last executing test programs:

1m43.737886407s ago: executing program 1 (id=255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000109050000000000000000000a0000023c0002000c0002884db188a45de5e180050001"], 0x50}}, 0x20000800)

1m43.724978224s ago: executing program 1 (id=257):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x26}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0xff7b)
unlink(0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)

1m42.717767242s ago: executing program 1 (id=267):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0xc0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000081401"], 0x20}}, 0xc800)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb81371416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

1m42.28102534s ago: executing program 1 (id=271):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x3000c}], 0x10, 0xfffffff6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76c70000001b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

1m42.037941533s ago: executing program 1 (id=275):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m41.536004337s ago: executing program 1 (id=276):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x2, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

1m28.273209046s ago: executing program 0 (id=399):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

1m28.162594341s ago: executing program 0 (id=401):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x15c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x90, 0x8, "803fe3dd71bc47643bc845977e99f3f82a737165629cf198e8f5f7be57030c74150efc6e694954cb93b08f44bce3cd96297669c13fd2801dd91df7f627e3f2f627de296f6b4ae8e7820652d7987150d28dd3ee812df8ee03ee16e111dba62297a54161170b30fbf3aced9e67ab534aa7ab9a7e6cefe80c5718e5a5055cef7b2661fe9eeb2f2718eb5d92b189"}, @NFTA_OBJ_USERDATA={0x9d, 0x8, "dcb21beb42352301466b93f0c9ca7d8b8d96c57ec5dfa66b568d7e730248ce4798365ae35e3fd1a1822814694c75c2ce2a886016ce4f696844175e4da8d5bd4facced4ab635f759fc060351fa373509b2f514ec3553e98e0c43f5e55301b2542145362829edb09792627152655b8b4c11ca8a55dc2091be62adac57196b2e9bd73e04b334c9b545fed391d33b2aaa8c4e4911a92bb38a8c1f3"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x15c}}, 0x20004840)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x23, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)={r3, r3})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'geneve0\x00', @link_local})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)

1m27.937643677s ago: executing program 0 (id=404):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0)

1m27.937313045s ago: executing program 0 (id=405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m27.88812626s ago: executing program 0 (id=406):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m26.941318684s ago: executing program 32 (id=276):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x2, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

1m26.748080015s ago: executing program 0 (id=411):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x77)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000095000000000000008f5df2daa18b963b98d33eca868e3a546f628330291c205b2f2c8c26860d5390e463ede3430fda0a22ed"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m11.751370887s ago: executing program 33 (id=411):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x77)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000095000000000000008f5df2daa18b963b98d33eca868e3a546f628330291c205b2f2c8c26860d5390e463ede3430fda0a22ed"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

23.496087242s ago: executing program 2 (id=1146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)

23.433181198s ago: executing program 2 (id=1147):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe00000000691084000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

23.432732858s ago: executing program 2 (id=1148):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close(0x3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

23.384336334s ago: executing program 2 (id=1151):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x40, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94)

23.169454949s ago: executing program 2 (id=1152):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

22.700240545s ago: executing program 2 (id=1155):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001700f162d25a00648c56915a05aa2bfe", 0x14}], 0x1}, 0x0)

7.742723351s ago: executing program 34 (id=1155):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001700f162d25a00648c56915a05aa2bfe", 0x14}], 0x1}, 0x0)

1.475572789s ago: executing program 5 (id=1380):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000340), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)=""/160, 0xa0}], 0x1, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}, 0x40010060)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89ff, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000008c0)={<r9=>0xffffffffffffffff})
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r3}, 0x8)
ioctl$TUNSETOWNER(r10, 0x400454cc, r4)
sendmsg$tipc(r9, &(0x7f0000001e00)={&(0x7f0000000900)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8085}, 0xe0)
socket$netlink(0x10, 0x3, 0x0)

1.27640408s ago: executing program 3 (id=1385):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1108d5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000035007111ab0000000000851000000200002b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)

1.153202181s ago: executing program 3 (id=1388):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="1b00000019007f089ea6690ca4dc04f11c672274119dd27d616f3a", 0x1b}], 0x1}, 0x0)

1.083240046s ago: executing program 3 (id=1390):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

988.627362ms ago: executing program 3 (id=1393):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffad, &(0x7f0000000000)='/proc/sys\x00\x00\x01\x00\x00\x00\x00\x00\xff\xbe\xcc\x9a\x18e\xf44.\xd4j\a\x1e\x01\xab%nN\xd4\xa2'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

896.367395ms ago: executing program 3 (id=1395):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x2, 0x0, 0x0, 0x3318, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

846.658742ms ago: executing program 3 (id=1397):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11e, 0x1e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x19}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a0000000000000000018510000006", @ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r3}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c185)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x0)

564.053371ms ago: executing program 4 (id=1405):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3ff, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000895}, 0x880)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)

546.928556ms ago: executing program 5 (id=1406):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000)

476.538444ms ago: executing program 5 (id=1407):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000003f8b1f86a6fae2f3"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000240001002abd7000fedbdf254400000020000e801c"], 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

476.148547ms ago: executing program 5 (id=1408):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x6046, 0x3ff, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbc, 0x1, 0x0, 0x47, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x1, 0x0, 0xd}, 0x0, 0x200004, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a000000f8ffff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4020804)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000040)=0x80)
ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="603b429ee6d5"})
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000))
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="01488c"], 0xc4}}, 0x4004)
sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000220000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
write$cgroup_pressure(r6, &(0x7f0000000600)={'full', 0x20, 0x1, 0x20, 0x7}, 0x2f)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

362.725577ms ago: executing program 4 (id=1409):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0x0)

362.589543ms ago: executing program 4 (id=1410):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9}, 0x90)

362.242098ms ago: executing program 4 (id=1411):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x4102)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

255.063119ms ago: executing program 5 (id=1412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100301, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

86.213722ms ago: executing program 5 (id=1413):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000240)="d65961c4fe22462e683710e4ba87c9e9da92e070b5df96c7aa1c992a2835f185ea336b815ca38bd8333c31f49bae89e15a340bf86924ac95f769520db61c0bcb59b7ae5f5328729ae2ee2cd5ad32c58cb50c46f9c83f228823243d43807cd44d92578d9cf692fab7b75b6c5b85a8ddd2d8531953fb929193397a5004eb614c0f839988b9981967715d59ced59de0fbb41e00592c5dd0e3b3602b17097adaccb9cdb4ff8ac8db1691ec87083741f94aa835b043", &(0x7f0000000300)=@udp, 0x4}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x122, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x40000000, 0x0, 0x8, 0x103fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r5, &(0x7f0000000140), 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x58}}, 0x0)

48.389278ms ago: executing program 4 (id=1414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x14, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "580eadc45d97743f77"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x0)

0s ago: executing program 4 (id=1415):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206140000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47918' (ED25519) to the list of known hosts.
syzkaller login: [   47.528167][ T5778] cgroup: Unknown subsys name 'net'
[   47.659050][ T5778] cgroup: Unknown subsys name 'cpuset'
[   47.664692][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.933890][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.727914][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.730897][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.735829][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.739521][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.742932][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.830286][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.833143][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.836126][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.839288][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.841844][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.867169][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.870423][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.873345][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.876579][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.880834][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.163075][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   60.321365][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.325878][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.329031][ T5868] bridge_slave_0: entered allmulticast mode
[   60.332898][ T5868] bridge_slave_0: entered promiscuous mode
[   60.346904][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   60.361993][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.364446][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.367605][ T5868] bridge_slave_1: entered allmulticast mode
[   60.370818][ T5868] bridge_slave_1: entered promiscuous mode
[   60.435928][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.450521][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.492226][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   60.498695][ T5868] team0: Port device team_slave_0 added
[   60.515898][ T5868] team0: Port device team_slave_1 added
[   60.525638][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.528043][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.530588][ T5871] bridge_slave_0: entered allmulticast mode
[   60.533819][ T5871] bridge_slave_0: entered promiscuous mode
[   60.581221][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.583581][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.587979][ T5871] bridge_slave_1: entered allmulticast mode
[   60.591758][ T5871] bridge_slave_1: entered promiscuous mode
[   60.607619][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.609941][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.621747][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.642935][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.646006][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.657953][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.680404][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.704580][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.719299][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.722250][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.726522][ T5873] bridge_slave_0: entered allmulticast mode
[   60.730922][ T5873] bridge_slave_0: entered promiscuous mode
[   60.749421][ T5871] team0: Port device team_slave_0 added
[   60.760445][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.763152][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.767066][ T5873] bridge_slave_1: entered allmulticast mode
[   60.770914][ T5873] bridge_slave_1: entered promiscuous mode
[   60.776130][ T5871] team0: Port device team_slave_1 added
[   60.814012][ T5868] hsr_slave_0: entered promiscuous mode
[   60.817833][ T5868] hsr_slave_1: entered promiscuous mode
[   60.822848][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.848608][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.852454][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.855609][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.865155][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.912320][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.915461][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.924924][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.931006][ T5873] team0: Port device team_slave_0 added
[   60.952538][ T5873] team0: Port device team_slave_1 added
[   61.003583][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.006843][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.017464][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.036272][ T5871] hsr_slave_0: entered promiscuous mode
[   61.039113][ T5871] hsr_slave_1: entered promiscuous mode
[   61.041942][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   61.044388][ T5871] Cannot create hsr debugfs directory
[   61.057849][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.060590][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.072198][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.162555][ T5873] hsr_slave_0: entered promiscuous mode
[   61.165428][ T5873] hsr_slave_1: entered promiscuous mode
[   61.168340][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   61.170750][ T5873] Cannot create hsr debugfs directory
[   61.301605][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.314605][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.335665][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.366814][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.414087][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.421145][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.429912][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.447763][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.499474][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.509023][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.515466][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.527959][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.613315][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.638623][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.654371][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   61.663595][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.666777][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.684681][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.687416][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.693973][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   61.701522][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.711551][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.714405][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.726388][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.729036][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.760563][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   61.781827][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.784601][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.795873][ T5870] Bluetooth: hci0: command tx timeout
[   61.801333][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.804239][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.875119][ T5870] Bluetooth: hci1: command tx timeout
[   61.956697][ T5870] Bluetooth: hci2: command tx timeout
[   62.032705][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.072181][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.082505][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.109455][ T5868] veth0_vlan: entered promiscuous mode
[   62.140074][ T5871] veth0_vlan: entered promiscuous mode
[   62.142927][ T5868] veth1_vlan: entered promiscuous mode
[   62.166743][ T5871] veth1_vlan: entered promiscuous mode
[   62.171287][ T5873] veth0_vlan: entered promiscuous mode
[   62.187533][ T5868] veth0_macvtap: entered promiscuous mode
[   62.198655][ T5873] veth1_vlan: entered promiscuous mode
[   62.203259][ T5868] veth1_macvtap: entered promiscuous mode
[   62.229779][ T5871] veth0_macvtap: entered promiscuous mode
[   62.235575][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.244226][ T5871] veth1_macvtap: entered promiscuous mode
[   62.250598][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.269050][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.277061][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.282897][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.297469][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.304555][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.320282][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.327012][ T5873] veth0_macvtap: entered promiscuous mode
[   62.342527][ T5873] veth1_macvtap: entered promiscuous mode
[   62.349932][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.354122][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.377492][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.384213][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.391493][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.408620][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.437202][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.446022][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.457442][ T5698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.462356][ T5698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.480815][ T5698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.485562][ T5698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.516358][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.521945][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.555400][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.566541][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.600534][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.600777][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.603359][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.677198][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.680247][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.736602][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.739433][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.837797][ T5942] C: renamed from team_slave_0 (while UP)
[   62.852194][ T5942] netlink: 'syz.2.15': attribute type 3 has an invalid length.
[   62.865426][ T5942] netlink: 'syz.2.15': attribute type 1 has an invalid length.
[   62.868725][ T5942] netlink: 116 bytes leftover after parsing attributes in process `syz.2.15'.
[   62.941968][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'.
[   63.108542][ T5957] netlink: 948 bytes leftover after parsing attributes in process `syz.1.21'.
[   63.173258][ T5962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.25'.
[   63.745141][ T5991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37'.
[   63.866918][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.875229][ T5870] Bluetooth: hci0: command tx timeout
[   63.955655][ T5870] Bluetooth: hci1: command tx timeout
[   64.035507][ T5870] Bluetooth: hci2: command tx timeout
[   64.044544][ T6017] netlink: 'syz.1.52': attribute type 9 has an invalid length.
[   64.523423][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   64.699477][ T6030] netlink: 'syz.0.54': attribute type 10 has an invalid length.
[   64.708148][ T6030] macvlan0: entered allmulticast mode
[   64.723653][    C0] hrtimer: interrupt took 48707 ns
[   64.772415][ T6030] veth1_vlan: entered allmulticast mode
[   64.805617][ T6030] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   64.913248][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'.
[   65.019648][ T6036] Zero length message leads to an empty skb
[   65.079335][ T6040] netlink: 'syz.2.59': attribute type 41 has an invalid length.
[   65.438250][ T6030] syz.0.54 (6030) used greatest stack depth: 18680 bytes left
[   65.955056][ T5870] Bluetooth: hci0: command tx timeout
[   66.039026][ T5870] Bluetooth: hci1: command tx timeout
[   66.126895][ T5870] Bluetooth: hci2: command tx timeout
[   66.801033][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'.
[   66.963685][ T6088] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.80'.
[   67.080712][ T6092] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.83'.
[   67.416951][ T6100] netlink: 'syz.2.87': attribute type 21 has an invalid length.
[   67.420396][ T6100] netlink: 'syz.2.87': attribute type 1 has an invalid length.
[   67.847445][ T6109] netlink: 'syz.2.89': attribute type 1 has an invalid length.
[   67.873877][ T6103] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.977232][ T6112] __nla_validate_parse: 2 callbacks suppressed
[   67.977248][ T6112] netlink: 148 bytes leftover after parsing attributes in process `syz.2.91'.
[   68.036440][ T5870] Bluetooth: hci0: command tx timeout
[   68.115488][ T5870] Bluetooth: hci1: command tx timeout
[   68.194863][ T5870] Bluetooth: hci2: command tx timeout
[   68.199182][ T5870] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[   68.258649][ T6122] xt_socket: unknown flags 0x20
[   68.287876][ T6103] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   69.728232][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.161238][ T6226] syz.0.136 uses obsolete (PF_INET,SOCK_PACKET)
[   70.391126][ T5870] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[   70.511066][ T6238] netlink: 'syz.1.143': attribute type 2 has an invalid length.
[   70.514267][ T6238] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.143'.
[   70.712518][ T6243] netlink: 'syz.0.140': attribute type 11 has an invalid length.
[   70.716622][ T6243] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.140'.
[   70.889566][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.932941][ T6247] netlink: 168 bytes leftover after parsing attributes in process `syz.2.148'.
[   71.093446][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.096208][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   74.095251][ T6303] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.170'.
[   74.172935][ T6308] netlink: 'syz.1.172': attribute type 25 has an invalid length.
[   74.332788][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'.
[   74.337628][ T6314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.175'.
[   74.459635][ T6318] netlink: 'syz.2.176': attribute type 13 has an invalid length.
[   74.462933][ T6318] netlink: 160 bytes leftover after parsing attributes in process `syz.2.176'.
[   74.473774][ T6318] erspan0: refused to change device tx_queue_len
[   74.488941][ T6318] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   74.554270][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'.
[   74.696210][ T6330] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   75.033343][ T6332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.183'.
[   75.040457][ T6336] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.184'.
[   75.615020][ T6352] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   75.618721][ T6352] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.189'.
[   75.648529][ T6351] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   75.651938][ T6351] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.189'.
[   77.369118][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[   77.403565][ T6391] =======================================================
[   77.403565][ T6391] WARNING: The mand mount option has been deprecated and
[   77.403565][ T6391]          and is ignored by this kernel. Remove the mand
[   77.403565][ T6391]          option from the mount to silence this warning.
[   77.403565][ T6391] =======================================================
[   78.393173][ T6432] netlink: 'syz.0.222': attribute type 11 has an invalid length.
[   78.420393][ T6436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.739298][ T6447] netlink: 'syz.0.226': attribute type 3 has an invalid length.
[   78.752246][ T6453] netlink: 'syz.2.229': attribute type 25 has an invalid length.
[   78.756269][ T6453] netlink: 'syz.2.229': attribute type 28 has an invalid length.
[   79.273370][ T6472] __nla_validate_parse: 1 callbacks suppressed
[   79.273384][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[   79.572069][ T6482] netlink: 'syz.1.240': attribute type 11 has an invalid length.
[   80.282828][ T6495] bridge_slave_1: left allmulticast mode
[   80.286050][ T6495] bridge_slave_1: left promiscuous mode
[   80.288828][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.322300][   T10] cfg80211: failed to load regulatory.db
[   81.378246][ T6495] bridge_slave_0: left allmulticast mode
[   81.380363][ T6495] bridge_slave_0: left promiscuous mode
[   81.385561][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.491962][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'.
[   81.495980][ T6497] netlink: 52 bytes leftover after parsing attributes in process `syz.1.243'.
[   81.713934][ T6516] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   82.460674][ T6540] xt_l2tp: v2 sid > 0xffff: 1114112
[   82.958464][ T6550] netlink: 'syz.1.267': attribute type 23 has an invalid length.
[   83.239518][ T6552] bridge_slave_1: left allmulticast mode
[   83.242316][ T6552] bridge_slave_1: left promiscuous mode
[   83.250918][ T6557] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.271'.
[   83.253736][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.264921][ T6557] netlink: 61831 bytes leftover after parsing attributes in process `syz.1.271'.
[   84.701683][ T6552] bridge_slave_0: left allmulticast mode
[   84.703934][ T6552] bridge_slave_0: left promiscuous mode
[   84.706790][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.770877][ T6567] netlink: 'syz.0.277': attribute type 29 has an invalid length.
[   84.774515][ T6568] netlink: 'syz.0.277': attribute type 29 has an invalid length.
[   85.637554][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1102650801 wd_nsec: 1102650845
[   86.099942][ T6597] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.289'.
[   87.534914][ T6631] netlink: 'syz.0.304': attribute type 25 has an invalid length.
[   87.556184][ T6633] netlink: 'syz.2.305': attribute type 5 has an invalid length.
[   87.930534][ T6650] netlink: 56 bytes leftover after parsing attributes in process `syz.0.313'.
[   88.054043][ T6656] netlink: 'syz.2.316': attribute type 21 has an invalid length.
[   88.058471][ T6656] netlink: 156 bytes leftover after parsing attributes in process `syz.2.316'.
[   88.287335][ T5870] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   88.499175][ T6674] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   88.757830][ T6682] netlink: 'syz.0.328': attribute type 21 has an invalid length.
[   88.760797][ T6682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.328'.
[   90.212372][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[   90.547960][ T6713] netlink: 'syz.2.340': attribute type 2 has an invalid length.
[   90.551221][ T6713] netlink: 'syz.2.340': attribute type 3 has an invalid length.
[   90.554481][ T6713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.340'.
[   90.975158][ T6722] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.344'.
[   90.984260][ T6722] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[   91.052569][ T6724] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.345'.
[   91.299305][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'.
[   91.404022][ T6735] option changes via remount are deprecated (pid=6734 comm=syz.2.350)
[   92.158687][ T6755] sctp: [Deprecated]: syz.0.359 (pid 6755) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.158687][ T6755] Use struct sctp_sack_info instead
[   94.309031][ T6779] netlink: 763 bytes leftover after parsing attributes in process `syz.0.370'.
[   94.456375][ T6785] netlink: 'syz.2.372': attribute type 10 has an invalid length.
[   94.473339][ T6785] geneve0: entered promiscuous mode
[   94.487637][ T6785] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   94.614145][ T6793] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[   95.657222][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   95.792312][ T6815] netlink: 'syz.0.384': attribute type 3 has an invalid length.
[   95.801356][ T6815] netlink: 'syz.0.384': attribute type 16 has an invalid length.
[   95.808514][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.384'.
[   95.850701][ T6817] netlink: 'syz.0.385': attribute type 21 has an invalid length.
[   96.238898][ T6824] netlink: 830 bytes leftover after parsing attributes in process `syz.0.388'.
[   96.562466][ T6837] netlink: 'syz.2.393': attribute type 3 has an invalid length.
[   96.611235][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   97.247928][ T6850] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   97.381332][ T6853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.569755][ T6873] netlink: 'syz.2.409': attribute type 21 has an invalid length.
[   98.572753][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'.
[   98.778477][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.785889][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.789086][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.793727][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.798604][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   99.067389][ T6876] chnl_net:caif_netlink_parms(): no params data found
[   99.130161][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.197534][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.262002][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.267694][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.270651][ T6876] bridge_slave_0: entered allmulticast mode
[   99.275319][ T6876] bridge_slave_0: entered promiscuous mode
[   99.298315][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.309693][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.312683][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.319016][ T6876] bridge_slave_1: entered allmulticast mode
[   99.323184][ T6876] bridge_slave_1: entered promiscuous mode
[   99.362928][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.403068][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.412367][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.487365][ T6876] team0: Port device team_slave_0 added
[   99.491846][ T6876] team0: Port device team_slave_1 added
[   99.586803][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.589531][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.625290][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.631336][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.634299][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.658146][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.242414][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.250464][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.261837][   T12] bond0 (unregistering): Released all slaves
[  100.288396][ T6876] hsr_slave_0: entered promiscuous mode
[  100.291616][ T6876] hsr_slave_1: entered promiscuous mode
[  100.294584][ T6876] debugfs: 'hsr0' already exists in 'hsr'
[  100.310821][ T6876] Cannot create hsr debugfs directory
[  100.352910][ T6893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.496257][ T6899] warning: `syz.2.414' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.837537][ T5870] Bluetooth: hci3: command tx timeout
[  101.076121][ T6876] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  101.093579][   T12] hsr_slave_0: left promiscuous mode
[  101.106528][   T12] hsr_slave_1: left promiscuous mode
[  101.109498][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.112717][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.122450][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.131734][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.163331][   T12] veth1_macvtap: left promiscuous mode
[  101.175807][   T12] veth0_macvtap: left promiscuous mode
[  101.178344][   T12] veth1_vlan: left promiscuous mode
[  101.180785][   T12] veth0_vlan: left promiscuous mode
[  101.682381][   T12] team0 (unregistering): Port device team_slave_1 removed
[  101.717040][   T12] team0 (unregistering): Port device team_slave_0 removed
[  102.198110][ T6876] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  102.207132][  T794] infiniband syz0: ib_query_port failed (-19)
[  102.207383][ T6876] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  102.218141][ T6876] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  102.359428][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.401810][ T6876] 8021q: adding VLAN 0 to HW filter on device team0
[  102.422878][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.425502][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.441306][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.444263][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.663237][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.732552][ T6876] veth0_vlan: entered promiscuous mode
[  102.763722][ T6876] veth1_vlan: entered promiscuous mode
[  102.807635][ T6876] veth0_macvtap: entered promiscuous mode
[  102.824223][ T6876] veth1_macvtap: entered promiscuous mode
[  102.863568][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.877290][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.907249][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.914793][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.914929][ T5870] Bluetooth: hci3: command tx timeout
[  102.918032][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.962342][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.983325][ T6961] delete_channel: no stack
[  103.063055][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.071335][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.126546][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.129447][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.753627][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'.
[  104.879724][ T7034] netlink: 160 bytes leftover after parsing attributes in process `syz.3.448'.
[  104.995793][ T5870] Bluetooth: hci3: command tx timeout
[  105.129350][ T7044] netlink: 'syz.3.453': attribute type 3 has an invalid length.
[  105.132690][ T7044] netlink: 'syz.3.453': attribute type 2 has an invalid length.
[  105.143197][ T7044] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.453'.
[  105.161806][ T7046] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  106.203195][ T7056] netlink: 'syz.3.459': attribute type 28 has an invalid length.
[  106.207969][ T7056] netlink: 'syz.3.459': attribute type 29 has an invalid length.
[  106.212185][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.459'.
[  106.382111][ T7064] netlink: 'syz.2.463': attribute type 9 has an invalid length.
[  106.399381][ T7064] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.463'.
[  106.595537][ T7070] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[  106.599096][ T7070] netlink: 'syz.2.466': attribute type 2 has an invalid length.
[  106.602336][ T7070] netlink: 'syz.2.466': attribute type 4 has an invalid length.
[  106.611273][ T7070] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[  106.616293][ T7070] netlink: 'syz.2.466': attribute type 2 has an invalid length.
[  106.620625][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[  106.625412][ T7070] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.466'.
[  106.629482][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[  107.124879][ T5870] Bluetooth: hci3: command tx timeout
[  107.687426][ T7095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.189016][ T7154] netlink: 'syz.3.498': attribute type 3 has an invalid length.
[  110.194981][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'.
[  110.199615][ T7154] netlink: 56 bytes leftover after parsing attributes in process `syz.3.498'.
[  110.725591][ T7189] netlink: 112 bytes leftover after parsing attributes in process `syz.2.512'.
[  110.792905][ T5870] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  110.933062][ T7198] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.517'.
[  111.039050][ T7205] netlink: 'syz.2.520': attribute type 11 has an invalid length.
[  111.044858][ T7205] netlink: 'syz.2.520': attribute type 11 has an invalid length.
[  111.112434][ T7209] netlink: 76 bytes leftover after parsing attributes in process `syz.2.522'.
[  111.495880][ T7219] netlink: 'syz.2.525': attribute type 15 has an invalid length.
[  111.855754][ T7226] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  112.865271][ T7244] netlink: 'syz.2.535': attribute type 1 has an invalid length.
[  113.258147][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'.
[  113.280522][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'.
[  113.992414][ T7280] : renamed from bond_slave_0 (while UP)
[  114.131175][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.139409][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.143838][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.149117][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.151810][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.812617][ T5876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.887962][ T5876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.042467][ T5876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.129383][ T7285] chnl_net:caif_netlink_parms(): no params data found
[  115.391006][ T5876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.479329][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.486856][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.490314][ T7285] bridge_slave_0: entered allmulticast mode
[  115.501270][ T7285] bridge_slave_0: entered promiscuous mode
[  115.516792][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.521672][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.526915][ T7285] bridge_slave_1: entered allmulticast mode
[  115.532628][ T7285] bridge_slave_1: entered promiscuous mode
[  115.589718][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.599463][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.717697][ T7285] team0: Port device team_slave_0 added
[  115.734431][ T7285] team0: Port device team_slave_1 added
[  115.829348][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.832520][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.850671][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.856433][ T5876] bridge_slave_1: left allmulticast mode
[  115.858845][ T5876] bridge_slave_1: left promiscuous mode
[  115.862423][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.872124][ T5876] bridge_slave_0: left allmulticast mode
[  115.874593][ T5876] bridge_slave_0: left promiscuous mode
[  115.880687][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.941295][ T7340] netlink: 176 bytes leftover after parsing attributes in process `syz.3.560'.
[  116.002509][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.561'.
[  116.014252][ T7342] unsupported nlmsg_type 40
[  116.206007][ T5240] Bluetooth: hci1: command tx timeout
[  116.282200][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.291521][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.299144][ T5876] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  116.303142][ T5876] veth1_vlan: left allmulticast mode
[  116.309013][ T5876] bond0 (unregistering): Released all slaves
[  116.324355][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.329623][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.354917][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.559070][ T7285] hsr_slave_0: entered promiscuous mode
[  116.562608][ T7285] hsr_slave_1: entered promiscuous mode
[  116.565650][ T7285] debugfs: 'hsr0' already exists in 'hsr'
[  116.568016][ T7285] Cannot create hsr debugfs directory
[  116.796643][ T5876] hsr_slave_0: left promiscuous mode
[  116.824663][ T5876] hsr_slave_1: left promiscuous mode
[  116.829749][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.832781][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.867308][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.870398][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.887147][ T5876] veth1_macvtap: left promiscuous mode
[  116.889112][ T5876] veth0_macvtap: left promiscuous mode
[  116.892126][ T5876] veth1_vlan: left promiscuous mode
[  116.899123][ T5876] veth0_vlan: left promiscuous mode
[  117.620383][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  117.649905][ T5876] team0 (unregistering): Port device team_slave_0 removed
[  118.124597][ T7285] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.162058][ T7285] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.174493][ T7285] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.182223][ T7285] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.274959][ T5240] Bluetooth: hci1: command tx timeout
[  118.293811][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.311253][ T7285] 8021q: adding VLAN 0 to HW filter on device team0
[  118.323792][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.326901][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.369256][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.371872][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.392613][ T7391] netlink: 'syz.3.574': attribute type 21 has an invalid length.
[  118.396279][ T7391] netlink: 'syz.3.574': attribute type 20 has an invalid length.
[  118.639936][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.756078][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'.
[  118.759163][ T7417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.579'.
[  118.992388][ T7285] veth0_vlan: entered promiscuous mode
[  119.014689][ T7285] veth1_vlan: entered promiscuous mode
[  119.062288][ T7285] veth0_macvtap: entered promiscuous mode
[  119.070324][ T7285] veth1_macvtap: entered promiscuous mode
[  119.112875][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.140206][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.177587][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.180479][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.198609][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.217481][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.279253][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.282036][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.325414][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.330327][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.358064][ T7457] netlink: 'syz.2.593': attribute type 10 has an invalid length.
[  119.374800][ T7457] 8021q: adding VLAN 0 to HW filter on device team0
[  119.380034][ T7457] bond0: (slave team0): Enslaving as an active interface with an up link
[  119.433881][ T7457] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  119.535457][ T7457] can: request_module (can-proto-0) failed.
[  119.668121][ T7466] netlink: 104 bytes leftover after parsing attributes in process `syz.4.594'.
[  120.365148][ T5870] Bluetooth: hci1: command tx timeout
[  121.036905][ T7505] netlink: 'syz.3.610': attribute type 39 has an invalid length.
[  121.388492][ T7524] netlink: 'syz.2.616': attribute type 4 has an invalid length.
[  121.390969][ T7524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.616'.
[  121.400568][ T7524] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  121.428084][ T7526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.617'.
[  121.959080][ T7558] netlink: 'syz.3.632': attribute type 8 has an invalid length.
[  121.961672][ T7558] netlink: 'syz.3.632': attribute type 3 has an invalid length.
[  121.964118][ T7558] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.632'.
[  122.063275][ T7560] netlink: 'syz.3.633': attribute type 21 has an invalid length.
[  122.435364][ T5240] Bluetooth: hci1: command tx timeout
[  122.627414][ T7576] netlink: 'syz.3.640': attribute type 3 has an invalid length.
[  122.630010][ T7576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.640'.
[  122.655887][ T7577] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  123.984028][ T7616] netlink: 'syz.4.660': attribute type 7 has an invalid length.
[  123.991815][ T7616] netlink: 64 bytes leftover after parsing attributes in process `syz.4.660'.
[  127.948396][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'.
[  127.952147][ T7678] netlink: 108 bytes leftover after parsing attributes in process `syz.2.685'.
[  127.960302][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'.
[  127.964120][ T7678] netlink: 108 bytes leftover after parsing attributes in process `syz.2.685'.
[  127.972530][ T7678] netlink: 84 bytes leftover after parsing attributes in process `syz.2.685'.
[  128.022855][ T7680] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  128.038584][ T7680] syzkaller0: entered promiscuous mode
[  128.040958][ T7680] syzkaller0: entered allmulticast mode
[  128.664467][ T7701] netlink: 'syz.3.695': attribute type 1 has an invalid length.
[  128.672148][ T7701] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.695'.
[  130.211413][ T7732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.707'.
[  130.249719][ T7736] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.709'.
[  130.267752][ T7736] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.709'.
[  130.524638][ T7753] netlink: 'syz.2.716': attribute type 13 has an invalid length.
[  130.550788][ T7753] netlink: 'syz.2.716': attribute type 17 has an invalid length.
[  130.956740][ T7753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.413632][ T7810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.042280][ T7835] netlink: 'syz.4.743': attribute type 1 has an invalid length.
[  132.370122][ T7853] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  132.398082][ T7853] netlink: 'syz.4.752': attribute type 10 has an invalid length.
[  132.429170][ T7859] netlink: 62619 bytes leftover after parsing attributes in process `syz.3.755'.
[  132.437497][ T7853] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.519363][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.522149][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.884229][ T7870] tap0: tun_chr_ioctl cmd 1074025677
[  132.887993][ T7870] tap0: linktype set to 0
[  133.041782][ T7882] __nla_validate_parse: 2 callbacks suppressed
[  133.041798][ T7882] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.765'.
[  133.058503][ T7882] openvswitch: netlink: Message has 6 unknown bytes.
[  133.257448][ T7890] netlink: 'syz.3.768': attribute type 1 has an invalid length.
[  133.261440][ T7890] netlink: 'syz.3.768': attribute type 3 has an invalid length.
[  133.267949][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.768'.
[  133.349964][ T7893] netlink: 'syz.2.770': attribute type 10 has an invalid length.
[  133.368536][ T7893] bond0: (slave team0): Releasing backup interface
[  133.377193][ T7893] team0: Cannot enslave team device to itself
[  133.684329][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.946772][ T7923] netlink: 'syz.4.784': attribute type 12 has an invalid length.
[  133.949550][ T7923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.784'.
[  134.320857][ T7932] netlink: 'syz.3.788': attribute type 4 has an invalid length.
[  134.324606][ T7932] netlink: 152 bytes leftover after parsing attributes in process `syz.3.788'.
[  134.601127][   T26] wlan1: Trigger new scan to find an IBSS to join
[  134.802919][ T7932] netlink: 6 bytes leftover after parsing attributes in process `syz.3.788'.
[  134.807304][ T7932] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  134.843107][ T7939] netlink: 'syz.4.791': attribute type 10 has an invalid length.
[  134.845857][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'.
[  134.848730][ T7939] team0: entered promiscuous mode
[  134.850363][ T7939] team_slave_0: entered promiscuous mode
[  134.852416][ T7939] team_slave_1: entered promiscuous mode
[  134.854575][ T7939] team0: entered allmulticast mode
[  134.874942][ T7939] team_slave_0: entered allmulticast mode
[  134.877051][ T7939] team_slave_1: entered allmulticast mode
[  134.879431][ T7939] bridge0: port 3(team0) entered blocking state
[  134.882247][ T7939] bridge0: port 3(team0) entered disabled state
[  134.886683][ T7939] bridge0: port 3(team0) entered blocking state
[  134.889199][ T7939] bridge0: port 3(team0) entered forwarding state
[  135.721157][ T7953] Illegal XDP return value 4294967274 on prog  (id 289) dev N/A, expect packet loss!
[  135.973972][ T7962] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.801'.
[  135.988023][ T7966] cgroup: Unknown subsys name '0x0000000000000000'
[  136.219914][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'.
[  136.403812][ T7982] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.810'.
[  136.413808][ T7982] netlink: zone id is out of range
[  136.422290][ T7982] netlink: zone id is out of range
[  136.426973][ T7982] netlink: get zone limit has 8 unknown bytes
[  136.521163][ T7989] netlink: 76 bytes leftover after parsing attributes in process `syz.3.813'.
[  136.682728][ T5240] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7
[  139.555496][ T4436] wlan1: Trigger new scan to find an IBSS to join
[  140.381007][ T8032] __nla_validate_parse: 3 callbacks suppressed
[  140.381017][ T8032] netlink: 830 bytes leftover after parsing attributes in process `syz.2.833'.
[  140.449651][ T1091] wlan1: Creating new IBSS network, BSSID 42:81:3a:04:a8:8f
[  140.557590][ T8039] tap0: tun_chr_ioctl cmd 1074025677
[  140.559435][ T8039] tap0: linktype set to 769
[  140.680198][ T8047] netlink: 'syz.2.839': attribute type 10 has an invalid length.
[  140.686313][ T8047] 8021q: adding VLAN 0 to HW filter on device team0
[  140.690876][ T8047] bond0: (slave team0): Enslaving as an active interface with an up link
[  141.930797][ T8085] @: renamed from bond_slave_0 (while UP)
[  141.943379][ T8086] netlink: 2 bytes leftover after parsing attributes in process `syz.2.856'.
[  142.008957][ T8085] netlink: 'syz.4.853': attribute type 21 has an invalid length.
[  142.012314][ T8085] netlink: 128 bytes leftover after parsing attributes in process `syz.4.853'.
[  142.016099][ T8085] netlink: 'syz.4.853': attribute type 4 has an invalid length.
[  142.132536][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.863'.
[  142.820433][ T8106] netlink: 72 bytes leftover after parsing attributes in process `syz.4.865'.
[  142.828464][ T8106] netlink: 72 bytes leftover after parsing attributes in process `syz.4.865'.
[  143.201423][ T8121] netlink: 'syz.4.872': attribute type 1 has an invalid length.
[  143.321073][ T8132] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.877'.
[  143.470840][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'.
[  143.473974][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'.
[  143.842140][ T8159] netlink: 156 bytes leftover after parsing attributes in process `syz.4.890'.
[  144.544300][ T8185] netlink: 'syz.2.903': attribute type 5 has an invalid length.
[  145.799071][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'.
[  145.906701][ T8236] netlink: 144 bytes leftover after parsing attributes in process `syz.2.924'.
[  145.912273][ T5240] Bluetooth: hci1: adv larger than maximum supported
[  146.072637][ T8243] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.927'.
[  146.088898][ T8243] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.927'.
[  146.200539][ T8250] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  146.222788][ T5240] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  146.836417][ T8284] netlink: 'syz.4.946': attribute type 1 has an invalid length.
[  146.842636][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'.
[  147.142744][ T8301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'.
[  147.150641][ T8301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'.
[  147.177159][ T8301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'.
[  147.701945][ T8341] netlink: 'syz.3.970': attribute type 1 has an invalid length.
[  147.736974][ T8343] IPv6: Can't replace route, no match found
[  147.744429][ T8335] netlink: 'syz.4.965': attribute type 1 has an invalid length.
[  148.811242][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.980'.
[  148.816057][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.980'.
[  149.333652][ T8374] netlink: 'syz.2.985': attribute type 4 has an invalid length.
[  149.486971][ T8382] netlink: 'syz.2.987': attribute type 21 has an invalid length.
[  149.490100][ T8382] netlink: 'syz.2.987': attribute type 4 has an invalid length.
[  150.898250][ T8394] __nla_validate_parse: 2 callbacks suppressed
[  150.898327][ T8394] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.991'.
[  150.970941][ T8400] netlink: 'syz.2.992': attribute type 2 has an invalid length.
[  150.974965][ T8400] netlink: 51 bytes leftover after parsing attributes in process `syz.2.992'.
[  151.152977][ T8412] netlink: 188 bytes leftover after parsing attributes in process `syz.2.998'.
[  151.222441][ T8413] netlink: 'syz.3.997': attribute type 10 has an invalid length.
[  151.274187][ T8419] netlink: 'syz.3.997': attribute type 11 has an invalid length.
[  151.288297][ T8419] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.997'.
[  151.309487][ T8413] team0: Port device wlan1 added
[  151.912373][ T8409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.921340][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'.
[  152.036344][ T8459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'.
[  152.041730][ T8459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'.
[  152.047392][ T8459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'.
[  152.104510][ T8463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  152.166294][ T8469] openvswitch: netlink: IP tunnel dst address not specified
[  152.705039][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'.
[  152.957153][ T8511] syzkaller0: entered promiscuous mode
[  152.959539][ T8511] syzkaller0: entered allmulticast mode
[  153.805415][ T8516] netlink: 'syz.4.1044': attribute type 19 has an invalid length.
[  155.745116][ T8498] Set syz1 is full, maxelem 65536 reached
[  155.837146][ T8538] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1055'.
[  155.978517][ T8545] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1058'.
[  156.194196][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1064'.
[  156.420631][ T8574] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1072'.
[  156.742876][ T8586] openvswitch: netlink: Duplicate or invalid key (type 0).
[  156.749550][ T8586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.534605][ T8616] netlink: 'syz.3.1089': attribute type 21 has an invalid length.
[  159.505101][ T8624] netlink: 'syz.3.1092': attribute type 29 has an invalid length.
[  159.773701][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1102'.
[  159.781461][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1102'.
[  159.786843][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1102'.
[  160.368980][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'.
[  160.377138][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'.
[  160.582849][ T8705] netlink: 'syz.3.1122': attribute type 21 has an invalid length.
[  160.586948][ T8705] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1122'.
[  160.752236][ T8707] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.767879][ T8707] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.834330][ T8723] netlink: 'syz.3.1130': attribute type 7 has an invalid length.
[  160.920606][ T8730] netlink: 'syz.3.1133': attribute type 10 has an invalid length.
[  160.996792][ T8730] team0 (unregistering): Port device team_slave_0 removed
[  161.003967][ T8730] team0 (unregistering): Port device team_slave_1 removed
[  161.013104][ T8730] team0 (unregistering): Port device wlan1 removed
[  161.134581][ T5240] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10
[  161.308684][ T8736] option changes via remount are deprecated (pid=8735 comm=syz.3.1136)
[  161.892986][ T8750] netlink: 'syz.3.1143': attribute type 21 has an invalid length.
[  161.897335][ T8750] netlink: 'syz.3.1143': attribute type 6 has an invalid length.
[  161.899978][ T8750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1143'.
[  162.232715][ T5240] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12
[  162.747850][ T8780] netlink: 'syz.3.1154': attribute type 21 has an invalid length.
[  162.965565][ T8780] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1154'.
[  163.133135][ T8784] netlink: 'syz.3.1157': attribute type 10 has an invalid length.
[  163.162372][ T8784] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1157'.
[  164.171568][ T8793] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1160'.
[  164.259658][ T8799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.285001][ T5240] Bluetooth: hci3: command tx timeout
[  164.376689][ T8805] netlink: 'syz.3.1166': attribute type 3 has an invalid length.
[  165.340603][ T8844] netlink: 'syz.3.1184': attribute type 1 has an invalid length.
[  165.343822][ T8844] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1184'.
[  165.458787][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'.
[  165.462382][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'.
[  165.485375][ T8849] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1186'.
[  166.154207][ T8863] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  166.355988][ T8870] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1194'.
[  166.592562][ T8872] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1195'.
[  166.621348][ T8873] bridge0: entered promiscuous mode
[  166.623570][ T8873] bridge0: entered allmulticast mode
[  167.142579][ T5240] Bluetooth: hci3: unexpected event 0x12 length: 151 > 8
[  170.327639][ T8964] netlink: 'syz.3.1233': attribute type 6 has an invalid length.
[  170.333410][ T8964] __nla_validate_parse: 1 callbacks suppressed
[  170.333811][ T8964] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1233'.
[  170.366624][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'.
[  170.374437][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'.
[  170.386093][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'.
[  170.822383][ T8980] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1241'.
[  170.862074][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1244'.
[  170.862212][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1244'.
[  170.893462][ T8980] netlink: 'syz.3.1241': attribute type 1 has an invalid length.
[  171.087089][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'.
[  171.585740][ T9007] C: renamed from team_slave_0 (while UP)
[  171.616089][ T9007] netlink: 'syz.4.1249': attribute type 3 has an invalid length.
[  172.445272][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'.
[  172.449071][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'.
[  172.573448][ T9027] veth0_macvtap: left promiscuous mode
[  173.480684][ T9057] netlink: 'syz.3.1268': attribute type 29 has an invalid length.
[  173.720711][ T9075] netlink: 'syz.3.1277': attribute type 21 has an invalid length.
[  173.723987][ T9075] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  173.758675][ T9077] netlink: 'syz.4.1278': attribute type 12 has an invalid length.
[  174.448257][ T9096] netlink: 'syz.3.1287': attribute type 6 has an invalid length.
[  175.250210][ T9126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.778792][ T9142] sit0: entered promiscuous mode
[  175.987114][ T9148] __nla_validate_parse: 6 callbacks suppressed
[  175.987128][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'.
[  175.992739][ T9148] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1307'.
[  176.153968][ T9151] openvswitch: netlink: IPv6 tunnel dst address is zero
[  176.610821][ T9167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.151192][ T9182] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1322'.
[  177.164650][ T9182] netlink: 'syz.4.1322': attribute type 13 has an invalid length.
[  177.168592][ T9182] netlink: 'syz.4.1322': attribute type 17 has an invalid length.
[  177.192314][ T9182] sit0: left promiscuous mode
[  177.232766][ T9182] bridge0: left promiscuous mode
[  177.237143][ T9182] bridge0: left allmulticast mode
[  177.249791][ T9182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.596350][ T9189] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1323'.
[  177.836225][ T9196] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1328'.
[  177.939519][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.942972][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.948292][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.954067][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.976989][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.156915][ T9214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1333'.
[  178.166885][ T9214] netlink: 'syz.3.1333': attribute type 3 has an invalid length.
[  178.189718][ T9201] chnl_net:caif_netlink_parms(): no params data found
[  178.355566][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.360414][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.363599][ T9201] bridge_slave_0: entered allmulticast mode
[  178.370494][ T9201] bridge_slave_0: entered promiscuous mode
[  178.379417][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.384551][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.388405][ T9201] bridge_slave_1: entered allmulticast mode
[  178.396318][ T9201] bridge_slave_1: entered promiscuous mode
[  178.455943][ T9201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.505968][ T9201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.622746][ T9201] team0: Port device team_slave_0 added
[  178.634671][ T9201] team0: Port device team_slave_1 added
[  178.676397][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.679407][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.691644][ T9201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.700222][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.702563][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.712455][ T9201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.756076][ T9201] hsr_slave_0: entered promiscuous mode
[  178.758405][ T9201] hsr_slave_1: entered promiscuous mode
[  178.761012][ T9201] debugfs: 'hsr0' already exists in 'hsr'
[  178.762924][ T9201] Cannot create hsr debugfs directory
[  178.875448][ T9201] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  178.889332][ T9201] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  178.930055][ T9201] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  178.941769][ T9201] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  179.019233][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.021794][ T9201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.025047][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.027758][ T9201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.080087][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.083298][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.095807][ T9253] netlink: 'syz.3.1344': attribute type 21 has an invalid length.
[  179.110742][ T9201] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.122924][ T9201] 8021q: adding VLAN 0 to HW filter on device team0
[  179.128774][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.131672][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.156141][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.159139][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.279241][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.502875][ T9201] veth0_vlan: entered promiscuous mode
[  179.516449][ T9201] veth1_vlan: entered promiscuous mode
[  179.549381][ T9201] veth0_macvtap: entered promiscuous mode
[  179.558008][ T9201] veth1_macvtap: entered promiscuous mode
[  179.629224][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.646175][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.655766][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.662131][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.686045][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'.
[  179.689506][ T9279] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  179.692534][ T9279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.727645][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.761897][ T5876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.809566][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.812269][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.837910][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.841450][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.085487][ T5870] Bluetooth: hci0: command tx timeout
[  180.431049][ T9300] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  180.699855][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1360'.
[  181.359961][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  182.115028][ T5870] Bluetooth: hci0: command tx timeout
[  182.160222][ T5870] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  184.108784][ T9354] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  184.111578][ T9360] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1384'.
[  184.127600][ T9354] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  184.194842][ T5870] Bluetooth: hci0: command tx timeout
[  184.212271][ T9364] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1385'.
[  184.376762][ T9372] xt_policy: neither incoming nor outgoing policy selected
[  184.939630][ T5870] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  185.082318][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'.
[  185.214585][ T9418] tun0: tun_chr_ioctl cmd 1074025675
[  185.218692][ T9418] tun0: persist enabled
[  185.223925][ T9418] tun0: tun_chr_ioctl cmd 1074025675
[  185.227271][ T9418] tun0: persist disabled
[  185.375865][ T9422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.535006][ T9430] ==================================================================
[  185.537885][ T9430] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  185.540425][ T9430] Read of size 4 at addr ffff8880344dc9c4 by task syz.3.1416/9430
[  185.543957][ T9430] 
[  185.544781][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.3.1416 Not tainted syzkaller #0 PREEMPT(full) 
[  185.544796][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.544803][ T9430] Call Trace:
[  185.544810][ T9430]  <TASK>
[  185.544817][ T9430]  dump_stack_lvl+0x189/0x250
[  185.544835][ T9430]  ? __kasan_check_byte+0x12/0x40
[  185.544843][ T9430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.544850][ T9430]  ? lock_release+0x4b/0x3e0
[  185.544860][ T9430]  ? __virt_addr_valid+0x4a5/0x5c0
[  185.544870][ T9430]  print_report+0xca/0x240
[  185.544877][ T9430]  ? xfrm_alloc_spi+0x570/0xf30
[  185.544883][ T9430]  kasan_report+0x118/0x150
[  185.544890][ T9430]  ? xfrm_alloc_spi+0x570/0xf30
[  185.544896][ T9430]  xfrm_alloc_spi+0x570/0xf30
[  185.544902][ T9430]  ? xfrm_alloc_spi+0x2a0/0xf30
[  185.544908][ T9430]  ? __local_bh_enable_ip+0x133/0x1c0
[  185.544915][ T9430]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  185.544921][ T9430]  ? xfrm_find_acq+0x87/0xa0
[  185.544931][ T9430]  pfkey_getspi+0x7a8/0xee0
[  185.544941][ T9430]  pfkey_sendmsg+0xbfe/0x1090
[  185.544950][ T9430]  ? trace_sched_exit_tp+0x36/0x110
[  185.544961][ T9430]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  185.544975][ T9430]  ? aa_sock_msg_perm+0xf1/0x1d0
[  185.544983][ T9430]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.544991][ T9430]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  185.544999][ T9430]  __sock_sendmsg+0x21c/0x270
[  185.545007][ T9430]  ____sys_sendmsg+0x505/0x830
[  185.545017][ T9430]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.545028][ T9430]  ? import_iovec+0x74/0xa0
[  185.545039][ T9430]  ___sys_sendmsg+0x21f/0x2a0
[  185.545047][ T9430]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.545061][ T9430]  ? __fget_files+0x2a/0x420
[  185.545067][ T9430]  ? __fget_files+0x3a0/0x420
[  185.545075][ T9430]  __x64_sys_sendmsg+0x19b/0x260
[  185.545083][ T9430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.545094][ T9430]  ? rcu_is_watching+0x15/0xb0
[  185.545102][ T9430]  ? do_syscall_64+0xbe/0x3b0
[  185.545111][ T9430]  do_syscall_64+0xfa/0x3b0
[  185.545118][ T9430]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.545125][ T9430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.545131][ T9430]  ? exc_page_fault+0x9f/0xf0
[  185.545139][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.545146][ T9430] RIP: 0033:0x7f2d08d8ec29
[  185.545153][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.545158][ T9430] RSP: 002b:00007f2d09c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.545167][ T9430] RAX: ffffffffffffffda RBX: 00007f2d08fd5fa0 RCX: 00007f2d08d8ec29
[  185.545171][ T9430] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  185.545176][ T9430] RBP: 00007f2d08e11e41 R08: 0000000000000000 R09: 0000000000000000
[  185.545180][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.545183][ T9430] R13: 00007f2d08fd6038 R14: 00007f2d08fd5fa0 R15: 00007ffd70988118
[  185.545190][ T9430]  </TASK>
[  185.545193][ T9430] 
[  185.649372][ T9430] Allocated by task 8092:
[  185.650755][ T9430]  kasan_save_track+0x3e/0x80
[  185.652295][ T9430]  __kasan_slab_alloc+0x6c/0x80
[  185.653879][ T9430]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  185.655889][ T9430]  xfrm_state_alloc+0x24/0x2f0
[  185.657430][ T9430]  __find_acq_core+0x8a7/0x1c00
[  185.659001][ T9430]  xfrm_find_acq+0x78/0xa0
[  185.660451][ T9430]  xfrm_alloc_userspi+0x6b3/0xc90
[  185.662075][ T9430]  xfrm_user_rcv_msg+0x7a3/0xab0
[  185.663665][ T9430]  netlink_rcv_skb+0x208/0x470
[  185.665205][ T9430]  xfrm_netlink_rcv+0x79/0x90
[  185.666807][ T9430]  netlink_unicast+0x82f/0x9e0
[  185.668564][ T9430]  netlink_sendmsg+0x805/0xb30
[  185.670153][ T9430]  __sock_sendmsg+0x21c/0x270
[  185.671722][ T9430]  ____sys_sendmsg+0x505/0x830
[  185.673520][ T9430]  ___sys_sendmsg+0x21f/0x2a0
[  185.675455][ T9430]  __x64_sys_sendmsg+0x19b/0x260
[  185.677486][ T9430]  do_syscall_64+0xfa/0x3b0
[  185.679128][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.681064][ T9430] 
[  185.681875][ T9430] Freed by task 5779:
[  185.683193][ T9430]  kasan_save_track+0x3e/0x80
[  185.684747][ T9430]  kasan_save_free_info+0x46/0x50
[  185.686432][ T9430]  __kasan_slab_free+0x5b/0x80
[  185.688002][ T9430]  kmem_cache_free+0x18f/0x400
[  185.689590][ T9430]  xfrm_state_gc_task+0x52d/0x6b0
[  185.691187][ T9430]  process_scheduled_works+0xae1/0x17b0
[  185.692997][ T9430]  worker_thread+0x8a0/0xda0
[  185.694522][ T9430]  kthread+0x711/0x8a0
[  185.696226][ T9430]  ret_from_fork+0x439/0x7d0
[  185.698000][ T9430]  ret_from_fork_asm+0x1a/0x30
[  185.699573][ T9430] 
[  185.700385][ T9430] The buggy address belongs to the object at ffff8880344dc900
[  185.700385][ T9430]  which belongs to the cache xfrm_state of size 928
[  185.704818][ T9430] The buggy address is located 196 bytes inside of
[  185.704818][ T9430]  freed 928-byte region [ffff8880344dc900, ffff8880344dcca0)
[  185.709260][ T9430] 
[  185.710065][ T9430] The buggy address belongs to the physical page:
[  185.712142][ T9430] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880344dc480 pfn:0x344dc
[  185.715769][ T9430] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  185.719199][ T9430] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  185.722306][ T9430] page_type: f5(slab)
[  185.723962][ T9430] raw: 00fff00000000040 ffff88801b351500 dead000000000122 0000000000000000
[  185.727169][ T9430] raw: ffff8880344dc480 00000000800e000a 00000000f5000000 0000000000000000
[  185.730680][ T9430] head: 00fff00000000040 ffff88801b351500 dead000000000122 0000000000000000
[  185.734216][ T9430] head: ffff8880344dc480 00000000800e000a 00000000f5000000 0000000000000000
[  185.737750][ T9430] head: 00fff00000000002 ffffea0000d13701 00000000ffffffff 00000000ffffffff
[  185.741304][ T9430] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  185.744798][ T9430] page dumped because: kasan: bad access detected
[  185.747423][ T9430] page_owner tracks the page as allocated
[  185.749470][ T9430] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6034, tgid 6033 (syz.2.56), ts 64937723731, free_ts 63898642002
[  185.755822][ T9430]  post_alloc_hook+0x240/0x2a0
[  185.757407][ T9430]  get_page_from_freelist+0x21e4/0x22c0
[  185.759217][ T9430]  __alloc_frozen_pages_noprof+0x181/0x370
[  185.761197][ T9430]  alloc_pages_mpol+0x232/0x4a0
[  185.762911][ T9430]  allocate_slab+0x8a/0x370
[  185.764415][ T9430]  ___slab_alloc+0xbeb/0x1420
[  185.765964][ T9430]  kmem_cache_alloc_noprof+0x283/0x3c0
[  185.767715][ T9430]  xfrm_state_alloc+0x24/0x2f0
[  185.769289][ T9430]  xfrm_add_acquire+0xf7/0xb20
[  185.770855][ T9430]  xfrm_user_rcv_msg+0x7a3/0xab0
[  185.772485][ T9430]  netlink_rcv_skb+0x208/0x470
[  185.774072][ T9430]  xfrm_netlink_rcv+0x79/0x90
[  185.775628][ T9430]  netlink_unicast+0x82f/0x9e0
[  185.777149][ T9430]  netlink_sendmsg+0x805/0xb30
[  185.778708][ T9430]  __sock_sendmsg+0x21c/0x270
[  185.780266][ T9430]  ____sys_sendmsg+0x505/0x830
[  185.781863][ T9430] page last free pid 5299 tgid 5299 stack trace:
[  185.783947][ T9430]  __free_frozen_pages+0xbc4/0xd30
[  185.785631][ T9430]  __put_partials+0x156/0x1a0
[  185.787317][ T9430]  put_cpu_partial+0x17c/0x250
[  185.788905][ T9430]  __slab_free+0x2d5/0x3c0
[  185.790404][ T9430]  qlist_free_all+0x97/0x140
[  185.791936][ T9430]  kasan_quarantine_reduce+0x148/0x160
[  185.793738][ T9430]  __kasan_slab_alloc+0x22/0x80
[  185.795333][ T9430]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  185.797083][ T9430]  getname_flags+0xb8/0x540
[  185.798607][ T9430]  vfs_fstatat+0x43/0x170
[  185.800062][ T9430]  __x64_sys_newfstatat+0x116/0x190
[  185.801773][ T9430]  do_syscall_64+0xfa/0x3b0
[  185.803264][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.805220][ T9430] 
[  185.806059][ T9430] Memory state around the buggy address:
[  185.808346][ T9430]  ffff8880344dc880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  185.811570][ T9430]  ffff8880344dc900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.814830][ T9430] >ffff8880344dc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.817990][ T9430]                                            ^
[  185.820042][ T9430]  ffff8880344dca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.822848][ T9430]  ffff8880344dca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.825534][ T9430] ==================================================================
[  185.828585][ T9430] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  185.831016][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.3.1416 Not tainted syzkaller #0 PREEMPT(full) 
[  185.834126][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.837780][ T9430] Call Trace:
[  185.838938][ T9430]  <TASK>
[  185.839936][ T9430]  dump_stack_lvl+0x99/0x250
[  185.841620][ T9430]  ? __asan_memcpy+0x40/0x70
[  185.843428][ T9430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.845611][ T9430]  ? __pfx__printk+0x10/0x10
[  185.847547][ T9430]  vpanic+0x281/0x750
[  185.849249][ T9430]  ? __pfx_vpanic+0x10/0x10
[  185.851197][ T9430]  ? irqentry_exit+0x74/0x90
[  185.853165][ T9430]  panic+0xb9/0xc0
[  185.854785][ T9430]  ? __pfx_panic+0x10/0x10
[  185.856716][ T9430]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  185.859170][ T9430]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  185.861679][ T9430]  ? xfrm_alloc_spi+0x570/0xf30
[  185.863812][ T9430]  check_panic_on_warn+0x89/0xb0
[  185.865901][ T9430]  ? xfrm_alloc_spi+0x570/0xf30
[  185.867988][ T9430]  end_report+0x78/0x160
[  185.869823][ T9430]  kasan_report+0x129/0x150
[  185.871775][ T9430]  ? xfrm_alloc_spi+0x570/0xf30
[  185.873852][ T9430]  xfrm_alloc_spi+0x570/0xf30
[  185.875879][ T9430]  ? xfrm_alloc_spi+0x2a0/0xf30
[  185.877988][ T9430]  ? __local_bh_enable_ip+0x133/0x1c0
[  185.880306][ T9430]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  185.882523][ T9430]  ? xfrm_find_acq+0x87/0xa0
[  185.884446][ T9430]  pfkey_getspi+0x7a8/0xee0
[  185.886429][ T9430]  pfkey_sendmsg+0xbfe/0x1090
[  185.888458][ T9430]  ? trace_sched_exit_tp+0x36/0x110
[  185.890708][ T9430]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  185.892914][ T9430]  ? aa_sock_msg_perm+0xf1/0x1d0
[  185.894948][ T9430]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.897216][ T9430]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  185.899431][ T9430]  __sock_sendmsg+0x21c/0x270
[  185.901484][ T9430]  ____sys_sendmsg+0x505/0x830
[  185.903590][ T9430]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.905859][ T9430]  ? import_iovec+0x74/0xa0
[  185.907851][ T9430]  ___sys_sendmsg+0x21f/0x2a0
[  185.909892][ T9430]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.912189][ T9430]  ? __fget_files+0x2a/0x420
[  185.914178][ T9430]  ? __fget_files+0x3a0/0x420
[  185.916211][ T9430]  __x64_sys_sendmsg+0x19b/0x260
[  185.918354][ T9430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.920686][ T9430]  ? rcu_is_watching+0x15/0xb0
[  185.922741][ T9430]  ? do_syscall_64+0xbe/0x3b0
[  185.924720][ T9430]  do_syscall_64+0xfa/0x3b0
[  185.926698][ T9430]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.928948][ T9430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.931552][ T9430]  ? exc_page_fault+0x9f/0xf0
[  185.933600][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.936096][ T9430] RIP: 0033:0x7f2d08d8ec29
[  185.938020][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.945995][ T9430] RSP: 002b:00007f2d09c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.949621][ T9430] RAX: ffffffffffffffda RBX: 00007f2d08fd5fa0 RCX: 00007f2d08d8ec29
[  185.953007][ T9430] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  185.956412][ T9430] RBP: 00007f2d08e11e41 R08: 0000000000000000 R09: 0000000000000000
[  185.959778][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.963124][ T9430] R13: 00007f2d08fd6038 R14: 00007f2d08fd5fa0 R15: 00007ffd70988118
[  185.966511][ T9430]  </TASK>
[  185.968602][ T9430] Kernel Offset: disabled
[  185.970486][ T9430] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:55:39  Registers:
info registers vcpu 0

CPU#0
RAX=d4dc3ef106505a00 RBX=ffffffff819695f8 RCX=d4dc3ef106505a00 RDX=0000000000000001
RSI=ffffffff8d9bad57 RDI=ffffffff8be34480 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3b430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7af3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33823ffc CR3=00000000283e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0953da7498 00007f0953da7470 XMM03=00007f0953da74a8 00007f0953da74a0
XMM04=00007f095490d100 00007f0953da7460 XMM05=00007f0953da7478 00007f0953da74c0
XMM06=00007f0953da74b8 00007f0953da74b0 XMM07=00007f0953da74a8 00007f0953da74a0
XMM08=0000000000000000 00007f0953c12f0f XMM09=0000000000000000 00007f0953c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000ef2 RDI=0000000000000ef3 RBP=00000000000003f8 RSP=ffffc90002aeeeb0
R8 =ffff888107a58237 R9 =1ffff11020f4b046 R10=dffffc0000000000 R11=ffffffff85503bc0
R12=dffffc0000000000 R13=ffffffff99b03903 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff85503c3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2d09c5c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0954a77fc8 CR3=0000000110ce0000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2d08fa7498 00007f2d08fa7470 XMM03=00007f2d08fa74a8 00007f2d08fa74a0
XMM04=00007f2d09b0d100 00007f2d08fa7460 XMM05=00007f2d08fa7478 00007f2d08fa74c0
XMM06=00007f2d08fa74b8 00007f2d08fa74b0 XMM07=00007f2d08fa74a8 00007f2d08fa74a0
XMM08=0000000000000000 00007f2d08e12f0f XMM09=0000000000000000 00007f2d08e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
