last executing test programs:

2.725732129s ago: executing program 0 (id=114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1c, 0x4, 0x4, 0x3}, 0x50)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r1, 0x0, 0x24004001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x25, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x10, 0x0, 0x80000003, 0x6, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'net'}, {0x2b, 'rlimit'}, {0x2b, 'pids'}, {0x2d, 'io'}]}, 0x17)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x805}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

2.566638712s ago: executing program 0 (id=116):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000240), 0x4)

1.731486865s ago: executing program 2 (id=117):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94)

1.66757518s ago: executing program 2 (id=119):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.667161373s ago: executing program 0 (id=120):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001c40)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x114b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x6, 0x7ff}, 0x19cb8, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001500)}, 0x8880)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
r8 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x6, 0x24, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000000640), 0x4)

749.362338ms ago: executing program 2 (id=121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a3f1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c0901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb50000000000", 0xd7}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xbd, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$xdp(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, 0x6, r4, 0x40}, 0x10, &(0x7f0000000940)=[{&(0x7f00000006c0)}, {&(0x7f00000009c0)="eaf75e6225247974eda6b5589fb762b387030000000000000048f6462822cdd40705cba28a10be8004000000e5d4e1b22f59521ba90ae0ba7d736d969da268d036d0f445ac5650c1f5c16d392e9226808cbf8d156cd93be079a7c29d2b6091092dd877842ab6a407f7df7c6702bf592eac6d312bc86f76d5db2d5bf03ea1ec1a90b3b0c4b2251f8d9d7d3fea6127257bf5a4e756567fd50b948c1179d6687aab4b1df39002ee194839b176d6bb8803f1b95e07000000ee97fa03d06a03f30d5335f4fbd53e7b7f7dcc54fc6d67929cd8c75732e624b32fe28a6dab7917272b1035cf0e2f5f000000000000", 0xeb}], 0x2, 0x0, 0x0, 0x2004c884}, 0x20000800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r8 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89ee, &(0x7f0000000000)={r8})
bpf$MAP_CREATE(0x0, 0x0, 0x48)

535.892348ms ago: executing program 0 (id=122):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e000000100081a4040f802f767457c536fd010031000000a37f02200000000000000e00c0fc1d757a9001278f04", 0x2e}], 0x1}, 0x20040040)

515.249577ms ago: executing program 2 (id=124):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

411.36823ms ago: executing program 0 (id=125):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52a2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104103, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket(0x10, 0x3, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)

320.797759ms ago: executing program 2 (id=126):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

241.585902ms ago: executing program 1 (id=127):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newae={0x64, 0x1e, 0x503, 0x70bd29, 0x25dfdbff, {{@in=@broadcast, 0x4d4, 0x2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x3506}, [@lifetime_val={0x24, 0x9, {0x5, 0x13e7, 0xee01, 0x8000000000000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x90)

179.963857ms ago: executing program 2 (id=128):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x58, &(0x7f0000000340)=""/222}, 0x21)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000500)}, 0xffe1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000240), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)

179.551961ms ago: executing program 1 (id=129):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)

179.214552ms ago: executing program 1 (id=130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @redir={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x0, 0x3, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT]}], {0x14}}, 0xc0}}, 0x800)

101.791934ms ago: executing program 1 (id=131):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000880)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="bf37fb2392b74d6c28daa1993caa0ba387771f98f732c715381ef78fe2008c067e6b", 0x22}], 0x1}, 0x4000000)

101.062191ms ago: executing program 0 (id=132):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"})
r1 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000100)="6ba4a2"}, 0x20)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400000024000b475280ce6e7806f37201cf3494", 0x14}], 0x1}, 0x44)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'syz_tun\x00', @random="0200ac7fac14"})

100.597101ms ago: executing program 1 (id=133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}}, 0x0)

0s ago: executing program 1 (id=134):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44980' (ED25519) to the list of known hosts.
syzkaller login: [   49.352824][ T5771] cgroup: Unknown subsys name 'net'
[   49.460124][ T5771] cgroup: Unknown subsys name 'cpuset'
[   49.464360][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.757120][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.543464][ T5853] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.125881][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.129591][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.132653][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.135990][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.144554][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.144926][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.170444][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.180300][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.183608][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.188642][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.191605][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.195186][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.198698][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.201962][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.206571][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.533480][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   64.636670][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   64.652966][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   64.736021][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.739461][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.742208][ T5866] bridge_slave_0: entered allmulticast mode
[   64.745210][ T5866] bridge_slave_0: entered promiscuous mode
[   64.779622][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.782405][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.784942][ T5866] bridge_slave_1: entered allmulticast mode
[   64.787691][ T5866] bridge_slave_1: entered promiscuous mode
[   64.833878][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.836909][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.842723][ T5869] bridge_slave_0: entered allmulticast mode
[   64.846205][ T5869] bridge_slave_0: entered promiscuous mode
[   64.850912][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.853869][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.856808][ T5870] bridge_slave_0: entered allmulticast mode
[   64.863148][ T5870] bridge_slave_0: entered promiscuous mode
[   64.868875][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.872323][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.875339][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.878645][ T5869] bridge_slave_1: entered allmulticast mode
[   64.882303][ T5869] bridge_slave_1: entered promiscuous mode
[   64.885584][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.889481][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.892313][ T5870] bridge_slave_1: entered allmulticast mode
[   64.896174][ T5870] bridge_slave_1: entered promiscuous mode
[   64.913190][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.972959][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.979134][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.983605][ T5866] team0: Port device team_slave_0 added
[   64.986715][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.993781][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.998381][ T5866] team0: Port device team_slave_1 added
[   65.064312][ T5869] team0: Port device team_slave_0 added
[   65.068648][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.071594][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.082325][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.089100][ T5870] team0: Port device team_slave_0 added
[   65.091942][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.094790][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.105037][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.112764][ T5869] team0: Port device team_slave_1 added
[   65.116021][ T5870] team0: Port device team_slave_1 added
[   65.194894][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.199555][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.209786][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.216411][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.219585][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.228691][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.232846][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.235012][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.243727][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.252491][ T5866] hsr_slave_0: entered promiscuous mode
[   65.255405][ T5866] hsr_slave_1: entered promiscuous mode
[   65.277782][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.280316][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.291323][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.346729][ T5869] hsr_slave_0: entered promiscuous mode
[   65.350929][ T5869] hsr_slave_1: entered promiscuous mode
[   65.353765][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   65.356188][ T5869] Cannot create hsr debugfs directory
[   65.396015][ T5870] hsr_slave_0: entered promiscuous mode
[   65.400323][ T5870] hsr_slave_1: entered promiscuous mode
[   65.402944][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   65.404977][ T5870] Cannot create hsr debugfs directory
[   65.626372][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.635005][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.649264][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.654336][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.706830][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.719232][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.729683][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.743560][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.812353][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.827691][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.840568][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.850185][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.915385][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.952692][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   65.961347][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.974275][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.977445][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.992408][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.998804][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.001448][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.032314][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   66.036555][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   66.049362][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.051688][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.059967][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.062325][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.075836][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.079034][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.083907][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.087040][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.166991][ T5870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.174151][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.248037][ T5868] Bluetooth: hci0: command tx timeout
[   66.259768][ T5868] Bluetooth: hci1: command tx timeout
[   66.262401][ T5868] Bluetooth: hci2: command tx timeout
[   66.353939][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.390730][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.399541][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.436463][ T5866] veth0_vlan: entered promiscuous mode
[   66.461905][ T5866] veth1_vlan: entered promiscuous mode
[   66.475094][ T5870] veth0_vlan: entered promiscuous mode
[   66.490515][ T5870] veth1_vlan: entered promiscuous mode
[   66.498896][ T5869] veth0_vlan: entered promiscuous mode
[   66.512712][ T5869] veth1_vlan: entered promiscuous mode
[   66.522279][ T5866] veth0_macvtap: entered promiscuous mode
[   66.533938][ T5866] veth1_macvtap: entered promiscuous mode
[   66.546577][ T5870] veth0_macvtap: entered promiscuous mode
[   66.556375][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.562346][ T5870] veth1_macvtap: entered promiscuous mode
[   66.570323][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.592606][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.596217][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.603835][ T5869] veth0_macvtap: entered promiscuous mode
[   66.612336][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.615009][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.622345][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.637256][ T5869] veth1_macvtap: entered promiscuous mode
[   66.645614][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.670423][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.678357][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.681425][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.689025][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.692411][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.715202][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.737221][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.761869][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.788688][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.794513][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.800221][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.810852][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.857215][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.861013][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.899495][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.904144][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.928058][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.937048][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.945379][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.990812][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.993986][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.011711][ T5933] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   67.083126][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.085885][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.857119][    C1] hrtimer: interrupt took 44958 ns
[   67.954128][ T5937] syz.0.10 (5937) used greatest stack depth: 19712 bytes left
[   68.328361][ T5875] Bluetooth: hci2: command tx timeout
[   68.328744][ T5868] Bluetooth: hci1: command tx timeout
[   68.330812][   T54] Bluetooth: hci0: command tx timeout
[   68.531096][ T5946] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.539894][ T5950] pimreg: tun_chr_ioctl cmd 1074025677
[   68.542180][ T5950] pimreg: linktype set to 778
[   68.665609][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19'.
[   68.747215][ T5959] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.22'.
[   68.774798][ T5964] netlink: 'syz.2.24': attribute type 7 has an invalid length.
[   68.778156][ T5964] netlink: 'syz.2.24': attribute type 8 has an invalid length.
[   68.848336][ T5966] netlink: 'syz.1.25': attribute type 3 has an invalid length.
[   68.851007][ T5966] netlink: 'syz.1.25': attribute type 4 has an invalid length.
[   68.853565][ T5966] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.25'.
[   70.191213][ T6021] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.50'.
[   70.344779][ T6023] Zero length message leads to an empty skb
[   70.413554][ T5875] Bluetooth: hci1: command tx timeout
[   70.417995][ T5875] Bluetooth: hci2: command tx timeout
[   70.419885][ T5875] Bluetooth: hci0: command tx timeout
[   71.088415][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   71.364170][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.367067][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   72.505015][   T54] Bluetooth: hci0: command tx timeout
[   72.507019][   T54] Bluetooth: hci2: command tx timeout
[   72.509392][   T54] Bluetooth: hci1: command tx timeout
[   72.676649][ T6061] netlink: 'syz.0.66': attribute type 41 has an invalid length.
[   73.834682][ T6009] Set syz1 is full, maxelem 65536 reached
[   73.885331][ T6077] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   73.889341][ T6079] netlink: 5 bytes leftover after parsing attributes in process `syz.0.74'.
[   73.893189][ T6077] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   74.421216][ T6114] netlink: 4764 bytes leftover after parsing attributes in process `syz.0.92'.
[   74.435686][ T6114] netlink: 4764 bytes leftover after parsing attributes in process `syz.0.92'.
[   74.441525][ T6121] openvswitch: netlink: IPv6 tunnel dst address is zero
[   75.665157][ T6169] netlink: 'syz.0.113': attribute type 29 has an invalid length.
[   75.673488][ T6169] netlink: 'syz.0.113': attribute type 29 has an invalid length.
[   75.678796][ T6169] netlink: 500 bytes leftover after parsing attributes in process `syz.0.113'.
[   75.683920][ T6169] unsupported nla_type 58
[   75.934696][ T6172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.114'.
[   77.686450][ T6185] bridge_slave_1: left allmulticast mode
[   77.695482][ T6185] bridge_slave_1: left promiscuous mode
[   77.699645][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.713611][ T6185] bridge_slave_0: left allmulticast mode
[   77.722733][ T6185] bridge_slave_0: left promiscuous mode
[   77.725479][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.029537][ T6196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.122'.
[   78.032664][ T6196] hsr0: entered promiscuous mode
[   78.034763][ T6196] hsr0: entered allmulticast mode
[   78.050988][ T6196] hsr_slave_0: entered allmulticast mode
[   78.053249][ T6196] hsr_slave_1: entered allmulticast mode
[   78.194942][ T6204] netlink: 'syz.0.125': attribute type 2 has an invalid length.
[   78.360566][ T6214] netlink: 'syz.1.130': attribute type 2 has an invalid length.
[   78.678552][  T791] cfg80211: failed to load regulatory.db
Connection to localhost closed by remote host.
[   79.219951][ T5882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.293929][ T5882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.341519][ T5882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.405564][ T5882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.533723][ T5882] bridge_slave_1: left allmulticast mode
[   79.536393][ T5882] bridge_slave_1: left promiscuous mode
[   79.540213][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.546470][ T5882] bridge_slave_0: left allmulticast mode
[   79.550002][ T5882] bridge_slave_0: left promiscuous mode
[   79.552653][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.769183][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.774898][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.780939][ T5882] bond0 (unregistering): Released all slaves
[   80.017617][ T5882] hsr_slave_0: left promiscuous mode
[   80.020573][ T5882] hsr_slave_1: left promiscuous mode
[   80.023590][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.026851][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.039158][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.042336][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.060463][ T5882] veth1_macvtap: left promiscuous mode
[   80.062965][ T5882] veth0_macvtap: left promiscuous mode
[   80.065784][ T5882] veth1_vlan: left promiscuous mode
[   80.070305][ T5882] veth0_vlan: left promiscuous mode
[   80.387694][ T5882] team0 (unregistering): Port device team_slave_1 removed
[   80.412061][ T5882] team0 (unregistering): Port device team_slave_0 removed
[   80.921774][ T5882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.999971][ T5882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.054449][ T5882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.112446][ T5882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.220801][ T5882] bridge_slave_1: left allmulticast mode
[   81.223347][ T5882] bridge_slave_1: left promiscuous mode
[   81.225910][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.232125][ T5882] bridge_slave_0: left allmulticast mode
[   81.234589][ T5882] bridge_slave_0: left promiscuous mode
[   81.237768][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.499967][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.518475][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.523871][ T5882] bond0 (unregistering): Released all slaves
[   81.728981][ T5882] hsr_slave_0: left promiscuous mode
[   81.734298][ T5882] hsr_slave_1: left promiscuous mode
[   81.737183][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.742624][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.748845][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.752082][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.764894][ T5882] veth1_macvtap: left promiscuous mode
[   81.772351][ T5882] veth0_macvtap: left promiscuous mode
[   81.774853][ T5882] veth1_vlan: left promiscuous mode
[   81.777222][ T5882] veth0_vlan: left promiscuous mode
[   82.077757][ T5882] team0 (unregistering): Port device team_slave_1 removed
[   82.095701][ T5882] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
22:39:44  Registers:
info registers vcpu 0

CPU#0
RAX=1964acb6b29be700 RBX=ffffffff819695f8 RCX=1964acb6b29be700 RDX=0000000000000001
RSI=ffffffff8d9ba18b RDI=ffffffff8be33e00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a63f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcf49b1e9c CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000000000000ff 0000000000000000 XMM03=0000000000000000 00000000ff000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=54f6ef814840bf00 RBX=ffffffff819695f8 RCX=54f6ef814840bf00 RDX=0000000000000001
RSI=ffffffff8d9ba18b RDI=ffffffff8be33e00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a830 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020005000
RIP=ffffffff8b7a63f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcf49a2658 CR3=0000000022162000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
