891972][ T7587] __nla_validate_parse: 12 callbacks suppressed
[  106.891986][ T7587] netlink: 104 bytes leftover after parsing attributes in process `syz.2.468'.
[  106.986498][ T7603] _Z`Ԁ@S: entered promiscuous mode
[  107.014863][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.115675][ T7608] netlink: 'syz.0.474': attribute type 21 has an invalid length.
[  107.121948][ T7608] netlink: 168 bytes leftover after parsing attributes in process `syz.0.474'.
[  107.141219][ T7611] netlink: 'syz.2.475': attribute type 4 has an invalid length.
[  107.145138][ T7611] netlink: 'syz.2.475': attribute type 4 has an invalid length.
[  107.163300][ T7611] netlink: 199756 bytes leftover after parsing attributes in process `syz.2.475'.
[  107.215088][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[  107.282241][ T7617] netlink: 'syz.2.477': attribute type 32 has an invalid length.
[  107.305386][ T7617] dvmrp0: tun_chr_ioctl cmd 2148553947
[  107.321456][ T7619] netlink: 10 bytes leftover after parsing attributes in process `syz.0.478'.
[  107.386046][ T7621] tap0: tun_chr_ioctl cmd 2147767507
[  107.409851][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'.
[  107.413975][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'.
[  107.421537][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.481'.
[  107.426863][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'.
[  107.432266][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'.
[  107.552740][ T7631] netlink: 'syz.0.482': attribute type 13 has an invalid length.
[  107.664578][ T7633] netlink: 'syz.1.483': attribute type 10 has an invalid length.
[  107.706947][ T7631] bridge0: port 1(batadv0) entered disabled state
[  107.709918][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.849885][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.872808][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.051590][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.058793][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.085085][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.088478][ T7633] bridge0: port 2(bridge_slave_1) entered listening state
[  108.091729][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.094938][ T7633] bridge0: port 1(bridge_slave_0) entered listening state
[  108.111090][ T7633] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  108.127798][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.130997][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.134056][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.156598][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.510267][ T7668] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  108.613366][ T7675] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  109.044861][ T7692] dummy0: entered promiscuous mode
[  109.110056][ T7692] bridge0: port 3(dummy0) entered blocking state
[  109.114332][ T7692] bridge0: port 3(dummy0) entered disabled state
[  109.118324][ T7692] dummy0: entered allmulticast mode
[  109.223839][ T7692] bridge0: port 3(dummy0) entered blocking state
[  109.226882][ T7692] bridge0: port 3(dummy0) entered forwarding state
[  110.270052][ T7743] validate_nla: 1 callbacks suppressed
[  110.270127][ T7743] netlink: 'syz.0.513': attribute type 5 has an invalid length.
[  110.291291][ T7748] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[  110.293922][ T7747] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[  110.622796][ T7768] netlink: 'syz.0.519': attribute type 5 has an invalid length.
[  110.626872][ T7768] netlink: 'syz.0.519': attribute type 7 has an invalid length.
[  110.635738][ T7768] : entered promiscuous mode
[  110.766522][ T7780] openvswitch: netlink: Flow key attr not present in new flow.
[  110.803276][ T7782] netlink: 'syz.1.523': attribute type 4 has an invalid length.
[  110.813157][ T7782] netlink: 'syz.1.523': attribute type 21 has an invalid length.
[  110.816778][ T7782] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.819948][ T7782] IPv6: Can't replace route, no match found
[  110.858455][ T7785] _Z`Ԁ@S!!: entered promiscuous mode
[  110.974592][ T7796] netlink: 'syz.1.527': attribute type 10 has an invalid length.
[  110.977985][ T7796] team0: entered promiscuous mode
[  110.980102][ T7796] team_slave_0: entered promiscuous mode
[  110.982757][ T7796] team_slave_1: entered promiscuous mode
[  110.985227][ T7796] team0: entered allmulticast mode
[  110.987411][ T7796] team_slave_0: entered allmulticast mode
[  110.991551][ T7796] team_slave_1: entered allmulticast mode
[  110.994898][ T7796] bridge0: port 3(team0) entered blocking state
[  110.998840][ T7796] bridge0: port 3(team0) entered disabled state
[  111.003102][ T7796] bridge0: port 3(team0) entered blocking state
[  111.005418][ T7796] bridge0: port 3(team0) entered listening state
[  111.008247][ T7796] netlink: 'syz.1.527': attribute type 10 has an invalid length.
[  111.011277][ T7796] netlink: 'syz.1.527': attribute type 10 has an invalid length.
[  111.489679][ T7811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.494245][ T7811] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  112.554119][ T7839] __nla_validate_parse: 50 callbacks suppressed
[  112.554133][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'.
[  112.794995][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'.
[  112.799638][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'.
[  112.802599][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.544'.
[  112.814188][ T7873] openvswitch: netlink: Key type 15888 is out of range max 32
[  112.995493][ T7895] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  113.123938][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'.
[  113.131457][ T7915] netlink: 830 bytes leftover after parsing attributes in process `syz.0.556'.
[  113.194873][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'.
[  113.362444][ T7930] delete_channel: no stack
[  113.542506][ T7937] netlink: zone id is out of range
[  113.545660][ T7937] netlink: zone id is out of range
[  113.548787][ T7937] netlink: zone id is out of range
[  113.551981][ T7937] netlink: zone id is out of range
[  113.554238][ T7937] netlink: zone id is out of range
[  113.556972][ T7937] netlink: zone id is out of range
[  113.562047][ T7937] netlink: zone id is out of range
[  113.564176][ T7937] netlink: zone id is out of range
[  113.579926][ T7942] : renamed from gre0 (while UP)
[  113.584900][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'.
[  113.632741][ T7943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.563'.
[  114.726629][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[  115.305363][ T8010] validate_nla: 46 callbacks suppressed
[  115.305378][ T8010] netlink: 'syz.1.580': attribute type 21 has an invalid length.
[  115.336171][ T8017] netlink: 'syz.0.582': attribute type 29 has an invalid length.
[  115.348561][ T8017] netlink: 'syz.0.582': attribute type 29 has an invalid length.
[  115.397153][ T8019] netlink: 'syz.1.583': attribute type 21 has an invalid length.
[  115.400755][ T8019] netlink: 'syz.1.583': attribute type 4 has an invalid length.
[  115.441079][ T8017] netlink: 'syz.0.582': attribute type 29 has an invalid length.
[  115.460559][ T8017] netlink: 'syz.0.582': attribute type 29 has an invalid length.
[  115.676830][ T8028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.680045][ T8028] IPv6: NLM_F_CREATE should be set when creating new route
[  115.683166][ T8028] IPv6: NLM_F_CREATE should be set when creating new route
[  115.686358][ T8028] IPv6: NLM_F_CREATE should be set when creating new route
[  116.180103][ T8041] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[  116.230397][ T8038] netlink: 'syz.2.588': attribute type 29 has an invalid length.
[  116.235244][ T8039] netlink: 'syz.1.589': attribute type 29 has an invalid length.
[  116.260008][ T8041] team0: Device bond0 is already an upper device of the team interface
[  117.589670][ T8072] __nla_validate_parse: 11 callbacks suppressed
[  117.589681][ T8072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.596'.
[  117.595202][ T8072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.596'.
[  118.155227][ T8086]  speed is unknown, defaulting to 1000
[  118.293093][ T8098] netlink: 152 bytes leftover after parsing attributes in process `syz.1.601'.
[  118.297201][ T8098] netlink: 152 bytes leftover after parsing attributes in process `syz.1.601'.
[  118.379951][ T8111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.604'.
[  118.430039][ T8115] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.606'.
[  118.433388][ T8115] nbd: must specify at least one socket
[  118.502546][ T8121] netlink: 56 bytes leftover after parsing attributes in process `syz.1.608'.
[  118.547391][ T8125] netlink: 140 bytes leftover after parsing attributes in process `syz.1.609'.
[  118.552796][ T8125] netlink: 6 bytes leftover after parsing attributes in process `syz.1.609'.
[  118.732030][ T8138] netlink: 56 bytes leftover after parsing attributes in process `syz.2.613'.
[  118.920188][ T8152] net_ratelimit: 380 callbacks suppressed
[  118.920277][ T8152] openvswitch: netlink: Flow key attr not present in new flow.
[  118.935140][ T8151] netlink: zone id is out of range
[  118.937416][ T8151] netlink: zone id is out of range
[  118.952170][ T8151] netlink: zone id is out of range
[  118.956229][ T8151] netlink: zone id is out of range
[  118.963189][ T8151] netlink: zone id is out of range
[  118.988577][ T8151] netlink: zone id is out of range
[  118.990556][ T8151] netlink: zone id is out of range
[  118.992627][ T8151] netlink: zone id is out of range
[  118.994423][ T8151] netlink: zone id is out of range
[  119.194894][ T8158] macvlan0: entered promiscuous mode
[  119.197006][ T8158] macvlan0: entered allmulticast mode
[  119.203238][ T8158] veth1_vlan: entered allmulticast mode
[  119.207308][ T8158] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  119.605759][ T8167] : entered promiscuous mode
[  119.613653][ T8167] : entered allmulticast mode
[  120.059679][ T8197] bridge0: port 3(team0) entered disabled state
[  120.063623][ T8197] team0: left allmulticast mode
[  120.065325][ T8197] team_slave_0: left allmulticast mode
[  120.067357][ T8197] team_slave_1: left allmulticast mode
[  120.079627][ T8197] team0: left promiscuous mode
[  120.081308][ T8197] team_slave_0: left promiscuous mode
[  120.083665][ T8197] team_slave_1: left promiscuous mode
[  120.085829][ T8197] bridge0: port 3(team0) entered disabled state
[  120.095290][ T8197] 8021q: adding VLAN 0 to HW filter on device team0
[  120.099840][ T8197] bond0: (slave team0): Enslaving as an active interface with an up link
[  120.430562][ T8217] dummy0: left allmulticast mode
[  120.432919][ T8217] bridge0: port 3(dummy0) entered disabled state
[  120.445605][ T8217] bridge_slave_1: left allmulticast mode
[  120.447455][ T8217] bridge_slave_1: left promiscuous mode
[  120.467467][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.473347][ T8217] bridge_slave_0: left allmulticast mode
[  120.475473][ T8217] bridge_slave_0: left promiscuous mode
[  120.480028][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.651603][ T8222] validate_nla: 10 callbacks suppressed
[  120.651616][ T8222] netlink: 'syz.1.639': attribute type 1 has an invalid length.
[  120.872102][ T8224] infiniband syz2: set active
[  120.874855][ T8224] infiniband syz2: added bond_slave_0
[  120.919364][ T8224] RDS/IB: syz2: added
[  120.925988][ T8224] smc: adding ib device syz2 with port count 1
[  120.937222][ T8224] smc:    ib device syz2 port 1 has pnetid 
[  121.822226][ T8232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.830380][ T8232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.838361][ T8232] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  121.845996][ T8232] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  121.851604][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.854780][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.862515][ T8232] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  121.871416][ T8232] bond0 (unregistering): (slave team0): Releasing backup interface
[  121.878571][ T8232] bond0 (unregistering): Released all slaves
[  122.223339][ T8254] bridge_slave_1: left allmulticast mode
[  122.225771][ T8254] bridge_slave_1: left promiscuous mode
[  122.232062][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.795715][ T8254] bridge_slave_0: left allmulticast mode
[  122.798435][ T8254] bridge_slave_0: left promiscuous mode
[  122.800748][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.903378][ T8263] syzkaller0: tun_chr_ioctl cmd 1074025677
[  122.905562][ T8263] syzkaller0: linktype set to 801
[  123.033643][ T8265] __nla_validate_parse: 14 callbacks suppressed
[  123.033662][ T8265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.650'.
[  123.226535][ T8278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.653'.
[  123.268186][ T8280] syzkaller0: entered allmulticast mode
[  123.511005][ T8278] netlink: 'syz.2.653': attribute type 10 has an invalid length.
[  124.831349][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[  124.850721][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'.
[  124.855480][ T8311] netlink: 104 bytes leftover after parsing attributes in process `syz.1.661'.
[  124.921522][ T8314] netlink: 'syz.1.662': attribute type 3 has an invalid length.
[  124.924753][ T8314] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  124.933502][ T8314] netlink: 'syz.1.662': attribute type 2 has an invalid length.
[  124.936407][ T8314] netlink: 198328 bytes leftover after parsing attributes in process `syz.1.662'.
[  124.941366][ T8315] netlink: 'syz.1.662': attribute type 3 has an invalid length.
[  124.944902][ T8315] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  124.948003][ T8315] netlink: 'syz.1.662': attribute type 2 has an invalid length.
[  124.950881][ T8315] netlink: 198328 bytes leftover after parsing attributes in process `syz.1.662'.
[  125.141514][ T8329] netlink: 14 bytes leftover after parsing attributes in process `syz.1.668'.
[  125.149243][ T8331] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  125.226788][ T8336] netlink: 'syz.1.670': attribute type 3 has an invalid length.
[  125.415694][ T8341] tap0: tun_chr_ioctl cmd 1074025678
[  125.424338][ T8341] tap0: group set to 0
[  125.507174][ T8344] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.672'.
[  125.518112][ T8343] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.672'.
[  125.526228][ T8346] net_ratelimit: 248 callbacks suppressed
[  125.526246][ T8346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.894416][ T8365] openvswitch: netlink: Duplicate or invalid key (type 0).
[  125.897710][ T8365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.072844][ T8373] netlink: 'syz.2.677': attribute type 2 has an invalid length.
[  127.695414][ T8382] netlink: 'syz.1.680': attribute type 4 has an invalid length.
[  127.863579][ T8382] netlink: 'syz.1.680': attribute type 10 has an invalid length.
[  127.917338][ T8382] team0: Port device dummy0 added
[  128.065731][ T8397] __nla_validate_parse: 7 callbacks suppressed
[  128.065746][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'.
[  128.095300][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'.
[  128.301051][ T8410] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.688'.
[  128.304623][ T8406] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.688'.
[  128.363447][ T8415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.054568][ T8423] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.060572][ T8423] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  129.121849][ T8430] netlink: 'syz.0.693': attribute type 21 has an invalid length.
[  129.125400][ T8430] netlink: 168 bytes leftover after parsing attributes in process `syz.0.693'.
[  129.912262][ T8427] delete_channel: no stack
[  129.959870][ T8443] IPv6: NLM_F_CREATE should be specified when creating new route
[  129.992879][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'.
[  129.998382][ T8445] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  130.003069][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[  130.074051][ T8452] netlink: 'syz.1.701': attribute type 2 has an invalid length.
[  130.076828][ T8452] netlink: 'syz.1.701': attribute type 11 has an invalid length.
[  130.080800][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'.
[  130.089712][ T8452] netlink: 'syz.1.701': attribute type 21 has an invalid length.
[  130.093577][ T8452] netlink: 9949 bytes leftover after parsing attributes in process `syz.1.701'.
[  130.316510][ T8464] netlink: 'syz.2.706': attribute type 1 has an invalid length.
[  130.319960][ T8464] netlink: 'syz.2.706': attribute type 2 has an invalid length.
[  130.322740][ T8464] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.706'.
[  130.416635][ T8466] netlink: 'syz.2.707': attribute type 29 has an invalid length.
[  130.801840][ T8483] nft_compat: unsupported protocol 0
[  130.912168][ T8479] team0 (unregistering): Port device team_slave_0 removed
[  130.949490][ T8479] team0 (unregistering): Port device team_slave_1 removed
[  130.975298][ T8479] team0 (unregistering): Port device dummy0 removed
[  131.311059][ T8488]  speed is unknown, defaulting to 1000
[  131.703218][ T8505] openvswitch: netlink: IPv6 tunnel dst address is zero
[  131.829737][ T8512] siw: device registration error -23
[  132.142493][ T8526] validate_nla: 4 callbacks suppressed
[  132.142584][ T8526] netlink: 'syz.2.724': attribute type 10 has an invalid length.
[  132.142604][ T8527] netlink: 'syz.2.724': attribute type 10 has an invalid length.
[  132.521327][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.523496][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  134.182083][ T8566] __nla_validate_parse: 5 callbacks suppressed
[  134.182224][ T8566] netlink: 168 bytes leftover after parsing attributes in process `syz.0.734'.
[  134.193470][ T8566] netlink: 'syz.0.734': attribute type 4 has an invalid length.
[  134.196956][ T8566] netlink: 152 bytes leftover after parsing attributes in process `syz.0.734'.
[  134.204917][ T8566] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  134.227376][ T8572] netlink: 'syz.1.735': attribute type 13 has an invalid length.
[  134.362360][ T8581] netlink: 'syz.2.737': attribute type 2 has an invalid length.
[  134.378349][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[  134.596901][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.624915][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.648192][ T8601] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.745'.
[  135.039493][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'.
[  135.205666][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'.
[  135.230889][ T8620] netlink: 'syz.2.750': attribute type 5 has an invalid length.
[  135.234653][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'.
[  135.314103][ T8625] netlink: 'syz.2.751': attribute type 21 has an invalid length.
[  135.328533][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  136.451307][ T8654] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.755'.
[  136.456428][ T8654] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.755'.
[  136.465273][ T8654] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.755'.
[  136.625577][ T8659] netlink: 'syz.1.761': attribute type 46 has an invalid length.
[  137.315675][ T8671] netlink: 'syz.0.764': attribute type 3 has an invalid length.
[  137.319571][ T8671] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[  137.614403][ T8677] openvswitch: netlink: Message has 1 unknown bytes.
[  137.619404][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.084514][ T8701] netlink: 'syz.0.774': attribute type 1 has an invalid length.
[  138.141521][   T55] Bluetooth: hci2: Dropping invalid advertising data
[  138.145488][   T55] Bluetooth: hci2: Malformed LE Event: 0x02
[  138.418214][ T8714] netlink: 'syz.0.780': attribute type 21 has an invalid length.
[  138.421460][ T8714] netlink: 'syz.0.780': attribute type 6 has an invalid length.
[  138.711651][ T8721] xt_HMARK: spi-set and port-set can't be combined
[  138.853698][ T8731] netlink: 'syz.1.785': attribute type 10 has an invalid length.
[  139.023878][ T8729] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  139.262615][ T8740] __nla_validate_parse: 16 callbacks suppressed
[  139.262634][ T8740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'.
[  139.300351][ T8744] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.789'.
[  139.304427][ T8744] netlink: 62227 bytes leftover after parsing attributes in process `syz.1.789'.
[  140.024554][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.792'.
[  140.221335][ T8762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.794'.
[  140.224101][ T8762] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  140.393714][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.795'.
[  140.814941][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.801'.
[  140.835571][ T8795] netlink: 'syz.1.801': attribute type 1 has an invalid length.
[  141.233431][ T8800] netlink: 'syz.1.803': attribute type 29 has an invalid length.
[  141.253838][ T8800] netlink: 360 bytes leftover after parsing attributes in process `syz.1.803'.
[  141.271822][ T8800] netlink: 'syz.1.803': attribute type 11 has an invalid length.
[  141.279784][ T8800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.803'.
[  141.540643][ T8811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.807'.
[  142.325634][ T8845] validate_nla: 2 callbacks suppressed
[  142.325646][ T8845] netlink: 'syz.0.816': attribute type 2 has an invalid length.
[  142.493413][   T33] audit: type=1107 audit(1758705159.444:2): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='菂)z/G)dC>ׂIz;c kOnCY:v8<j߄H5ÃKX9JEf]Mw}gk8g8rv+msA5bjr!x`q`{'
[  142.638810][ T8859] netlink: 'syz.1.821': attribute type 11 has an invalid length.
[  144.424419][ T8899] __nla_validate_parse: 7 callbacks suppressed
[  144.424437][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'.
[  144.647187][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'.
[  144.779221][ T8911] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  144.782142][ T8911] netlink: 'syz.1.836': attribute type 3 has an invalid length.
[  144.784936][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.836'.
[  145.652757][ T8926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.841'.
[  145.807455][ T8919] netlink: zone id is out of range
[  145.819602][ T8919] netlink: zone id is out of range
[  145.822596][ T8919] netlink: zone id is out of range
[  145.834769][ T8932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.859487][ T8929] netlink: del zone limit has 4 unknown bytes
[  145.961293][ T8935] _Z`Ԁ@S!: entered promiscuous mode
[  146.045767][   T55] Bluetooth: hci0: Dropping invalid advertising data
[  146.050002][   T55] Bluetooth: hci0: Malformed LE Event: 0x02
[  146.148281][ T8919] netlink: set zone limit has 4 unknown bytes
[  146.574632][   T55] Bluetooth: hci1: Dropping invalid advertising data
[  146.578058][   T55] Bluetooth: hci1: Malformed LE Event: 0x02
[  146.649793][ T8958] netlink: 'syz.1.849': attribute type 11 has an invalid length.
[  146.652720][ T8958] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.849'.
[  146.673611][ T8964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.853'.
[  146.788654][ T8975] netlink: 96 bytes leftover after parsing attributes in process `syz.0.850'.
[  147.032846][ T8989] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.035583][ T8989] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  147.211787][   T55] Bluetooth: hci1: Dropping invalid advertising data
[  147.214624][   T55] Bluetooth: hci1: Malformed LE Event: 0x02
[  147.546291][ T9009] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  147.823780][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.864'.
[  147.830168][ T9014] netlink: 'syz.0.864': attribute type 1 has an invalid length.
[  148.161418][ T9027] netlink: 64 bytes leftover after parsing attributes in process `syz.2.869'.
[  148.719366][ T9060] netlink: 'syz.1.879': attribute type 29 has an invalid length.
[  149.709476][   T55] Bluetooth: hci1: Dropping invalid advertising data
[  149.711957][   T55] Bluetooth: hci1: Malformed LE Event: 0x02
[  149.875743][ T9088] netlink: 14 bytes leftover after parsing attributes in process `syz.0.887'.
[  149.880502][ T9089] netlink: 14 bytes leftover after parsing attributes in process `syz.0.887'.
[  149.886121][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'.
[  149.890492][ T9090] netlink: 108 bytes leftover after parsing attributes in process `syz.1.886'.
[  149.901632][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'.
[  149.906787][ T9090] netlink: 108 bytes leftover after parsing attributes in process `syz.1.886'.
[  149.911299][ T9090] netlink: 84 bytes leftover after parsing attributes in process `syz.1.886'.
[  150.073617][ T9095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.888'.
[  150.217412][   T55] Bluetooth: hci2: Dropping invalid advertising data
[  150.219902][   T55] Bluetooth: hci2: Malformed LE Event: 0x02
[  150.430134][ T9117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.895'.
[  150.433607][ T9117] netlink: 'syz.2.895': attribute type 1 has an invalid length.
[  150.467395][ T9119] netlink: 'syz.0.896': attribute type 3 has an invalid length.
[  150.473649][ T9119] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  150.476527][ T9119] netlink: 116 bytes leftover after parsing attributes in process `syz.0.896'.
[  150.786745][ T9135] netlink: 'syz.0.901': attribute type 10 has an invalid length.
[  152.018932][ T9149] netlink: 'syz.0.909': attribute type 10 has an invalid length.
[  152.129114][ T9153] netlink: 'syz.1.912': attribute type 3 has an invalid length.
[  152.148471][ T9155] unsupported nlmsg_type 40
[  152.181636][ T9159] nbd: must specify an index to disconnect
[  153.155180][ T9213] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  153.159035][ T9213] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  153.162201][ T9213] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  153.165824][ T9213] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  153.211513][ T9215] netlink: 'syz.0.928': attribute type 21 has an invalid length.
[  153.214245][ T9215] netlink: 'syz.0.928': attribute type 1 has an invalid length.
[  158.231149][ T9291] netlink: 'syz.0.945': attribute type 21 has an invalid length.
[  158.234716][ T9291] __nla_validate_parse: 15 callbacks suppressed
[  158.234729][ T9291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.945'.
[  159.237207][ T9303] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.949'.
[  159.241833][ T9303] netlink: ct family unspecified
[  159.244029][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.468787][ T9301] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.947'.
[  159.842328][ T9318] ==================================================================
[  159.845851][ T9318] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  159.849230][ T9318] Read of size 1 at addr ffff8880382bebb0 by task syz.2.954/9318
[  159.853386][ T9318] 
[  159.854327][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: syz.2.954 Not tainted syzkaller #0 PREEMPT(full) 
[  159.854339][ T9318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.854345][ T9318] Call Trace:
[  159.854349][ T9318]  <TASK>
[  159.854354][ T9318]  dump_stack_lvl+0x189/0x250
[  159.854369][ T9318]  ? __kasan_check_byte+0x12/0x40
[  159.854385][ T9318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.854396][ T9318]  ? lock_release+0x4b/0x3e0
[  159.854413][ T9318]  ? __virt_addr_valid+0x4a5/0x5c0
[  159.854426][ T9318]  print_report+0xca/0x240
[  159.854436][ T9318]  ? xfrm_state_find+0x2cf2/0x5400
[  159.854447][ T9318]  kasan_report+0x118/0x150
[  159.854460][ T9318]  ? xfrm_state_find+0x2cf2/0x5400
[  159.854473][ T9318]  xfrm_state_find+0x2cf2/0x5400
[  159.854483][ T9318]  ? trace_call_bpf+0xb7/0x850
[  159.854497][ T9318]  ? xfrm_state_find+0x1da/0x5400
[  159.854509][ T9318]  ? __pfx_xfrm_state_find+0x10/0x10
[  159.854524][ T9318]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  159.854545][ T9318]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  159.854561][ T9318]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  159.854576][ T9318]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  159.854592][ T9318]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  159.854605][ T9318]  ? __lock_acquire+0xab9/0xd20
[  159.854627][ T9318]  ? xfrm_expand_policies+0x41f/0x6a0
[  159.854640][ T9318]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  159.854656][ T9318]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  159.854668][ T9318]  ? __pfx_rcuref_put+0x10/0x10
[  159.854684][ T9318]  xfrm_lookup_route+0x3c/0x1c0
[  159.854698][ T9318]  tcp_v4_connect+0x846/0x1a00
[  159.854715][ T9318]  ? clear_page_rep+0x10/0x20
[  159.854730][ T9318]  ? __pfx_tcp_v4_connect+0x10/0x10
[  159.854745][ T9318]  __inet_stream_connect+0x2ae/0xe80
[  159.854762][ T9318]  ? __pfx___inet_stream_connect+0x10/0x10
[  159.854775][ T9318]  ? __kasan_kmalloc+0x93/0xb0
[  159.854788][ T9318]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  159.854802][ T9318]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  159.854818][ T9318]  tcp_sendmsg_locked+0x4d9b/0x5620
[  159.854830][ T9318]  ? trace_call_bpf+0xb7/0x850
[  159.854839][ T9318]  ? tcp_sendmsg_locked+0x511/0x5620
[  159.854854][ T9318]  ? __pfx_trace_call_bpf+0x10/0x10
[  159.854865][ T9318]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  159.854877][ T9318]  ? perf_trace_preemptirq_template+0x280/0x340
[  159.854916][ T9318]  ? __local_bh_enable_ip+0xce/0x1c0
[  159.854927][ T9318]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  159.854943][ T9318]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  159.854965][ T9318]  ? __local_bh_enable_ip+0x12d/0x1c0
[  159.854975][ T9318]  ? __local_bh_enable_ip+0x12d/0x1c0
[  159.854988][ T9318]  tcp_sendmsg+0x2f/0x50
[  159.855001][ T9318]  __sock_sendmsg+0x19c/0x270
[  159.855016][ T9318]  ____sys_sendmsg+0x505/0x830
[  159.855029][ T9318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.855042][ T9318]  ? import_iovec+0x74/0xa0
[  159.855056][ T9318]  ___sys_sendmsg+0x21f/0x2a0
[  159.855069][ T9318]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.855088][ T9318]  ? __fget_files+0x2a/0x420
[  159.855097][ T9318]  ? __fget_files+0x3a0/0x420
[  159.855107][ T9318]  __x64_sys_sendmsg+0x19b/0x260
[  159.855117][ T9318]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  159.855127][ T9318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  159.855141][ T9318]  ? rcu_is_watching+0x15/0xb0
[  159.855171][ T9318]  ? do_syscall_64+0xbe/0x3b0
[  159.855183][ T9318]  do_syscall_64+0xfa/0x3b0
[  159.855193][ T9318]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.855202][ T9318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.855212][ T9318]  ? exc_page_fault+0x9f/0xf0
[  159.855221][ T9318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.855230][ T9318] RIP: 0033:0x7f44b938ec29
[  159.855239][ T9318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.855247][ T9318] RSP: 002b:00007f44ba20d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.855258][ T9318] RAX: ffffffffffffffda RBX: 00007f44b95d5fa0 RCX: 00007f44b938ec29
[  159.855265][ T9318] RDX: 0000000030004081 RSI: 0000200000000080 RDI: 0000000000000003
[  159.855271][ T9318] RBP: 00007f44b9411e41 R08: 0000000000000000 R09: 0000000000000000
[  159.855277][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.855283][ T9318] R13: 00007f44b95d6038 R14: 00007f44b95d5fa0 R15: 00007ffdb0391eb8
[  159.855293][ T9318]  </TASK>
[  159.855296][ T9318] 
[  160.015977][ T9318] Allocated by task 8403:
[  160.017632][ T9318]  kasan_save_track+0x3e/0x80
[  160.019368][ T9318]  __kasan_slab_alloc+0x6c/0x80
[  160.021192][ T9318]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  160.023265][ T9318]  xfrm_state_alloc+0x24/0x2f0
[  160.025104][ T9318]  __find_acq_core+0x8a7/0x1c00
[  160.026980][ T9318]  xfrm_find_acq+0x78/0xa0
[  160.028645][ T9318]  xfrm_alloc_userspi+0x6b3/0xc90
[  160.030578][ T9318]  xfrm_user_rcv_msg+0x7a3/0xab0
[  160.032491][ T9318]  netlink_rcv_skb+0x208/0x470
[  160.034337][ T9318]  xfrm_netlink_rcv+0x79/0x90
[  160.036145][ T9318]  netlink_unicast+0x82f/0x9e0
[  160.038019][ T9318]  netlink_sendmsg+0x805/0xb30
[  160.039869][ T9318]  __sock_sendmsg+0x21c/0x270
[  160.041704][ T9318]  ____sys_sendmsg+0x505/0x830
[  160.043546][ T9318]  ___sys_sendmsg+0x21f/0x2a0
[  160.045370][ T9318]  __x64_sys_sendmsg+0x19b/0x260
[  160.047280][ T9318]  do_syscall_64+0xfa/0x3b0
[  160.049044][ T9318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.051306][ T9318] 
[  160.052185][ T9318] Freed by task 10:
[  160.053647][ T9318]  kasan_save_track+0x3e/0x80
[  160.055567][ T9318]  kasan_save_free_info+0x46/0x50
[  160.057608][ T9318]  __kasan_slab_free+0x5b/0x80
[  160.059455][ T9318]  kmem_cache_free+0x18f/0x400
[  160.061339][ T9318]  xfrm_state_gc_task+0x52d/0x6b0
[  160.063244][ T9318]  process_scheduled_works+0xae1/0x17b0
[  160.065322][ T9318]  worker_thread+0x8a0/0xda0
[  160.067081][ T9318]  kthread+0x711/0x8a0
[  160.068618][ T9318]  ret_from_fork+0x439/0x7d0
[  160.070372][ T9318]  ret_from_fork_asm+0x1a/0x30
[  160.072215][ T9318] 
[  160.073140][ T9318] The buggy address belongs to the object at ffff8880382be880
[  160.073140][ T9318]  which belongs to the cache xfrm_state of size 928
[  160.078258][ T9318] The buggy address is located 816 bytes inside of
[  160.078258][ T9318]  freed 928-byte region [ffff8880382be880, ffff8880382bec20)
[  160.083349][ T9318] 
[  160.084279][ T9318] The buggy address belongs to the physical page:
[  160.086680][ T9318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880382bdb00 pfn:0x382bc
[  160.090422][ T9318] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  160.093572][ T9318] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  160.096347][ T9318] page_type: f5(slab)
[  160.097807][ T9318] raw: 00fff00000000040 ffff88801afa1780 dead000000000122 0000000000000000
[  160.101022][ T9318] raw: ffff8880382bdb00 00000000800e000b 00000000f5000000 0000000000000000
[  160.104166][ T9318] head: 00fff00000000040 ffff88801afa1780 dead000000000122 0000000000000000
[  160.107267][ T9318] head: ffff8880382bdb00 00000000800e000b 00000000f5000000 0000000000000000
[  160.110400][ T9318] head: 00fff00000000002 ffffea0000e0af01 00000000ffffffff 00000000ffffffff
[  160.113633][ T9318] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  160.116872][ T9318] page dumped because: kasan: bad access detected
[  160.119296][ T9318] page_owner tracks the page as allocated
[  160.121408][ T9318] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5933, tgid 5929 (syz.1.4), ts 58345681309, free_ts 58108855541
[  160.128167][ T9318]  post_alloc_hook+0x240/0x2a0
[  160.129982][ T9318]  get_page_from_freelist+0x21e4/0x22c0
[  160.132081][ T9318]  __alloc_frozen_pages_noprof+0x181/0x370
[  160.134267][ T9318]  alloc_pages_mpol+0x232/0x4a0
[  160.136133][ T9318]  allocate_slab+0x8a/0x370
[  160.137856][ T9318]  ___slab_alloc+0xbeb/0x1420
[  160.139681][ T9318]  kmem_cache_alloc_noprof+0x283/0x3c0
[  160.141748][ T9318]  xfrm_state_alloc+0x24/0x2f0
[  160.143559][ T9318]  xfrm_add_sa+0x17d1/0x4070
[  160.145332][ T9318]  xfrm_user_rcv_msg+0x7a3/0xab0
[  160.147209][ T9318]  netlink_rcv_skb+0x208/0x470
[  160.149028][ T9318]  xfrm_netlink_rcv+0x79/0x90
[  160.150811][ T9318]  netlink_unicast+0x82f/0x9e0
[  160.152627][ T9318]  netlink_sendmsg+0x805/0xb30
[  160.154442][ T9318]  __sock_sendmsg+0x21c/0x270
[  160.156227][ T9318]  ____sys_sendmsg+0x505/0x830
[  160.158050][ T9318] page last free pid 5315 tgid 5315 stack trace:
[  160.160484][ T9318]  __free_frozen_pages+0xbc4/0xd30
[  160.162430][ T9318]  __put_partials+0x156/0x1a0
[  160.164214][ T9318]  put_cpu_partial+0x17c/0x250
[  160.166021][ T9318]  __slab_free+0x2d5/0x3c0
[  160.167700][ T9318]  qlist_free_all+0x97/0x140
[  160.169460][ T9318]  kasan_quarantine_reduce+0x148/0x160
[  160.171523][ T9318]  __kasan_slab_alloc+0x22/0x80
[  160.173368][ T9318]  __kmalloc_cache_noprof+0x1be/0x3d0
[  160.175388][ T9318]  nsim_fib_event_work+0x835/0x3180
[  160.177363][ T9318]  process_scheduled_works+0xae1/0x17b0
[  160.179481][ T9318]  worker_thread+0x8a0/0xda0
[  160.181257][ T9318]  kthread+0x711/0x8a0
[  160.182817][ T9318]  ret_from_fork+0x439/0x7d0
[  160.184544][ T9318]  ret_from_fork_asm+0x1a/0x30
[  160.186344][ T9318] 
[  160.187266][ T9318] Memory state around the buggy address:
[  160.189331][ T9318]  ffff8880382bea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.192316][ T9318]  ffff8880382beb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.195275][ T9318] >ffff8880382beb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.198191][ T9318]                                      ^
[  160.200319][ T9318]  ffff8880382bec00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  160.203311][ T9318]  ffff8880382bec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  160.206290][ T9318] ==================================================================
[  160.218147][ T9318] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  160.220939][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: syz.2.954 Not tainted syzkaller #0 PREEMPT(full) 
[  160.224307][ T9318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.228054][ T9318] Call Trace:
[  160.229335][ T9318]  <TASK>
[  160.230481][ T9318]  dump_stack_lvl+0x99/0x250
[  160.232252][ T9318]  ? __asan_memcpy+0x40/0x70
[  160.234023][ T9318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.235980][ T9318]  ? __pfx__printk+0x10/0x10
[  160.237669][ T9318]  vpanic+0x281/0x750
[  160.239206][ T9318]  ? preempt_schedule+0xae/0xc0
[  160.241050][ T9318]  ? __pfx_vpanic+0x10/0x10
[  160.242759][ T9318]  ? preempt_schedule_common+0x83/0xd0
[  160.244817][ T9318]  ? preempt_schedule+0xae/0xc0
[  160.246680][ T9318]  ? __pfx_preempt_schedule+0x10/0x10
[  160.248699][ T9318]  panic+0xb9/0xc0
[  160.250140][ T9318]  ? __pfx_panic+0x10/0x10
[  160.251812][ T9318]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  160.254073][ T9318]  ? xfrm_state_find+0x2cf2/0x5400
[  160.255991][ T9318]  check_panic_on_warn+0x89/0xb0
[  160.257845][ T9318]  ? xfrm_state_find+0x2cf2/0x5400
[  160.259740][ T9318]  end_report+0x78/0x160
[  160.261364][ T9318]  kasan_report+0x129/0x150
[  160.263153][ T9318]  ? xfrm_state_find+0x2cf2/0x5400
[  160.265074][ T9318]  xfrm_state_find+0x2cf2/0x5400
[  160.266920][ T9318]  ? trace_call_bpf+0xb7/0x850
[  160.268725][ T9318]  ? xfrm_state_find+0x1da/0x5400
[  160.270609][ T9318]  ? __pfx_xfrm_state_find+0x10/0x10
[  160.272630][ T9318]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  160.274972][ T9318]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  160.277198][ T9318]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  160.279673][ T9318]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  160.281935][ T9318]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  160.284193][ T9318]  ? __lock_acquire+0xab9/0xd20
[  160.286054][ T9318]  ? xfrm_expand_policies+0x41f/0x6a0
[  160.288077][ T9318]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  160.290111][ T9318]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  160.292310][ T9318]  ? __pfx_rcuref_put+0x10/0x10
[  160.294168][ T9318]  xfrm_lookup_route+0x3c/0x1c0
[  160.296012][ T9318]  tcp_v4_connect+0x846/0x1a00
[  160.297821][ T9318]  ? clear_page_rep+0x10/0x20
[  160.299649][ T9318]  ? __pfx_tcp_v4_connect+0x10/0x10
[  160.301638][ T9318]  __inet_stream_connect+0x2ae/0xe80
[  160.303655][ T9318]  ? __pfx___inet_stream_connect+0x10/0x10
[  160.305850][ T9318]  ? __kasan_kmalloc+0x93/0xb0
[  160.307677][ T9318]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  160.309606][ T9318]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  160.311568][ T9318]  tcp_sendmsg_locked+0x4d9b/0x5620
[  160.313527][ T9318]  ? trace_call_bpf+0xb7/0x850
[  160.315326][ T9318]  ? tcp_sendmsg_locked+0x511/0x5620
[  160.317304][ T9318]  ? __pfx_trace_call_bpf+0x10/0x10
[  160.319285][ T9318]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  160.321430][ T9318]  ? perf_trace_preemptirq_template+0x280/0x340
[  160.323764][ T9318]  ? __local_bh_enable_ip+0xce/0x1c0
[  160.325762][ T9318]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  160.328249][ T9318]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  160.330339][ T9318]  ? __local_bh_enable_ip+0x12d/0x1c0
[  160.332365][ T9318]  ? __local_bh_enable_ip+0x12d/0x1c0
[  160.334393][ T9318]  tcp_sendmsg+0x2f/0x50
[  160.336007][ T9318]  __sock_sendmsg+0x19c/0x270
[  160.337783][ T9318]  ____sys_sendmsg+0x505/0x830
[  160.339631][ T9318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.341570][ T9318]  ? import_iovec+0x74/0xa0
[  160.343264][ T9318]  ___sys_sendmsg+0x21f/0x2a0
[  160.345053][ T9318]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.347016][ T9318]  ? __fget_files+0x2a/0x420
[  160.348753][ T9318]  ? __fget_files+0x3a0/0x420
[  160.350485][ T9318]  __x64_sys_sendmsg+0x19b/0x260
[  160.352348][ T9318]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  160.354477][ T9318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.356528][ T9318]  ? rcu_is_watching+0x15/0xb0
[  160.358343][ T9318]  ? do_syscall_64+0xbe/0x3b0
[  160.360106][ T9318]  do_syscall_64+0xfa/0x3b0
[  160.361821][ T9318]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.363729][ T9318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.366028][ T9318]  ? exc_page_fault+0x9f/0xf0
[  160.367801][ T9318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.369995][ T9318] RIP: 0033:0x7f44b938ec29
[  160.371722][ T9318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.378835][ T9318] RSP: 002b:00007f44ba20d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.381980][ T9318] RAX: ffffffffffffffda RBX: 00007f44b95d5fa0 RCX: 00007f44b938ec29
[  160.384939][ T9318] RDX: 0000000030004081 RSI: 0000200000000080 RDI: 0000000000000003
[  160.387882][ T9318] RBP: 00007f44b9411e41 R08: 0000000000000000 R09: 0000000000000000
[  160.390851][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.393828][ T9318] R13: 00007f44b95d6038 R14: 00007f44b95d5fa0 R15: 00007ffdb0391eb8
[  160.396795][ T9318]  </TASK>
[  160.398737][ T9318] Kernel Offset: disabled
[  160.400385][ T9318] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:12:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b032f98 RCX=161dbb8a0ca22e00 RDX=ffff88803a33b980
RSI=ffffffff8be33be0 RDI=ffffffff8be33ba0 RBP=0000000000000001 RSP=ffffc900096c75d0
R8 =0000000000000000 R9 =ffffffff822e5e87 R10=dffffc0000000000 R11=fffff9400087a9e9
R12=0000000000000000 R13=ffffea00043d4f40 R14=ffffffff8dbe1d10 R15=dffffc0000000000
RIP=ffffffff81a6704a RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f44ba20d6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000006480 CR3=0000000113c56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0095000000000000 0095000000000000 XMM03=0000000000000000 0018000000000000
XMM04=00007f4b9c10d100 00007f4b9b5a7460 XMM05=00007f4b9b5a7478 00007f4b9b5a74c0
XMM06=00007f4b9b5a74b8 00007f4b9b5a74b0 XMM07=00007f4b9b5a74a8 00007f4b9b5a74a0
XMM08=0000000000000000 00007f4b9b412f0f XMM09=0000000000000000 00007f4b9b412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001269 RDI=000000000000126a RBP=00000000000003f8 RSP=ffffc900070a6530
R8 =ffff888020108237 R9 =1ffff11004021046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008fb R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f44ba20d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b2137 CR3=0000000119dc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f44b95a7498 00007f44b95a7470 XMM03=00007f44b95a74a8 00007f44b95a74a0
XMM04=00007f44ba10d100 00007f44b95a7460 XMM05=00007f44b95a7478 00007f44b95a74c0
XMM06=00007f44b95a74b8 00007f44b95a74b0 XMM07=00007f44b95a74a8 00007f44b95a74a0
XMM08=0000000000000000 00007f44b9412f0f XMM09=0000000000000000 00007f44b9412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
