last executing test programs:

1m7.3137824s ago: executing program 2 (id=3):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x2412, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000040)=0x8000000000000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, 0x0, 0x4010)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0xc084)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x8040)

1m7.068303411s ago: executing program 1 (id=2):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200000000000000000000000061c0ce40ab886527000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000020000000403"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200000000000000000000000061c0ce40ab886527000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000020000000403"], 0xfc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1000000}]}}}]}]}], {0x14}}, 0x74}}, 0x600c0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001004000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa00000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c040000000000f607"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m6.990349318s ago: executing program 1 (id=5):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)

1m6.879788759s ago: executing program 1 (id=6):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a97, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e23, 0x8000, 0x4e23, 0x1, 0xa, 0x30, 0x100, 0x32}, {@in6=@local, 0x4d2, 0x3c}, @in=@local, {0xff, 0x2c1f, 0x5846, 0x5, 0x4ed, 0x209, 0xffffffffffffffff}, {0x10001, 0x7, 0x1, 0x4}, {0x0, 0x80000000, 0xffffffff}, 0x70bd2c, 0x3506, 0xa, 0x4, 0x0, 0x53}}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4000140)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\tdOJ', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))

1m6.50997324s ago: executing program 1 (id=10):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x58, &(0x7f0000000340)=""/222}, 0x21)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r0)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xc5, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)

1m6.290786505s ago: executing program 2 (id=11):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x51, 0x303}}], 0x18}, 0x241)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000003d00000000000000000015850000002900000085"], 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4088, 0xff8}, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000294ab3aba6f4353fc611e83f41000000000000000000000a5c000000060a010400000000000000000200ffff300004802c0001800b00010065787468647200001c0002800500020007000000080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000001100"], 0x84}}, 0x0)

1m5.531120623s ago: executing program 1 (id=15):
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x0, 0x400, 0x6, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x42f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x12070, 0x9, 0x4, 0x9, 0x0, 0x2, 0xfffc, 0x0, 0x5, 0x0, 0x64}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x90}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000013c0)="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", 0x1f5}, {&(0x7f0000000a40)="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", 0x240}], 0x2}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1m5.454054291s ago: executing program 32 (id=15):
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x0, 0x400, 0x6, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x42f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x12070, 0x9, 0x4, 0x9, 0x0, 0x2, 0xfffc, 0x0, 0x5, 0x0, 0x64}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x90}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000013c0)="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", 0x1f5}, {&(0x7f0000000a40)="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", 0x240}], 0x2}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1m4.331639909s ago: executing program 2 (id=21):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188041f56ecdb4cb9cca7480ef4320f000000ba80010000005a8c3774fa0af3dc59a933c1efa6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f100000000000000000000c3d263cf65f1a8877fad7c4ab03f86", 0x67}], 0x1}, 0x20000000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)}, {&(0x7f0000000440)=""/202, 0xca}], 0x3, &(0x7f0000000340)=""/144, 0x90}, 0x2002)

1m4.212458161s ago: executing program 33 (id=21):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188041f56ecdb4cb9cca7480ef4320f000000ba80010000005a8c3774fa0af3dc59a933c1efa6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f100000000000000000000c3d263cf65f1a8877fad7c4ab03f86", 0x67}], 0x1}, 0x20000000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)}, {&(0x7f0000000440)=""/202, 0xca}], 0x3, &(0x7f0000000340)=""/144, 0x90}, 0x2002)

1.500209929s ago: executing program 3 (id=626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81}, 0x20) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)

1.49863054s ago: executing program 3 (id=627):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x200, 0x18}, 0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x60d22884}}, @struct={0x7, 0x2, 0x0, 0x4, 0x1, 0x9, [{0xf, 0x3, 0x1}, {0x6, 0x3, 0x7cc}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @func={0x5, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x2e, 0x5f, 0x30, 0x2e]}}, &(0x7f0000001180)=""/4096, 0x8f, 0x1000}, 0x28)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002240), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000002280), &(0x7f00000022c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002340)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002380)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x17, 0x6, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x2}], &(0x7f0000000080)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x20, r1, 0x8, &(0x7f00000021c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002200)={0x1, 0x1, 0x8aff, 0xffffffa3}, 0x10, 0x0, r2, 0x6, &(0x7f0000002400)=[0x1, r3, 0x1, r4, r5], &(0x7f0000002440)=[{0x0, 0x4, 0xd, 0x5}, {0x1, 0x1, 0x2}, {0x5, 0x4, 0xc}, {0x2, 0x1, 0x4, 0x9}, {0x5, 0x1, 0x8, 0x6}, {0x1, 0x3, 0x4, 0x1}], 0x10, 0x1}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000002580)={<r7=>r2})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002640)={r0, 0x58, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)={0x1b, 0x0, 0x0, 0xddc, 0x0, 0x1, 0x6, '\x00', r8, r2, 0x3, 0x4}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a80)={r1, 0x20, &(0x7f0000002a40)={&(0x7f0000002880)=""/207, 0xcf, <r10=>0x0, &(0x7f0000002980)=""/190, 0xbe}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x8, 0x5, &(0x7f0000002700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x1, 0x3, 0x7, 0x8, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xfff}], &(0x7f0000002740)='syzkaller\x00', 0x8, 0x67, &(0x7f0000002780)=""/103, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x6, r2, 0x8, &(0x7f0000002800)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002840)={0x3, 0x1, 0x5, 0x2}, 0x10, r10, r2, 0x0, 0x0, 0x0, 0x10, 0x1800}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b80)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000002bc0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002c00)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002cc0)={{r0, <r14=>0xffffffffffffffff}, &(0x7f0000002c40), &(0x7f0000002c80)=r6}, 0x20)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f00)={0x6, 0xc, &(0x7f0000002d00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000002d80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', r8, 0x25, r1, 0x8, &(0x7f0000002dc0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002e00)={0x5, 0xf, 0xfffffff7, 0x22}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[r3, r9, r2, r0, r15, 0x1], 0x0, 0x10, 0x9}, 0x94)
sendmsg$unix(r2, &(0x7f0000003480)={&(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003040)="46bd8ee3697aed86cb6299cc852771844a3d932636c3262645dfde736222571cc29bcba5117b6c3b2283d7f0fa870028f834ab49b566786d06547f5f9aaff249e1e5d9e72767f4c9bee50ed6e03f5228acfb54763455859a256d455646f313a4ad2b54210c28f9ab3372e4ec6725c0ab3b01e779b30515f3d05a6747d7121ba7bc124c7beb59c472db3823fb5305e75489bc7ed7145479bb4adde355f66d0bc37fbaabee32b448127dba0e32a4688d4bd33518a02023590964f6d3280bbf", 0xbe}, {&(0x7f0000003100)="278af4ed30bf585a91a7db8ca565c7183cbf9262e71735171291200d9e3833ab7334ec40482da9a1b5ba5f20235f91c1a20e9082055416aed10f86ae8c178762df2a27c87026fb87bd2e3360e49e8677ead3916ed2ed69c861dc3a4a7911d7135d663484374480addcf77f209cb8ef191d17fa4a509e37ec88ac2de4950ba6ebc2c1e14583b74c504e864800f0e45016be0e43190cdf27f1b036eb13d7c2b6bac3", 0xa1}, {&(0x7f00000031c0)="b8a1bfd1a58eb2b6f5eceb910ed4eb39f4610a8f17d863630f0b4b2010c15fdda30f565af2b893910555b28112f7c71b12c8b546fbb54b151d4ac94377fccd9240a237eaa593a1fe57c810157a85334e6cc6fcc9775360d4288015803fa208db085ff62950a3c2067572dfd452f267059230aded9ceadf22b7a9a8127f5963a4fcccaa498a32a5374744955ac268814d0f3ac8deb11fe1a1465c1b543bf39d2b72900125028faa7cab85f0cda1d65210", 0xb0}, {&(0x7f0000003280)="b8649e1b1ea6409d658c4f9faa94", 0xe}, {&(0x7f00000032c0)="80", 0x1}, {&(0x7f0000003300)="dc33b0073f4dc67a3c9dd7e50a32162a1c4f884ca63725fa6e2b087946bd7719d2650eb9cb4b4556d84e2ac563d089aa79af2b0ea5a277bd0792ab8a8b7cbc12845b0cf44deacd4cd6dfe69faf19f0d50d11af865db4e667a630838d6708d2eb64370480cb5a76c6561015aada525242834e37985afa1e2f0fdb869b55d1968a6845f6c597ed302317dbc7a42ffbd99512fb753c699c925c4817fa6eae63bb8595d4bc1767b9560ef0fb2f5190977bd5221d2ff121cdddc0c9040ce511983ee4090b326490566eb81eb816882de02912420ac35005b19b369521b882ece4c34a2e9230516ddb13c1857bf4f7f8", 0xed}], 0x6, 0x0, 0x0, 0x1}, 0x4840)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000034c0)='${}\x00')
sendmsg$key(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003500)={0x2, 0x15, 0x2, 0x7, 0x28, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x1, 0x4}, @sadb_x_sec_ctx={0x13, 0x18, 0x2, 0x9, 0x8d, "841155d687bd52a7124612c7ca91e0f4ccd8c696f91d4756210a2428812ad59e42e8e9e8f0887f4b079b5dad5b2fd24ea9615ee8ae5b55a2bc1ccfdf80db53203ed6390007fd92eb2fd64db9eccb43126ff376b71b207ca4459bbb3110dcc823790abe9c56b27eec108b3f62e1692b80d83388c3ae536d14579638d8db2bbb6aa18cbd799d4a6fc5efab810a9a"}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2b, 0x3501}, @sadb_address={0x3, 0x7, 0x33, 0x40, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @loopback, 0x200}, @in={0x2, 0x4e22, @empty}}]}, 0x140}}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000036c0))
r16 = gettid()
fstat(r13, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, <r17=>0x0})
fstat(r5, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
r19 = syz_clone(0x2000400, &(0x7f0000003a40)="7bd52461a9865ffb90757b82ceab4dd4e19ee536c1b1671e96c58ba94728a51701499f30436cc679d622dd83f118dabe31dcdd087507bb77fe91094a409b4de9a244c45ad2db1c1fd8b95d336b8764283382d1fbee8b4185b4cf722dbd033a2ab6a1fc80514880d6f4d70e9352782cc706c659b6886feab09f8e3dac4f63a27d060aa4102b4410437f776092545490583a401c54", 0x94, &(0x7f0000003b00), &(0x7f0000003b40), &(0x7f0000003b80)="b4f139c1003d97bb984f38c7d3c83d4781debabaa1e44fc5be32650171836ca9d17544c6c2c2bf7154b05de7ecaea3c91a799daae6bdd33597cbb8936c4d8430e0e5eba3f79867f18cb14556893006355daf4927809a9afbf608aa1811723faceea155b4bf9a4b757897605d1fd701afe5b114953444c85f897de296792be39dbc855a33e341cbd93bb86a04f1abd750319d77aa5ddcdb70583e5dee2b5dd078a0685aca2913fd38ef114f5e9047cd5c")
fstat(r11, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
sendmsg$netlink(r7, &(0x7f0000003d40)={&(0x7f0000003700)=@kern={0x10, 0x0, 0x0, 0x808001}, 0xc, &(0x7f0000003900)=[{&(0x7f0000003740)={0x1a4, 0x24, 0x300, 0x70bd29, 0x25dfdbfe, "", [@typed={0x14, 0xec, 0x0, 0x0, @ipv6=@remote}, @generic="2d0cb94547e87f665bbe63fda8c9246bed9c90112fa140e1676af54137bf4b1be6ef0b705327f30fbf02f2b2d46fcc392cc5f6702731b8e8a7af48a305039d3366b1397f0087b8d4b7432ced7ab1d0384507bf", @nested={0x12c, 0x111, 0x0, 0x1, [@typed={0x4, 0x79, 0x0, 0x0, @binary}, @generic="a409bceda1f23be7e03236b6de1a95f2a8e2263d804c1f915d5a652815cb1a68c441a968078b19c7271e7ac377c538c56dd0142effcc546e0e8bc0b044bc0bfd22", @generic="c25ad54d1ba30781f436265ea26dc6490b8f6b962353c6a18e80355913975032282f9945ede2be9f3534a1e0f307", @typed={0x8, 0xea, 0x0, 0x0, @ipv4=@multicast2}, @generic="dfb1ef539ac60947ab5a5c652fb5543341be43a1ef6d71d85a0598bb29cc4ea22e30d808e6a7c6ff5a5625533e3b46f170174f9b3709261111163f266e072de1aa532ef1a1aa31c8ff8d5b977d3f35e9e6de4dd9644cf4e45e371479fb8a2b443d9dde6b52a353b72cdc933a64c5dff21196c55c108422f73c5404c1931eea845b54e37a1358d0a15f0be37d880738609b6be9a8f29d1650147c4d400042ffb6df", @generic="0cda59176d0f3cd6fb31cecd"]}]}, 0x1a4}], 0x1, &(0x7f0000003cc0)=[@rights={{0x18, 0x1, 0x1, [r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee01, r20}}}], 0x58, 0x80}, 0x100)
syz_open_procfs$namespace(0x0, &(0x7f0000003d80)='ns/mnt\x00')

1.428063827s ago: executing program 3 (id=628):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000000050000a2aaca6c4cb37e06427fdf0a50000000060a010400000000000000000a0000060900010073797a31000000001c000480180001800e000100696d6d656469617465000000040002800900020073797a320000000005000740f2000000140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
r4 = getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, r3, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, r3, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
recvmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x103)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) (async)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x80ffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r7, 0x400454cc, 0x6) (async)
ioctl$TUNSETLINK(r7, 0x400454cc, 0x6)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fcb010018c223704f4c8abe040000000c150000020000000000000000000004000800000000"], 0x0, 0x26, 0x0, 0x1}, 0x20)

1.317046337s ago: executing program 4 (id=629):
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xa, &(0x7f0000000100), 0x4)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x8000) (async)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getpid() (async)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
close(r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x11, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000009df5839300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000009df5839300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8}, 0x4)

1.187468334s ago: executing program 4 (id=630):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0xfdef)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x3a7349cc646ed62f, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x44)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0xff}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x17c}}, 0x0)

708.086507ms ago: executing program 0 (id=635):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a1000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000100000000000000000e4c5f68bf3dfeda967fd4d9d1a41afdb189670c7f4c38f7032e57d0723e2df0fee173d1dc11788aa934cc99f69f64ca85bc83dc46d592a6fec8ae4b1f2db74cc7e4408e2e7c484976e357db159cb327c62aa512b80758bd0718966f833677257743b0591c4c516d6f13db6f745f44e427e3dd2cb4b96d71284c4e1e1cf7f542a9eba7e804526e874"], 0x50) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x20}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
close(r2) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x8}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400200, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018430000080000000000000000000000185500000b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b702000000000000850000b99cbf2f05018143942b689cc604000084000000b7"], &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0xce, &(0x7f0000000580)=""/206, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x7, 0x64, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x1, 0x6}, {0x5, 0x4, 0x7, 0xa}], 0x10, 0x8001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0x1000, 0x41, &(0x7f0000001640)="6ad343e3fd32b6d4e90aeb8c778128b9887b56ae7d4d5915fbd248b1dc658440355d368e27943fca7613302814552d7e40696de74531b0e5079c5d2d2cd26ebf6f845e69fc199e9896c6896b881f8c97cbd66c907c5520442d6bf13f38238f08f47ed29ff4f521b95fbf1bafda74611e382de1527a06e2cddcf0a107538ca5411517b26a14d349d4f070cf29e1bdd489b14c8d9e0540a2bc107344c4b0f55d89485bd10e19d2fdf613c8e3b6ea9b8a461360a8116213eefa39eaad6d3fc767add5c78ef7e7b5b06ba8d340641b9b8224624a36936758fde6ef63e5b96670fccdbbc2acc42114e7631ee5a146c40d168fd5f50d4257b42dda9e84b07fec46f79890450dd6c656a207ac0d3c2cdfa7af119b7fb1013b1109354d61adf1f246869b3385253930b77f5f007423f0c6e4f80760b97016d7ead9f71780cb801cdc9f9698bd8e140573eedc45bb6ad8eceab0d774869aaa0522ace303e495593b5a0e28712a2514eb0e2a2e85e6dfa86ad580c0b213edda96a0ed01f8ccffc37ead85d5aa1a777d4bde1f2dbbd7479121942c5b7be066ee13a1f3bcff6f304825d5e9c530d21bc5f493daaf81629fdbeaac10a2f859aa386291a1cf6b6c7eb1713dae05e25a2f680c969858195bb497d7e36e7c6ffe6f34f93d9d4738e638356d65eb000d31707d4f37207fb0a4b5f3263b3fe931a66b59e96950fb4bfe548c89bb2f82771498f1ce500b5c15b09ff8bc23fb92852301f6a5461c3f7f9d83414b718bbbbc6da9cbb4b0cd00db171f7adbe91e474cf1989dfde33a35ef600b716b9e4b3fcbd8bd95b1451a11860a5ed027d1b7d5a68b0238cffc0fccb23981e0d793411baab76997dcbbf696eeef700ddb641397a3c8d8a26144232501ce98bb0eee15b61de8a2146fd56b641528f51419ab2cc53e1702bdaefbc427c91905746490549cdfd94a6308b239898388dbb868b26cb49b9c63981a15d7071b72a2d7ff7ab50521caf99f2d844a008f861c5826d25be632c3acaa6fef637448bb6207237d2484932269840842118eb807101af341ee9d4d9bd076bef1f430f2f46865e884c4874403b4842be76064c42eb43f27140243e32026fa04bc4b4546c31ddebf24d1d059131be8ac55b2c512bf029edcce96ee05f2001124b197bc64c1d185ead7b6da0af8b5b9b2e447581b90a6cf7f822d2134d91a1549de1fb99637894a171f6a471bb461c88e7203bbdaef66608886a4dc9a5cb9a5a9e6f143f79be0635362ff471dc901085ae1a4239a24be5ea006f575708efe79ff49cc82e5e0a912f1b842c483cd2c08319dd809e233f1f15e1567c8227a845086b4953c6e18e1171276dadddfc1b14ea645435deefa1a0cac803a67180ea58f3f1b8643cd8e4a9a05aca80601aa40f8888e1c1f4c904c849c50d89f65f9107c25fbfe10fde85035efdc061f6f6961c50999a1759392d05312f926bce0ef3b1716cdb6cbd142e0257cd519e59d128832909d1465a0fb5af5c22ea040cfc9481426499deaac4bf56f03c8cea420767050494430486019b4f7c029c1e78175529f2203e09257701c308baf04a535cccae965553a35693630466d13b1ef6b1caa060eabb183595d30b1d21442604a44286d5676e7cd5b1615bc4d72a94c38b567ffec95169383a6952afdeb45c14d2d23b0bf195b538d44b1d1e4a88ee94f8505fb04406a8b426414c984a030127f8c11610b7c4b832cde26bd7c260d7ea5b7641393c96b442b86b628fbc2365850bb231565aa809b6cc2a263463271e61e0368eff44cb5e5385104b014f0ecb879af5d192f5f858198d9a0b8e75b91a2bcd2017cdbe1a1bce73669cfcec7fe4887d98e699b61cd4552ed9a06f8d8bc4ca84abcf722f4125d2003037e73e6b23362384d505637d755f1bc65e9b0f2651b3ff1ec2e413d75233dc97f9d7b85b105eb36fa7e868367a4c10baf44448df2e7c55cc7cfa5b19a81f88715ef6a3ee40a038605565cc171c3435bfc0d7f690348534b564c1fee334b8e2c9c0093034db445ee6e1ae334ee32232a7515ac2a0c799b68426d8edfd2f18b178ec9f04ef0aa9db14d946d08fc447ba9c59d50297dcb6e3932ba47fdc0421f0c427a1f7c6d2a47a7c0bff437ed0569eae4562ff138a6e64f34225f322d667c15d5941c89f6f5b34a0c998ccd5598192a4263c57cb80f32fe00e3cdc49cf39a7af1b32ec23971646d21a8c11e3f8fb70242164f082e17572d69ce8422a49ad49c88a0b2a0debdf6e94245853e145eed6d879fce4c86182d73b5734c5547d53e41f155c6b711d485a1b6f6c7e3b208b50d1d9196a24192f4264d114b3d4e39e6a1312c195d738ffa4d8f586cba163b7c537cd71e0b7fb3d44b9b2ba0f9ab1d0e39caffd54e0d23bec39b9f914f36946443245d2a54ebce29978d911dc3c645a2405a01c4b1cf42466651a8c2c9143c27bb5dfcdca13d5cc647b75c401f8b55a1ab5b97b1928ac71097a689312eca1b5935c88fedc9c8a5dfafa6ad540bca70abff14e24274b386d40afff43bba85baaa2de6b93daa72467bb84610daf65898fc2ef4c703f68f389c445f0b601848c8d2c0376dd93c40df28c880b4722c636b156e2b3ed986617fd27a42ce7905bd105d77ffcfd32487fcc15fd936923b234daff21e9c90bb0400c88a8ce4d2d1d7dfafdffad9b1575acda7861d92d768a09a3e1fddeb5894ebc96b838fe9721883a02781a72a04d6a91bd9b745b14c7e17373e80d1efbdd03ee1ec219cf162784f9dd973227bf23a6a4c14aaf1dddd0773745de3e0a0e2db5ad704241613148568875151849e8fb799959e0d36f6595d4a0dc33cabc83bc0ac40e3cc9e141db1e2ceb09db9db00b4dbdd1266e3c57764795947f5355c933a7d0e934ec98ae1433dee9b2114c10c4fee4eee17778dd30eab11d139f7d7072e540ff7c94db419d63ad342c1cb44f180c2fe71cfffa609205b67d4143b57e947668886e98775eb5f32cc55fac45a30112c48ce079ca100a66b3a26320b1c58c91a3a47cdf96503e8d33d77f156e31949cb37fec86e5aa96ec5715aa092289ceac8bf3bc92fdeb017f8589c81362df387ab42f6d551140b16b3573caf225acbe393a0051cfccaef60dd05a4c61fa03b44e96c54a295e847aa4d8edfcbc9e833030fefeecba1b9c0901029827b757642246d4ffd5235615162be4e29827d9dfc024793e22e65a2b17098c7603f13c9d3ba74808c7ef73f0ec9cef0077a9d8e290ed899a0ad067515aef8de9c6c5260b17f09a7a621dfe64ea888df2ef623d972dc9235b53fc03a56e84ad3cd2f36d378448a1b57af268dd3a42bdc7f9d597dd77b48d295185830d5d33cb59c9da42820b2ed46382d97dc80b6d0decc6adc07cee3970152cdfbd85c866016680ceb48c7ca1096f38dded35c5c80cf6b6cb95adaa881677b5dd4ce72f1369732910e6c65ddc9f187bc7da10b14820dc6c7c00fb355067ebd39a3ca19c92711cf3c7ef57f52e055ffde538f0513ad8cf8c263af5b4044b1f7e18767ba1e8afc6dd9a47a408dd1b7760b5d7921612a4e486066ce0b2dedd9d28d3ca87ad403e6d0d1ac8273a61e204b27dfb221c8a7d747322fd19a119c60a128705ab75e67a76429f68fc9945bec44928ae37c892356c27c0c353c0b560ecbbc35f46cb630d931b294b2900b713143eb361997a1f50d0f79f7719324856ee7f6c3443eb573dc7a39795a32b2585a3879ded0944e2c84aad2fa38629ec0809502b7781fbda46bffe02be956bd328618ca5acee70797324f5fe3f2761bda075f4141f7aa9730c39137b0aada9ca7f3367b04ddefce590bac6de9f8b3cc6550db0f3169003de1d7088b21f021e09dd5855adba37185044d43db59d7bf998d2723f9445777d950257e4ea67df92778437a653b30d68090e49d00024064094c0c80a5e90e901ab9c7d07e8d5a55b770e4ae23a248bf2e2c4095f22b77660746233d48f2ce13fece4b9e67d26b16837ef0033711b80405ec46722d122993d98449b8e54b4b738cb2a5d137f34f59aa5a5460011e86572a04595caf5091b5d79f545fa98ee78a2f69564d2342ca2c08a412ecdf35d20e0da67b5717c8a3680a4cf9083eeef37e8d2dc8f0fd32acb76c4666a275e90520a89dd26123ba9dc6e9f2e7c5d804b1b631db656186325c37013731b786ce149cd674b060ebb48826226f3c0b8fabd9b12b83f5a951960aaaa0129e7e72ecb120d01bad41e592f0d3b8e1efa281323729d19b6c5a2f2420a1cf3081b401cca1b3f7a9bc9137a880267a8ef4a14e34ad210d17c376ab6c671d2efad4c9fe47f4231227808f918e41af5c352d1e52eebb12e63ffc7d14e8abca465d460290d7f8e2c18bc60e01172eac5b3575d18a9eccd78e02591f17a752b66591fa54155e6dad9ddbfa053805fe7d47832de29da9995b5a10d52a0932c437d3f8ea7b3e5bb0b03107b0887df5dddbc869463b5d39ed3075b50aa44da79137c3f7908b92226b7da1e3ef45fc336eb80e7a1223d76955bb5082ce85f6d54aa8381a35d2fcf29b52ac3eebde58f7c680bd6f1e277bca0dca10b2eee9d946e63b7e7da8b5e95f3f27deaf2ec7a489f9a86b21a8a036eb0b6fc43c1b8e6ccfe9ad063ff9bafd4f1a3fc104eacc3e219b3c7bd790c2f6f97739e4ba3af342e2831dcd6dc56fa52c237c7a19c4315fa32033837fd6e4fa68473105ea300bb181af214c31bb87f9f65f40163482d7d6eba745576d803f47e74ed133e70915b47f1055249eafdb0cba754c67739f5922580c5b037211a03d24ef876665ac7993925bb5ed2b325184e668c7889aa6c8568098cc7ef735326e0d6fae7f7da5185ae90c6159b96c7d4c163ef21cbb2838b6763b6bbb0daf75d6de95f72f47b527384b8c181262db13415ec080c0aade7ed5888a21478c79de60e47ccbbb028c0e212224cf24cf5cfe5d4dd81a708b0906b17daff0877885e7a4ddddcc55a69f2cfa504165eed2c41d893c0bb40c979e3e480a95d29fed04d2beae064b1a276670ff9a599c73ad8e16910b964dad941b26a8cb08a68d0979551a7edd4fff70c215c7694ec14622fe48d0ac88184db32b169ea15568023cd43cba312031dc838eb1fbf68d7775d822820ce89b467aef7841be35a58be4183ffe0fbadc82642ae94ac689763b56d83b10e7324701afe7f43d07d442b8eb1b49853f3ff84f078417bbb0014bde29c4fac60966ef303a468ba62f89956796cf8bf61c19edcdf476db3fdf092da1fcb661c5d4438b33d32a4ded2d37c9d39c404478bddab91b9196d4e8b09abf5e1a3208b7391094aed26c8b0904fefeed386b0aba374a7d4dcf7b3056ae43b473e7170318090f5a7fb044ec9c5f69084fdf00f59b87def85c36db1c951493b2cdecd4c001c45a01b28a0606be68c61b160c92d40ae19fd5a6009b7df56c8f06872335bf62b45aa6bbfe2e38669ec012b9e3efc23433db1b4c55684198e5874f5ba7fcf6d18cd470e236c64fcdd39632094e059b187c83217f01b5e3bb23415372f8aa87e52a3337579c285c49eee7bdfaba2cbc35782f644cebdff2a5bfb7f58feaa7a3437b9f800f838a5beea75846a24caa0341ae57382217435b402640deb90646aa98b09166544093d0fd98ec6430130e579fe9c3cbf2987fa3e08088edb6fecf91c95e26a241b5375e2a6848663d55506476c4a9bf142b7884e6f2106058a7a4e857d0763c9a09f7b3e6cce9ae7080978ddaf69e078ac7656b25e8eb821bb2bb1436f9485fb807155af21d9eb4fa5a66b3", &(0x7f0000000780)=""/65, 0x8, 0x0, 0xe1, 0x27, &(0x7f0000000800)="8d9540e569903157bab9463109a22f721b808effa91c63409226fb629e5a32b7df26018ba70c4c703f8f28e4f3a78aa27a5aef49acceb57f92208b099c374f672d33a6b6dd1b2d2412d1cf141cdb8c862ce8e07c72ffa163088236c75f3d23b23ca8041cb8758ce20048b1ff17f59047151ff8ccbee35d749bd15c92123c57e434cfbb7b6f2d102a499eb31290841a75cbcbc3d24544b9538d14ca7f2ade97870e27ba084e1f3ed130c57ad98cbdabb4c241d9d24854d1085775a9c6cdf30f2cb42790014f166eddb3d9f95ab71fb46f8877f627329a0471bd433111e43793f0f9", &(0x7f0000000900)="e15c621d82d1dab41452985cb1bf1e5bf734d111b363f04fdbfd0a8ddcfdcf2c621ded317af0f9", 0x1, 0x0, 0x3}, 0x50) (async, rerun: 64)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0) (rerun: 64)
write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x9a) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10}, 0x94) (async)
socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4a, 0x1, 0x14, 0x0, 0x0, 0x0, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
write$cgroup_subtree(r7, &(0x7f0000000b00)={[{0x2b, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'rdma'}, {0x2d, 'memory'}]}, 0x27) (async, rerun: 32)
socket$kcm(0x15, 0x5, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

650.087901ms ago: executing program 0 (id=636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fdffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa0000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

649.022456ms ago: executing program 0 (id=637):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fc, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @enum64={0xa, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x5, 0xad31, 0x5b}, {0xb, 0xfffffffe, 0x2}, {0xf, 0x8, 0x466}, {0x10, 0x8, 0x1}]}]}, {0x0, [0x6f, 0x5f]}}, &(0x7f00000000c0)=""/226, 0x64, 0xe2, 0x0, 0x9}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400)=0xffffffffffffffff, 0x11)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

648.195077ms ago: executing program 0 (id=638):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880811fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

579.790232ms ago: executing program 0 (id=639):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1fffffe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000340)}, 0x0, 0xffffffffffffffff, 0xd66, 0x4, 0xfffffffffffffff8, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffc}, 0x0, 0xffffffffffffffff, r2, 0x0)
r5 = socket$kcm(0x10, 0x7, 0x10)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
recvmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000030000000000000000000000185e000006000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000370000007b8af0ff00000000bfa000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000be822f0292ecd7aac9756fc63fa566c93f6d0a4763c3e5764c2cb953ad6f6da45829742c1873afaae53990cf7e2eec9832bbae79b32e68c96d5f6c3f77d67969f1a03ac2c56d9e6d95ac287a7a5307c5d3e7c81197cf4b130b06ec489b7e7f6cac6f66abd4d8", @ANYRES32=r1, @ANYRES16=r6, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000fbffffff18120000", @ANYRES64=<r10=>0xffffffffffffffff, @ANYRES64=r0], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000800005d0c4dac0000000000000000006f1579a996798eb9b160e1cf12d92d8a742bd0c3aa617941eb8a752f0305d8e5aa204457ea", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe94}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYRES16=r10], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x4, 0x1, 0x3, 0x3, 0x0, 0x5, 0xbb48, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfc9, 0x3}, 0x102, 0x7, 0x4, 0x9, 0x40, 0x9, 0xb2, 0x0, 0xdfe1, 0x0, 0x8}, 0x0, 0xb, r4, 0x9)
r12 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001)

578.194665ms ago: executing program 3 (id=640):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000255d2ff57ad3b42fe751d04adbb69b49ccc31afb0cc354fe26274260d1741f45bf148203dc6774b7cd85daa0c4e1fee0f9bd4c6296"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0xd}, 0x94)

520.439856ms ago: executing program 3 (id=641):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x29}, 0x94)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x52, &(0x7f00000001c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)

519.769646ms ago: executing program 3 (id=642):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b2266"], 0xfdef)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000040)=0x8000000000000000)
r6 = syz_clone(0x900c4200, &(0x7f0000000300)="b84c68bae5d4fba68ebe3acc9bdf8196f4f944842b7566be194f998702d7acb7a55764869c80473c1643f7cb7bf26a548e4a96b561", 0x35, &(0x7f0000000340), &(0x7f0000000800), &(0x7f0000000840)="cd5b4c645416d6c507324131aab9e0c715d458d8631d81c56566d4dbc80a30c284e0a2a5")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r6, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000880)='-^\x00'}, 0x30)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000690005"], 0xfe33)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=""/227, 0x7f, 0xe3, 0x1, 0xffffffff}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x56}, @generic={0x74, 0x7, 0xc, 0xf574, 0xe10f}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0x5, 0x0, 0x2, 0x8, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xfffffff5, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r5, r5, r5, r5, r5], &(0x7f00000005c0)=[{0x1, 0x3, 0x6, 0x4}, {0x2, 0x3, 0xa}], 0x10, 0x7}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x226140, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')

390.04203ms ago: executing program 0 (id=643):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x30, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0xd, 0x1, 0x1, 0x6}, @generic={0x0, 0xa, 0x1, 0x101, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xc5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3eea3ae0fd9b70e}}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1}, 0x100)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

307.731979ms ago: executing program 4 (id=644):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008080)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11ec8, 0x4, 0x4, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)

150.797643ms ago: executing program 4 (id=645):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
r1 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64)
close(r1) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000010006b906fdfe1ef704ad931c6058707000000007ea60864160af3650400120038004000000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d02806ee4509000000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64)
perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x7, 0x4, 0x0, 0x0, 0x5, 0x19041, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0eb, 0x3, @perf_config_ext={0xc, 0x6}, 0x0, 0x5, 0x5, 0x9, 0x2, 0x2, 0x4, 0x0, 0x3, 0x0, 0x9}, r2, 0xf, r0, 0x9) (async)
ioctl$SIOCSIFHWADDR(r2, 0xc0045878, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x5)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b5af8ff00000000bfa2000000000000b704000001000000850000001400000018010000696c6c2500000000002020207b1af8fd00000000bfa10000007b9e1934db9ca292ffffffb702000008000000b7030000000a000085000000060000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, &(0x7f0000000000)="1f93cc5d0fb993f259053ded995b6b8ad1432736897f6b06d61a910560e1c006e2f08c1cb17aec6a", &(0x7f0000000140)=""/144, 0x4}, 0x20)

97.123994ms ago: executing program 4 (id=646):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069114a00000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1, <r5=>0xffffffffffffffff}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x0, 0x8, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480), 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x20, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x899}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbe}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000340)='GPL\x00', 0x101, 0x0, &(0x7f0000000380), 0x40f00, 0x28, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r5, r6, r7, r8], &(0x7f0000000500)=[{0x5, 0x5, 0x6}, {0x5, 0x1}, {0x2, 0x5, 0xd, 0x5}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0x200}, 0x94) (async)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
sendmsg(r9, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001f80)="f277", 0x2}], 0x1}, 0x80) (async)
setsockopt$sock_attach_bpf(r9, 0x6, 0xd, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x20008050)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
close(0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r10 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r10, 0xb704, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r11, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

0s ago: executing program 4 (id=647):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a000000050001000600000014000780080006402000000008000840", @ANYRESOCT=r3], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="b452abc2b477f74822000000000000dd0a0000000000006301a400000000009500000000000000822e2b917a62528dea8ffcfeaca59e167470b7ba0ad3248aa4c2b79c0eec3372a8583b1b000e1c8cc38082a30000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
fstat(r5, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r6, &(0x7f00000011c0))
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000880), 0x200020, &(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=r7, @ANYRESDEC=r7, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYRES16=r4])
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27541' (ED25519) to the list of known hosts.
syzkaller login: [   48.154714][ T5834] cgroup: Unknown subsys name 'net'
[   48.248999][ T5834] cgroup: Unknown subsys name 'cpuset'
[   48.252858][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.701116][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.006189][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.010129][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.012953][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.016289][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.020300][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.023729][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.027988][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.031863][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.035363][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.060306][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.089285][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.093103][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.097970][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.102432][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.107288][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.389189][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   54.461716][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.489372][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   54.563137][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.566359][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.569342][ T5845] bridge_slave_0: entered allmulticast mode
[   54.572861][ T5845] bridge_slave_0: entered promiscuous mode
[   54.590201][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.592943][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.596279][ T5845] bridge_slave_1: entered allmulticast mode
[   54.599287][ T5845] bridge_slave_1: entered promiscuous mode
[   54.655662][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.658495][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.660937][ T5854] bridge_slave_0: entered allmulticast mode
[   54.663685][ T5854] bridge_slave_0: entered promiscuous mode
[   54.668680][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.671048][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.673403][ T5854] bridge_slave_1: entered allmulticast mode
[   54.676501][ T5854] bridge_slave_1: entered promiscuous mode
[   54.679123][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.681501][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.683875][ T5849] bridge_slave_0: entered allmulticast mode
[   54.687514][ T5849] bridge_slave_0: entered promiscuous mode
[   54.693033][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.698304][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.714843][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.717605][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.719851][ T5849] bridge_slave_1: entered allmulticast mode
[   54.722815][ T5849] bridge_slave_1: entered promiscuous mode
[   54.752928][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.766396][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.771665][ T5845] team0: Port device team_slave_0 added
[   54.806767][ T5845] team0: Port device team_slave_1 added
[   54.811227][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.825307][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.830612][ T5854] team0: Port device team_slave_0 added
[   54.852063][ T5854] team0: Port device team_slave_1 added
[   54.854705][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.857529][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.866985][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.907572][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.910484][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.921538][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.931887][ T5849] team0: Port device team_slave_0 added
[   54.935433][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.939507][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.948878][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.956366][ T5849] team0: Port device team_slave_1 added
[   54.959475][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.962104][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.971275][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.023116][ T5845] hsr_slave_0: entered promiscuous mode
[   55.026676][ T5845] hsr_slave_1: entered promiscuous mode
[   55.030773][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.033661][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.046788][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.053012][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.056570][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.067951][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.099176][ T5854] hsr_slave_0: entered promiscuous mode
[   55.101800][ T5854] hsr_slave_1: entered promiscuous mode
[   55.103979][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   55.106996][ T5854] Cannot create hsr debugfs directory
[   55.202820][ T5849] hsr_slave_0: entered promiscuous mode
[   55.205405][ T5849] hsr_slave_1: entered promiscuous mode
[   55.208143][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   55.210201][ T5849] Cannot create hsr debugfs directory
[   55.421973][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.441887][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.457229][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.472762][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.493412][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.498083][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.505898][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.519780][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.574315][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.586808][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.593288][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.612200][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.687942][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.693868][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.722746][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   55.730816][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.742515][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.744865][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.759622][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.762596][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.767717][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.770599][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.782340][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.785305][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.813985][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.831891][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.850434][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.853495][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.865238][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.877519][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.880505][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.043140][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.090866][ T5854] veth0_vlan: entered promiscuous mode
[   56.096163][ T5852] Bluetooth: hci1: command tx timeout
[   56.096287][ T5847] Bluetooth: hci0: command tx timeout
[   56.100652][ T5854] veth1_vlan: entered promiscuous mode
[   56.127008][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.143597][ T5854] veth0_macvtap: entered promiscuous mode
[   56.151836][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.156278][ T5854] veth1_macvtap: entered promiscuous mode
[   56.176121][ T5847] Bluetooth: hci2: command tx timeout
[   56.185416][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.204250][ T5845] veth0_vlan: entered promiscuous mode
[   56.208639][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.223076][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.227664][ T5845] veth1_vlan: entered promiscuous mode
[   56.231103][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.240204][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.246647][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.271881][ T5849] veth0_vlan: entered promiscuous mode
[   56.285493][ T5849] veth1_vlan: entered promiscuous mode
[   56.302321][ T5845] veth0_macvtap: entered promiscuous mode
[   56.324384][ T5845] veth1_macvtap: entered promiscuous mode
[   56.341850][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.344657][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.349777][ T5849] veth0_macvtap: entered promiscuous mode
[   56.365834][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.369004][ T5849] veth1_macvtap: entered promiscuous mode
[   56.377336][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.380770][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.383087][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.402495][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.409019][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.421772][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.430717][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.438700][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.442271][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.451544][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.469497][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.495427][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.501682][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.518597][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.539924][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.542436][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.591149][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.597624][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.611671][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.614223][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.668014][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.670699][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.783010][ T5923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5'.
[   56.790940][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   56.801194][ T5923] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   56.815000][ T5924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5'.
[   56.821041][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   56.905379][ T5929] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7'.
[   56.919949][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'.
[   57.102496][ T5934] netlink: 'syz.0.9': attribute type 21 has an invalid length.
[   57.108386][ T5934] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9'.
[   57.112654][ T5934] netlink: 'syz.0.9': attribute type 4 has an invalid length.
[   57.116863][ T5934] netlink: 'syz.0.9': attribute type 5 has an invalid length.
[   57.120415][ T5934] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9'.
[   58.176338][ T5847] Bluetooth: hci0: command tx timeout
[   58.460308][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.463533][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.466725][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.469913][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.472886][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.527418][ T5909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.797072][ T5968] chnl_net:caif_netlink_parms(): no params data found
[   59.032229][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.034924][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.037796][ T5968] bridge_slave_0: entered allmulticast mode
[   59.040690][ T5968] bridge_slave_0: entered promiscuous mode
[   59.044116][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.046923][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.049266][ T5968] bridge_slave_1: entered allmulticast mode
[   59.051899][ T5968] bridge_slave_1: entered promiscuous mode
[   59.074462][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.079495][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.101749][ T5968] team0: Port device team_slave_0 added
[   59.104842][ T5968] team0: Port device team_slave_1 added
[   59.207819][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.210367][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.219657][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.227431][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.229662][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.247266][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.568657][ T5909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.658745][ T5968] hsr_slave_0: entered promiscuous mode
[   59.661613][ T5968] hsr_slave_1: entered promiscuous mode
[   59.666290][ T5968] debugfs: 'hsr0' already exists in 'hsr'
[   59.668526][ T5968] Cannot create hsr debugfs directory
[   59.795382][ T5909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.802723][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.806041][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.809605][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.813166][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.820239][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.941914][ T5909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.257358][ T5852] Bluetooth: hci0: command tx timeout
[   60.328655][ T5986] chnl_net:caif_netlink_parms(): no params data found
[   60.391213][ T5968] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   60.445004][ T5968] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   60.496165][ T5852] Bluetooth: hci1: command tx timeout
[   60.558931][ T5968] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   60.668033][ T5968] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   60.699747][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.703490][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.715691][ T5986] bridge_slave_0: entered allmulticast mode
[   60.718703][ T5986] bridge_slave_0: entered promiscuous mode
[   60.721686][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.724128][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.726569][ T5986] bridge_slave_1: entered allmulticast mode
[   60.729480][ T5986] bridge_slave_1: entered promiscuous mode
[   60.732170][ T5909] bridge_slave_1: left allmulticast mode
[   60.734578][ T5909] bridge_slave_1: left promiscuous mode
[   60.753798][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.779662][ T5909] bridge_slave_0: left allmulticast mode
[   60.781553][ T5909] bridge_slave_0: left promiscuous mode
[   60.799286][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.921882][ T5958] syz.0.14 (5958) used greatest stack depth: 17512 bytes left
[   61.020512][ T6008] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET)
[   61.108363][ T5956] syz.0.14 (5956) used greatest stack depth: 16872 bytes left
[   61.222947][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.233422][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.240397][ T5909] bond0 (unregistering): Released all slaves
[   61.364849][ T5960] syz.0.14 (5960) used greatest stack depth: 16744 bytes left
[   61.368041][ T5999] netlink: 'syz.0.24': attribute type 12 has an invalid length.
[   61.371716][ T5999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'.
[   61.414042][ T6007] syz.0.24 (6007) used obsolete PPPIOCDETACH ioctl
[   61.488251][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.494672][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.533051][ T5986] team0: Port device team_slave_0 added
[   61.539033][ T5986] team0: Port device team_slave_1 added
[   61.567973][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.570278][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.579711][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.625191][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.629336][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.641201][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.664472][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.667872][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.671267][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.673707][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.707669][ T5909] hsr_slave_0: left promiscuous mode
[   61.710515][ T5909] hsr_slave_1: left promiscuous mode
[   61.712833][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.715398][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.722906][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.725444][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.734336][ T5909] veth1_macvtap: left promiscuous mode
[   61.738157][ T5909] veth0_macvtap: left promiscuous mode
[   61.740381][ T5909] veth1_vlan: left promiscuous mode
[   61.742559][ T5909] veth0_vlan: left promiscuous mode
[   61.856309][ T5852] Bluetooth: hci2: command tx timeout
[   61.908892][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'.
[   62.082223][ T6044] netlink: 124 bytes leftover after parsing attributes in process `syz.0.27'.
[   62.135061][ T6045] netlink: 'syz.0.27': attribute type 10 has an invalid length.
[   62.284752][ T5909] team0 (unregistering): Port device team_slave_1 removed
[   62.299998][ T5909] team0 (unregistering): Port device team_slave_0 removed
[   62.335763][ T5852] Bluetooth: hci0: command tx timeout
[   62.467288][ T5986] hsr_slave_0: entered promiscuous mode
[   62.469714][ T5986] hsr_slave_1: entered promiscuous mode
[   62.472116][ T5986] debugfs: 'hsr0' already exists in 'hsr'
[   62.474076][ T5986] Cannot create hsr debugfs directory
[   62.477453][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'.
[   62.482342][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.486373][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.494166][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.496665][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.499388][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.501848][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.518350][ T6045] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   62.577124][ T5852] Bluetooth: hci1: command tx timeout
[   62.667247][ T6053] netlink: 'syz.0.28': attribute type 21 has an invalid length.
[   62.683779][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.698662][ T6053] netlink: 156 bytes leftover after parsing attributes in process `syz.0.28'.
[   62.713270][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[   62.733808][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.736300][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.750498][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.752980][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.890636][ T5909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.911068][ T5986] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.931136][ T5986] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.983267][ T5909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.997577][ T5986] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.013606][ T5986] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.050839][ T6076] syzkaller0: entered promiscuous mode
[   63.053082][ T6076] syzkaller0: entered allmulticast mode
[   63.075129][ T5909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.097745][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.725188][ T5909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.800557][ T5968] veth0_vlan: entered promiscuous mode
[   63.812445][ T5968] veth1_vlan: entered promiscuous mode
[   63.832178][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.850231][ T5968] veth0_macvtap: entered promiscuous mode
[   63.861070][ T6092] netlink: 'syz.0.33': attribute type 21 has an invalid length.
[   63.870533][ T5986] 8021q: adding VLAN 0 to HW filter on device team0
[   63.876335][ T6092] netlink: 164 bytes leftover after parsing attributes in process `syz.0.33'.
[   63.883041][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.885336][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.889225][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.891524][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.894699][ T5968] veth1_macvtap: entered promiscuous mode
[   63.905883][ T6092] veth1_macvtap: left promiscuous mode
[   63.908855][ T6092] macsec0: entered allmulticast mode
[   63.926736][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.937900][ T5852] Bluetooth: hci2: command tx timeout
[   63.973693][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.987881][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.996706][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.999763][ T5909] bridge_slave_1: left allmulticast mode
[   64.002111][ T5909] bridge_slave_1: left promiscuous mode
[   64.004176][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.014061][ T6101] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   64.021508][ T5909] bridge_slave_0: left allmulticast mode
[   64.024318][ T5909] bridge_slave_0: left promiscuous mode
[   64.027288][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.110927][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   64.333169][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.341245][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.347920][ T5909] bond0 (unregistering): Released all slaves
[   64.364867][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.368293][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.461361][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.464134][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.491331][  T505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.495239][  T505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.548908][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.612996][ T5909] hsr_slave_0: left promiscuous mode
[   64.616538][ T5909] hsr_slave_1: left promiscuous mode
[   64.620946][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.628128][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.633853][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.641607][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.655723][ T5852] Bluetooth: hci1: command tx timeout
[   64.662556][ T5909] veth1_macvtap: left promiscuous mode
[   64.665082][ T5909] veth0_macvtap: left promiscuous mode
[   64.667120][ T5909] veth1_vlan: left promiscuous mode
[   64.669002][ T5909] veth0_vlan: left promiscuous mode
[   64.869645][ T5909] team0 (unregistering): Port device team_slave_1 removed
[   64.885772][ T5909] team0 (unregistering): Port device team_slave_0 removed
[   65.091616][ T6124] netlink: 56 bytes leftover after parsing attributes in process `syz.3.38'.
[   65.100531][ T6124] netlink: 56 bytes leftover after parsing attributes in process `syz.3.38'.
[   65.103865][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.3.38'.
[   65.112756][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.3.38'.
[   65.213382][ T5986] veth0_vlan: entered promiscuous mode
[   65.220777][ T5986] veth1_vlan: entered promiscuous mode
[   65.339745][ T5986] veth0_macvtap: entered promiscuous mode
[   65.350631][ T5986] veth1_macvtap: entered promiscuous mode
[   65.374159][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.400061][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.434402][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.453530][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.471981][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.482084][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.589899][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.593318][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.625435][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.631458][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.782098][ T6163] Zero length message leads to an empty skb
[   66.022360][ T5852] Bluetooth: hci2: command tx timeout
[   66.034710][ T6180] _Z`Ԁ@S!!: entered promiscuous mode
[   66.047195][ T6180] netlink: 'syz.0.44': attribute type 2 has an invalid length.
[   66.049735][ T6180] netlink: 'syz.0.44': attribute type 8 has an invalid length.
[   66.065554][    C0] hrtimer: interrupt took 17304 ns
[   66.167235][ T6182] netlink: 'syz.0.44': attribute type 9 has an invalid length.
[   66.605101][ T6224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.727522][ T6235] netlink: 'syz.0.54': attribute type 4 has an invalid length.
[   66.738082][ T5852] Bluetooth: hci1: command tx timeout
[   67.414418][ T6281] __nla_validate_parse: 6 callbacks suppressed
[   67.414427][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'.
[   67.631101][ T6297] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.61'.
[   67.631102][ T6292] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.61'.
[   67.690273][ T6292] netlink: 'syz.3.61': attribute type 4 has an invalid length.
[   67.698112][ T6304] netlink: 'syz.0.63': attribute type 10 has an invalid length.
[   67.702573][ T6304] veth1_vlan: entered allmulticast mode
[   67.810027][ T6309] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   67.884270][ T6312] netlink: 'syz.4.65': attribute type 29 has an invalid length.
[   67.892585][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.65'.
[   67.895929][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'.
[   67.938277][ T6323] netlink: 176 bytes leftover after parsing attributes in process `syz.0.67'.
[   68.015531][ T6331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.70'.
[   68.096235][ T5852] Bluetooth: hci2: command tx timeout
[   68.162556][ T6335] wg0 speed is unknown, defaulting to 1000
[   68.168691][ T6335] wg0 speed is unknown, defaulting to 1000
[   68.196992][ T6335] wg0 speed is unknown, defaulting to 1000
[   68.197096][ T6347] netlink: 16042 bytes leftover after parsing attributes in process `syz.3.75'.
[   68.201581][ T6349] netlink: 16042 bytes leftover after parsing attributes in process `syz.3.75'.
[   68.286452][ T6355] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   68.287553][ T6335] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.289352][ T6355] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   68.324136][ T6355] xt_time: unknown flags 0xf4
[   68.355909][ T6357] netlink: 'syz.3.78': attribute type 3 has an invalid length.
[   68.427591][ T6335] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   68.716755][ T6373] netlink: 56 bytes leftover after parsing attributes in process `syz.3.82'.
[   68.754340][ T6375] netlink: 'syz.3.83': attribute type 31 has an invalid length.
[   68.760205][ T6376] netlink: 'syz.3.83': attribute type 1 has an invalid length.
[   68.787278][ T6335] wg0 speed is unknown, defaulting to 1000
[   68.872526][ T6335] wg0 speed is unknown, defaulting to 1000
[   68.897086][ T6335] wg0 speed is unknown, defaulting to 1000
[   68.946106][ T6381] netlink: 'syz.4.85': attribute type 12 has an invalid length.
[   69.050396][ T6384] siw: device registration error -23
[   69.788035][ T6410] netlink: 'syz.0.93': attribute type 25 has an invalid length.
[   69.872613][ T6423] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   70.729515][ T6435] netlink: 'syz.3.100': attribute type 3 has an invalid length.
[   71.139327][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.141917][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.532642][ T5852] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[   72.468524][ T6506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.501258][ T6506] =======================================================
[   72.501258][ T6506] WARNING: The mand mount option has been deprecated and
[   72.501258][ T6506]          and is ignored by this kernel. Remove the mand
[   72.501258][ T6506]          option from the mount to silence this warning.
[   72.501258][ T6506] =======================================================
[   72.594396][ T6513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.892199][ T6520] warning: `syz.4.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.930752][ T6526] __nla_validate_parse: 18 callbacks suppressed
[   72.930762][ T6526] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.127'.
[   73.253337][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'.
[   73.512156][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'.
[   74.064703][ T6576] : renamed from pim6reg1
[   74.183773][    T9] cfg80211: failed to load regulatory.db
[   74.263358][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[   74.413408][ T6591] sctp: [Deprecated]: syz.0.148 (pid 6591) Use of int in maxseg socket option.
[   74.413408][ T6591] Use struct sctp_assoc_value instead
[   74.661363][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   74.696916][ T6601] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   75.004388][ T6612] validate_nla: 2 callbacks suppressed
[   75.004398][ T6612] netlink: 'syz.3.154': attribute type 1 has an invalid length.
[   75.004715][ T6613] netlink: 'syz.3.154': attribute type 1 has an invalid length.
[   75.013083][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'.
[   75.021332][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'.
[   75.128961][ T6618] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.155'.
[   75.132739][ T6618] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   75.238570][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'.
[   75.880069][ T6631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.160'.
[   75.905627][ T5852] Bluetooth: hci2: ISO packet for unknown connection handle 2096
[   75.983588][ T6638] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   76.914769][ T6657] netlink: 'syz.3.169': attribute type 7 has an invalid length.
[   77.967095][ T6672] netlink: 'syz.0.173': attribute type 10 has an invalid length.
[   78.007899][ T6672] team0: Device ipvlan1 failed to register rx_handler
[   78.068627][ T6683] __nla_validate_parse: 1 callbacks suppressed
[   78.068636][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'.
[   78.260572][ T6694] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.180'.
[   78.264073][ T6694] netlink: 5 bytes leftover after parsing attributes in process `syz.0.180'.
[   78.357676][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'.
[   78.624210][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'.
[   78.637767][ T6731] netlink: 356 bytes leftover after parsing attributes in process `syz.3.194'.
[   78.782720][ T6741] netlink: 'syz.0.199': attribute type 10 has an invalid length.
[   78.785270][ T6741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.199'.
[   78.789953][ T6741] vcan0: entered promiscuous mode
[   78.794061][ T6741] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   78.832373][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.195'.
[   79.263821][ T6771] TCP: TCP_TX_DELAY enabled
[   79.266485][ T6771] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.206'.
[   79.269609][ T6771] openvswitch: netlink: Message has 6 unknown bytes.
[   79.428338][ T6779] wg0 speed is unknown, defaulting to 1000
[   80.121954][ T6805] netlink: 26903 bytes leftover after parsing attributes in process `syz.3.218'.
[   80.579389][ T6821] netlink: 'syz.0.222': attribute type 11 has an invalid length.
[   80.645438][ T6827] delete_channel: no stack
[   80.933891][ T6849] netlink: 'syz.3.229': attribute type 21 has an invalid length.
[   80.937422][ T6849] netlink: 'syz.3.229': attribute type 4 has an invalid length.
[   81.082300][ T6851] netlink: 'syz.0.231': attribute type 32 has an invalid length.
[   81.738108][ T6885] wg0 speed is unknown, defaulting to 1000
[   82.200685][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.203779][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.209290][ T6902] bridge0: entered allmulticast mode
[   82.223385][ T6902] bridge_slave_1: left allmulticast mode
[   82.226789][ T6902] bridge_slave_1: left promiscuous mode
[   82.229808][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.236721][ T6902] bridge_slave_0: left allmulticast mode
[   82.239024][ T6902] bridge_slave_0: left promiscuous mode
[   82.241672][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.527177][ T6906] netlink: 'syz.3.249': attribute type 2 has an invalid length.
[   82.534736][ T6906] netlink: 'syz.3.249': attribute type 2 has an invalid length.
[   83.160138][ T6936] netlink: 'syz.0.257': attribute type 29 has an invalid length.
[   83.165400][ T6936] netlink: 'syz.0.257': attribute type 29 has an invalid length.
[   83.171607][ T6936] netlink: 'syz.0.257': attribute type 29 has an invalid length.
[   83.174767][ T6936] netlink: 'syz.0.257': attribute type 29 has an invalid length.
[   83.664461][ T6955] __nla_validate_parse: 9 callbacks suppressed
[   83.664471][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   83.680663][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   83.690923][ T6955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.262'.
[   83.699793][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'.
[   83.737267][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'.
[   83.740590][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'.
[   84.138492][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'.
[   84.164242][ T7001] netlink: 164 bytes leftover after parsing attributes in process `syz.0.273'.
[   84.180995][ T7001] netlink: 164 bytes leftover after parsing attributes in process `syz.0.273'.
[   84.481156][ T7011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.277'.
[   84.484362][ T7011] bridge_slave_0: entered allmulticast mode
[   84.810117][ T7023] : renamed from vlan0 (while UP)
[   85.026611][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.029766][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.045072][ T7028] bridge0: entered allmulticast mode
[   85.097867][ T7028] bridge_slave_1: left allmulticast mode
[   85.099903][ T7028] bridge_slave_1: left promiscuous mode
[   85.116097][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.131054][ T7028] bridge_slave_0: left allmulticast mode
[   85.143811][ T7028] bridge_slave_0: left promiscuous mode
[   85.146787][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.182023][ T7047] bridge_slave_0: entered promiscuous mode
[   86.184505][ T7047] bridge_slave_0: entered allmulticast mode
[   86.207653][ T7050] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   86.353697][ T7053] wg0 speed is unknown, defaulting to 1000
[   86.531703][ T7068] validate_nla: 4 callbacks suppressed
[   86.531712][ T7068] netlink: 'syz.3.296': attribute type 29 has an invalid length.
[   86.539922][ T7068] netlink: 'syz.3.296': attribute type 29 has an invalid length.
[   86.542769][ T7068] netlink: 'syz.3.296': attribute type 29 has an invalid length.
[   86.546597][ T7068] netlink: 'syz.3.296': attribute type 29 has an invalid length.
[   87.553133][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.558856][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.562625][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.565058][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.597420][ T7083] netlink: 'syz.0.302': attribute type 10 has an invalid length.
[   87.760535][ T7090] cgroup: Unknown subsys name 'uid'
[   87.939298][ T7104] netlink: 'syz.4.307': attribute type 10 has an invalid length.
[   88.077348][ T7113] netlink: 'syz.0.311': attribute type 10 has an invalid length.
[   88.651571][ T7134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.655127][ T7134] IPv6: NLM_F_CREATE should be set when creating new route
[   88.658225][ T7134] IPv6: NLM_F_CREATE should be set when creating new route
[   88.798798][ T7143] __nla_validate_parse: 19 callbacks suppressed
[   88.798813][ T7143] netlink: 7986 bytes leftover after parsing attributes in process `syz.3.319'.
[   88.806362][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'.
[   88.890805][ T7145] netlink: 763 bytes leftover after parsing attributes in process `syz.0.320'.
[   89.863597][ T7158] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   89.882996][ T7160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.324'.
[   89.897833][ T7160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.324'.
[   89.908317][ T7158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.323'.
[   89.916443][ T7160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.324'.
[   91.721331][ T7176] netlink: 'syz.0.327': attribute type 10 has an invalid length.
[   91.885302][ T7182] netlink: 9 bytes leftover after parsing attributes in process `syz.4.329'.
[   92.323799][ T7176] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.348666][ T7186] netlink: 1 bytes leftover after parsing attributes in process `syz.4.330'.
[   92.384577][ T7186] netlink: 104 bytes leftover after parsing attributes in process `syz.4.330'.
[   92.634408][ T7209] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   94.469434][ T7239] __nla_validate_parse: 5 callbacks suppressed
[   94.469458][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.346'.
[   94.480322][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.346'.
[   94.535347][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'.
[   94.718134][ T7262] svc: failed to register nfsdv3 RPC service (errno 111).
[   94.721585][ T7262] svc: failed to register nfsaclv3 RPC service (errno 111).
[   94.987266][ T7267] C: renamed from team_slave_0 (while UP)
[   94.992106][ T7267] netlink: 'syz.0.355': attribute type 3 has an invalid length.
[   94.994608][ T7267] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   95.000959][ T7267] netlink: 116 bytes leftover after parsing attributes in process `syz.0.355'.
[   95.004775][ T7267] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   95.089537][ T7270] netlink: 'syz.0.357': attribute type 49 has an invalid length.
[   95.485784][ T7277] netlink: 'syz.4.359': attribute type 2 has an invalid length.
[   95.489137][ T7277] netlink: 'syz.4.359': attribute type 1 has an invalid length.
[   95.633648][ T7287] netlink: 51 bytes leftover after parsing attributes in process `syz.4.363'.
[   96.079649][ T7294] xt_time: unknown flags 0xf4
[   96.248854][ T7304] netlink: 'syz.0.369': attribute type 2 has an invalid length.
[   96.252321][ T7304] netlink: 'syz.0.369': attribute type 4 has an invalid length.
[   96.255426][ T7304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.369'.
[   96.262130][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'.
[   96.266146][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'.
[   96.269969][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'.
[   96.638313][ T7328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.374'.
[   97.254188][ T7330] _Z`Ԁ@S: entered promiscuous mode
[   97.297426][ T7333] netlink: 'syz.4.376': attribute type 21 has an invalid length.
[   97.484244][ T7354] openvswitch: netlink: IPv4 tun info is not correct
[   97.806500][ T7361] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.815827][ T7361] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.857237][ T7364] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.192366][ T7373] netlink: 'syz.3.387': attribute type 11 has an invalid length.
[   98.654786][ T7375] netlink: 'syz.0.388': attribute type 39 has an invalid length.
[   98.953488][ T7371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.353924][ T7394] netlink: 'syz.4.395': attribute type 29 has an invalid length.
[   99.359682][ T7394] netlink: 'syz.4.395': attribute type 10 has an invalid length.
[   99.390893][ T7394] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.399117][ T7394] team0: Port device bond0 added
[  100.030197][ T7409] __nla_validate_parse: 10 callbacks suppressed
[  100.030208][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'.
[  100.035340][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'.
[  100.056274][ T7409] netlink: 33 bytes leftover after parsing attributes in process `syz.0.399'.
[  100.065187][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'.
[  100.072682][ T7409] netlink: 33 bytes leftover after parsing attributes in process `syz.0.399'.
[  100.416466][ T7419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.402'.
[  100.671518][ T7434] netlink: 'syz.0.406': attribute type 11 has an invalid length.
[  100.979434][ T7441] netlink: 'syz.3.408': attribute type 1 has an invalid length.
[  100.982567][ T7441] netlink: 'syz.3.408': attribute type 3 has an invalid length.
[  100.986658][ T7441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.408'.
[  100.991026][ T7441] netlink: 'syz.3.408': attribute type 5 has an invalid length.
[  100.994240][ T7441] netlink: 176 bytes leftover after parsing attributes in process `syz.3.408'.
[  101.047427][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.067197][ T7448] netlink: 4756 bytes leftover after parsing attributes in process `syz.3.410'.
[  101.218868][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'.
[  101.317249][ T7453] netlink: 'syz.4.412': attribute type 10 has an invalid length.
[  101.326092][ T7453] team0: entered promiscuous mode
[  101.327911][ T7453] team_slave_0: entered promiscuous mode
[  101.330296][ T7453] team_slave_1: entered promiscuous mode
[  101.332493][ T7453] bond0: entered promiscuous mode
[  101.358410][ T7453] bond_slave_0: entered promiscuous mode
[  101.361411][ T7453] bond_slave_1: entered promiscuous mode
[  101.371057][ T7453] team0: entered allmulticast mode
[  101.373305][ T7453] team_slave_0: entered allmulticast mode
[  101.377721][ T7453] team_slave_1: entered allmulticast mode
[  101.379836][ T7453] bond0: entered allmulticast mode
[  101.382214][ T7453] bond_slave_0: entered allmulticast mode
[  101.384332][ T7453] bond_slave_1: entered allmulticast mode
[  101.394055][ T7453] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  102.533568][ T7493] netlink: 'syz.3.425': attribute type 1 has an invalid length.
[  102.538051][ T7493] netlink: 'syz.3.425': attribute type 3 has an invalid length.
[  102.551041][ T7493] syz.3.425: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  102.558300][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(full) 
[  102.558316][ T7493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.558333][ T7493] Call Trace:
[  102.558339][ T7493]  <TASK>
[  102.558345][ T7493]  dump_stack_lvl+0x189/0x250
[  102.558369][ T7493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.558384][ T7493]  ? __pfx__printk+0x10/0x10
[  102.558402][ T7493]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.558419][ T7493]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.558436][ T7493]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  102.558454][ T7493]  warn_alloc+0x214/0x310
[  102.558468][ T7493]  ? stack_depot_save_flags+0x41b/0x860
[  102.558488][ T7493]  ? __pfx_warn_alloc+0x10/0x10
[  102.558502][ T7493]  ? kasan_save_track+0x4f/0x80
[  102.558518][ T7493]  ? xskq_create+0x56/0x170
[  102.558532][ T7493]  ? xsk_init_queue+0xb0/0x110
[  102.558545][ T7493]  ? xsk_setsockopt+0x57b/0x8d0
[  102.558558][ T7493]  ? do_sock_setsockopt+0x17c/0x1b0
[  102.558569][ T7493]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  102.558578][ T7493]  ? do_syscall_64+0xfa/0x3b0
[  102.558595][ T7493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.558614][ T7493]  __vmalloc_node_range_noprof+0x125/0x12f0
[  102.558710][ T7493]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  102.558733][ T7493]  ? xskq_create+0x56/0x170
[  102.558752][ T7493]  ? __kasan_kmalloc+0x93/0xb0
[  102.558775][ T7493]  vmalloc_user_noprof+0xad/0xf0
[  102.558794][ T7493]  ? xskq_create+0xbf/0x170
[  102.558810][ T7493]  xskq_create+0xbf/0x170
[  102.558830][ T7493]  xsk_init_queue+0xb0/0x110
[  102.558849][ T7493]  xsk_setsockopt+0x57b/0x8d0
[  102.558867][ T7493]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.558883][ T7493]  ? __pfx_aa_sk_perm+0x10/0x10
[  102.558904][ T7493]  ? __fget_files+0x2a/0x420
[  102.558914][ T7493]  ? aa_sock_opt_perm+0xff/0x1b0
[  102.558929][ T7493]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  102.558943][ T7493]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.558959][ T7493]  do_sock_setsockopt+0x17c/0x1b0
[  102.558976][ T7493]  __x64_sys_setsockopt+0x13f/0x1b0
[  102.558994][ T7493]  do_syscall_64+0xfa/0x3b0
[  102.559010][ T7493]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.559027][ T7493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.559040][ T7493]  ? exc_page_fault+0x9f/0xf0
[  102.559057][ T7493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.559069][ T7493] RIP: 0033:0x7f0546d8ebe9
[  102.559081][ T7493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.559090][ T7493] RSP: 002b:00007f0544ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.559103][ T7493] RAX: ffffffffffffffda RBX: 00007f0546fc5fa0 RCX: 00007f0546d8ebe9
[  102.559112][ T7493] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  102.559120][ T7493] RBP: 00007f0546e11e19 R08: 0000000000000004 R09: 0000000000000000
[  102.559127][ T7493] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  102.559135][ T7493] R13: 00007f0546fc6038 R14: 00007f0546fc5fa0 R15: 00007ffdc2c8ed08
[  102.559160][ T7493]  </TASK>
[  102.559277][ T7493] Mem-Info:
[  102.697240][ T7493] active_anon:15608 inactive_anon:0 isolated_anon:0
[  102.697240][ T7493]  active_file:9874 inactive_file:39320 isolated_file:0
[  102.697240][ T7493]  unevictable:1768 dirty:59 writeback:0
[  102.697240][ T7493]  slab_reclaimable:9917 slab_unreclaimable:53173
[  102.697240][ T7493]  mapped:17934 shmem:2469 pagetables:1147
[  102.697240][ T7493]  sec_pagetables:0 bounce:0
[  102.697240][ T7493]  kernel_misc_reclaimable:0
[  102.697240][ T7493]  free:273736 free_pcp:25244 free_cma:0
[  102.717243][ T7493] Node 0 active_anon:22024kB inactive_anon:0kB active_file:33400kB inactive_file:153048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49024kB dirty:152kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4720kB pagetables:2460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.730847][ T7493] Node 1 active_anon:40408kB inactive_anon:0kB active_file:6096kB inactive_file:4232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22712kB dirty:84kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6980kB pagetables:2128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.744562][ T7493] Node 0 DMA free:15004kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:300kB free_cma:0kB
[  102.756760][ T7493] lowmem_reserve[]: 0 811 811 811 811
[  102.759197][ T7493] Node 0 DMA32 free:180172kB boost:4096kB min:37756kB low:46168kB high:54580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22024kB inactive_anon:0kB active_file:33400kB inactive_file:153048kB unevictable:3536kB writepending:152kB present:1556484kB managed:830944kB mlocked:0kB bounce:0kB free_pcp:56880kB local_pcp:19152kB free_cma:0kB
[  102.772986][ T7493] lowmem_reserve[]: 0 0 0 0 0
[  102.775183][ T7493] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  102.787820][ T7493] lowmem_reserve[]: 0 0 854 854 854
[  102.790056][ T7493] Node 1 Normal free:441276kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40408kB inactive_anon:0kB active_file:6096kB inactive_file:4232kB unevictable:3536kB writepending:84kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43664kB local_pcp:18628kB free_cma:0kB
[  102.808765][ T7493] lowmem_reserve[]: 0 0 0 0 0
[  102.811074][ T7493] Node 0 DMA: 1*4kB (U) 1*8kB (U) 3*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15004kB
[  102.819749][ T7493] Node 0 DMA32: 3897*4kB (UME) 939*8kB (UME) 422*16kB (UM) 651*32kB (UM) 223*64kB (UME) 91*128kB (UME) 51*256kB (UME) 36*512kB (UM) 20*1024kB (U) 5*2048kB (U) 10*4096kB (UM) = 179772kB
[  102.844012][ T7493] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  102.851157][ T7493] Node 1 Normal: 163*4kB (UME) 230*8kB (UME) 626*16kB (UME) 328*32kB (UM) 256*64kB (UME) 92*128kB (UME) 69*256kB (UME) 41*512kB (UM) 38*1024kB (UME) 23*2048kB (UME) 64*4096kB (M) = 437980kB
[  102.859164][ T7493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.863151][ T7493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.867529][ T7493] 51668 total pagecache pages
[  102.869572][ T7493] 5 pages in swap cache
[  102.871384][ T7493] Free swap  = 124976kB
[  102.877174][ T7493] Total swap = 124996kB
[  102.879070][ T7493] 786301 pages RAM
[  102.880736][ T7493] 0 pages HighMem/MovableOnly
[  102.882826][ T7493] 241333 pages reserved
[  102.884704][ T7493] 0 pages cma reserved
[  105.507220][ T7536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.551042][ T7538] netlink: 'syz.4.436': attribute type 2 has an invalid length.
[  105.570696][ T7543] netlink: 'syz.3.438': attribute type 37 has an invalid length.
[  105.802129][ T7552] __nla_validate_parse: 37 callbacks suppressed
[  105.802139][ T7552] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.440'.
[  105.857273][ T7541] netlink: 'syz.0.437': attribute type 10 has an invalid length.
[  106.331484][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.492938][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'.
[  106.529558][ T7586] delete_channel: no stack
[  106.549512][ T7588] netlink: 144 bytes leftover after parsing attributes in process `syz.0.451'.
[  106.771698][ T7602] netlink: 'syz.0.455': attribute type 210 has an invalid length.
[  106.978069][ T7608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.994372][ T7613] netlink: 'syz.4.456': attribute type 1 has an invalid length.
[  107.013917][ T7613] netlink: 17 bytes leftover after parsing attributes in process `syz.4.456'.
[  107.265008][ T7616] C: renamed from team_slave_0 (while UP)
[  107.274508][ T7616] netlink: 'syz.3.461': attribute type 3 has an invalid length.
[  107.279842][ T7616] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  107.494161][ T5852] Bluetooth: hci1: ISO packet for unknown connection handle 3087
[  108.194957][ T7644] : entered promiscuous mode
[  108.269822][ T7645] netlink: 'syz.4.468': attribute type 10 has an invalid length.
[  108.404850][ T7645] geneve0: entered promiscuous mode
[  108.447903][ T7645] geneve0: entered allmulticast mode
[  108.453018][ T7645] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  108.711671][ T7672] netlink: 'syz.4.476': attribute type 10 has an invalid length.
[  109.738299][ T7683] netlink: 'syz.3.478': attribute type 4 has an invalid length.
[  109.787271][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'.
[  109.803289][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[  110.084607][ T7698] netlink: 'syz.3.483': attribute type 2 has an invalid length.
[  110.132930][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.148595][ T7701] netlink: 104 bytes leftover after parsing attributes in process `syz.3.483'.
[  110.152674][ T7701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.483'.
[  110.156661][ T7701] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  110.169074][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'.
[  110.188075][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.338864][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'.
[  110.360228][ T7715] netlink: 'syz.0.487': attribute type 2 has an invalid length.
[  110.920964][ T7752] __nla_validate_parse: 1 callbacks suppressed
[  110.920975][ T7752] netlink: 14 bytes leftover after parsing attributes in process `syz.0.498'.
[  110.939400][ T7752] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.498'.
[  111.401560][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'.
[  111.520134][ T7764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.502'.
[  112.106796][ T7781] netlink: 196 bytes leftover after parsing attributes in process `syz.3.508'.
[  112.113654][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'.
[  112.122871][ T7781] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  112.126626][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.132689][ T7781] netlink: 'syz.3.508': attribute type 27 has an invalid length.
[  112.136376][ T7781] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.508'.
[  112.235721][ T7784] netlink: 830 bytes leftover after parsing attributes in process `syz.0.510'.
[  112.239428][ T7786] netlink: 948 bytes leftover after parsing attributes in process `syz.0.510'.
[  112.579321][ T7813] netlink: 'syz.4.515': attribute type 29 has an invalid length.
[  112.587520][ T7813] netlink: 'syz.4.515': attribute type 10 has an invalid length.
[  112.977971][ T7827] netlink: 'syz.0.519': attribute type 21 has an invalid length.
[  112.981185][ T7827] netlink: 152 bytes leftover after parsing attributes in process `syz.0.519'.
[  113.553411][ T7854] : entered promiscuous mode
[  113.624607][ T7859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.751440][ T7861] netlink: 'syz.4.528': attribute type 10 has an invalid length.
[  114.546257][ T7897] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  114.549015][ T7897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.591168][ T7901] netlink: 'syz.0.539': attribute type 14 has an invalid length.
[  114.619213][ T7902] netlink: 'syz.0.539': attribute type 41 has an invalid length.
[  114.992654][ T7927] wg0 speed is unknown, defaulting to 1000
[  115.056759][ T7928] wg0 speed is unknown, defaulting to 1000
[  115.434873][ T7940] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  115.458571][ T7940] blkio.reset_stats is deprecated
[  115.897313][ T7977] netlink: 'syz.3.558': attribute type 10 has an invalid length.
[  115.914923][ T7977] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.924884][ T7977] netlink: 'syz.3.558': attribute type 10 has an invalid length.
[  115.933782][ T7977] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  115.940529][ T7977] __nla_validate_parse: 14 callbacks suppressed
[  115.940536][ T7977] netlink: 492 bytes leftover after parsing attributes in process `syz.3.558'.
[  115.955352][ T7983] netlink: 5 bytes leftover after parsing attributes in process `syz.4.561'.
[  115.962492][ T7983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.976476][ T7983] netlink: 100 bytes leftover after parsing attributes in process `syz.4.561'.
[  115.980457][ T7984] netlink: 156 bytes leftover after parsing attributes in process `syz.0.562'.
[  116.027904][ T7988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.563'.
[  116.181464][ T8002] netlink: 'syz.0.567': attribute type 27 has an invalid length.
[  116.633916][ T8008] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  116.646978][ T8008] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  116.768593][ T5852] Bluetooth: hci0: ISO packet for unknown connection handle 29
[  116.773498][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  116.779282][ T8011] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  116.781917][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.921635][ T8013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.570'.
[  116.925534][ T8013] unsupported nlmsg_type 40
[  117.051050][ T8024] netlink: 'syz.4.574': attribute type 12 has an invalid length.
[  117.054097][ T8024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.574'.
[  117.087710][ T8024] C: renamed from team_slave_0
[  117.094169][ T8024] netlink: 'syz.4.574': attribute type 1 has an invalid length.
[  117.104293][ T8024] netlink: 152 bytes leftover after parsing attributes in process `syz.4.574'.
[  117.108283][ T8024] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  117.114615][ T8024] netlink: 'syz.4.574': attribute type 16 has an invalid length.
[  117.124550][ T8024] netlink: 48 bytes leftover after parsing attributes in process `syz.4.574'.
[  118.389749][ T8069] netlink: 'syz.0.585': attribute type 11 has an invalid length.
[  118.504191][ T5852] Bluetooth: hci0: ISO packet for unknown connection handle 3856
[  119.220600][ T8107] netlink: 'syz.0.598': attribute type 3 has an invalid length.
[  119.537932][ T8123] netlink: 'syz.3.602': attribute type 1 has an invalid length.
[  119.647814][ T8129] netlink: 'syz.3.603': attribute type 1 has an invalid length.
[  119.784621][ T8134] netlink: 'syz.4.605': attribute type 10 has an invalid length.
[  119.787729][ T8134] netlink: 'syz.4.605': attribute type 16 has an invalid length.
[  120.162195][ T8142] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.168130][ T8142] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.008502][ T8167] __nla_validate_parse: 9 callbacks suppressed
[  121.008517][ T8167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.616'.
[  121.017847][ T8166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.616'.
[  121.022172][ T8167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.616'.
[  121.079805][ T8170] openvswitch: netlink: Tunnel attr 2 has unexpected len 1 expected 4
[  121.410970][ T8180] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  121.494673][ T8181] netlink: 7 bytes leftover after parsing attributes in process `syz.3.619'.
[  121.516955][ T8181] netlink: 7 bytes leftover after parsing attributes in process `syz.3.619'.
[  122.125047][ T8191] netlink: 6 bytes leftover after parsing attributes in process `syz.4.623'.
[  122.394736][ T8208] netlink: 'syz.4.629': attribute type 1 has an invalid length.
[  122.399509][ T8209] netlink: 'syz.4.629': attribute type 1 has an invalid length.
[  122.565141][ T8215] bridge_slave_1: left allmulticast mode
[  122.567462][ T8215] bridge_slave_1: left promiscuous mode
[  122.569546][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.573465][ T8215] bridge_slave_0: left promiscuous mode
[  122.575663][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.593122][ T8215] bond0: (slave bridge0): Releasing backup interface
[  122.820312][ T8219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.824523][ T8219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.135083][ T8242] netlink: 830 bytes leftover after parsing attributes in process `syz.0.638'.
[  123.200939][ T8244] netlink: 'syz.0.639': attribute type 29 has an invalid length.
[  123.211875][ T8244] netlink: 'syz.0.639': attribute type 29 has an invalid length.
[  123.223719][ T8244] netlink: 'syz.0.639': attribute type 29 has an invalid length.
[  123.435824][ T8253] -1: renamed from syzkaller0
[  123.850510][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'.
[  124.238514][ T8278] ==================================================================
[  124.241905][ T8278] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  124.245124][ T8278] Read of size 1 at addr ffff888021161530 by task syz.3.649/8278
[  124.249052][ T8278] 
[  124.249884][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.3.649 Not tainted syzkaller #0 PREEMPT(full) 
[  124.249895][ T8278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.249900][ T8278] Call Trace:
[  124.249905][ T8278]  <TASK>
[  124.249908][ T8278]  dump_stack_lvl+0x189/0x250
[  124.249922][ T8278]  ? __virt_addr_valid+0x1c8/0x5c0
[  124.249933][ T8278]  ? rcu_is_watching+0x15/0xb0
[  124.249943][ T8278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.249952][ T8278]  ? rcu_is_watching+0x15/0xb0
[  124.249959][ T8278]  ? __virt_addr_valid+0x1c8/0x5c0
[  124.249968][ T8278]  ? lock_release+0x4b/0x3e0
[  124.249978][ T8278]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  124.249989][ T8278]  ? __virt_addr_valid+0x1c8/0x5c0
[  124.249998][ T8278]  ? __virt_addr_valid+0x4a5/0x5c0
[  124.250007][ T8278]  print_report+0xca/0x240
[  124.250015][ T8278]  ? __xfrm_state_insert+0x8af/0x1450
[  124.250022][ T8278]  kasan_report+0x118/0x150
[  124.250037][ T8278]  ? __xfrm_state_insert+0x8af/0x1450
[  124.250046][ T8278]  __xfrm_state_insert+0x8af/0x1450
[  124.250057][ T8278]  xfrm_state_insert+0x54/0x60
[  124.250064][ T8278]  ipcomp6_init_state+0x655/0x900
[  124.250074][ T8278]  __xfrm_init_state+0xa76/0x13f0
[  124.250083][ T8278]  ? __xfrm_init_state+0x7ef/0x13f0
[  124.250092][ T8278]  xfrm_add_sa+0x2f5b/0x4070
[  124.250103][ T8278]  ? __pfx_xfrm_add_sa+0x10/0x10
[  124.250110][ T8278]  ? apparmor_capable+0x137/0x1b0
[  124.250121][ T8278]  ? __nla_parse+0x40/0x60
[  124.250133][ T8278]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.250143][ T8278]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.250159][ T8278]  ? __pfx___mutex_trylock_common+0x10/0x10
[  124.250169][ T8278]  ? rcu_is_watching+0x15/0xb0
[  124.250176][ T8278]  ? trace_contention_end+0x39/0x120
[  124.250184][ T8278]  ? __mutex_lock+0x335/0x1360
[  124.250196][ T8278]  netlink_rcv_skb+0x208/0x470
[  124.250209][ T8278]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.250218][ T8278]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.250231][ T8278]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.250241][ T8278]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.250251][ T8278]  xfrm_netlink_rcv+0x79/0x90
[  124.250288][ T8278]  netlink_unicast+0x82f/0x9e0
[  124.250302][ T8278]  ? __pfx_netlink_unicast+0x10/0x10
[  124.250312][ T8278]  ? netlink_sendmsg+0x642/0xb30
[  124.250323][ T8278]  ? skb_put+0x11b/0x210
[  124.250332][ T8278]  netlink_sendmsg+0x805/0xb30
[  124.250346][ T8278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.250358][ T8278]  ? aa_sock_msg_perm+0xf1/0x1d0
[  124.250366][ T8278]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.250374][ T8278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.250385][ T8278]  __sock_sendmsg+0x21c/0x270
[  124.250395][ T8278]  ____sys_sendmsg+0x505/0x830
[  124.250404][ T8278]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.250415][ T8278]  ? import_iovec+0x74/0xa0
[  124.250424][ T8278]  ___sys_sendmsg+0x21f/0x2a0
[  124.250432][ T8278]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.250444][ T8278]  ? __fget_files+0x2a/0x420
[  124.250454][ T8278]  ? __fget_files+0x2a/0x420
[  124.250460][ T8278]  ? __fget_files+0x3a0/0x420
[  124.250468][ T8278]  __x64_sys_sendmsg+0x19b/0x260
[  124.250475][ T8278]  ? perf_trace_run_bpf_submit+0x100/0x170
[  124.250483][ T8278]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.250493][ T8278]  ? rcu_is_watching+0x15/0xb0
[  124.250501][ T8278]  ? do_syscall_64+0xbe/0x3b0
[  124.250513][ T8278]  do_syscall_64+0xfa/0x3b0
[  124.250523][ T8278]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.250532][ T8278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.250539][ T8278]  ? exc_page_fault+0x9f/0xf0
[  124.250549][ T8278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.250556][ T8278] RIP: 0033:0x7f0546d8ebe9
[  124.250564][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.250570][ T8278] RSP: 002b:00007f0544ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.250579][ T8278] RAX: ffffffffffffffda RBX: 00007f0546fc5fa0 RCX: 00007f0546d8ebe9
[  124.250584][ T8278] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 000000000000000a
[  124.250589][ T8278] RBP: 00007f0546e11e19 R08: 0000000000000000 R09: 0000000000000000
[  124.250593][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.250597][ T8278] R13: 00007f0546fc6038 R14: 00007f0546fc5fa0 R15: 00007ffdc2c8ed08
[  124.250607][ T8278]  </TASK>
[  124.250609][ T8278] 
[  124.410977][ T8278] Allocated by task 7031:
[  124.412794][ T8278]  kasan_save_track+0x3e/0x80
[  124.414783][ T8278]  __kasan_slab_alloc+0x6c/0x80
[  124.416800][ T8278]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  124.418804][ T8278]  xfrm_state_alloc+0x24/0x2f0
[  124.420390][ T8278]  __find_acq_core+0x8a7/0x1c00
[  124.422031][ T8278]  xfrm_find_acq+0x78/0xa0
[  124.423534][ T8278]  xfrm_alloc_userspi+0x6b3/0xc90
[  124.425218][ T8278]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.426878][ T8278]  netlink_rcv_skb+0x208/0x470
[  124.428486][ T8278]  xfrm_netlink_rcv+0x79/0x90
[  124.430058][ T8278]  netlink_unicast+0x82f/0x9e0
[  124.431670][ T8278]  netlink_sendmsg+0x805/0xb30
[  124.433316][ T8278]  __sock_sendmsg+0x21c/0x270
[  124.434898][ T8278]  ____sys_sendmsg+0x505/0x830
[  124.436514][ T8278]  ___sys_sendmsg+0x21f/0x2a0
[  124.438114][ T8278]  __x64_sys_sendmsg+0x19b/0x260
[  124.439787][ T8278]  do_syscall_64+0xfa/0x3b0
[  124.441324][ T8278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.443311][ T8278] 
[  124.444130][ T8278] Freed by task 5880:
[  124.445507][ T8278]  kasan_save_track+0x3e/0x80
[  124.447067][ T8278]  kasan_save_free_info+0x46/0x50
[  124.448838][ T8278]  __kasan_slab_free+0x5b/0x80
[  124.450841][ T8278]  kmem_cache_free+0x18f/0x400
[  124.452832][ T8278]  xfrm_state_gc_task+0x52d/0x6b0
[  124.454943][ T8278]  process_scheduled_works+0xae1/0x17b0
[  124.457227][ T8278]  worker_thread+0x8a0/0xda0
[  124.459135][ T8278]  kthread+0x711/0x8a0
[  124.460820][ T8278]  ret_from_fork+0x3fc/0x770
[  124.462740][ T8278]  ret_from_fork_asm+0x1a/0x30
[  124.464713][ T8278] 
[  124.465710][ T8278] The buggy address belongs to the object at ffff888021161200
[  124.465710][ T8278]  which belongs to the cache xfrm_state of size 928
[  124.471303][ T8278] The buggy address is located 816 bytes inside of
[  124.471303][ T8278]  freed 928-byte region [ffff888021161200, ffff8880211615a0)
[  124.476874][ T8278] 
[  124.477884][ T8278] The buggy address belongs to the physical page:
[  124.480107][ T8278] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021160900 pfn:0x21160
[  124.483415][ T8278] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  124.486177][ T8278] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  124.488675][ T8278] page_type: f5(slab)
[  124.489997][ T8278] raw: 00fff00000000040 ffff88801af59640 dead000000000122 0000000000000000
[  124.492817][ T8278] raw: ffff888021160900 00000000800e000a 00000000f5000000 0000000000000000
[  124.495718][ T8278] head: 00fff00000000040 ffff88801af59640 dead000000000122 0000000000000000
[  124.498590][ T8278] head: ffff888021160900 00000000800e000a 00000000f5000000 0000000000000000
[  124.501423][ T8278] head: 00fff00000000002 ffffea0000845801 00000000ffffffff 00000000ffffffff
[  124.504251][ T8278] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  124.507638][ T8278] page dumped because: kasan: bad access detected
[  124.510146][ T8278] page_owner tracks the page as allocated
[  124.512054][ T8278] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6189, tgid 6187 (syz.4.47), ts 66286656823, free_ts 66216316127
[  124.518127][ T8278]  post_alloc_hook+0x240/0x2a0
[  124.519688][ T8278]  get_page_from_freelist+0x21e4/0x22c0
[  124.521532][ T8278]  __alloc_frozen_pages_noprof+0x181/0x370
[  124.523888][ T8278]  alloc_pages_mpol+0x232/0x4a0
[  124.525890][ T8278]  allocate_slab+0x8a/0x370
[  124.527756][ T8278]  ___slab_alloc+0xbeb/0x1410
[  124.529662][ T8278]  kmem_cache_alloc_noprof+0x283/0x3c0
[  124.531925][ T8278]  xfrm_state_alloc+0x24/0x2f0
[  124.533915][ T8278]  xfrm_add_sa+0x17d1/0x4070
[  124.535827][ T8278]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.537868][ T8278]  netlink_rcv_skb+0x208/0x470
[  124.539851][ T8278]  xfrm_netlink_rcv+0x79/0x90
[  124.541766][ T8278]  netlink_unicast+0x82f/0x9e0
[  124.543776][ T8278]  netlink_sendmsg+0x805/0xb30
[  124.545764][ T8278]  __sock_sendmsg+0x21c/0x270
[  124.547723][ T8278]  ____sys_sendmsg+0x505/0x830
[  124.549701][ T8278] page last free pid 6178 tgid 6178 stack trace:
[  124.552313][ T8278]  __free_frozen_pages+0xbc4/0xd30
[  124.554427][ T8278]  free_large_kmalloc+0x13a/0x1f0
[  124.556534][ T8278]  device_release+0x9c/0x1c0
[  124.558448][ T8278]  kobject_put+0x22b/0x480
[  124.560029][ T8278]  netdev_run_todo+0xd2e/0xea0
[  124.561640][ T8278]  tun_chr_close+0x13c/0x1c0
[  124.563181][ T8278]  __fput+0x44c/0xa70
[  124.564543][ T8278]  task_work_run+0x1d4/0x260
[  124.566338][ T8278]  exit_to_user_mode_loop+0xec/0x110
[  124.568528][ T8278]  do_syscall_64+0x2bd/0x3b0
[  124.570460][ T8278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.573070][ T8278] 
[  124.574173][ T8278] Memory state around the buggy address:
[  124.576661][ T8278]  ffff888021161400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  124.580116][ T8278]  ffff888021161480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  124.583426][ T8278] >ffff888021161500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  124.586685][ T8278]                                      ^
[  124.588980][ T8278]  ffff888021161580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  124.592284][ T8278]  ffff888021161600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  124.595548][ T8278] ==================================================================
[  124.598657][ T8278] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  124.601062][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.3.649 Not tainted syzkaller #0 PREEMPT(full) 
[  124.604149][ T8278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.607489][ T8278] Call Trace:
[  124.608620][ T8278]  <TASK>
[  124.609629][ T8278]  dump_stack_lvl+0x99/0x250
[  124.611171][ T8278]  ? __asan_memcpy+0x40/0x70
[  124.612832][ T8278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.614974][ T8278]  ? __pfx__printk+0x10/0x10
[  124.616910][ T8278]  vpanic+0x281/0x750
[  124.618580][ T8278]  ? __pfx_vpanic+0x10/0x10
[  124.620477][ T8278]  ? irqentry_exit+0x74/0x90
[  124.622407][ T8278]  panic+0xb9/0xc0
[  124.623963][ T8278]  ? __pfx_panic+0x10/0x10
[  124.625808][ T8278]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  124.628213][ T8278]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  124.630657][ T8278]  ? is_module_address+0x17/0xf0
[  124.632734][ T8278]  ? __xfrm_state_insert+0x8af/0x1450
[  124.634968][ T8278]  check_panic_on_warn+0x89/0xb0
[  124.637015][ T8278]  ? __xfrm_state_insert+0x8af/0x1450
[  124.639240][ T8278]  end_report+0x78/0x160
[  124.641009][ T8278]  kasan_report+0x129/0x150
[  124.642913][ T8278]  ? __xfrm_state_insert+0x8af/0x1450
[  124.645146][ T8278]  __xfrm_state_insert+0x8af/0x1450
[  124.647315][ T8278]  xfrm_state_insert+0x54/0x60
[  124.649005][ T8278]  ipcomp6_init_state+0x655/0x900
[  124.650790][ T8278]  __xfrm_init_state+0xa76/0x13f0
[  124.652535][ T8278]  ? __xfrm_init_state+0x7ef/0x13f0
[  124.654385][ T8278]  xfrm_add_sa+0x2f5b/0x4070
[  124.655977][ T8278]  ? __pfx_xfrm_add_sa+0x10/0x10
[  124.658112][ T8278]  ? apparmor_capable+0x137/0x1b0
[  124.660084][ T8278]  ? __nla_parse+0x40/0x60
[  124.661727][ T8278]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.663454][ T8278]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.665438][ T8278]  ? __pfx___mutex_trylock_common+0x10/0x10
[  124.667559][ T8278]  ? rcu_is_watching+0x15/0xb0
[  124.669215][ T8278]  ? trace_contention_end+0x39/0x120
[  124.671095][ T8278]  ? __mutex_lock+0x335/0x1360
[  124.672851][ T8278]  netlink_rcv_skb+0x208/0x470
[  124.674556][ T8278]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.676455][ T8278]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.678321][ T8278]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.680181][ T8278]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.682004][ T8278]  xfrm_netlink_rcv+0x79/0x90
[  124.683676][ T8278]  netlink_unicast+0x82f/0x9e0
[  124.685379][ T8278]  ? __pfx_netlink_unicast+0x10/0x10
[  124.687525][ T8278]  ? netlink_sendmsg+0x642/0xb30
[  124.689674][ T8278]  ? skb_put+0x11b/0x210
[  124.691563][ T8278]  netlink_sendmsg+0x805/0xb30
[  124.693315][ T8278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.695116][ T8278]  ? aa_sock_msg_perm+0xf1/0x1d0
[  124.697051][ T8278]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.699347][ T8278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.701478][ T8278]  __sock_sendmsg+0x21c/0x270
[  124.703310][ T8278]  ____sys_sendmsg+0x505/0x830
[  124.705293][ T8278]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.707532][ T8278]  ? import_iovec+0x74/0xa0
[  124.709544][ T8278]  ___sys_sendmsg+0x21f/0x2a0
[  124.711611][ T8278]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.713965][ T8278]  ? __fget_files+0x2a/0x420
[  124.716028][ T8278]  ? __fget_files+0x2a/0x420
[  124.718055][ T8278]  ? __fget_files+0x3a0/0x420
[  124.720115][ T8278]  __x64_sys_sendmsg+0x19b/0x260
[  124.722304][ T8278]  ? perf_trace_run_bpf_submit+0x100/0x170
[  124.724836][ T8278]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.727180][ T8278]  ? rcu_is_watching+0x15/0xb0
[  124.729160][ T8278]  ? do_syscall_64+0xbe/0x3b0
[  124.731153][ T8278]  do_syscall_64+0xfa/0x3b0
[  124.733072][ T8278]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.735239][ T8278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.737949][ T8278]  ? exc_page_fault+0x9f/0xf0
[  124.740020][ T8278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.742558][ T8278] RIP: 0033:0x7f0546d8ebe9
[  124.744431][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.752365][ T8278] RSP: 002b:00007f0544ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.755771][ T8278] RAX: ffffffffffffffda RBX: 00007f0546fc5fa0 RCX: 00007f0546d8ebe9
[  124.758960][ T8278] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 000000000000000a
[  124.762302][ T8278] RBP: 00007f0546e11e19 R08: 0000000000000000 R09: 0000000000000000
[  124.765600][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.768862][ T8278] R13: 00007f0546fc6038 R14: 00007f0546fc5fa0 R15: 00007ffdc2c8ed08
[  124.772235][ T8278]  </TASK>
[  124.774442][ T8278] Kernel Offset: disabled
[  124.776319][ T8278] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:38:48  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4489f RBX=ffffc90002d1fae8 RCX=ffff888105e00000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002d1fb90 RSP=ffffc90002d1faa0
R8 =ffffc90002d1f947 R9 =1ffff920005a3f28 R10=dffffc0000000000 R11=fffff520005a3f29
R12=1ffff920005a3f5d R13=dffffc0000000000 R14=1ffff920005a3f58 R15=1ffff920005a3f58
RIP=ffffffff81b44889 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0e08dab6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000640 CR3=00000000220f2000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014c8 RDI=00000000000014c9 RBP=00000000000003f8 RSP=ffffc90002c8e9f0
R8 =ffff88801fd60237 R9 =1ffff11003fac046 R10=dffffc0000000000 R11=ffffffff854f33b0
R12=dffffc0000000000 R13=ffffffff99afa939 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f342c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0544ff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=00000001124ac000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0546e12e53
XMM06=0000000000000000 00007f0546e12e4d XMM07=0000000000000000 00007f0546e12e61
XMM08=0000000000000000 00007f0546e12ee7 XMM09=0000000000000000 00007f0546e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
