last executing test programs:

2.779057721s ago: executing program 0 (id=638):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000080)=@base={0x6, 0x4, 0x33ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

2.661246378s ago: executing program 0 (id=639):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80)
r6 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(0x0, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef)

2.481031153s ago: executing program 0 (id=641):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/206, 0xce}, {0x0}, {0x0}], 0x3, &(0x7f0000000980)=""/122, 0x7a}, 0x140)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x8080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}, 0x1, 0x0, 0x0, 0x448c4}, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

1.811550964s ago: executing program 1 (id=652):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bb"], 0xfdef)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000780), 0x8, 0x38, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x22, '\x00', r2, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c9b}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x7, 0x3, 0xfd, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75, 0x2, @perf_config_ext={0x8, 0x80}, 0x80, 0x7, 0x100, 0x0, 0xe, 0x7, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@fwd={0xd}, @enum={0x7, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x6}, {0x10, 0x5}, {0x2, 0x5}, {0xf, 0x7ff}, {0x2, 0xff}, {0xe, 0x7fffffff}, {0x2}]}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000bc0)=""/193, 0x6f, 0xc1, 0x1, 0x1, 0x10000, @value=r5}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd000"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4)
socket$packet(0x11, 0x2, 0x300)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$SIOCSIFHWADDR(r9, 0x8931, &(0x7f00000000c0)={'erspan0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

1.460300779s ago: executing program 2 (id=657):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x90, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008010)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48)

1.456360673s ago: executing program 0 (id=658):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000000)=r3, 0x10)

1.382022468s ago: executing program 0 (id=659):
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10801, 0x800, 0x0, 0x5, 0x0, 0x0, 0x48a, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100af6906360000000000000000000000ea048500000050"], &(0x7f0000000100)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8], 0x9a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@tcp6, 0x2}, 0x20)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000200)="03274f4cf00f2721014f096b1b79b0edb03f37e43757e78da4ae93831e068b2acedc856de3574adcee4ae2998573e86fff1828be109964a65978cc6477e07d73f087f79cb3e64f5e5bf13f2c940b488b1c1f369f6c280c7fdea890b8eb05cf88a458e0afc10603f56cf1b910b6f40311ede03bb131c9d05b237178313d51994b9d7b9cf73c12adc4e4798abbcc557b90bb2f19", 0x93}, {&(0x7f0000001040)}], 0x2, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x4}, 0x4000000)
fstat(0xffffffffffffffff, &(0x7f00000007c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6c7654c172732ad3)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)

1.38186428s ago: executing program 2 (id=660):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close(0x3)

1.287659612s ago: executing program 2 (id=661):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x4080080)
r3 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x2d906d59d692afe5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r4 = socket$kcm(0x1e, 0x5, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044)
ioctl$SIOCSIFHWADDR(r0, 0xc0045878, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)

1.09414771s ago: executing program 2 (id=662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newchain={0x30, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x44004)

982.466217ms ago: executing program 2 (id=663):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000036000b63d25a595f779f101d16ff5b31", 0x14}], 0x1}, 0x0)

981.397875ms ago: executing program 2 (id=664):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, 0x0, 0x0)
r3 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x40047459, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r4, 0x40047459, &(0x7f0000001200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

937.881984ms ago: executing program 1 (id=665):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x942, 0x4, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

847.726684ms ago: executing program 1 (id=666):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, &(0x7f0000000080), 0x0, 0x8}, 0x20)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@ifindex, r0, 0x16, 0x4, 0xffffffffffffffff, @void, @value=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x9, 0x4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x1, 0x3, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @empty]})
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

847.308081ms ago: executing program 0 (id=667):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ec3984d68efc2096215a29a300007b8af8ff00000000bfa25cda6e721e8480e13cadd205f7149c000000000000000008000000b70400000000000085000000"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffee6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x3}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='contention_end\x00'}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000880), 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
close(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

189.053123ms ago: executing program 1 (id=668):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000000000f02000000000000000100000d00000000020000000100000000005f"], 0x0, 0x3c}, 0x28)

104.900486ms ago: executing program 1 (id=669):
r0 = socket$kcm(0xa, 0x2, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc730, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x11034, 0x80, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x7, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0xa, 0xe}, {0x7, 0xb}}}, 0x24}}, 0x20000011)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)
close(r4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x13, &(0x7f0000000800), 0x4)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x3, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40015)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x32, 0xc0fe}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}], 0x30}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_STATUS={0x8}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xcca, 0x1, 0x81, 0xffff, 0x2, 0x7eb]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)

0s ago: executing program 1 (id=670):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x148, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x33}, @in=@local, {0x0, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500002, 0x4, 0x4, 0x2}, {0xc90a, 0x2127268a, 0x8}, 0x70bd2f, 0x8003507, 0xa, 0x0, 0x6, 0x10}, 0xff, 0x80000002}, [@algo_crypt={0x48, 0x2, {{'xts-serpent-avx\x00'}}}, @proto={0x5, 0x19, 0x977e5e64d601405f}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47946' (ED25519) to the list of known hosts.
syzkaller login: [   49.710033][ T5801] cgroup: Unknown subsys name 'net'
[   49.814317][ T5801] cgroup: Unknown subsys name 'cpuset'
[   49.819722][ T5801] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.329201][ T5801] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.987461][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.990977][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.993839][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.997178][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.001020][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.005331][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.008049][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.010965][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.013728][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.016434][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.058521][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.061526][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.069410][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.073212][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.077700][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.259033][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.292288][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.353076][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   56.432999][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.435966][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.438493][ T5849] bridge_slave_0: entered allmulticast mode
[   56.442167][ T5849] bridge_slave_0: entered promiscuous mode
[   56.462721][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.465071][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.467417][ T5849] bridge_slave_1: entered allmulticast mode
[   56.470054][ T5849] bridge_slave_1: entered promiscuous mode
[   56.473200][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.476227][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.479331][ T5845] bridge_slave_0: entered allmulticast mode
[   56.484303][ T5845] bridge_slave_0: entered promiscuous mode
[   56.505890][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.508727][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.511706][ T5845] bridge_slave_1: entered allmulticast mode
[   56.514481][ T5845] bridge_slave_1: entered promiscuous mode
[   56.567413][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.571052][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.574167][ T5854] bridge_slave_0: entered allmulticast mode
[   56.577949][ T5854] bridge_slave_0: entered promiscuous mode
[   56.582850][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.585935][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.589015][ T5854] bridge_slave_1: entered allmulticast mode
[   56.593524][ T5854] bridge_slave_1: entered promiscuous mode
[   56.599697][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.630994][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.646982][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.653003][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.665071][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.701766][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.706424][ T5845] team0: Port device team_slave_0 added
[   56.711659][ T5849] team0: Port device team_slave_0 added
[   56.723164][ T5845] team0: Port device team_slave_1 added
[   56.727144][ T5849] team0: Port device team_slave_1 added
[   56.768033][ T5854] team0: Port device team_slave_0 added
[   56.772940][ T5854] team0: Port device team_slave_1 added
[   56.788797][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.791998][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.802563][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.828255][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.831422][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.842182][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.847379][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.850544][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.861750][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.867034][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.869837][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.882619][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.894806][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.897707][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.909000][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.914253][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.916584][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.925899][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.971847][ T5854] hsr_slave_0: entered promiscuous mode
[   56.974245][ T5854] hsr_slave_1: entered promiscuous mode
[   57.009143][ T5849] hsr_slave_0: entered promiscuous mode
[   57.012922][ T5849] hsr_slave_1: entered promiscuous mode
[   57.015191][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   57.017179][ T5849] Cannot create hsr debugfs directory
[   57.024760][ T5845] hsr_slave_0: entered promiscuous mode
[   57.027888][ T5845] hsr_slave_1: entered promiscuous mode
[   57.031516][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   57.033968][ T5845] Cannot create hsr debugfs directory
[   57.331453][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.342010][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.348513][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.364960][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.429773][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.437764][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.464950][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.477339][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.512707][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.522628][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.535232][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.539980][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.592978][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.635944][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.651755][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.655053][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.665277][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.673961][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.677059][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.697561][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.716668][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.719579][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.731931][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.734072][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.743035][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.794037][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.808914][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.812069][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.836740][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.839475][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.883934][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.946871][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.001530][ T5849] veth0_vlan: entered promiscuous mode
[   58.016036][ T5849] veth1_vlan: entered promiscuous mode
[   58.049370][ T5849] veth0_macvtap: entered promiscuous mode
[   58.056572][ T5849] veth1_macvtap: entered promiscuous mode
[   58.062812][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.068471][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.081836][ T5851] Bluetooth: hci1: command tx timeout
[   58.084357][ T5851] Bluetooth: hci0: command tx timeout
[   58.087709][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.098294][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.108509][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.115735][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.118728][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.127125][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.160674][ T5848] Bluetooth: hci2: command tx timeout
[   58.215158][ T5845] veth0_vlan: entered promiscuous mode
[   58.222645][ T5854] veth0_vlan: entered promiscuous mode
[   58.226640][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.229228][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.231952][ T5845] veth1_vlan: entered promiscuous mode
[   58.254024][ T5854] veth1_vlan: entered promiscuous mode
[   58.278441][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.289952][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.309053][ T5845] veth0_macvtap: entered promiscuous mode
[   58.324240][ T5845] veth1_macvtap: entered promiscuous mode
[   58.331995][ T5854] veth0_macvtap: entered promiscuous mode
[   58.339525][ T5854] veth1_macvtap: entered promiscuous mode
[   58.360772][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.367855][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.373658][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.381686][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.388075][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.403924][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.408158][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.432366][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.445678][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.472602][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.491001][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.533742][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.546834][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.593531][  T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.596843][  T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.634452][  T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.646912][  T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.673715][ T5196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.677671][ T5196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.708898][ T5196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.723055][ T5196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.759674][ T5918] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   58.832307][ T5922] syzkaller0: entered promiscuous mode
[   58.840769][ T5922] syzkaller0: entered allmulticast mode
[   58.857172][ T5922] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   58.907943][ T5928] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.957648][ T5930] netlink: 'syz.1.10': attribute type 11 has an invalid length.
[   59.213151][ T5945] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.684991][ T5945] syzkaller0: entered promiscuous mode
[   59.688468][ T5945] syzkaller0: entered allmulticast mode
[   60.132695][ T5848] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   60.133056][ T5960] Zero length message leads to an empty skb
[   60.162599][ T5851] Bluetooth: hci1: command tx timeout
[   60.163995][ T5848] Bluetooth: hci0: command tx timeout
[   60.241393][ T5848] Bluetooth: hci2: command tx timeout
[   60.438108][ T5957] netlink: 'syz.1.18': attribute type 25 has an invalid length.
[   60.440945][ T5957] netlink: 'syz.1.18': attribute type 28 has an invalid length.
[   60.539829][    C0] hrtimer: interrupt took 32240 ns
[   60.781345][ T5973] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.25'.
[   60.784227][ T5973] nbd: must specify a size in bytes for the device
[   61.084090][ T5997] netlink: 22 bytes leftover after parsing attributes in process `syz.1.36'.
[   61.243100][ T6010] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.43'.
[   61.396979][ T6016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.404088][ T6016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.408738][ T6016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.417497][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'.
[   61.497177][ T6012] netlink: 'syz.1.44': attribute type 1 has an invalid length.
[   61.504321][ T6012] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.44'.
[   61.976126][ T6042] netlink: 'syz.0.59': attribute type 4 has an invalid length.
[   62.067126][ T6043] delete_channel: no stack
[   62.244861][ T5851] Bluetooth: hci0: command tx timeout
[   62.246940][ T5848] Bluetooth: hci1: command tx timeout
[   62.331120][ T5848] Bluetooth: hci2: command tx timeout
[   62.378520][ T6065] netlink: 'syz.0.69': attribute type 21 has an invalid length.
[   62.384088][ T6065] netlink: 'syz.0.69': attribute type 6 has an invalid length.
[   62.387235][ T6065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.69'.
[   63.526407][ T6106] netlink: 'syz.0.86': attribute type 28 has an invalid length.
[   63.529972][ T6106] netlink: 'syz.0.86': attribute type 29 has an invalid length.
[   64.115110][ T6137] netlink: 'syz.2.99': attribute type 21 has an invalid length.
[   64.321013][ T5851] Bluetooth: hci0: command tx timeout
[   64.323273][ T5848] Bluetooth: hci1: command tx timeout
[   64.382682][ T6150] __nla_validate_parse: 2 callbacks suppressed
[   64.382737][ T6150] netlink: 830 bytes leftover after parsing attributes in process `syz.0.103'.
[   64.388534][ T6150] bond_slave_0: entered promiscuous mode
[   64.391223][ T6150] bond_slave_1: entered promiscuous mode
[   64.401098][ T5848] Bluetooth: hci2: command tx timeout
[   64.415734][ T6156] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.517527][ T6181] netlink: 'syz.0.116': attribute type 21 has an invalid length.
[   65.521156][ T6181] netlink: 128 bytes leftover after parsing attributes in process `syz.0.116'.
[   65.524706][ T6181] netlink: 'syz.0.116': attribute type 4 has an invalid length.
[   65.527259][ T6181] netlink: 'syz.0.116': attribute type 5 has an invalid length.
[   65.529873][ T6181] netlink: 3 bytes leftover after parsing attributes in process `syz.0.116'.
[   65.696202][ T6197] netlink: 'syz.1.125': attribute type 21 has an invalid length.
[   65.852699][ T6211] netlink: 'syz.0.131': attribute type 1 has an invalid length.
[   65.856104][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[   66.210282][ T6234] netlink: 'syz.2.142': attribute type 11 has an invalid length.
[   66.220369][ T6234] netlink: 'syz.2.142': attribute type 6 has an invalid length.
[   66.242268][ T6236] netlink: 'syz.0.143': attribute type 5 has an invalid length.
[   66.250189][ T6236] netlink: 176 bytes leftover after parsing attributes in process `syz.0.143'.
[   66.480971][ T5848] Bluetooth: hci2: command tx timeout
[   66.521648][ T6243] netlink: 'syz.0.146': attribute type 10 has an invalid length.
[   66.543991][ T6243] team0: Port device geneve1 added
[   66.661763][ T6255] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.152'.
[   66.737586][ T6257] =======================================================
[   66.737586][ T6257] WARNING: The mand mount option has been deprecated and
[   66.737586][ T6257]          and is ignored by this kernel. Remove the mand
[   66.737586][ T6257]          option from the mount to silence this warning.
[   66.737586][ T6257] =======================================================
[   67.164480][ T6276] netlink: 'syz.1.158': attribute type 27 has an invalid length.
[   67.167263][ T6276] netlink: 164 bytes leftover after parsing attributes in process `syz.1.158'.
[   67.186651][ T6269] netlink: 10 bytes leftover after parsing attributes in process `syz.0.154'.
[   67.254900][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.263488][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.272144][ T6284] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   67.332919][ T6284] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.161'.
[   67.364721][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[   67.562884][ T6302] lo: entered allmulticast mode
[   67.570212][ T6302] lo: entered promiscuous mode
[   67.572671][ T6302] lo: left allmulticast mode
[   68.811084][ T6319] bond0: vlans aren't supported yet for dev_uc|mc_add()
[   69.875032][ T6377] __nla_validate_parse: 3 callbacks suppressed
[   69.875043][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   69.882341][ T6377] netlink: 220 bytes leftover after parsing attributes in process `syz.1.196'.
[   70.367885][ T6387] netlink: 14 bytes leftover after parsing attributes in process `syz.0.200'.
[   70.373278][ T6387] bond_slave_0: left promiscuous mode
[   70.376015][ T6387] bond_slave_1: left promiscuous mode
[   70.734362][ T6387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.740289][ T6387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.751317][ T6387] bond0 (unregistering): Released all slaves
[   70.921892][ T6404] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.207'.
[   70.941648][ T5848] Bluetooth: hci0: Malformed LE Event: 0x0d
[   71.067091][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.069871][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.422450][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.220'.
[   72.674756][ T6445] netlink: 14 bytes leftover after parsing attributes in process `syz.1.224'.
[   72.679083][ T6445] hsr0: entered promiscuous mode
[   72.687664][ T6445] hsr0: entered allmulticast mode
[   72.689629][ T6445] hsr_slave_0: entered allmulticast mode
[   72.693040][ T6445] hsr_slave_1: entered allmulticast mode
[   72.741918][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'.
[   72.785594][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'.
[   72.788627][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'.
[   73.293224][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'.
[   74.791637][ T6495] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.799293][ T6495] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   75.173274][ T6518] __nla_validate_parse: 2 callbacks suppressed
[   75.173288][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'.
[   75.181958][ T6517] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   75.340440][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[   76.227605][ T6567] Driver unsupported XDP return value 0 on prog  (id 104) dev N/A, expect packet loss!
[   76.426979][ T6573] validate_nla: 6 callbacks suppressed
[   76.427036][ T6573] netlink: 'syz.0.279': attribute type 11 has an invalid length.
[   76.434464][ T6573] netlink: 168 bytes leftover after parsing attributes in process `syz.0.279'.
[   76.869292][ T6577] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[   76.979962][ T6581] netlink: 'syz.2.281': attribute type 10 has an invalid length.
[   76.984533][ T6581] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.281'.
[   77.133942][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   77.272846][ T6597] tmpfs: Bad value for 'uid'
[   77.274924][ T6597] tmpfs: Bad value for 'uid'
[   77.677120][ T6609] netlink: 188 bytes leftover after parsing attributes in process `syz.0.292'.
[   78.042972][ T6591] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   78.046131][ T6591] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   78.423379][ T6634] netlink: 'syz.0.301': attribute type 3 has an invalid length.
[   78.449953][ T6636] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.303'.
[   78.450553][ T6634] netlink: 'syz.0.301': attribute type 1 has an invalid length.
[   78.461287][ T6636] netlink: 5 bytes leftover after parsing attributes in process `syz.2.303'.
[   78.465938][ T6634] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.301'.
[   79.105595][ T6681] netlink: 14 bytes leftover after parsing attributes in process `syz.0.324'.
[   79.108819][ T6681] openvswitch: netlink: Message has 4 unknown bytes.
[   79.119339][ T6681] netlink: 'syz.0.324': attribute type 39 has an invalid length.
[   79.135787][ T6681] veth0_macvtap: left promiscuous mode
[   80.346281][ T6700] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.333'.
[   80.618238][ T6728] netlink: 277 bytes leftover after parsing attributes in process `syz.2.347'.
[   80.656743][ T6730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.742379][ T6738] netlink: 'syz.0.352': attribute type 21 has an invalid length.
[   80.745440][ T6738] netlink: 156 bytes leftover after parsing attributes in process `syz.0.352'.
[   81.034624][ T6746] netlink: 'syz.0.356': attribute type 26 has an invalid length.
[   81.115210][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   81.127364][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   81.224879][ T6760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.363'.
[   81.282502][  T794] cfg80211: failed to load regulatory.db
[   81.289920][ T6758] netlink: 60 bytes leftover after parsing attributes in process `syz.1.362'.
[   81.409708][ T6769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.367'.
[   81.420815][ T6769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.367'.
[   81.425831][ T6769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.367'.
[   81.499554][ T6774] netlink: 'syz.2.369': attribute type 2 has an invalid length.
[   81.506640][ T6774] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[   81.513117][ T6774] netlink: 'syz.2.369': attribute type 8 has an invalid length.
[   81.835237][ T6781] netlink: 'syz.2.372': attribute type 28 has an invalid length.
[   81.843036][ T6781] netlink: 'syz.2.372': attribute type 29 has an invalid length.
[   82.778366][ T6811] netlink: 'syz.0.386': attribute type 1 has an invalid length.
[   84.667718][ T6899] netlink: 'syz.2.417': attribute type 10 has an invalid length.
[   85.579657][ T6917] __nla_validate_parse: 5 callbacks suppressed
[   85.579670][ T6917] netlink: 628 bytes leftover after parsing attributes in process `syz.2.423'.
[   85.643627][ T6922] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.425'.
[   85.782954][ T5848] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[   86.383982][ T6945] netlink: 'syz.0.435': attribute type 8 has an invalid length.
[   86.390964][ T6945] netlink: 'syz.0.435': attribute type 6 has an invalid length.
[   86.394225][ T6945] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.435'.
[   86.407932][ T6947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.436'.
[   86.499652][ T6954] netlink: 124 bytes leftover after parsing attributes in process `syz.2.438'.
[   86.655841][ T6963] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.442'.
[   86.659992][ T6960] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.442'.
[   86.669128][ T6963] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.442'.
[   86.765821][ T6971] netlink: 'syz.0.447': attribute type 9 has an invalid length.
[   86.769055][ T6971] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.447'.
[   87.850490][ T5848] Bluetooth: hci1: command tx timeout
[   87.953495][ T7023] netlink: 128 bytes leftover after parsing attributes in process `syz.0.470'.
[   87.957250][ T7023] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   88.070469][ T7028] netlink: 'syz.0.472': attribute type 4 has an invalid length.
[   88.676258][ T7052] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   88.682271][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.158753][ T7090] : entered promiscuous mode
[   90.204836][ T7092] openvswitch: netlink: Key type 29 is not supported
[   90.300532][ T7095] netlink: 'syz.0.500': attribute type 2 has an invalid length.
[   90.351936][ T7100] sctp: [Deprecated]: syz.1.501 (pid 7100) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.351936][ T7100] Use struct sctp_sack_info instead
[   90.614143][ T7115] openvswitch: netlink: Flow actions attr not present in new flow.
[   90.618707][ T7115] syzkaller0: entered promiscuous mode
[   91.098642][ T7139] netlink: 'syz.2.520': attribute type 1 has an invalid length.
[   91.108476][ T7139] __nla_validate_parse: 10 callbacks suppressed
[   91.108490][ T7139] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.520'.
[   91.272444][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.525'.
[   91.275681][ T7147] netlink: 43 bytes leftover after parsing attributes in process `syz.2.525'.
[   91.283978][ T7147] netlink: 'syz.2.525': attribute type 5 has an invalid length.
[   91.286954][ T7147] netlink: 43 bytes leftover after parsing attributes in process `syz.2.525'.
[   91.362526][ T7153] netlink: 'syz.2.527': attribute type 3 has an invalid length.
[   91.365733][ T7153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.527'.
[   92.667054][ T7203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.677566][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'.
[   92.757917][ T5848] Bluetooth: hci2: adv larger than maximum supported
[   92.757943][ T5848] Bluetooth: hci2: Unknown advertising packet type: 0x18
[   92.760666][ T5848] Bluetooth: hci2: Malformed LE Event: 0x0d
[   93.014593][ T7223] netlink: 'syz.0.558': attribute type 2 has an invalid length.
[   93.017910][ T7223] netlink: 'syz.0.558': attribute type 1 has an invalid length.
[   93.021958][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[   93.134786][ T7229] syzkaller0: entered promiscuous mode
[   93.137118][ T7229] syzkaller0: entered allmulticast mode
[   93.149171][ T7225] netlink: 300 bytes leftover after parsing attributes in process `syz.0.559'.
[   93.258309][ T5848] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[   94.343164][ T7247] netlink: 'syz.0.569': attribute type 29 has an invalid length.
[   94.358178][ T7247] netlink: 'syz.0.569': attribute type 29 has an invalid length.
[   94.485184][ T7259] netlink: 'syz.0.575': attribute type 29 has an invalid length.
[   94.489649][ T7259] netlink: 'syz.0.575': attribute type 29 has an invalid length.
[   94.523697][ T7263] netlink: 825 bytes leftover after parsing attributes in process `syz.2.577'.
[   94.527149][ T7263] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.577'.
[   94.722570][ T7283] netlink: 'syz.2.587': attribute type 32 has an invalid length.
[   95.290468][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[   95.758826][ T7316] netlink: 'syz.2.601': attribute type 9 has an invalid length.
[   96.084744][ T5848] Bluetooth: hci2: Dropping invalid advertising data
[   96.086943][ T5848] Bluetooth: hci2: Malformed LE Event: 0x02
[   96.334306][ T7366] tap0: tun_chr_ioctl cmd 1074025677
[   96.336664][ T7366] tap0: linktype set to 825
[   96.516512][ T7381] netlink: 'syz.0.630': attribute type 10 has an invalid length.
[   96.535016][ T7381] team0: Port device netdevsim0 added
[   96.746534][ T7391] netlink: 'syz.2.636': attribute type 10 has an invalid length.
[   96.788489][ T7393] __nla_validate_parse: 4 callbacks suppressed
[   96.788499][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'.
[   96.875262][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[   97.616720][ T7424] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   98.889086][ T7467] netlink: 'syz.1.666': attribute type 10 has an invalid length.
[   98.904063][ T7467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.666'.
[   99.292191][ T7467] ipvlan1: entered promiscuous mode
[   99.294577][ T7467] ipvlan1: entered allmulticast mode
[   99.296971][ T7467] veth0_vlan: entered allmulticast mode
[   99.305195][ T7467] bridge0: port 3(ipvlan1) entered blocking state
[   99.308137][ T7467] bridge0: port 3(ipvlan1) entered disabled state
[   99.314932][ T7467] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   99.407151][ T7477] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   99.594167][ T7480] ==================================================================
[   99.597493][ T7480] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[   99.600639][ T7480] Read of size 4 at addr ffff888039938544 by task syz.1.670/7480
[   99.604698][ T7480] 
[   99.605724][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.1.670 Not tainted syzkaller #0 PREEMPT(full) 
[   99.605741][ T7480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.605748][ T7480] Call Trace:
[   99.605755][ T7480]  <TASK>
[   99.605761][ T7480]  dump_stack_lvl+0x189/0x250
[   99.605780][ T7480]  ? __kasan_check_byte+0x12/0x40
[   99.605800][ T7480]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.605812][ T7480]  ? lock_release+0x4b/0x3e0
[   99.605832][ T7480]  ? __virt_addr_valid+0x4a5/0x5c0
[   99.605847][ T7480]  print_report+0xca/0x240
[   99.605859][ T7480]  ? xfrm_alloc_spi+0x570/0xf30
[   99.605874][ T7480]  kasan_report+0x118/0x150
[   99.605884][ T7480]  ? xfrm_alloc_spi+0x570/0xf30
[   99.605902][ T7480]  xfrm_alloc_spi+0x570/0xf30
[   99.605917][ T7480]  ? xfrm_alloc_spi+0x2a0/0xf30
[   99.605935][ T7480]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[   99.605950][ T7480]  ? xfrm_find_acq+0x87/0xa0
[   99.605967][ T7480]  xfrm_alloc_userspi+0x70b/0xc90
[   99.605982][ T7480]  ? apparmor_capable+0x137/0x1b0
[   99.605998][ T7480]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[   99.606008][ T7480]  ? __nla_parse+0x40/0x60
[   99.606023][ T7480]  xfrm_user_rcv_msg+0x7a3/0xab0
[   99.606034][ T7480]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   99.606053][ T7480]  ? __pfx___mutex_trylock_common+0x10/0x10
[   99.606067][ T7480]  ? rcu_is_watching+0x15/0xb0
[   99.606079][ T7480]  ? trace_contention_end+0x39/0x120
[   99.606090][ T7480]  ? __mutex_lock+0x335/0x1350
[   99.606107][ T7480]  netlink_rcv_skb+0x208/0x470
[   99.606122][ T7480]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   99.606131][ T7480]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.606148][ T7480]  ? netlink_deliver_tap+0x2e/0x1b0
[   99.606161][ T7480]  ? netlink_deliver_tap+0x2e/0x1b0
[   99.606174][ T7480]  xfrm_netlink_rcv+0x79/0x90
[   99.606189][ T7480]  netlink_unicast+0x82f/0x9e0
[   99.606203][ T7480]  ? __pfx_netlink_unicast+0x10/0x10
[   99.606215][ T7480]  ? netlink_sendmsg+0x642/0xb30
[   99.606227][ T7480]  ? skb_put+0x11b/0x210
[   99.606244][ T7480]  netlink_sendmsg+0x805/0xb30
[   99.606260][ T7480]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.606274][ T7480]  ? aa_sock_msg_perm+0xf1/0x1d0
[   99.606286][ T7480]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   99.606300][ T7480]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.606313][ T7480]  __sock_sendmsg+0x21c/0x270
[   99.606324][ T7480]  ____sys_sendmsg+0x505/0x830
[   99.606341][ T7480]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.606358][ T7480]  ? import_iovec+0x74/0xa0
[   99.606374][ T7480]  ___sys_sendmsg+0x21f/0x2a0
[   99.606388][ T7480]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.606412][ T7480]  ? __fget_files+0x2a/0x420
[   99.606423][ T7480]  ? __fget_files+0x3a0/0x420
[   99.606437][ T7480]  __x64_sys_sendmsg+0x19b/0x260
[   99.606452][ T7480]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   99.606469][ T7480]  ? rcu_is_watching+0x15/0xb0
[   99.606481][ T7480]  ? do_syscall_64+0xbe/0x3b0
[   99.606497][ T7480]  do_syscall_64+0xfa/0x3b0
[   99.606509][ T7480]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.606520][ T7480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.606531][ T7480]  ? exc_page_fault+0x9f/0xf0
[   99.606544][ T7480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.606562][ T7480] RIP: 0033:0x7fd06458ec29
[   99.606574][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.606584][ T7480] RSP: 002b:00007fd065452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.606598][ T7480] RAX: ffffffffffffffda RBX: 00007fd0647d5fa0 RCX: 00007fd06458ec29
[   99.606608][ T7480] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[   99.606615][ T7480] RBP: 00007fd064611e41 R08: 0000000000000000 R09: 0000000000000000
[   99.606623][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.606630][ T7480] R13: 00007fd0647d6038 R14: 00007fd0647d5fa0 R15: 00007ffe9ea02bd8
[   99.606642][ T7480]  </TASK>
[   99.606648][ T7480] 
[   99.761031][ T7480] Allocated by task 7426:
[   99.762797][ T7480]  kasan_save_track+0x3e/0x80
[   99.764719][ T7480]  __kasan_slab_alloc+0x6c/0x80
[   99.766774][ T7480]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   99.768999][ T7480]  xfrm_state_alloc+0x24/0x2f0
[   99.770984][ T7480]  xfrm_add_sa+0x17d1/0x4070
[   99.772834][ T7480]  xfrm_user_rcv_msg+0x7a3/0xab0
[   99.774938][ T7480]  netlink_rcv_skb+0x208/0x470
[   99.776902][ T7480]  xfrm_netlink_rcv+0x79/0x90
[   99.778866][ T7480]  netlink_unicast+0x82f/0x9e0
[   99.780837][ T7480]  netlink_sendmsg+0x805/0xb30
[   99.782799][ T7480]  __sock_sendmsg+0x21c/0x270
[   99.784775][ T7480]  ____sys_sendmsg+0x505/0x830
[   99.786766][ T7480]  ___sys_sendmsg+0x21f/0x2a0
[   99.788718][ T7480]  __x64_sys_sendmsg+0x19b/0x260
[   99.790716][ T7480]  do_syscall_64+0xfa/0x3b0
[   99.792575][ T7480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.794967][ T7480] 
[   99.795978][ T7480] Freed by task 5314:
[   99.797631][ T7480]  kasan_save_track+0x3e/0x80
[   99.799567][ T7480]  kasan_save_free_info+0x46/0x50
[   99.801684][ T7480]  __kasan_slab_free+0x5b/0x80
[   99.803686][ T7480]  kmem_cache_free+0x18f/0x400
[   99.805688][ T7480]  xfrm_state_gc_task+0x52d/0x6b0
[   99.807751][ T7480]  process_scheduled_works+0xae1/0x17b0
[   99.810012][ T7480]  worker_thread+0x8a0/0xda0
[   99.811954][ T7480]  kthread+0x711/0x8a0
[   99.813630][ T7480]  ret_from_fork+0x439/0x7d0
[   99.815589][ T7480]  ret_from_fork_asm+0x1a/0x30
[   99.817640][ T7480] 
[   99.818696][ T7480] The buggy address belongs to the object at ffff888039938480
[   99.818696][ T7480]  which belongs to the cache xfrm_state of size 928
[   99.824263][ T7480] The buggy address is located 196 bytes inside of
[   99.824263][ T7480]  freed 928-byte region [ffff888039938480, ffff888039938820)
[   99.829805][ T7480] 
[   99.830820][ T7480] The buggy address belongs to the physical page:
[   99.833405][ T7480] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39938
[   99.836968][ T7480] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   99.840421][ T7480] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   99.843485][ T7480] page_type: f5(slab)
[   99.845159][ T7480] raw: 00fff00000000040 ffff888104ad1640 dead000000000122 0000000000000000
[   99.848593][ T7480] raw: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[   99.852134][ T7480] head: 00fff00000000040 ffff888104ad1640 dead000000000122 0000000000000000
[   99.855699][ T7480] head: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[   99.859310][ T7480] head: 00fff00000000002 ffffea0000e64e01 00000000ffffffff 00000000ffffffff
[   99.862915][ T7480] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   99.866411][ T7480] page dumped because: kasan: bad access detected
[   99.869022][ T7480] page_owner tracks the page as allocated
[   99.871316][ T7480] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6135, tgid 6134 (syz.1.97), ts 64108561763, free_ts 64046088572
[   99.878777][ T7480]  post_alloc_hook+0x240/0x2a0
[   99.880747][ T7480]  get_page_from_freelist+0x21e4/0x22c0
[   99.883039][ T7480]  __alloc_frozen_pages_noprof+0x181/0x370
[   99.885402][ T7480]  alloc_pages_mpol+0x232/0x4a0
[   99.887451][ T7480]  allocate_slab+0x8a/0x370
[   99.889363][ T7480]  ___slab_alloc+0xbeb/0x1420
[   99.891312][ T7480]  kmem_cache_alloc_noprof+0x283/0x3c0
[   99.893543][ T7480]  xfrm_state_alloc+0x24/0x2f0
[   99.895535][ T7480]  __find_acq_core+0x8a7/0x1c00
[   99.897535][ T7480]  xfrm_find_acq+0x78/0xa0
[   99.899368][ T7480]  xfrm_alloc_userspi+0x6b3/0xc90
[   99.901422][ T7480]  xfrm_user_rcv_msg+0x7a3/0xab0
[   99.903512][ T7480]  netlink_rcv_skb+0x208/0x470
[   99.905496][ T7480]  xfrm_netlink_rcv+0x79/0x90
[   99.907503][ T7480]  netlink_unicast+0x82f/0x9e0
[   99.909471][ T7480]  netlink_sendmsg+0x805/0xb30
[   99.911436][ T7480] page last free pid 6131 tgid 6130 stack trace:
[   99.914079][ T7480]  __free_frozen_pages+0xbc4/0xd30
[   99.916208][ T7480]  stack_depot_save_flags+0x436/0x860
[   99.918391][ T7480]  kasan_save_track+0x4f/0x80
[   99.920400][ T7480]  __kasan_slab_alloc+0x6c/0x80
[   99.922459][ T7480]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   99.924644][ T7480]  skb_clone+0x212/0x3a0
[   99.926437][ T7480]  __netlink_deliver_tap+0x404/0x850
[   99.928556][ T7480]  netlink_deliver_tap+0x19c/0x1b0
[   99.930641][ T7480]  netlink_sendskb+0x68/0x140
[   99.932622][ T7480]  netlink_unicast+0x397/0x9e0
[   99.934596][ T7480]  nlmsg_notify+0x12e/0x1a0
[   99.936481][ T7480]  nf_tables_commit+0x73aa/0x8700
[   99.938547][ T7480]  nfnetlink_rcv+0x1a4e/0x2520
[   99.940538][ T7480]  netlink_unicast+0x82f/0x9e0
[   99.942533][ T7480]  netlink_sendmsg+0x805/0xb30
[   99.944482][ T7480]  __sock_sendmsg+0x21c/0x270
[   99.946413][ T7480] 
[   99.947418][ T7480] Memory state around the buggy address:
[   99.949718][ T7480]  ffff888039938400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   99.952976][ T7480]  ffff888039938480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.956315][ T7480] >ffff888039938500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.959595][ T7480]                                            ^
[   99.962143][ T7480]  ffff888039938580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.965385][ T7480]  ffff888039938600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.968620][ T7480] ==================================================================
[   99.972062][ T7480] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   99.974976][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.1.670 Not tainted syzkaller #0 PREEMPT(full) 
[   99.978652][ T7480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.982870][ T7480] Call Trace:
[   99.984273][ T7480]  <TASK>
[   99.985480][ T7480]  dump_stack_lvl+0x99/0x250
[   99.987368][ T7480]  ? __asan_memcpy+0x40/0x70
[   99.989251][ T7480]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.991396][ T7480]  ? __pfx__printk+0x10/0x10
[   99.993321][ T7480]  vpanic+0x281/0x750
[   99.994976][ T7480]  ? __pfx_vpanic+0x10/0x10
[   99.996911][ T7480]  ? irqentry_exit+0x74/0x90
[   99.998901][ T7480]  panic+0xb9/0xc0
[  100.000498][ T7480]  ? __pfx_panic+0x10/0x10
[  100.002425][ T7480]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  100.004958][ T7480]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  100.007403][ T7480]  ? xfrm_alloc_spi+0x570/0xf30
[  100.009500][ T7480]  check_panic_on_warn+0x89/0xb0
[  100.011528][ T7480]  ? xfrm_alloc_spi+0x570/0xf30
[  100.013528][ T7480]  end_report+0x78/0x160
[  100.015266][ T7480]  kasan_report+0x129/0x150
[  100.017203][ T7480]  ? xfrm_alloc_spi+0x570/0xf30
[  100.019266][ T7480]  xfrm_alloc_spi+0x570/0xf30
[  100.021213][ T7480]  ? xfrm_alloc_spi+0x2a0/0xf30
[  100.023246][ T7480]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  100.025466][ T7480]  ? xfrm_find_acq+0x87/0xa0
[  100.027462][ T7480]  xfrm_alloc_userspi+0x70b/0xc90
[  100.029627][ T7480]  ? apparmor_capable+0x137/0x1b0
[  100.031807][ T7480]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  100.034068][ T7480]  ? __nla_parse+0x40/0x60
[  100.035930][ T7480]  xfrm_user_rcv_msg+0x7a3/0xab0
[  100.038031][ T7480]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  100.040255][ T7480]  ? __pfx___mutex_trylock_common+0x10/0x10
[  100.042592][ T7480]  ? rcu_is_watching+0x15/0xb0
[  100.044540][ T7480]  ? trace_contention_end+0x39/0x120
[  100.046692][ T7480]  ? __mutex_lock+0x335/0x1350
[  100.048690][ T7480]  netlink_rcv_skb+0x208/0x470
[  100.050717][ T7480]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  100.052911][ T7480]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  100.055098][ T7480]  ? netlink_deliver_tap+0x2e/0x1b0
[  100.057250][ T7480]  ? netlink_deliver_tap+0x2e/0x1b0
[  100.059430][ T7480]  xfrm_netlink_rcv+0x79/0x90
[  100.061425][ T7480]  netlink_unicast+0x82f/0x9e0
[  100.063425][ T7480]  ? __pfx_netlink_unicast+0x10/0x10
[  100.065563][ T7480]  ? netlink_sendmsg+0x642/0xb30
[  100.067627][ T7480]  ? skb_put+0x11b/0x210
[  100.069381][ T7480]  netlink_sendmsg+0x805/0xb30
[  100.071344][ T7480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.073492][ T7480]  ? aa_sock_msg_perm+0xf1/0x1d0
[  100.075520][ T7480]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  100.077687][ T7480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.079898][ T7480]  __sock_sendmsg+0x21c/0x270
[  100.081878][ T7480]  ____sys_sendmsg+0x505/0x830
[  100.083850][ T7480]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.086052][ T7480]  ? import_iovec+0x74/0xa0
[  100.087974][ T7480]  ___sys_sendmsg+0x21f/0x2a0
[  100.089892][ T7480]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.092073][ T7480]  ? __fget_files+0x2a/0x420
[  100.094017][ T7480]  ? __fget_files+0x3a0/0x420
[  100.095994][ T7480]  __x64_sys_sendmsg+0x19b/0x260
[  100.098075][ T7480]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  100.100290][ T7480]  ? rcu_is_watching+0x15/0xb0
[  100.102281][ T7480]  ? do_syscall_64+0xbe/0x3b0
[  100.104264][ T7480]  do_syscall_64+0xfa/0x3b0
[  100.106186][ T7480]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.108388][ T7480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.110961][ T7480]  ? exc_page_fault+0x9f/0xf0
[  100.112921][ T7480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.115365][ T7480] RIP: 0033:0x7fd06458ec29
[  100.117205][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.125083][ T7480] RSP: 002b:00007fd065452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.128520][ T7480] RAX: ffffffffffffffda RBX: 00007fd0647d5fa0 RCX: 00007fd06458ec29
[  100.131782][ T7480] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  100.135023][ T7480] RBP: 00007fd064611e41 R08: 0000000000000000 R09: 0000000000000000
[  100.138281][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.141492][ T7480] R13: 00007fd0647d6038 R14: 00007fd0647d5fa0 R15: 00007ffe9ea02bd8
[  100.144624][ T7480]  </TASK>
[  100.146761][ T7480] Kernel Offset: disabled
[  100.148533][ T7480] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:35:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001329 RDI=000000000000132a RBP=00000000000003f8 RSP=ffffc9000757e9f0
R8 =ffff888020298237 R9 =1ffff11004053046 R10=dffffc0000000000 R11=ffffffff855016c0
R12=dffffc0000000000 R13=ffffffff99b038e7 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550173c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd0654526c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000024898000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd0647a7498 00007fd0647a7470 XMM03=00007fd0647a74a8 00007fd0647a74a0
XMM04=00007fd06530d100 00007fd0647a7460 XMM05=00007fd0647a7478 00007fd0647a74c0
XMM06=00007fd0647a74b8 00007fd0647a74b0 XMM07=00007fd0647a74a8 00007fd0647a74a0
XMM08=0000000000000000 00007fd064612f0f XMM09=0000000000000000 00007fd064612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff888022fed640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032ef6c0 RSP=ffffc900032ef538
R8 =ffffffff8fa3b337 R9 =1ffffffff1f47666 R10=dffffc0000000000 R11=fffffbfff1f47667
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81bfc160 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557c0a8500 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7e475056c0 CR3=000000002337c000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000211 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
