last executing test programs:

2.777820149s ago: executing program 1 (id=788):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b3", 0x1c}], 0x2}, 0x24000008)

2.77628642s ago: executing program 1 (id=789):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10042}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="140000003a000b63c55a80648c251b0908b5e9d1", 0x14}], 0x1}, 0x810)
sendmsg$inet(r1, &(0x7f0000000c00)={&(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000300)="b964cc2d36b7eb7b090a3768bbe89652d60ca076322a12b676e4d0aaaaa90af6ed35e825b0854b6658462b234232b1a67e4d71b49a9fb955c8670c2ddf8b510e862e037b6e43a8884c4d", 0x4a}, {&(0x7f0000000380)="df5c8f4d", 0x4}, {&(0x7f00000003c0)="481f0f923e16d801f63f6b4e61d6eccf03c09e275a982ee498f852c5d2bfbb38e55c0bd4497cc7717f9c03f3a10371834442958f25741db4389bdf365d697250eb32441392c34de6584209717ef07c16b3317f465386363513255dd70b80007d77591c074e82b87c7080c73d115db847cb3f0ccb6b959e9b03e1acd50d89af9a34cfba523cfd21b75260e08bd4eeec36cf1cd62b3dcb796e2660ce8bd0d2ab51731ccba92c8242a1d35396b77707980fa8dfcba30691ec68ead671", 0xbb}, {&(0x7f0000000480)="b3767969467986b61507a3b08379433f892d1601f194d2dd26db28b25f7e9ac09879", 0x22}, {&(0x7f00000004c0)="e2517bd5ef2618bc52005f0f44aefcb11d7baf9a216553d20cf1cc6d72921c6bfe8ece646031532cf9b9fb878c4287bf6448010959c90ce467fd597b934bdf84ff79260eab1ad5edaa2be8d3c10d64440866f2322028912e3c6f03ff38baab25bf64381161fbd097a31bf07b2d93058333c17ba966f47ea087e1833b2ed82571773bf5fb28cb40bd80f481decf7ceaf5cbd9a7e3cc1941abeb65b1e82e02952258b92fcda55ca0be2c36928bb44b6d2ff103b819cf82fb4982d0f646a97075abe5c4e44e5878f50df89cfbc6fe43ac", 0xcf}, {&(0x7f0000000600)="3ba1a4fde60d4ae73ffe3a44bceb0a12f3d46ad601629ab3fbf09bdcac28e1e9bc2b22474fadafeeafcf8cb688650bd196ea9c49ed6f7868d8583677c1477a3f3bd305bef55ac568410fad3dde512ca091e2b0f64d9d8c71bdf9a3297e977508c5361f48c8a503065972b9b6543e364819abb303d402d29de57f2c189646dc46a449", 0x82}, {&(0x7f00000006c0)="7b6bf89c9d6d61c7b90c70721f11ab7a9fb56a737f6d7b6233710dfb141541575fe4ffaeacc44ca297c24a9a7ca0a65fcd025ece533eee774dcb0f69da94211d068f3fafb9c42c87bf3f48a11862691c354deed7342d70972448cdd6e305403cd71c96a9e377e68f80c1b4509f72118c6dc7734d0cfadaf0bbff6cfb19617ed5cc18799d793d575fb3d3e13ab81124c5241fa7a086c979518757a0b08ed84c82d76f246296256b96ff64de0a737d8228da819ddae59fa98cb3a3d74b0511fc17783f4a132acb52426a73fd", 0xcb}, {&(0x7f00000007c0)="5855add2cc0151b88c098158bd8dfacc876804c1ae2533730c6ff71e2b1dccdacfcb41e9428f8688baa7e910136ef4d46662529d92355fbaabe87898581b94706a9a1e7cca07e14b6912e434bc0b9485657e869081d7e51289e760c240715b46686e5118e0863bee4c0c06e0c454f346ac8ac7ca5cd9619e1e7377c7f21e14f46a0ec831781371c628708f26317ac141f39858a551ee10efd896578981de37dfd6d8dff20c11", 0xa6}, {&(0x7f0000000880)="6ac3423d5eb793f1b2134f4aae7be5204c67f7f56823e4a13b55c09a586cf5284d2a8d7ac406d253d0b089d090cf885f9caa40866d55eb790aaf0e02af17e1929a88021cf8d9f679ccabab77e48456145472788725a37d060a10153b10126e77d7a1ecaf9e26db8d659f9511cb3b95747714934b92f8d0cee902b7bc", 0x7c}, {&(0x7f0000000900)="203551e0db563f14297c7a3098111b3d", 0x10}], 0xa, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x82}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x28, 0x4d, 0x0, 0x5, [0xfffffffd, 0x8e, 0x7, 0x3, 0x0, 0x1, 0x3, 0x0, 0x7]}, @cipso={0x86, 0x39, 0x3, [{0x6, 0x7, "f2c0e67ac0"}, {0x2, 0x8, "ff98508b6dbb"}, {0x6, 0x5, 'R\f\a'}, {0x2, 0xf, "bddea0b8d52419142c0ddcbafe"}, {0x2, 0x4, "ed6a"}, {0x1, 0xc, "4402a7cb9570531c987d"}]}, @ssrr={0x89, 0x17, 0x34, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @generic={0x94, 0x6, "54de74a1"}, @end, @ssrr={0x89, 0x13, 0xee, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xe}}}}], 0xe0}, 0x4008000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000c40), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000cc0)=""/250, 0xfa}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001040)=""/238, 0xee}, {&(0x7f0000001140)=""/149, 0x95}, {&(0x7f0000001200)=""/173, 0xad}], 0x7, &(0x7f0000001340)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x2020)
r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
gettid()
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x16, 0x7c, &(0x7f0000000000)="6952b7c09cd0d8694ea94c328e8d0bad0bd03bf59ae2", &(0x7f0000000080)=""/124, 0x80000001, 0x0, 0xa, 0xea, &(0x7f0000000100)="7e08b573a4d2639015ce", &(0x7f0000000140)="238ec402d689a15ae0c2d3f961116325e73315387447bbe2453f6e17ae2855058116c8554f4c9d29ae2bf9873fa054b6c2f280c815a4fcaef7a4a67bdbc36151cc767c353cf45865161405d57ee8fd91a8b558b71191397b61fcc63766e32ad4129c444697fcc3e49311ba421951efaee8e6180d255e7d70054ab1c17240f7f4a175f1952d97231c765dcffe739caed15961149cd12b23279f8a75bacae34bedc33706c19cdc8061850204b0385f37b17b1caecba9e8a2442158bc3aa58e0f99a682de09cead2a112bf352f1386893d80f1e625b13bab32fc7f7a135130b3e6fec437d6e178b29fbd8ce", 0x5, 0x0, 0xf7a8}, 0x50)

2.257159217s ago: executing program 1 (id=794):
socketpair(0x27, 0x6, 0x5206, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069119800000000008510000002000000850000004b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

2.178840574s ago: executing program 1 (id=797):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet(0x2, 0x5, 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x10, 0x0, r3, 0x3, '\x00', r4, r2, 0x2, 0x4, 0x3}, 0x50)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2480030}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1409, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000040)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x448000, 0x0)
ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000580)=0x1)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x16c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x10, 0xff}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x19, 0xd}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xfc}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0xe2}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4015}, 0x810)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000800)=0xfffffffd)
socket$unix(0x1, 0x5, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x3fb, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x24082)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a40)=r10, 0x4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfd}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000c40)={r0, r10})
r11 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000c80)={<r12=>r6})
recvmsg$kcm(r12, &(0x7f0000001f00)={&(0x7f0000000cc0)=@xdp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000d40)=""/19, 0x13}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/11, 0xb}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x4}, 0x2)
r13 = perf_event_open$cgroup(&(0x7f0000002040)={0x3, 0x80, 0xb, 0xb, 0x98, 0x6, 0x0, 0x40, 0x24c2, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x39f, 0x2, @perf_bp={&(0x7f0000002000)}, 0x420, 0x0, 0x7, 0x2, 0xf, 0x2, 0x0, 0x0, 0x3, 0x0, 0x9}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000001f80)={0x1, 0x80, 0x80, 0x35, 0x2, 0x7, 0x0, 0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000001f40), 0x4}, 0x6, 0x400, 0x8a4, 0x3, 0x6, 0xdaf, 0x4, 0x0, 0x800, 0x0, 0xa99}, 0x0, 0xd, r13, 0x4)
ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000020c0)={'batadv_slave_1\x00'})
ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000002100))
ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000002140)=0x7)
syz_clone(0xc1000, &(0x7f0000002180)="7e317231d638d2eaff8ccce12eb2d89ac1ab77a9013d5d72aa5f716791fce82574e2154321fda87e0332d1ee5954522ba00e043d52ff8a658737c29e8b51e9525bdff12fce9701b85efc8ee26b85a650ad76212b952cf481f83fecc0e2e42e4d1374fafa22ecc63c72375ac31a872f95093b896af94a9c90a44e0d5602310f4c61c3e50d4fb8e058a22dc3e813d12c2871155b61f521f90895d6c9dc97", 0x9d, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)="59a2e3041353e4062d9f25924d494ccb21fd1af9c054e58f14fa15079061dc067139de5cb90d6e1aaf305c59372f116739608b67fe88c77167b93dca4249d1918a2beb35f05299cef5cb5f9384a1075a510f83039dada0dd836fa3")

1.59818123s ago: executing program 0 (id=808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a2043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0)
socketpair(0x26, 0x5, 0x68, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x1, 0x0}, 0x34028880)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f4ffff87ffff01000000381200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x8a, &(0x7f00000000c0)=""/138, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0x0, 0x9}, 0x10, 0x17a5b, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[r0, r0, r0, r0], &(0x7f0000000280)=[{0x4, 0x5, 0xf, 0xa}], 0x10, 0xffffffc0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4)

1.357212411s ago: executing program 0 (id=811):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x2004c080)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c0002800800014080ffffff0c0001800800014080ffffff050014002000000005000500020000000500010006"], 0x6c}}, 0x0)

1.355813834s ago: executing program 1 (id=812):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80)
sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
close(r4)
recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='GPL\x00')
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r6], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, &(0x7f0000000340)="11362b5f4081a3023d15beae34183d85e37098055b3d6a64fd873c48e3e949911d7a1d945a13db22cebd", &(0x7f0000000380)=""/220, 0x4}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)

1.279013589s ago: executing program 2 (id=813):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='hrtimer_start\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x8080, 0x2, 0x0, 0x9, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000201010400000000000000000006802c000380060001004e230000060002004e230000060001004e200000060002004e230000060001004e2300000800074000000c9206001240000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a00020000000000000000"], 0x28}}, 0x84)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)="d80000001c0081044e81f782229865e91aaf68fb01000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c112ff3e587e4553b786f8370f9e9321d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe0000000000000093a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.188682899s ago: executing program 0 (id=814):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005001f000000000082000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1946}, 0x0, 0x0, 0xffffffff, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000300000000000000000000007d8b17f4355a1b0a5dd7ff8fa28ff89bdd85ec476547286cf9aef411649f183860e95a276a41ab6d1446dd648bc4e07e9e045c0de4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x10)
close(r4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.107297455s ago: executing program 2 (id=815):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5c}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0xfe, 0xfc, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800038, 0x0, @perf_config_ext={0x0, 0x9}, 0x114945, 0x5, 0xfffefffc, 0x6, 0x4000000800, 0x62e4, 0x1, 0x0, 0x40000000, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4)
close(0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x37, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffee6, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9b}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x44000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "1f2df40eb4a013bf38d786a149136be271d77c093d427b56c3163e1d1db5de8b09f7be4c3e90ba3ccc2ee38743d89c55c4256a4113573b1d85753ce115384ac51f0c25383baa79789546c47ff8a213e3397c5286dad9df431b4ace84bc49ec0c6967fa7b8bc40c0aed8b862d5389bf0f1494d0f31a23aa2269694de5b0cc7f1f8a10876a2874006130068cae70028ba146f5f1d02ef8f45f8f50"}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2a07}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0xf4ffffff, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x164}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.018784594s ago: executing program 2 (id=816):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x8, 0xfffff014}, {0x6}]})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c57e54066657a6afce07bce1b63ca73aeb"], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010605d2206ec197b200000000000000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001040)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000031401002dbd7000f6dbdf240900020073797a300000000008004100736977001400330076657468315f766972745f7769666900cb9854e3e0da22ae88bc6c897b5dde5b0cfb3a04f2d3cce8d0084f3fdbd29900"/97], 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3a, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000906050000000000000000000100000508000940000000010401140008801000078005001100aaaaaaaaaaaa0000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

308.693967ms ago: executing program 1 (id=817):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb011218000000000000000c0000000c00000002000000000000000000000d00001d000000"], 0x0, 0x26}, 0x28) (async)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close(0xffffffffffffffff) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x1000}, 0x114905, 0x4, 0x0, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async)
r4 = socket$kcm(0x29, 0x5, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
sendmsg$kcm(r4, 0x0, 0x20044014)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
close(0xffffffffffffffff) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socket$kcm(0x10, 0x3, 0x10) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

306.655417ms ago: executing program 0 (id=818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0xa, 0x0, 0x106)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000207010300"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc0)

104.025952ms ago: executing program 2 (id=819):
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x436}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)

101.298619ms ago: executing program 2 (id=820):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f8008000140fffffffe080002"], 0xb0}}, 0x74800)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0}, 0x8000) (async)
close(r1)

28.207056ms ago: executing program 0 (id=821):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d8000000100081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

27.483887ms ago: executing program 2 (id=822):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x400, 0x1, 0x0, 0x4, 0x3fe, 0x71a, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003200000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0x20000, 0x8004, 0x41534, 0xffffffffffffffff, 0x1}, 0x50)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0x33}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x3, 0x1000}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000006960b41205000000eaffffff94000000000000002d3bfcb673b8dbd94c6064a3f925f25b37a771e07900078b4d7dcecb28fdfbc4686b07e803000000000000001b47df8bcf442f1b5f0bfadbce74e1c7c3cbe7a7040855af092d5c32af4cbac41fbcb810d2dddb11429a82c44508f362baa99aaf936f"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="11000000000000", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)

0s ago: executing program 0 (id=823):
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x80, 0x4, 0x41, 0x5, 0x0, 0xc17, 0x4000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4000006, 0x1, @perf_config_ext={0x9, 0x9fd}, 0x5000, 0x29ef, 0x36f, 0x4, 0x81, 0x9, 0x9, 0x0, 0x800, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x1604, 0x419, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, r0, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
close(r2) (async, rerun: 64)
r3 = socket$kcm(0x2, 0x922000000001, 0x106) (rerun: 64)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f00000000c0), 0x4) (async)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
r6 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r6, 0x0, 0x11) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) (async, rerun: 64)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
r7 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) (async)
recvmsg(r7, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000700)=""/239, 0xef}, 0x40000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r5}, 0x18)
write$cgroup_subtree(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00ff00"], 0xfe43)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19532' (ED25519) to the list of known hosts.
syzkaller login: [   48.391058][ T5832] cgroup: Unknown subsys name 'net'
[   48.480736][ T5832] cgroup: Unknown subsys name 'cpuset'
[   48.487534][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.107192][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.442176][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.453967][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.457597][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.461415][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.465080][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.501461][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.515785][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.520277][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.543786][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.547417][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.553368][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.560145][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.563091][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.566207][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.569910][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.719838][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   54.837251][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.840464][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.843224][ T5841] bridge_slave_0: entered allmulticast mode
[   54.847007][ T5841] bridge_slave_0: entered promiscuous mode
[   54.867356][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.870443][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.873651][ T5841] bridge_slave_1: entered allmulticast mode
[   54.877461][ T5841] bridge_slave_1: entered promiscuous mode
[   54.927945][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   54.948184][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.961352][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.010179][ T5841] team0: Port device team_slave_0 added
[   55.017463][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.024558][ T5841] team0: Port device team_slave_1 added
[   55.088937][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.091670][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.101953][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.111747][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.115669][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.118705][ T5846] bridge_slave_0: entered allmulticast mode
[   55.122625][ T5846] bridge_slave_0: entered promiscuous mode
[   55.127778][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.130671][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.140320][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.153535][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.156856][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.159940][ T5846] bridge_slave_1: entered allmulticast mode
[   55.163938][ T5846] bridge_slave_1: entered promiscuous mode
[   55.220232][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.227699][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.246399][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.249648][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.252026][ T5847] bridge_slave_0: entered allmulticast mode
[   55.255010][ T5847] bridge_slave_0: entered promiscuous mode
[   55.295590][ T5841] hsr_slave_0: entered promiscuous mode
[   55.299100][ T5841] hsr_slave_1: entered promiscuous mode
[   55.302548][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.305972][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.308711][ T5847] bridge_slave_1: entered allmulticast mode
[   55.312372][ T5847] bridge_slave_1: entered promiscuous mode
[   55.316559][ T5846] team0: Port device team_slave_0 added
[   55.332063][ T5846] team0: Port device team_slave_1 added
[   55.385956][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.390124][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.392461][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.400903][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.405320][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.407462][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.417088][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.430518][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.473308][ T5847] team0: Port device team_slave_0 added
[   55.481476][ T5847] team0: Port device team_slave_1 added
[   55.526514][ T5846] hsr_slave_0: entered promiscuous mode
[   55.529565][ T5846] hsr_slave_1: entered promiscuous mode
[   55.532388][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   55.535656][ T5846] Cannot create hsr debugfs directory
[   55.571762][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.575066][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.585833][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.597216][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.600208][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.610976][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.701749][ T5847] hsr_slave_0: entered promiscuous mode
[   55.705054][ T5847] hsr_slave_1: entered promiscuous mode
[   55.707970][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.710431][ T5847] Cannot create hsr debugfs directory
[   55.840066][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.847112][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.858481][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.879986][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.940036][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.944891][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.949252][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.962302][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.028064][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.035023][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.041493][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.052470][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.116893][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.129818][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.142018][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.150397][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.153395][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.165250][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.167649][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.174681][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.182304][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.184879][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.205121][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.208160][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.261217][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.290412][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.295030][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.312913][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.315701][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.337013][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.339739][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.361686][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.367955][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.381023][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.424731][ T5841] veth0_vlan: entered promiscuous mode
[   56.435229][ T5841] veth1_vlan: entered promiscuous mode
[   56.471329][ T5841] veth0_macvtap: entered promiscuous mode
[   56.476300][ T5841] veth1_macvtap: entered promiscuous mode
[   56.480764][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.498767][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.506610][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.512283][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.531378][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.536000][ T5234] Bluetooth: hci0: command tx timeout
[   56.537695][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.545689][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.549455][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.580788][ T5847] veth0_vlan: entered promiscuous mode
[   56.598759][ T5847] veth1_vlan: entered promiscuous mode
[   56.614971][ T5844] Bluetooth: hci2: command tx timeout
[   56.616866][ T5234] Bluetooth: hci1: command tx timeout
[   56.620957][ T5846] veth0_vlan: entered promiscuous mode
[   56.635902][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.642876][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.647742][ T5846] veth1_vlan: entered promiscuous mode
[   56.673181][ T5847] veth0_macvtap: entered promiscuous mode
[   56.689315][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.691958][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.695721][ T5846] veth0_macvtap: entered promiscuous mode
[   56.702696][ T5847] veth1_macvtap: entered promiscuous mode
[   56.710309][ T5846] veth1_macvtap: entered promiscuous mode
[   56.719319][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.728565][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.745829][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.748756][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.752101][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.764736][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.767316][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.776981][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.783489][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.796615][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.825745][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.848819][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.852923][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.901495][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.907206][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.927785][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.930385][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.954025][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.957174][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.976028][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.979729][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.056230][ T5918] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   57.060615][ T5918] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.076675][ T5914] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[   57.093682][    C1] hrtimer: interrupt took 52804 ns
[   57.161888][ T5919] netlink: 'syz.2.3': attribute type 39 has an invalid length.
[   57.939077][ T5919] hsr_slave_0 (unregistering): left promiscuous mode
[   58.112515][ T5927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.613455][ T5234] Bluetooth: hci0: command tx timeout
[   58.629774][ T5940] Zero length message leads to an empty skb
[   58.693410][ T5844] Bluetooth: hci2: command tx timeout
[   58.696023][ T5234] Bluetooth: hci1: command tx timeout
[   58.720588][ T5941] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.731845][ T5941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.117634][ T5234] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[   59.117739][ T5234] Bluetooth: hci1: connection err: -111
[   59.455137][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.900728][ T5969] netlink: 'syz.0.19': attribute type 2 has an invalid length.
[   59.932211][ T5965] netlink: 17 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.937002][ T5965] netlink: zone id is out of range
[   59.939170][ T5965] netlink: zone id is out of range
[   59.941345][ T5965] netlink: zone id is out of range
[   59.949266][ T5965] netlink: zone id is out of range
[   59.951524][ T5965] netlink: zone id is out of range
[   59.954214][ T5965] netlink: zone id is out of range
[   59.956339][ T5965] netlink: zone id is out of range
[   59.958086][ T5965] netlink: zone id is out of range
[   59.959900][ T5965] netlink: zone id is out of range
[   60.096211][ T5978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22'.
[   60.099475][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22'.
[   60.151207][ T5984] netlink: 'syz.0.23': attribute type 11 has an invalid length.
[   60.157246][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'.
[   60.443978][ T6006] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26'.
[   60.574645][ T6017] netlink: 752 bytes leftover after parsing attributes in process `syz.0.29'.
[   60.735418][ T5234] Bluetooth: hci0: command tx timeout
[   60.796213][ T5234] Bluetooth: hci1: command tx timeout
[   60.798585][ T5234] Bluetooth: hci2: command tx timeout
[   62.209699][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   62.401695][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.47'.
[   62.408330][ T6077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.47'.
[   62.414264][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.47'.
[   62.468847][ T6081] net_ratelimit: 75 callbacks suppressed
[   62.468863][ T6081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.587827][ T6092] netlink: 'syz.2.50': attribute type 4 has an invalid length.
[   62.590455][ T6084] netlink: 2 bytes leftover after parsing attributes in process `syz.1.49'.
[   62.680956][ T6094] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.51'.
[   62.684949][ T6095] netlink: 'syz.2.50': attribute type 10 has an invalid length.
[   62.692115][ T6095] team0: Port device dummy0 added
[   62.766306][ T6094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.773546][ T5844] Bluetooth: hci0: command tx timeout
[   62.777706][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'.
[   62.787518][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.51'.
[   62.796477][ T6094] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   62.822649][ T6099] netlink: 'syz.0.53': attribute type 10 has an invalid length.
[   62.841160][ T6099] veth0_vlan: left promiscuous mode
[   62.847632][ T6099] veth0_vlan: entered promiscuous mode
[   62.852982][ T6099] team0: Device veth0_vlan failed to register rx_handler
[   62.856126][ T5234] Bluetooth: hci1: command tx timeout
[   62.858273][ T5844] Bluetooth: hci2: command tx timeout
[   63.117163][ T5844] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[   63.299980][ T6116] netlink: 'syz.0.59': attribute type 26 has an invalid length.
[   63.306454][ T6117] netlink: 'syz.0.59': attribute type 26 has an invalid length.
[   63.353090][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[   63.365255][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'.
[   63.532603][ T6128] netlink: 'syz.0.63': attribute type 13 has an invalid length.
[   63.685013][ T6136] netlink: 34 bytes leftover after parsing attributes in process `syz.0.67'.
[   63.957434][ T6167] netlink: 'syz.2.77': attribute type 1 has an invalid length.
[   64.013598][ T6176] bond_slave_0: entered promiscuous mode
[   64.015914][ T6176] bond_slave_1: entered promiscuous mode
[   64.015932][ T6179] netlink: 'syz.2.80': attribute type 10 has an invalid length.
[   64.032490][ T6179] veth1_macvtap: left promiscuous mode
[   64.448979][ T6196] syzkaller1: tun_chr_ioctl cmd 1074025677
[   64.456539][ T6196] syzkaller1: linktype set to 780
[   64.668593][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.130941][ T6244] netlink: 'syz.1.103': attribute type 13 has an invalid length.
[   67.104283][ T6275] Illegal XDP return value 4294967294 on prog  (id 75) dev N/A, expect packet loss!
[   67.200165][ T6275] team0: Port device geneve1 added
[   67.420499][ T6288] __nla_validate_parse: 11 callbacks suppressed
[   67.420510][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'.
[   67.426290][ T6288] tc_dump_action: action bad kind
[   67.543864][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.119'.
[   67.945555][ T6317] validate_nla: 2 callbacks suppressed
[   67.945564][ T6317] netlink: 'syz.0.128': attribute type 27 has an invalid length.
[   67.951482][ T6317] netlink: 164 bytes leftover after parsing attributes in process `syz.0.128'.
[   67.975101][ T6322] netlink: 204 bytes leftover after parsing attributes in process `syz.2.129'.
[   67.994302][ T6325] netlink: 64 bytes leftover after parsing attributes in process `syz.0.130'.
[   68.409599][ T6339] delete_channel: no stack
[   68.466006][ T6339] delete_channel: no stack
[   68.531233][ T6341] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.136'.
[   69.827284][ T6367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.143'.
[   69.830440][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.143'.
[   69.850578][ T6370] netlink: 'syz.1.144': attribute type 11 has an invalid length.
[   69.853882][ T6370] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.144'.
[   69.864006][ T6363] delete_channel: no stack
[   69.911616][ T6377] netlink: 'syz.2.146': attribute type 29 has an invalid length.
[   70.012592][ T6390] netlink: 'syz.0.149': attribute type 28 has an invalid length.
[   70.017052][ T6390] netlink: 'syz.0.149': attribute type 3 has an invalid length.
[   70.020129][ T6390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.149'.
[   71.084053][ T6416] netlink: 'syz.0.157': attribute type 13 has an invalid length.
[   71.086605][ T6416] netlink: 'syz.0.157': attribute type 17 has an invalid length.
[   71.096829][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.099725][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.139393][ T6416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.405077][ T6431] syz.1.161 uses obsolete (PF_INET,SOCK_PACKET)
[   71.485511][ T5844] Bluetooth: hci0: ISO packet for unknown connection handle 5
[   71.668302][ T6454] =======================================================
[   71.668302][ T6454] WARNING: The mand mount option has been deprecated and
[   71.668302][ T6454]          and is ignored by this kernel. Remove the mand
[   71.668302][ T6454]          option from the mount to silence this warning.
[   71.668302][ T6454] =======================================================
[   72.139651][ T6480] netlink: 'syz.1.176': attribute type 25 has an invalid length.
[   72.431954][ T6504] netlink: 'syz.1.181': attribute type 6 has an invalid length.
[   72.434730][ T6504] __nla_validate_parse: 5 callbacks suppressed
[   72.434738][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   72.501563][ T6508] netlink: 'syz.1.183': attribute type 12 has an invalid length.
[   72.505092][ T6508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.183'.
[   72.530650][ T6508] syz.1.183 (6508) used obsolete PPPIOCDETACH ioctl
[   72.608386][ T6510] netlink: 'syz.0.184': attribute type 10 has an invalid length.
[   72.610936][ T6510] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.184'.
[   72.848555][ T6541] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.193'.
[   72.862388][ T6537] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.191'.
[   72.958441][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'.
[   73.356155][ T6576] validate_nla: 1 callbacks suppressed
[   73.356166][ T6576] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[   73.438961][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'.
[   73.442665][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'.
[   73.547329][ T6600] warning: `syz.2.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.192995][ T6638] netlink: 'syz.2.225': attribute type 27 has an invalid length.
[   74.195955][ T6638] netlink: 152 bytes leftover after parsing attributes in process `syz.2.225'.
[   74.202051][ T6638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.085195][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[   75.119265][ T6673] netlink: 'syz.0.233': attribute type 10 has an invalid length.
[   75.128024][ T6673] 8021q: adding VLAN 0 to HW filter on device team0
[   75.132976][ T6673] bond0: (slave team0): Enslaving as an active interface with an up link
[   76.505001][ T6693] syzkaller1: tun_chr_ioctl cmd 1074025677
[   76.507155][ T6693] syzkaller1: linktype set to 780
[   76.644666][ T6706] netlink: 'syz.1.244': attribute type 3 has an invalid length.
[   77.065652][ T6730] netlink: 'syz.0.254': attribute type 13 has an invalid length.
[   77.068848][ T6730] netlink: 'syz.0.254': attribute type 17 has an invalid length.
[   77.083501][ T6730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.097952][ T6734] C: renamed from team_slave_0 (while UP)
[   77.101443][ T6734] netlink: 'syz.1.255': attribute type 3 has an invalid length.
[   77.104714][ T6734] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   77.107580][ T6734] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   77.872635][ T6752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.925586][ T6754] syz.0.263 (6754) used greatest stack depth: 18104 bytes left
[   78.049636][ T5844] Bluetooth: hci1: Malformed HCI Event
[   78.052722][ T6764] __nla_validate_parse: 9 callbacks suppressed
[   78.052731][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   78.060851][ T6764] netlink: 'syz.2.267': attribute type 3 has an invalid length.
[   78.066697][ T6764] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.267'.
[   78.070983][ T6764] netlink: 'syz.2.267': attribute type 3 has an invalid length.
[   78.073668][ T6764] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.267'.
[   78.186626][ T6771] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.269'.
[   78.191421][ T6771] nbd: illegal input index -404748436
[   78.388822][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'.
[   78.394907][ T6782] validate_nla: 6 callbacks suppressed
[   78.394917][ T6782] netlink: 'syz.1.273': attribute type 10 has an invalid length.
[   78.401289][ T6782] netlink: 2 bytes leftover after parsing attributes in process `syz.1.273'.
[   78.411827][ T6782] bond0: entered promiscuous mode
[   78.419101][ T6782] bridge0: port 3(bond0) entered blocking state
[   78.422057][ T6782] bridge0: port 3(bond0) entered disabled state
[   78.427274][ T6782] bond0: entered allmulticast mode
[   78.429532][ T6782] bond_slave_0: entered allmulticast mode
[   78.431995][ T6782] bond_slave_1: entered allmulticast mode
[   78.444266][ T6780] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.272'.
[   78.457485][ T6782] bridge0: port 3(bond0) entered blocking state
[   78.460468][ T6782] bridge0: port 3(bond0) entered forwarding state
[   78.508258][ T6786] netlink: 'syz.0.274': attribute type 10 has an invalid length.
[   78.543890][ T6785] netlink: 'syz.0.274': attribute type 10 has an invalid length.
[   79.236083][ T6805] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.280'.
[   79.355953][ T6801] delete_channel: no stack
[   79.747670][ T6825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.285'.
[   80.068922][ T6838] netlink: 'syz.0.286': attribute type 8 has an invalid length.
[   80.211587][ T6825] team0: Port device dummy0 removed
[   80.352960][ T6847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.287'.
[   80.445401][ T6848] netlink: 'syz.0.288': attribute type 10 has an invalid length.
[   80.479385][ T6848] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   80.702108][ T6857] netlink: 'syz.2.291': attribute type 29 has an invalid length.
[   80.811674][ T6864] netlink: 'syz.2.291': attribute type 29 has an invalid length.
[   80.837054][ T6860] netlink: 'syz.1.293': attribute type 27 has an invalid length.
[   80.841642][ T6860] netlink: 'syz.1.293': attribute type 3 has an invalid length.
[   80.916854][ T6857] netlink: 'syz.2.291': attribute type 29 has an invalid length.
[   81.192229][ T6877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.335191][   T47] cfg80211: failed to load regulatory.db
[   81.943792][ T6889] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   81.946286][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.676543][ T6913] delete_channel: no stack
[   83.531640][ T6929] __nla_validate_parse: 8 callbacks suppressed
[   83.531697][ T6929] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.313'.
[   83.729231][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.642680][ T6964] syzkaller1: tun_chr_ioctl cmd 1074812118
[   84.660573][ T6964] validate_nla: 4 callbacks suppressed
[   84.660629][ T6964] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[   84.667899][ T6964] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[   84.672433][ T6964] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[   84.677323][ T6964] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[   84.682913][ T6964] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.323'.
[   85.151019][ T6989] netlink: 'syz.0.329': attribute type 21 has an invalid length.
[   85.154631][ T6989] netlink: 'syz.0.329': attribute type 6 has an invalid length.
[   85.157297][ T6989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.329'.
[   85.205794][ T6993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'.
[   85.209057][ T6993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'.
[   85.212052][ T6988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'.
[   85.436152][ T7005] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   85.517949][ T7011] netlink: 'syz.0.336': attribute type 10 has an invalid length.
[   85.520587][ T7011] netlink: 'syz.0.336': attribute type 19 has an invalid length.
[   85.537314][ T7011] netlink: 104 bytes leftover after parsing attributes in process `syz.0.336'.
[   85.546663][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   85.693731][ T7017] netlink: 'syz.0.339': attribute type 10 has an invalid length.
[   86.190595][ T7020] netlink: 177 bytes leftover after parsing attributes in process `syz.2.340'.
[   87.460604][ T7105] delete_channel: no stack
[   90.411833][ T7111] validate_nla: 2 callbacks suppressed
[   90.411928][ T7111] netlink: 'syz.1.369': attribute type 10 has an invalid length.
[   91.080832][ T7119] __nla_validate_parse: 5 callbacks suppressed
[   91.080846][ T7119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.371'.
[   91.240856][ T7124] veth0_vlan: entered allmulticast mode
[   91.705865][ T7129] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.373'.
[   91.732766][ T7148] TCP: TCP_TX_DELAY enabled
[   91.735937][ T7148] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.378'.
[   91.739016][ T7148] openvswitch: netlink: Message has 6 unknown bytes.
[   92.870138][ T7164] netlink: 'syz.2.385': attribute type 33 has an invalid length.
[   92.874222][ T7164] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.385'.
[   93.392516][ T7183] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[   93.400843][ T7183] netlink: 'syz.0.390': attribute type 2 has an invalid length.
[   93.611765][ T7191] netlink: 10 bytes leftover after parsing attributes in process `syz.2.392'.
[   93.746997][ T7201] netlink: 'syz.2.396': attribute type 1 has an invalid length.
[   93.750748][ T7201] netlink: 'syz.2.396': attribute type 1 has an invalid length.
[   93.779029][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'.
[   93.782217][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'.
[   93.847946][ T7203] netlink: 'syz.0.395': attribute type 39 has an invalid length.
[   94.232929][ T7210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.235702][ T7210] IPv6: NLM_F_CREATE should be set when creating new route
[   94.238331][ T7210] IPv6: NLM_F_CREATE should be set when creating new route
[   95.167128][ T7226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.403'.
[   95.172872][ T7226] netlink: 'syz.2.403': attribute type 10 has an invalid length.
[   95.178106][ T7226] syz_tun: entered promiscuous mode
[   95.188665][ T7226] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   95.245136][ T7225] delete_channel: no stack
[   95.741319][ T7244] syzkaller1: tun_chr_ioctl cmd 1074025677
[   95.745842][ T7244] syzkaller1: linktype set to 823
[   95.764800][ T7245] syzkaller1: tun_chr_ioctl cmd 1074025677
[   95.767504][ T7245] syzkaller1: linktype set to 823
[   96.190271][ T7268] pim6reg1: entered allmulticast mode
[   96.213941][ T7271] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.419'.
[   96.341750][ T7279] netlink: 'syz.1.421': attribute type 16 has an invalid length.
[   96.373639][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.1.421'.
[   97.016680][ T7304] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.426'.
[   97.701888][ T7312] syzkaller1: tun_chr_ioctl cmd 1074025677
[   97.711829][ T7312] syzkaller1: linktype set to 780
[   97.777563][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.428'.
[   97.790817][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.428'.
[   97.801334][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.428'.
[   97.977429][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'.
[   97.982052][ T7329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.433'.
[   98.138485][ T7333] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.434'.
[   98.145451][ T7333] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.434'.
[   98.490592][ T7361] netlink: 'syz.0.442': attribute type 210 has an invalid length.
[   98.682504][ T7366] syzkaller1: tun_chr_ioctl cmd 1074025677
[   98.687683][ T7366] syzkaller1: linktype set to 805
[   98.781928][ T7372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.357768][ T7385] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   99.702063][ T7400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.938078][ T7430] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  101.110108][ T7433] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  101.467481][ T5844] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  101.638337][ T7457] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[  101.653327][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.696545][ T7466] __nla_validate_parse: 12 callbacks suppressed
[  101.696555][ T7466] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.474'.
[  101.705738][ T7468] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.474'.
[  101.720792][ T7465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.899638][ T7475] netlink: 'syz.1.476': attribute type 19 has an invalid length.
[  101.907394][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.476'.
[  102.885775][ T7486] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.479'.
[  103.012044][ T7493] netlink: 'syz.0.481': attribute type 21 has an invalid length.
[  103.032426][ T7493] netlink: 128 bytes leftover after parsing attributes in process `syz.0.481'.
[  103.742080][ T7493] netlink: 'syz.0.481': attribute type 4 has an invalid length.
[  103.837255][ T7496] netlink: 'syz.2.482': attribute type 29 has an invalid length.
[  103.841099][ T7496] netlink: 'syz.2.482': attribute type 29 has an invalid length.
[  103.981655][ T7509] netlink: 'syz.2.486': attribute type 29 has an invalid length.
[  103.986985][ T7509] netlink: 'syz.2.486': attribute type 29 has an invalid length.
[  103.990409][ T7509] netlink: 'syz.2.486': attribute type 29 has an invalid length.
[  104.013104][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'.
[  104.038644][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'.
[  104.169202][ T7530] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  104.173070][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.494'.
[  104.179215][ T7530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.494'.
[  104.182980][ T7532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.494'.
[  104.237335][ T7535] netlink: 'syz.1.495': attribute type 21 has an invalid length.
[  105.330483][ T7573] syzkaller1: tun_chr_ioctl cmd 1074025677
[  105.333162][ T7573] syzkaller1: linktype set to 823
[  105.636797][ T7580] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  105.736263][ T7582] mac80211_hwsim hwsim3 .3c: renamed from wlan1
[  106.109793][ T5234] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  106.451278][ T5873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.463444][ T5873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.512903][ T5873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.518415][ T5873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.786510][ T7624] validate_nla: 5 callbacks suppressed
[  106.786568][ T7624] netlink: 'syz.1.528': attribute type 4 has an invalid length.
[  106.791618][ T7624] __nla_validate_parse: 13 callbacks suppressed
[  106.791673][ T7624] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.528'.
[  106.820289][ T7624] netlink: 'syz.1.528': attribute type 13 has an invalid length.
[  106.823217][ T7624] netlink: 160 bytes leftover after parsing attributes in process `syz.1.528'.
[  106.848674][ T7624] erspan0: refused to change device tx_queue_len
[  106.851345][ T7624] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  106.858993][ T7630] netlink: 'syz.2.530': attribute type 12 has an invalid length.
[  106.861905][ T7630] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.530'.
[  107.017455][ T7636] netlink: 'syz.2.531': attribute type 4 has an invalid length.
[  107.071599][ T7639] netlink: 'syz.2.533': attribute type 10 has an invalid length.
[  107.133816][ T7642] netlink: 'syz.2.534': attribute type 29 has an invalid length.
[  107.137213][ T7642] netlink: 'syz.2.534': attribute type 29 has an invalid length.
[  107.140153][ T7642] netlink: 'syz.2.534': attribute type 29 has an invalid length.
[  107.143334][ T7642] netlink: 'syz.2.534': attribute type 29 has an invalid length.
[  107.298339][ T7653] netlink: 'syz.2.538': attribute type 33 has an invalid length.
[  107.301815][ T7653] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.538'.
[  107.809115][ T7673] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  107.823731][ T7673] sctp: [Deprecated]: syz.1.543 (pid 7673) Use of int in maxseg socket option.
[  107.823731][ T7673] Use struct sctp_assoc_value instead
[  107.979300][ T7676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'.
[  107.983113][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'.
[  107.987866][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'.
[  108.133441][ T5234] Bluetooth: hci1: command tx timeout
[  108.192242][ T7679] netlink: 948 bytes leftover after parsing attributes in process `syz.0.545'.
[  108.286281][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'.
[  108.626576][ T7690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.548'.
[  110.862759][ T7764] delete_channel: no stack
[  110.872741][ T7764] delete_channel: no stack
[  111.370610][ T7783] openvswitch: netlink: nsh attr 165 is out of range max 3
[  111.373739][ T7783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.660001][ T7794] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  111.665458][ T7794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.945616][ T7814] validate_nla: 14 callbacks suppressed
[  111.945629][ T7814] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[  111.951473][ T7814] __nla_validate_parse: 17 callbacks suppressed
[  111.951482][ T7814] netlink: 17 bytes leftover after parsing attributes in process `syz.0.587'.
[  112.053208][ T7820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.589'.
[  112.177157][ T7822] netlink: 'syz.2.590': attribute type 1 has an invalid length.
[  112.180653][ T7822] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.590'.
[  112.401556][ T7833] netlink: 'syz.2.594': attribute type 27 has an invalid length.
[  112.405304][ T7833] netlink: 'syz.2.594': attribute type 4 has an invalid length.
[  112.408868][ T7833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.594'.
[  112.475631][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'.
[  112.482542][ T7839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.598'.
[  112.622777][ T7850] netlink: 44 bytes leftover after parsing attributes in process `syz.0.599'.
[  112.826288][ T7860] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  112.829366][ T7859] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  112.830235][ T7860] team0: Device ipvlan1 failed to register rx_handler
[  112.857969][ T7859] team0: Device ipvlan1 failed to register rx_handler
[  112.884740][ T7864] netlink: 'syz.0.604': attribute type 33 has an invalid length.
[  112.887372][ T7864] netlink: 164 bytes leftover after parsing attributes in process `syz.0.604'.
[  112.933227][ T7869] lo: entered allmulticast mode
[  112.941011][ T7870] lo: entered promiscuous mode
[  112.942800][ T7870] lo: left allmulticast mode
[  113.169660][ T7887] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.611'.
[  113.397750][ T7892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.612'.
[  114.060658][ T7919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.194423][ T7921] openvswitch: netlink: IPv4 tunnel dst address is zero
[  114.479711][ T7946] syzkaller0: entered promiscuous mode
[  114.482284][ T7946] syzkaller0: entered allmulticast mode
[  114.562774][ T7950] openvswitch: netlink: Missing key (keys=40, expected=80)
[  114.973399][ T7977] netlink: 'syz.0.640': attribute type 3 has an invalid length.
[  115.682045][ T8018] lo: entered allmulticast mode
[  115.745295][ T8019] lo: entered promiscuous mode
[  115.747559][ T8019] lo: left allmulticast mode
[  116.823081][ T8029] netlink: 'syz.2.654': attribute type 21 has an invalid length.
[  116.826953][ T8029] netlink: 'syz.2.654': attribute type 6 has an invalid length.
[  117.158365][ T8031] __nla_validate_parse: 15 callbacks suppressed
[  117.158424][ T8031] netlink: 188 bytes leftover after parsing attributes in process `syz.2.655'.
[  117.326320][ T8054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.662'.
[  117.483765][ T8058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.664'.
[  117.515160][ T8069] netlink: 'syz.0.667': attribute type 7 has an invalid length.
[  117.518281][ T8069] netlink: 'syz.0.667': attribute type 8 has an invalid length.
[  117.622422][ T8083] veth0_vlan: entered allmulticast mode
[  117.661337][ T8078] sit0: entered allmulticast mode
[  117.675795][ T8082] sit0: entered promiscuous mode
[  117.822236][ T8086] : renamed from vlan0
[  117.890739][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.673'.
[  117.895189][ T8090] netlink: 'syz.1.673': attribute type 2 has an invalid length.
[  117.897809][ T8090] netlink: 'syz.1.673': attribute type 2 has an invalid length.
[  117.900369][ T8090] netlink: 'syz.1.673': attribute type 1 has an invalid length.
[  117.914929][ T8090] netlink: 48 bytes leftover after parsing attributes in process `syz.1.673'.
[  117.992765][ T8097] netlink: 'syz.0.674': attribute type 1 has an invalid length.
[  118.004114][ T8097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.148493][ T8101] netlink: 'syz.0.675': attribute type 40 has an invalid length.
[  118.440619][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.659196][ T8122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'.
[  118.825717][ T8139] netlink: 10 bytes leftover after parsing attributes in process `syz.0.686'.
[  118.850476][ T8143] netlink: 44 bytes leftover after parsing attributes in process `syz.2.688'.
[  118.880317][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'.
[  119.116749][ T8149] netlink: 'syz.0.691': attribute type 1 has an invalid length.
[  119.190910][ T8151] netlink: 'syz.0.692': attribute type 16 has an invalid length.
[  119.197065][ T8151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.692'.
[  120.754106][ T8211] netlink: 'syz.1.710': attribute type 21 has an invalid length.
[  121.600059][ T8217] bond0: (slave bond_slave_0): Releasing backup interface
[  121.670276][ T8225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.805482][ T8307] __nla_validate_parse: 4 callbacks suppressed
[  123.805495][ T8307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'.
[  123.854885][ T8313] validate_nla: 4 callbacks suppressed
[  123.854899][ T8313] netlink: 'syz.1.744': attribute type 10 has an invalid length.
[  123.868930][ T8313] team0: Device veth1_macvtap failed to register rx_handler
[  124.161823][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.748'.
[  124.723139][ T8354] netlink: 'syz.0.754': attribute type 19 has an invalid length.
[  124.726093][ T8355] netlink: 'syz.0.754': attribute type 19 has an invalid length.
[  124.728753][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.754'.
[  124.734740][ T8355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.754'.
[  124.913646][ T8364] netlink: 'syz.2.757': attribute type 10 has an invalid length.
[  124.958504][ T8364] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.757'.
[  125.119470][ T8371] openvswitch: netlink: Message has 4 unknown bytes.
[  125.121926][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.161572][ T8366] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  125.321221][ T8386] netlink: 80 bytes leftover after parsing attributes in process `syz.0.765'.
[  125.354039][ T8388] netlink: 'syz.2.766': attribute type 9 has an invalid length.
[  125.356552][ T8388] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.766'.
[  125.628190][ T8406] netlink: zone id is out of range
[  125.691429][ T8410] netlink: del zone limit has 4 unknown bytes
[  125.721839][ T8406] netlink: zone id is out of range
[  126.291277][ T8406] netlink: zone id is out of range
[  126.372739][ T8406] netlink: set zone limit has 4 unknown bytes
[  127.393770][ T8428] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.775'.
[  127.533207][ T8434] netlink: 7 bytes leftover after parsing attributes in process `syz.0.777'.
[  127.538023][ T8434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.777'.
[  127.598791][ T8436] delete_channel: no stack
[  127.922157][ T8461] netlink: 'syz.1.785': attribute type 10 has an invalid length.
[  127.929627][ T8461] team0: Cannot enslave team device to itself
[  127.943558][ T8464] IPv6: NLM_F_REPLACE set, but no existing node found!
[  127.949818][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.953058][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.967002][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.969841][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.619699][ T8489] bpf: Bad value for 'mode'
[  128.629120][ T8489] netlink: 'syz.2.793': attribute type 1 has an invalid length.
[  128.966141][ T8513] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[  128.968810][ T8513] netlink: 'syz.2.801': attribute type 4 has an invalid length.
[  128.971980][ T8513] __nla_validate_parse: 1 callbacks suppressed
[  128.971989][ T8513] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.801'.
[  129.411574][ T8534] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  129.425824][ T8534] netlink: 'syz.0.808': attribute type 1 has an invalid length.
[  129.429605][ T8534] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.808'.
[  129.451577][ T8539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.810'.
[  129.628922][ T8544] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.812'.
[  129.690258][ T8547] netlink: 'syz.2.813': attribute type 10 has an invalid length.
[  129.699156][ T8547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.813'.
[  130.071018][ T8555] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  130.227479][ T8555] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  130.697687][ T8567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.818'.
[  130.830787][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  131.020183][ T8578] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  131.024958][ T8578] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  131.029302][ T8578] CPU: 1 UID: 0 PID: 8578 Comm: syz.2.822 Not tainted syzkaller #0 PREEMPT(full) 
[  131.033258][ T8578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.037614][ T8578] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  131.040309][ T8578] Code: 18 00 74 08 4c 89 ef e8 6d 17 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 6a 16 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 41 17 02 f8 4d 89 2e 41 80 3c 1f 00
[  131.048607][ T8578] RSP: 0018:ffffc90006cb70e8 EFLAGS: 00010246
[  131.051258][ T8578] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  131.054708][ T8578] RDX: ffffc90021c95000 RSI: 00000000000016c6 RDI: 00000000000016c7
[  131.058164][ T8578] RBP: ffff8881078196b0 R08: ffff888108f69cc0 R09: 0000000000000002
[  131.061586][ T8578] R10: 000000000000000a R11: 0000000000000002 R12: ffff888107818028
[  131.064927][ T8578] R13: ffff8881078196a8 R14: 0000000000000000 R15: 1ffff11020f03006
[  131.068367][ T8578] FS:  00007f5274ff66c0(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  131.072219][ T8578] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  131.075094][ T8578] CR2: 000020000000d000 CR3: 000000010f35c000 CR4: 00000000000006f0
[  131.078561][ T8578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  131.081999][ T8578] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  131.085423][ T8578] Call Trace:
[  131.086914][ T8578]  <TASK>
[  131.088242][ T8578]  ? xfrm_state_insert+0x44/0x60
[  131.090439][ T8578]  xfrm_state_insert+0x54/0x60
[  131.092563][ T8578]  ipcomp4_init_state+0x673/0xb20
[  131.094789][ T8578]  __xfrm_init_state+0xa76/0x13f0
[  131.096985][ T8578]  ? __xfrm_init_state+0x7ef/0x13f0
[  131.099305][ T8578]  xfrm_add_sa+0x2f5b/0x4070
[  131.101369][ T8578]  ? __pfx_xfrm_add_sa+0x10/0x10
[  131.103543][ T8578]  ? apparmor_capable+0x137/0x1b0
[  131.105781][ T8578]  ? __nla_parse+0x40/0x60
[  131.107776][ T8578]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.109984][ T8578]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  131.112405][ T8578]  ? __pfx___mutex_trylock_common+0x10/0x10
[  131.115025][ T8578]  ? rcu_is_watching+0x15/0xb0
[  131.117136][ T8578]  ? trace_contention_end+0x39/0x120
[  131.119453][ T8578]  ? __mutex_lock+0x335/0x1360
[  131.121510][ T8578]  netlink_rcv_skb+0x208/0x470
[  131.123673][ T8578]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  131.126074][ T8578]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.128425][ T8578]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.130732][ T8578]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.133020][ T8578]  xfrm_netlink_rcv+0x79/0x90
[  131.135102][ T8578]  netlink_unicast+0x82f/0x9e0
[  131.137210][ T8578]  ? __pfx_netlink_unicast+0x10/0x10
[  131.139540][ T8578]  ? netlink_sendmsg+0x642/0xb30
[  131.141732][ T8578]  ? skb_put+0x11b/0x210
[  131.143588][ T8578]  netlink_sendmsg+0x805/0xb30
[  131.145701][ T8578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.148022][ T8578]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.150201][ T8578]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.152519][ T8578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.154896][ T8578]  __sock_sendmsg+0x21c/0x270
[  131.156949][ T8578]  ____sys_sendmsg+0x505/0x830
[  131.158959][ T8578]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.161251][ T8578]  ? import_iovec+0x74/0xa0
[  131.163183][ T8578]  ___sys_sendmsg+0x21f/0x2a0
[  131.165270][ T8578]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.167587][ T8578]  ? __fget_files+0x2a/0x420
[  131.169673][ T8578]  ? __fget_files+0x2a/0x420
[  131.171709][ T8578]  ? __fget_files+0x3a0/0x420
[  131.173787][ T8578]  __x64_sys_sendmsg+0x19b/0x260
[  131.175937][ T8578]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.178243][ T8578]  ? do_syscall_64+0xbe/0x3b0
[  131.180223][ T8578]  do_syscall_64+0xfa/0x3b0
[  131.182201][ T8578]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.184428][ T8578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.186964][ T8578]  ? exc_page_fault+0x9f/0xf0
[  131.188924][ T8578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.191416][ T8578] RIP: 0033:0x7f5276d8ebe9
[  131.193380][ T8578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.201591][ T8578] RSP: 002b:00007f5274ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.205235][ T8578] RAX: ffffffffffffffda RBX: 00007f5276fb6090 RCX: 00007f5276d8ebe9
[  131.208678][ T8578] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000009
[  131.212077][ T8578] RBP: 00007f5276e11e19 R08: 0000000000000000 R09: 0000000000000000
[  131.215498][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.218932][ T8578] R13: 00007f5276fb6128 R14: 00007f5276fb6090 R15: 00007ffdb3a95b88
[  131.222298][ T8578]  </TASK>
[  131.223608][ T8578] Modules linked in:
[  131.225663][ T8578] ---[ end trace 0000000000000000 ]---
[  131.228081][ T8578] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  131.230789][ T8578] Code: 18 00 74 08 4c 89 ef e8 6d 17 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 6a 16 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 41 17 02 f8 4d 89 2e 41 80 3c 1f 00
[  131.239190][ T8578] RSP: 0018:ffffc90006cb70e8 EFLAGS: 00010246
[  131.241854][ T8578] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  131.245336][ T8578] RDX: ffffc90021c95000 RSI: 00000000000016c6 RDI: 00000000000016c7
[  131.248668][ T8578] RBP: ffff8881078196b0 R08: ffff888108f69cc0 R09: 0000000000000002
[  131.252015][ T8578] R10: 000000000000000a R11: 0000000000000002 R12: ffff888107818028
[  131.255561][ T8578] R13: ffff8881078196a8 R14: 0000000000000000 R15: 1ffff11020f03006
[  131.259031][ T8578] FS:  00007f5274ff66c0(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  131.262895][ T8578] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  131.265887][ T8578] CR2: 000020000000d000 CR3: 000000010f35c000 CR4: 00000000000006f0
[  131.269359][ T8578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  131.272884][ T8578] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  131.276456][ T8578] Kernel panic - not syncing: Fatal exception in interrupt
[  131.280392][ T8578] Kernel Offset: disabled
[  131.282311][ T8578] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:32:02  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4521b RBX=1ffff11026cc7f61 RCX=ffff888108c89cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006d174c0 RSP=ffffc90006d17340
R8 =ffffffff8fa37f37 R9 =1ffffffff1f46fe6 R10=dffffc0000000000 R11=fffffbfff1f46fe7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b45203 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4c34b87498 00007f4c34b87470 XMM03=00007f4c34b874a8 00007f4c34b874a0
XMM04=00007f4c356ed100 00007f4c34b87460 XMM05=00007f4c34b87478 00007f4c34b874c0
XMM06=00007f4c34b874b8 00007f4c34b874b0 XMM07=00007f4c34b874a8 00007f4c34b874a0
XMM08=0000000000000000 00007f4c34a12ee7 XMM09=0000000000000000 00007f4c34a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000023ac RDI=00000000000023ad RBP=00000000000003f8 RSP=ffffc90006cb6910
R8 =ffff888106e30237 R9 =1ffff11020dc6046 R10=dffffc0000000000 R11=ffffffff854f6230
R12=dffffc0000000000 R13=ffffffff99afb909 R14=ffffffff99df03a0 R15=0000000000000000
RIP=ffffffff854f62ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5274ff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000d000 CR3=000000010f35c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5276f87498 00007f5276f87470 XMM03=00007f5276f874a8 00007f5276f874a0
XMM04=00007f5277aed100 00007f5276f87460 XMM05=00007f5276f87478 00007f5276f874c0
XMM06=00007f5276f874b8 00007f5276f874b0 XMM07=00007f5276f874a8 00007f5276f874a0
XMM08=ccc411d655f73f26 930dacf2cd35fcbf XMM09=0000000000000000 00007f5276e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
