last executing test programs:

2m7.698984422s ago: executing program 0 (id=31):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080300000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef1d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

2m7.617578665s ago: executing program 0 (id=34):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m7.48144801s ago: executing program 0 (id=36):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="180200002000000000000000000000008500000036000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m7.400044935s ago: executing program 0 (id=39):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

2m7.14771106s ago: executing program 0 (id=45):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2m5.478079403s ago: executing program 0 (id=70):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0xb, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

2m5.193342109s ago: executing program 32 (id=70):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0xb, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

1m43.368146324s ago: executing program 2 (id=338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x64}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x26}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40)

1m43.275210027s ago: executing program 2 (id=339):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

1m42.762868871s ago: executing program 3 (id=344):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x2000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000004c0)={'a', ' *:* ', 'w\x00'}, 0x8)

1m42.655712196s ago: executing program 3 (id=345):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x200000, 0x1, 0x1ff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m42.455257991s ago: executing program 3 (id=348):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891c, &(0x7f0000000100))

1m42.337075607s ago: executing program 2 (id=350):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

1m42.336533876s ago: executing program 3 (id=351):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000900000007000000040000000c800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="40000000ff0000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0xb}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3}, 0xc)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18080f0000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=r7, @ANYBLOB="0300"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="03000000040000000300"/27], 0x50)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x4, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x0, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
socket$kcm(0x11, 0x200000000000002, 0x300)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r12 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r12, 0x1, 0x2e, &(0x7f0000000640)=r11, 0x4)
recvmsg$kcm(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
r13 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r13, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)
write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[], 0x12)

1m42.267455165s ago: executing program 2 (id=352):
socketpair(0x29, 0x2, 0x5, &(0x7f00000002c0))

1m42.190488849s ago: executing program 2 (id=353):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x3, 0x87)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xa, 0x0, 0x4)
sendmsg$unix(r3, &(0x7f0000000540)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="1995bef8f05818f79a1a6904474f14305819d37b79e8f0d36bb591b926a48d664b7f86e4418e016806c0bd8bf2a9faa071ed7ec02b82a9d211d5cb10312a4707a4b5430ec8efbef2e60ce9a60045879196e8f854923353d120ae75b2105f3a18985bb46835d7152c8b864d8554bd6623acd026cffb792d3fd3ed6db9c6865b7fef4283f54f528b5fad2e696baf06d389dcf7f72283b3e40bffe652dccd7e331b21109d0d478dd78bf86966e3a4258cb8157f9e65c2062bdafa44e10b", 0xbc}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="4cef6c4b20b77f209b7b5f8f97b9949a8e08d35e6b1222e9dcc1ec6d3118c8f021e65013871d87cc4a92d88f000d32ca06c5791e352c9f4e9cbd1ee73947026990dddc276c9d216e96b64c96f0cc7eb162a002618854f058b6a0393b6718b3c700266b6f8e8767dd53685603fd9c9f4bbc5370effbe2bf51a793cd8bc871b963dcee4adefdfd25fb09c8acfd00ebc5fa24ca8c1aa979e4ddee07000000a89e"], 0x58, 0x801}, 0x40820)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$unix(r7, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
r8 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0, 0x810}, {0x0, 0x50}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$inet(r1, 0x0, 0x81)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00032007682c020b7b37f29f057acc54d4077549f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m42.129453967s ago: executing program 1 (id=354):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@local, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x202, 0x4, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002a000b6c8cff", 0xfffffffffffffdb9}, {&(0x7f0000000580)="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", 0xa}], 0x2}, 0x800)
r6 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, r6, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)

1m41.415243792s ago: executing program 3 (id=355):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00'}, 0x94)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0)

1m41.261673746s ago: executing program 1 (id=356):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33)

1m41.125584008s ago: executing program 1 (id=357):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000040)='rcu_utilization\x00', r0, 0x0, 0x100}, 0x18)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1m41.099680747s ago: executing program 2 (id=358):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000003c0), &(0x7f0000001d40)=r7}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r8, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r6}, 0x20)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6)
r9 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100)
recvmsg$kcm(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, 0x0, 0x0}, 0x20)

1m41.047657502s ago: executing program 1 (id=359):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m41.047075358s ago: executing program 3 (id=360):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x248, 0x3175, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x41, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, 0x0, 0x40080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xdbf7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

1m40.945614846s ago: executing program 1 (id=361):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x74, 0x10, 0x1, 0x800, 0x2000, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x36b}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x3, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x0, 0x1, 0xfffffff9, 0x0, 0x5, 0x1d}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m40.945124827s ago: executing program 1 (id=362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfd, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x1, 0x8, 0x2, 0x9, 0x8, 0x4, 0x4, 0x8d, 0x7, 0x6, 0x4, 0x7, 0x6000000, 0x6, 0x1, 0x2, 0x8, 0x1, 0x2d7f, 0xffff12a3, 0x3, 0xffffffff, 0xe000, 0x5, 0x3ff, 0x0, 0x1e5, 0x0, 0xd6, 0x3, 0x5, 0x6, 0xb, 0x10, 0x8001, 0x10, 0xdc, 0x0, 0x401, 0x0, 0x3, 0x4be4e83a, 0x6, 0xec, 0x8, 0x3b, 0x8, 0x7fff, 0x1, 0x9d, 0x8, 0x3, 0x5, 0x3, 0x2, 0x3, 0x9, 0x5, 0x9, 0x4, 0x10001, 0xfffff948, 0x43b5, 0x9, 0x101, 0x0, 0x9841, 0x5, 0x1, 0x7, 0xf, 0x401, 0x2, 0xfff, 0x6, 0x7, 0x0, 0x22, 0x67d0, 0x6, 0x2, 0x8001, 0x9, 0x0, 0x10000, 0x2, 0x10, 0x48, 0xf0, 0x1c3, 0xac23, 0x0, 0x5, 0xd, 0x5, 0xc0, 0x100, 0x0, 0x40, 0x9, 0x957, 0x0, 0x7, 0x4, 0x5, 0x0, 0x80000000, 0xfffffff4, 0x1ff, 0x0, 0x8, 0x6, 0x2, 0x1, 0x400, 0xfffffffe, 0x2, 0x5, 0x231f7c56, 0x6, 0x6, 0x3, 0x3, 0x0, 0x4cb1, 0x3, 0xfffffff7, 0x9, 0x7, 0xfffffffc, 0x20000000, 0xd, 0xb95, 0x80000000, 0xc6, 0x7, 0xce, 0x8, 0x7, 0xa141, 0x6, 0xdd2, 0xe05, 0x3, 0xfffffffa, 0x10b39f1b, 0x1, 0x1d8d, 0x38e8, 0xffff7fff, 0xfffffff4, 0xfffffffc, 0x1, 0x9, 0x8, 0x3e5, 0xffffffff, 0xfffffff8, 0x8, 0x1, 0xe3a5, 0x2, 0x1c00, 0xa416, 0x2, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x40, 0x856, 0x6, 0x7, 0x3, 0xfffffff7, 0x6, 0x1ff, 0x9, 0x200, 0x1, 0x9, 0x8, 0xfffffffb, 0xfffffffc, 0x51, 0x2, 0x9, 0x6, 0x1, 0x401, 0x3, 0xf, 0x7, 0x5, 0x80000001, 0x8, 0x4, 0x11bca77f, 0x7ff, 0x1000, 0x3, 0x800, 0x2, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x4, 0x2, 0x5, 0xd, 0xad, 0x3, 0x2, 0x9, 0xffffffff, 0x4b6, 0xaf88, 0x9, 0x2, 0x6, 0x3, 0x3, 0x8, 0x9, 0x10001, 0xac7, 0x7f, 0x1, 0x7, 0x1, 0xffff, 0x1000, 0x2, 0x9, 0x7fffffff, 0x606, 0x9, 0x81, 0x2, 0x4, 0x6, 0x4, 0x0, 0x2299, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x7, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xa, 0x2, 0xfffffffa, 0x4, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8002, 0xf0000000, 0x8, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x4, 0x8, 0x0, {0x8, 0x0, 0x6, 0x1, 0x1, 0x5}, {0xe, 0x0, 0x1000, 0xde4e, 0x0, 0x6}, 0x1, 0x400, 0x6d}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m0.844484611s ago: executing program 33 (id=358):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000003c0), &(0x7f0000001d40)=r7}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r8, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r6}, 0x20)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6)
r9 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100)
recvmsg$kcm(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, 0x0, 0x0}, 0x20)

1m0.25523535s ago: executing program 34 (id=360):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x248, 0x3175, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x41, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, 0x0, 0x40080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xdbf7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

1m0.255047062s ago: executing program 35 (id=362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfd, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x1, 0x8, 0x2, 0x9, 0x8, 0x4, 0x4, 0x8d, 0x7, 0x6, 0x4, 0x7, 0x6000000, 0x6, 0x1, 0x2, 0x8, 0x1, 0x2d7f, 0xffff12a3, 0x3, 0xffffffff, 0xe000, 0x5, 0x3ff, 0x0, 0x1e5, 0x0, 0xd6, 0x3, 0x5, 0x6, 0xb, 0x10, 0x8001, 0x10, 0xdc, 0x0, 0x401, 0x0, 0x3, 0x4be4e83a, 0x6, 0xec, 0x8, 0x3b, 0x8, 0x7fff, 0x1, 0x9d, 0x8, 0x3, 0x5, 0x3, 0x2, 0x3, 0x9, 0x5, 0x9, 0x4, 0x10001, 0xfffff948, 0x43b5, 0x9, 0x101, 0x0, 0x9841, 0x5, 0x1, 0x7, 0xf, 0x401, 0x2, 0xfff, 0x6, 0x7, 0x0, 0x22, 0x67d0, 0x6, 0x2, 0x8001, 0x9, 0x0, 0x10000, 0x2, 0x10, 0x48, 0xf0, 0x1c3, 0xac23, 0x0, 0x5, 0xd, 0x5, 0xc0, 0x100, 0x0, 0x40, 0x9, 0x957, 0x0, 0x7, 0x4, 0x5, 0x0, 0x80000000, 0xfffffff4, 0x1ff, 0x0, 0x8, 0x6, 0x2, 0x1, 0x400, 0xfffffffe, 0x2, 0x5, 0x231f7c56, 0x6, 0x6, 0x3, 0x3, 0x0, 0x4cb1, 0x3, 0xfffffff7, 0x9, 0x7, 0xfffffffc, 0x20000000, 0xd, 0xb95, 0x80000000, 0xc6, 0x7, 0xce, 0x8, 0x7, 0xa141, 0x6, 0xdd2, 0xe05, 0x3, 0xfffffffa, 0x10b39f1b, 0x1, 0x1d8d, 0x38e8, 0xffff7fff, 0xfffffff4, 0xfffffffc, 0x1, 0x9, 0x8, 0x3e5, 0xffffffff, 0xfffffff8, 0x8, 0x1, 0xe3a5, 0x2, 0x1c00, 0xa416, 0x2, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x40, 0x856, 0x6, 0x7, 0x3, 0xfffffff7, 0x6, 0x1ff, 0x9, 0x200, 0x1, 0x9, 0x8, 0xfffffffb, 0xfffffffc, 0x51, 0x2, 0x9, 0x6, 0x1, 0x401, 0x3, 0xf, 0x7, 0x5, 0x80000001, 0x8, 0x4, 0x11bca77f, 0x7ff, 0x1000, 0x3, 0x800, 0x2, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x4, 0x2, 0x5, 0xd, 0xad, 0x3, 0x2, 0x9, 0xffffffff, 0x4b6, 0xaf88, 0x9, 0x2, 0x6, 0x3, 0x3, 0x8, 0x9, 0x10001, 0xac7, 0x7f, 0x1, 0x7, 0x1, 0xffff, 0x1000, 0x2, 0x9, 0x7fffffff, 0x606, 0x9, 0x81, 0x2, 0x4, 0x6, 0x4, 0x0, 0x2299, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x7, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xa, 0x2, 0xfffffffa, 0x4, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8002, 0xf0000000, 0x8, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x4, 0x8, 0x0, {0x8, 0x0, 0x6, 0x1, 0x1, 0x5}, {0xe, 0x0, 0x1000, 0xde4e, 0x0, 0x6}, 0x1, 0x400, 0x6d}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

20.689646918s ago: executing program 6 (id=663):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

20.687939759s ago: executing program 6 (id=666):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x9f, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0x0, @empty}}]}, 0x78}, 0x1, 0x7}, 0x0)

20.627106396s ago: executing program 4 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040844)

20.572292142s ago: executing program 4 (id=671):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000015c0)={0x38, 0x1412, 0x801, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40004)

20.571938577s ago: executing program 6 (id=672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010200000000000000000100000014000780080006000000000308000840000000300500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)

20.571514023s ago: executing program 4 (id=674):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
socket$kcm(0x2, 0x1, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

20.509041103s ago: executing program 6 (id=675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040084)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x401, 0xe}, 0x140}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="006200000000000000e2bedb581c25ba29000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001f000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)={r3})
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3ff)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x90)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

20.508513945s ago: executing program 4 (id=676):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x35, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000040)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r5, &(0x7f0000003c00)={&(0x7f0000001a80)=@in6={0xa, 0x4e22, 0xffffffff, @loopback}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0)
close(r0)

19.621726631s ago: executing program 4 (id=684):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874626472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}, 0x1, 0x0, 0x0, 0x4011}, 0x0)

19.609722928s ago: executing program 6 (id=685):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xb000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0xd}, 0x20)

19.511423365s ago: executing program 4 (id=686):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d840009aa58b9e45fdb"], 0xffdd)

19.417820825s ago: executing program 36 (id=686):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d840009aa58b9e45fdb"], 0xffdd)

19.11836091s ago: executing program 6 (id=689):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$l2tp(0x2, 0x2, 0x73)
socket$kcm(0x2d, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x100}, 0x12020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

19.111765805s ago: executing program 37 (id=689):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$l2tp(0x2, 0x2, 0x73)
socket$kcm(0x2d, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x100}, 0x12020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

1.470256725s ago: executing program 7 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

1.299095777s ago: executing program 7 (id=908):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r3)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)

1.238510174s ago: executing program 8 (id=910):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020100030a00000000000000fcdbdf25030006000010000002004e23640101000000000000000000030005003200000002004e23ac1414aa000000000000000002001300030020002abd7000073500"], 0x50}}, 0x0)

1.238167393s ago: executing program 7 (id=911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x9a0c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0xafe6)
sendmsg$kcm(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000000)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x0)

1.140825547s ago: executing program 8 (id=913):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683", 0x99}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2f5}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "3a04"}]}}}], 0x40}, 0x0)

1.067571651s ago: executing program 7 (id=915):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

986.414232ms ago: executing program 8 (id=916):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ffdeffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c"], 0x23c}}, 0x0)

985.997757ms ago: executing program 7 (id=917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/162, 0x1b, 0xa2, 0x1, 0x4}, 0x28)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002000090002000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

901.152938ms ago: executing program 8 (id=918):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

818.461156ms ago: executing program 7 (id=919):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000840))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x18, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001180)=""/4096, 0x41100, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000900)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002180)={0x2, 0x9, 0x5, 0xfffffff8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000021c0)=[r0, r0, r8, r0, r0], &(0x7f0000002200)=[{0x2, 0x4, 0x3, 0x1}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x2, 0x8, 0xc}, {0x5, 0x3, 0x3, 0x5}], 0x10, 0x7}, 0x94)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x9, 0x7, 0x4, 0x800c, 0xffffffffffffffff, 0x1, '\x00', r10, r9, 0x0, 0x2, 0x3, 0x0, @value=r9}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000002300)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
close(r11)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee61860bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xd}, 0x94)

817.789134ms ago: executing program 5 (id=920):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a0104000000000000000001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

817.166713ms ago: executing program 8 (id=921):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x80, 0x0}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33)

627.68246ms ago: executing program 5 (id=922):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

627.192384ms ago: executing program 5 (id=923):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x18, 0x0, 0x9}, 0x28)

391.500922ms ago: executing program 5 (id=924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42004}, 0x84)

341.022566ms ago: executing program 8 (id=925):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x10, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

340.600645ms ago: executing program 5 (id=926):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x8a0, 0x30, 0xffff, 0x3, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x1, 0x2, 0x3, 0x1, {0x8, 0x1, 0x2, 0x40, 0x8, 0x7}, {0x5, 0x2, 0x6, 0x7, 0xc, 0xf9e}, 0x1, 0x3, 0x7}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a0}}, 0x0)

0s ago: executing program 5 (id=927):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35344' (ED25519) to the list of known hosts.
syzkaller login: [   56.810020][ T5778] cgroup: Unknown subsys name 'net'
[   56.956892][ T5778] cgroup: Unknown subsys name 'cpuset'
[   56.965099][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.964620][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.342677][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.949802][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.971476][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.976176][ T5890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.980449][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.984267][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.987959][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.992046][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.995997][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.000935][ T5890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.042499][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.128943][ T5887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.140777][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.145077][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.149662][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.153217][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.176234][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.180056][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.495030][ T5886] chnl_net:caif_netlink_parms(): no params data found
[   71.576543][ T5893] chnl_net:caif_netlink_parms(): no params data found
[   71.582281][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   71.664001][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.667530][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.671240][ T5886] bridge_slave_0: entered allmulticast mode
[   71.674979][ T5886] bridge_slave_0: entered promiscuous mode
[   71.707959][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.711407][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.714352][ T5886] bridge_slave_1: entered allmulticast mode
[   71.718172][ T5886] bridge_slave_1: entered promiscuous mode
[   71.789597][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.808495][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.812542][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.815336][ T5893] bridge_slave_0: entered allmulticast mode
[   71.818463][ T5893] bridge_slave_0: entered promiscuous mode
[   71.822869][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.825025][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.827159][ T5893] bridge_slave_1: entered allmulticast mode
[   71.830955][ T5893] bridge_slave_1: entered promiscuous mode
[   71.836093][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.893357][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.897258][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.901680][ T5889] bridge_slave_0: entered allmulticast mode
[   71.905694][ T5889] bridge_slave_0: entered promiscuous mode
[   71.925655][ T5886] team0: Port device team_slave_0 added
[   71.930334][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.933791][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.936832][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.939555][ T5889] bridge_slave_1: entered allmulticast mode
[   71.942741][ T5889] bridge_slave_1: entered promiscuous mode
[   71.947528][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.954378][ T5886] team0: Port device team_slave_1 added
[   72.039213][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.041650][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.051330][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.060040][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.064170][ T5893] team0: Port device team_slave_0 added
[   72.066639][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.069252][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.078724][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.091863][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.096875][ T5893] team0: Port device team_slave_1 added
[   72.154054][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.156482][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.166644][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.196282][ T5889] team0: Port device team_slave_0 added
[   72.199389][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.201846][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.212137][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.221211][ T5886] hsr_slave_0: entered promiscuous mode
[   72.223757][ T5886] hsr_slave_1: entered promiscuous mode
[   72.239969][ T5889] team0: Port device team_slave_1 added
[   72.303726][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.305882][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.315609][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.342759][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.345092][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.353933][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.397694][ T5893] hsr_slave_0: entered promiscuous mode
[   72.400177][ T5893] hsr_slave_1: entered promiscuous mode
[   72.402406][ T5893] debugfs: 'hsr0' already exists in 'hsr'
[   72.404408][ T5893] Cannot create hsr debugfs directory
[   72.500601][ T5889] hsr_slave_0: entered promiscuous mode
[   72.503396][ T5889] hsr_slave_1: entered promiscuous mode
[   72.506260][ T5889] debugfs: 'hsr0' already exists in 'hsr'
[   72.508511][ T5889] Cannot create hsr debugfs directory
[   72.710807][ T5886] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.732372][ T5886] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.739558][ T5886] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.765422][ T5886] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.849653][ T5893] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.859228][ T5893] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.866133][ T5893] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.878192][ T5893] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.004033][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.013615][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.023549][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.031495][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.047003][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.094471][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   73.100280][ T5887] Bluetooth: hci0: command tx timeout
[   73.100289][   T55] Bluetooth: hci1: command tx timeout
[   73.125840][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.128672][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.160371][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.162760][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.171834][ T5887] Bluetooth: hci2: command tx timeout
[   73.184036][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.233780][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[   73.252308][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.254994][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.271891][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.275334][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.277837][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.319732][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   73.352409][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.355131][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.367583][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.370547][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.434044][ T5889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.438501][ T5889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.523658][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.588058][ T5886] veth0_vlan: entered promiscuous mode
[   73.608207][ T5886] veth1_vlan: entered promiscuous mode
[   73.627799][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.654230][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.688420][ T5893] veth0_vlan: entered promiscuous mode
[   73.699784][ T5886] veth0_macvtap: entered promiscuous mode
[   73.709844][ T5886] veth1_macvtap: entered promiscuous mode
[   73.721059][ T5893] veth1_vlan: entered promiscuous mode
[   73.737981][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.745849][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.755186][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.771946][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.782639][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.797434][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.832647][ T5889] veth0_vlan: entered promiscuous mode
[   73.846242][ T5893] veth0_macvtap: entered promiscuous mode
[   73.873136][ T5893] veth1_macvtap: entered promiscuous mode
[   73.877018][ T5889] veth1_vlan: entered promiscuous mode
[   73.905240][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.909562][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.926460][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.941121][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.957635][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.962780][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.966030][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.971082][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.980996][ T5889] veth0_macvtap: entered promiscuous mode
[   73.989903][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.993136][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.000558][ T5889] veth1_macvtap: entered promiscuous mode
[   74.052975][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.077933][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.111371][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.136039][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.137703][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.143271][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.180543][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.188169][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.209826][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.213224][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.356662][ T5955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16'.
[   74.369787][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.372966][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.420713][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.423810][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.507757][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   74.710901][ T5969] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET)
[   75.175997][ T5887] Bluetooth: hci1: command tx timeout
[   75.179147][   T55] Bluetooth: hci0: command tx timeout
[   75.242903][ T5987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32'.
[   75.251578][ T5887] Bluetooth: hci2: command tx timeout
[   75.492146][   T33] audit: type=1107 audit(1758752104.462:2): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   75.499156][ T6001] =======================================================
[   75.499156][ T6001] WARNING: The mand mount option has been deprecated and
[   75.499156][ T6001]          and is ignored by this kernel. Remove the mand
[   75.499156][ T6001]          option from the mount to silence this warning.
[   75.499156][ T6001] =======================================================
[   75.887553][ T6023] netlink: 'syz.2.50': attribute type 2 has an invalid length.
[   75.896099][ T6023] netlink: 'syz.2.50': attribute type 8 has an invalid length.
[   75.900044][ T6023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50'.
[   75.923089][ T6022] netlink: 'syz.1.51': attribute type 27 has an invalid length.
[   75.957782][ T6025] netlink: 'syz.2.52': attribute type 16 has an invalid length.
[   75.961113][ T6025] netlink: 156 bytes leftover after parsing attributes in process `syz.2.52'.
[   76.121868][ T6033] netlink: 'syz.2.56': attribute type 16 has an invalid length.
[   76.125597][ T6033] netlink: 'syz.2.56': attribute type 17 has an invalid length.
[   76.153343][ T6033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.421235][ T6044] netlink: 80 bytes leftover after parsing attributes in process `syz.2.61'.
[   76.497923][ T6048] netlink: 'syz.2.63': attribute type 46 has an invalid length.
[   76.643152][ T6056] netlink: 'syz.1.67': attribute type 10 has an invalid length.
[   76.646313][ T6056] netlink: 2 bytes leftover after parsing attributes in process `syz.1.67'.
[   76.650710][ T6056] bond0: entered promiscuous mode
[   76.652821][ T6056] bond_slave_0: entered promiscuous mode
[   76.659619][ T6056] bond_slave_1: entered promiscuous mode
[   76.663213][ T6056] bridge0: port 3(bond0) entered blocking state
[   76.665925][ T6056] bridge0: port 3(bond0) entered disabled state
[   76.671366][ T6056] bond0: entered allmulticast mode
[   76.673536][ T6056] bond_slave_0: entered allmulticast mode
[   76.676057][ T6056] bond_slave_1: entered allmulticast mode
[   76.690853][ T6056] bridge0: port 3(bond0) entered blocking state
[   76.695026][ T6056] bridge0: port 3(bond0) entered forwarding state
[   76.706734][ T6054] netlink: 'syz.2.66': attribute type 29 has an invalid length.
[   76.716027][ T6058] netlink: 'syz.2.66': attribute type 10 has an invalid length.
[   76.728133][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.728620][    C1] hrtimer: interrupt took 77156 ns
[   76.733556][ T6058] team0: Port device bond0 added
[   77.313919][ T5887] Bluetooth: hci0: command tx timeout
[   77.337756][ T5887] Bluetooth: hci2: command tx timeout
[   77.491740][ T5876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.600276][ T5876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.710288][ T5876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.090870][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.096160][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.103465][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.107544][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.114558][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.032976][ T5876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.209329][ T6078] chnl_net:caif_netlink_parms(): no params data found
[   79.330063][   T55] Bluetooth: hci0: command tx timeout
[   79.377283][ T5876] bridge_slave_1: left allmulticast mode
[   79.388692][ T5876] bridge_slave_1: left promiscuous mode
[   79.392096][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.402848][ T5876] bridge_slave_0: left allmulticast mode
[   79.405227][ T5876] bridge_slave_0: left promiscuous mode
[   79.407444][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.422238][   T55] Bluetooth: hci2: command tx timeout
[   79.917254][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.928297][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.942210][ T5876] bond0 (unregistering): Released all slaves
[   79.967333][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   80.068482][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.072489][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.076786][ T6078] bridge_slave_0: entered allmulticast mode
[   80.085817][ T6078] bridge_slave_0: entered promiscuous mode
[   80.131236][ T5887] Bluetooth: hci1: command tx timeout
[   80.161161][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.164085][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.167399][ T6078] bridge_slave_1: entered allmulticast mode
[   80.172548][ T6078] bridge_slave_1: entered promiscuous mode
[   80.228257][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.243362][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.342518][ T6130] netlink: 17 bytes leftover after parsing attributes in process `syz.2.90'.
[   80.382326][ T6078] team0: Port device team_slave_0 added
[   80.476575][ T5876] hsr_slave_0: left promiscuous mode
[   80.481127][ T5876] hsr_slave_1: left promiscuous mode
[   80.486428][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.498775][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.509763][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.512615][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.558510][ T5876] veth1_macvtap: left promiscuous mode
[   80.564159][ T5876] veth0_macvtap: left promiscuous mode
[   80.566688][ T5876] veth1_vlan: left promiscuous mode
[   80.569131][ T5876] veth0_vlan: left promiscuous mode
[   81.085065][ T5876] team0 (unregistering): Port device team_slave_1 removed
[   81.122677][ T5876] team0 (unregistering): Port device team_slave_0 removed
[   81.531226][ T6078] team0: Port device team_slave_1 added
[   81.669918][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.672668][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.686174][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.695674][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.698469][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.717080][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.925803][ T6078] hsr_slave_0: entered promiscuous mode
[   81.932474][ T6078] hsr_slave_1: entered promiscuous mode
[   81.935345][ T6078] debugfs: 'hsr0' already exists in 'hsr'
[   81.937741][ T6078] Cannot create hsr debugfs directory
[   82.219513][   T55] Bluetooth: hci1: command tx timeout
[   82.397035][ T6078] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.410185][ T6078] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.422761][ T6078] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.450050][ T6078] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.472915][ T6193] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.603325][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.658097][ T6078] 8021q: adding VLAN 0 to HW filter on device team0
[   82.674220][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.677421][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.712120][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.715104][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.092803][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.161184][ T6078] veth0_vlan: entered promiscuous mode
[   83.180028][ T6226] netlink: 824 bytes leftover after parsing attributes in process `syz.2.120'.
[   83.188169][ T6078] veth1_vlan: entered promiscuous mode
[   83.256687][ T6078] veth0_macvtap: entered promiscuous mode
[   83.281637][ T6078] veth1_macvtap: entered promiscuous mode
[   83.317768][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.341022][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.354703][ T5915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.357778][ T5915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.363772][ T5915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.371528][ T5915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.437558][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.440140][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.468070][ T6238] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.126'.
[   83.504030][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.508175][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.031195][   T55] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[   84.113927][ T6268] netlink: 10 bytes leftover after parsing attributes in process `syz.2.138'.
[   84.126542][ T6268] validate_nla: 2 callbacks suppressed
[   84.126565][ T6268] netlink: 'syz.2.138': attribute type 13 has an invalid length.
[   84.134160][ T6268] netlink: 'syz.2.138': attribute type 17 has an invalid length.
[   84.288710][   T55] Bluetooth: hci1: command tx timeout
[   85.003420][ T6268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.214840][ T6290] netlink: 160 bytes leftover after parsing attributes in process `syz.1.148'.
[   85.379922][ T6297] netlink: 'syz.2.151': attribute type 3 has an invalid length.
[   85.383020][ T6297] netlink: 'syz.2.151': attribute type 1 has an invalid length.
[   85.385900][ T6297] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.151'.
[   86.404296][   T55] Bluetooth: hci1: command tx timeout
[   86.536274][   T10] cfg80211: failed to load regulatory.db
[   89.208168][ T6448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.215075][ T6448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.343289][ T6458] netlink: 'syz.2.190': attribute type 4 has an invalid length.
[   89.369434][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'.
[   89.436091][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.194'.
[   89.761618][ T6486] Zero length message leads to an empty skb
[   89.776028][ T6488] netlink: 'syz.2.205': attribute type 10 has an invalid length.
[   89.847459][ T6488] team0: Port device geneve1 added
[   90.082396][ T6488] syz.2.205 (6488) used greatest stack depth: 19888 bytes left
[   91.282863][ T6575] netlink: 'syz.2.218': attribute type 11 has an invalid length.
[   91.285451][ T6575] netlink: 'syz.2.218': attribute type 6 has an invalid length.
[   91.324697][ T6576] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   91.328589][ T6576] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   91.684088][ T6598] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.229'.
[   91.687701][ T6598] netlink: zone id is out of range
[   91.689774][ T6598] netlink: get zone limit has 8 unknown bytes
[   94.241084][ T6671] netlink: 17 bytes leftover after parsing attributes in process `syz.2.254'.
[   94.810463][ T6686] pim6reg: tun_chr_ioctl cmd 1074025677
[   94.812428][ T6686] pim6reg: linktype set to 805
[   95.690099][ T6719] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.270'.
[   96.622327][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'.
[   96.630236][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'.
[   96.722182][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'.
[   97.358362][ T6772] netlink: 'syz.3.292': attribute type 10 has an invalid length.
[   97.367058][ T6772] netlink: 55 bytes leftover after parsing attributes in process `syz.3.292'.
[   97.467612][ T6775] delete_channel: no stack
[   98.183239][ T6772] syz.3.292 (6772) used greatest stack depth: 18896 bytes left
[   98.454400][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'.
[   98.459123][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'.
[   98.804112][ T6824] syzkaller1: tun_chr_ioctl cmd 1074025677
[   98.808292][ T6824] syzkaller1: linktype set to 823
[   98.858393][ T6831] netlink: 'syz.1.322': attribute type 7 has an invalid length.
[   98.970216][ T6843] netlink: 'syz.2.326': attribute type 11 has an invalid length.
[   98.972697][ T6843] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.326'.
[   99.128266][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   99.205863][ T6861] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'.
[   99.212292][ T6858] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'.
[   99.218121][ T6861] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'.
[   99.277064][ T6864] netlink: 'syz.2.333': attribute type 28 has an invalid length.
[   99.346599][ T6865] netlink: 10 bytes leftover after parsing attributes in process `syz.1.332'.
[   99.359826][ T6865] netlink: 'syz.1.332': attribute type 13 has an invalid length.
[   99.362175][ T6865] netlink: 'syz.1.332': attribute type 17 has an invalid length.
[   99.441920][ T6865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.684104][ T6938] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[  101.687297][ T6938] netlink: 'syz.1.357': attribute type 2 has an invalid length.
[  101.690580][ T6938] netlink: 'syz.1.357': attribute type 4 has an invalid length.
[  101.693868][ T6938] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[  101.699817][ T6938] netlink: 'syz.1.357': attribute type 2 has an invalid length.
[  103.858128][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1258443102 wd_nsec: 1258443028
[  132.615463][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.618055][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  142.221983][ T5887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  142.232591][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  142.237395][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  142.241966][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  142.245377][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  142.260174][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  142.264769][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  142.268181][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  142.272649][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  142.297676][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  142.420409][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  142.424213][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  142.427143][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  142.432436][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  142.435391][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  142.775083][ T6967] chnl_net:caif_netlink_parms(): no params data found
[  142.815353][ T6962] chnl_net:caif_netlink_parms(): no params data found
[  143.297882][ T6963] chnl_net:caif_netlink_parms(): no params data found
[  143.635179][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.637791][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.641350][ T6967] bridge_slave_0: entered allmulticast mode
[  143.644172][ T6967] bridge_slave_0: entered promiscuous mode
[  143.742347][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.745220][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.747987][ T6967] bridge_slave_1: entered allmulticast mode
[  143.752381][ T6967] bridge_slave_1: entered promiscuous mode
[  143.785771][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.789825][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.792615][ T6962] bridge_slave_0: entered allmulticast mode
[  143.796477][ T6962] bridge_slave_0: entered promiscuous mode
[  143.820631][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.836258][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.839210][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.841954][ T6962] bridge_slave_1: entered allmulticast mode
[  143.846229][ T6962] bridge_slave_1: entered promiscuous mode
[  143.855198][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.899164][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.974415][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.984366][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.987057][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.991332][ T6963] bridge_slave_0: entered allmulticast mode
[  143.995088][ T6963] bridge_slave_0: entered promiscuous mode
[  144.014259][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.019552][ T6967] team0: Port device team_slave_0 added
[  144.022279][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.025064][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.027916][ T6963] bridge_slave_1: entered allmulticast mode
[  144.039459][ T6963] bridge_slave_1: entered promiscuous mode
[  144.044288][ T6967] team0: Port device team_slave_1 added
[  144.049634][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.105906][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.152323][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.154556][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.164952][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.172352][ T6962] team0: Port device team_slave_0 added
[  144.177846][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.196784][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.205432][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.208170][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.218821][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.234088][ T6962] team0: Port device team_slave_1 added
[  144.239033][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.298898][ T5236] Bluetooth: hci3: command tx timeout
[  144.305884][ T6963] team0: Port device team_slave_0 added
[  144.311516][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.314253][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.328051][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.334587][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.337316][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.347634][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.353094][ T6963] team0: Port device team_slave_1 added
[  144.368845][ T5236] Bluetooth: hci4: command tx timeout
[  144.382055][ T6967] hsr_slave_0: entered promiscuous mode
[  144.384427][ T6967] hsr_slave_1: entered promiscuous mode
[  144.386656][ T6967] debugfs: 'hsr0' already exists in 'hsr'
[  144.389670][ T6967] Cannot create hsr debugfs directory
[  144.417923][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.420744][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.431873][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.437727][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.443672][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.454800][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.528999][ T5236] Bluetooth: hci5: command tx timeout
[  144.550942][ T6963] hsr_slave_0: entered promiscuous mode
[  144.554051][ T6963] hsr_slave_1: entered promiscuous mode
[  144.556823][ T6963] debugfs: 'hsr0' already exists in 'hsr'
[  144.559136][ T6963] Cannot create hsr debugfs directory
[  144.565081][ T6962] hsr_slave_0: entered promiscuous mode
[  144.567742][ T6962] hsr_slave_1: entered promiscuous mode
[  144.571480][ T6962] debugfs: 'hsr0' already exists in 'hsr'
[  144.573406][ T6962] Cannot create hsr debugfs directory
[  144.651151][   T13] bond0: left allmulticast mode
[  144.652874][   T13] bond_slave_0: left allmulticast mode
[  144.654547][   T13] bond_slave_1: left allmulticast mode
[  144.656385][   T13] bond0: left promiscuous mode
[  144.658187][   T13] bond_slave_0: left promiscuous mode
[  144.660911][   T13] bond_slave_1: left promiscuous mode
[  144.662811][   T13] bridge0: port 3(bond0) entered disabled state
[  144.667435][   T13] bridge_slave_1: left allmulticast mode
[  144.669753][   T13] bridge_slave_1: left promiscuous mode
[  144.671661][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.676329][   T13] bridge_slave_0: left allmulticast mode
[  144.678198][   T13] bridge_slave_0: left promiscuous mode
[  144.681075][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.946826][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.955219][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.963832][   T13] bond0 (unregistering): Released all slaves
[  145.342267][   T13] hsr_slave_0: left promiscuous mode
[  145.346678][   T13] hsr_slave_1: left promiscuous mode
[  145.356468][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.360224][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.364111][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.367382][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.381937][   T13] veth1_macvtap: left promiscuous mode
[  145.384297][   T13] veth0_macvtap: left promiscuous mode
[  145.386676][   T13] veth1_vlan: left promiscuous mode
[  145.389769][   T13] veth0_vlan: left promiscuous mode
[  145.758157][   T13] team0 (unregistering): Port device team_slave_1 removed
[  145.790992][   T13] team0 (unregistering): Port device team_slave_0 removed
[  146.183624][ T6967] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  146.205934][ T6967] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  146.220751][ T6967] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  146.235593][ T6967] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  146.320934][ T6962] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  146.343656][ T6962] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  146.356366][ T6962] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  146.361380][ T6962] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  146.368909][ T5236] Bluetooth: hci3: command tx timeout
[  146.449687][ T5236] Bluetooth: hci4: command tx timeout
[  146.490054][ T6963] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  146.505490][ T6963] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  146.523805][ T6963] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  146.541205][ T6963] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  146.602023][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.610871][ T5236] Bluetooth: hci5: command tx timeout
[  146.623282][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.654462][ T6967] 8021q: adding VLAN 0 to HW filter on device team0
[  146.674571][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.678164][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.680581][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.685202][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.687866][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.706025][ T6962] 8021q: adding VLAN 0 to HW filter on device team0
[  146.723406][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.751018][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.753450][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.770724][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.773230][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.783414][ T6967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.816133][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.834461][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.880122][ T6963] 8021q: adding VLAN 0 to HW filter on device team0
[  146.900035][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.950033][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.952631][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.961102][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.963934][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.136220][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.253135][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.323100][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.362806][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.396833][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.427460][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.492167][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.702295][ T6967] veth0_vlan: entered promiscuous mode
[  147.750377][   T13] bridge_slave_1: left allmulticast mode
[  147.752627][   T13] bridge_slave_1: left promiscuous mode
[  147.755769][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.774385][   T13] bridge_slave_0: left allmulticast mode
[  147.776590][   T13] bridge_slave_0: left promiscuous mode
[  147.779381][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.785893][   T13] bridge_slave_1: left allmulticast mode
[  147.788083][   T13] bridge_slave_1: left promiscuous mode
[  147.791894][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.802910][   T13] bridge_slave_0: left allmulticast mode
[  147.804985][   T13] bridge_slave_0: left promiscuous mode
[  147.807259][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.034191][   T13] team0: Port device geneve1 removed
[  148.194025][   T13] team0: Port device bond0 removed
[  148.198267][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.205409][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.210971][   T13] bond0 (unregistering): Released all slaves
[  148.458859][ T5236] Bluetooth: hci3: command tx timeout
[  148.466507][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.472116][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.475655][   T13] bond0 (unregistering): Released all slaves
[  148.492538][ T6967] veth1_vlan: entered promiscuous mode
[  148.538986][ T5236] Bluetooth: hci4: command tx timeout
[  148.563036][ T6967] veth0_macvtap: entered promiscuous mode
[  148.591282][ T6967] veth1_macvtap: entered promiscuous mode
[  148.612223][ T6962] veth0_vlan: entered promiscuous mode
[  148.616749][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.626224][ T6962] veth1_vlan: entered promiscuous mode
[  148.634074][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.654375][ T5876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.658290][ T5876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.678863][ T5876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.686831][ T5876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.692100][ T5236] Bluetooth: hci5: command tx timeout
[  148.780517][ T6962] veth0_macvtap: entered promiscuous mode
[  148.851442][ T6963] veth0_vlan: entered promiscuous mode
[  148.854948][ T6962] veth1_macvtap: entered promiscuous mode
[  148.904725][ T6963] veth1_vlan: entered promiscuous mode
[  148.952211][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.956848][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.969694][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.974890][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.013159][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.016421][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.053502][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.053556][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.062861][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.068453][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.076569][ T6963] veth0_macvtap: entered promiscuous mode
[  149.110114][ T6963] veth1_macvtap: entered promiscuous mode
[  149.136869][   T13] hsr_slave_0: left promiscuous mode
[  149.145186][   T13] hsr_slave_1: left promiscuous mode
[  149.147497][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.150228][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.153545][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.156451][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.163676][   T13] hsr_slave_0: left promiscuous mode
[  149.166488][   T13] hsr_slave_1: left promiscuous mode
[  149.171764][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.174674][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.178160][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.184550][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.205271][   T13] veth1_macvtap: left promiscuous mode
[  149.207297][   T13] veth0_macvtap: left promiscuous mode
[  149.210749][   T13] veth1_vlan: left promiscuous mode
[  149.212472][   T13] veth0_vlan: left promiscuous mode
[  149.215085][   T13] veth1_macvtap: left promiscuous mode
[  149.217219][   T13] veth0_macvtap: left promiscuous mode
[  149.545631][   T13] team0 (unregistering): Port device team_slave_1 removed
[  149.582915][   T13] team0 (unregistering): Port device team_slave_0 removed
[  150.023535][   T13] team0 (unregistering): Port device team_slave_1 removed
[  150.054309][   T13] team0 (unregistering): Port device team_slave_0 removed
[  150.473737][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.511363][ T6394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.522799][ T6394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.535691][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.539003][ T5236] Bluetooth: hci3: command tx timeout
[  150.609962][ T6394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.615086][ T5236] Bluetooth: hci4: command tx timeout
[  150.615094][ T6394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.636612][ T5915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.647154][ T5915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.666273][ T5915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.670191][ T5915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.772416][ T5236] Bluetooth: hci5: command tx timeout
[  150.918966][ T7096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  150.927806][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.949857][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.956959][ T7096] validate_nla: 4 callbacks suppressed
[  150.956974][ T7096] netlink: 'syz.6.368': attribute type 31 has an invalid length.
[  151.044699][ T6401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.049914][ T6401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.133357][ T7103] netlink: 'syz.6.370': attribute type 1 has an invalid length.
[  151.148143][ T7103] __nla_validate_parse: 3 callbacks suppressed
[  151.148157][ T7103] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.370'.
[  151.641541][ T7123] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.377'.
[  151.647466][ T7123] bridge: RTM_NEWNEIGH with invalid ether address
[  151.666289][ T7122] syzkaller0: entered promiscuous mode
[  151.668764][ T7122] syzkaller0: entered allmulticast mode
[  151.975722][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.985404][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.010463][ T7134] bridge0: entered allmulticast mode
[  152.100733][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.103696][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.107192][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.110191][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.138749][ T7139] bridge0: entered promiscuous mode
[  152.690733][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.5.386'.
[  157.887685][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3668288541 wd_nsec: 3668288566
[  162.652967][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.687678][ T7166] bridge_slave_0 (unregistering): left allmulticast mode
[  162.695455][ T7166] bridge_slave_0 (unregistering): left promiscuous mode
[  162.698245][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.267866][ T7209] netlink: 'syz.4.397': attribute type 21 has an invalid length.
[  163.326224][ T7214] wlan1 speed is unknown, defaulting to 1000
[  163.345811][ T7214] wlan1 speed is unknown, defaulting to 1000
[  163.393917][ T7214] wlan1 speed is unknown, defaulting to 1000
[  163.423544][ T7214] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  163.468135][ T7214] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  163.571023][ T7210] Driver unsupported XDP return value 0 on prog  (id 150) dev N/A, expect packet loss!
[  163.579046][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[  163.588183][ T7214] wlan1 speed is unknown, defaulting to 1000
[  163.606808][ T7214] wlan1 speed is unknown, defaulting to 1000
[  163.611143][ T7214] wlan1 speed is unknown, defaulting to 1000
[  163.816311][ T7242] netlink: 'syz.4.408': attribute type 6 has an invalid length.
[  163.902756][ T7243] netlink: 'syz.6.407': attribute type 11 has an invalid length.
[  163.941225][ T7243] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.407'.
[  164.025309][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.262795][ T7262] netlink: 68 bytes leftover after parsing attributes in process `syz.4.413'.
[  164.755507][ T7273] netlink: 160 bytes leftover after parsing attributes in process `syz.6.418'.
[  165.264341][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'.
[  165.391491][ T7302] netlink: 104 bytes leftover after parsing attributes in process `syz.4.426'.
[  165.736469][ T7313] netlink: 'syz.4.430': attribute type 13 has an invalid length.
[  166.011392][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.014236][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.014325][ T7312] Set syz1 is full, maxelem 6117 reached
[  166.205988][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.227059][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.587009][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.594804][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.602923][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.610592][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.676730][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'.
[  167.038105][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.437'.
[  167.042113][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.437'.
[  167.072582][ T7336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.438'.
[  167.185203][ T7340] netlink: 'syz.4.440': attribute type 10 has an invalid length.
[  167.749283][   T33] audit: type=1107 audit(1758752196.722:3): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  168.595015][ T7396] netlink: 'syz.5.466': attribute type 21 has an invalid length.
[  168.614397][ T7396] __nla_validate_parse: 1 callbacks suppressed
[  168.614406][ T7396] netlink: 128 bytes leftover after parsing attributes in process `syz.5.466'.
[  168.628692][ T7396] netlink: 3 bytes leftover after parsing attributes in process `syz.5.466'.
[  168.726514][ T7406] netlink: 'syz.5.470': attribute type 21 has an invalid length.
[  168.729426][ T7406] netlink: 128 bytes leftover after parsing attributes in process `syz.5.470'.
[  168.732216][ T7406] netlink: 'syz.5.470': attribute type 6 has an invalid length.
[  168.758677][ T7406] netlink: 3 bytes leftover after parsing attributes in process `syz.5.470'.
[  168.866126][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.475'.
[  169.341953][ T7458] dummy0: entered allmulticast mode
[  169.543074][ T7471] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  169.547912][ T7471] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.647965][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.497'.
[  170.124860][ T7486] netlink: 'syz.6.503': attribute type 1 has an invalid length.
[  170.384898][ T7497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.506'.
[  170.405657][ T7497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.506'.
[  170.415221][ T7497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.506'.
[  170.597741][ T7510] netlink: 104 bytes leftover after parsing attributes in process `syz.5.510'.
[  171.102620][ T7518] syzkaller0: entered promiscuous mode
[  171.104385][ T7518] syzkaller0: entered allmulticast mode
[  172.395141][ T7541] wlan1 speed is unknown, defaulting to 1000
[  173.616458][ T7574] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  174.074953][ T7597] netlink: 'syz.6.543': attribute type 9 has an invalid length.
[  174.486465][ T7617] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  174.977780][ T7639] xt_socket: unknown flags 0x20
[  175.462714][ T7669] netlink: 'syz.4.559': attribute type 10 has an invalid length.
[  175.465242][ T7669] __nla_validate_parse: 4 callbacks suppressed
[  175.465249][ T7669] netlink: 168 bytes leftover after parsing attributes in process `syz.4.559'.
[  175.787791][ T7689] netlink: 'syz.4.568': attribute type 39 has an invalid length.
[  176.269421][ T7713] netlink: 'syz.5.574': attribute type 10 has an invalid length.
[  177.960150][ T7727] delete_channel: no stack
[  178.393126][ T7769] netlink: 'syz.6.587': attribute type 1 has an invalid length.
[  179.708415][ T7810] netlink: 'syz.6.606': attribute type 3 has an invalid length.
[  179.715054][ T7810] netlink: 'syz.6.606': attribute type 1 has an invalid length.
[  179.717569][ T7810] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.606'.
[  179.845812][ T7819] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  179.846286][ T7821] netlink: 'syz.5.611': attribute type 10 has an invalid length.
[  179.867222][ T7821] veth0_vlan: left promiscuous mode
[  179.874053][ T7821] veth0_vlan: entered promiscuous mode
[  179.878463][ T7821] team0: Device veth0_vlan failed to register rx_handler
[  180.244358][ T7850] netlink: 'syz.5.625': attribute type 39 has an invalid length.
[  180.415724][ T7850] hsr_slave_0 (unregistering): left promiscuous mode
[  180.827100][ T7873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.829814][ T7873] IPv6: NLM_F_CREATE should be set when creating new route
[  180.832216][ T7873] IPv6: NLM_F_CREATE should be set when creating new route
[  180.855943][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'.
[  181.267263][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.641'.
[  181.484643][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.646'.
[  181.488440][ T7901] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  181.525037][ T7903] netlink: 'syz.6.647': attribute type 9 has an invalid length.
[  181.528161][ T7903] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.647'.
[  181.734374][ T7917] netlink: 'syz.5.654': attribute type 46 has an invalid length.
[  181.815714][ T7913] netlink: 132 bytes leftover after parsing attributes in process `syz.6.652'.
[  182.044638][ T7932] openvswitch: netlink: IPv6 tunnel dst address is zero
[  182.192394][ T7951] netlink: 'syz.4.670': attribute type 1 has an invalid length.
[  183.633766][ T5897] bridge_slave_1: left allmulticast mode
[  183.635575][ T5897] bridge_slave_1: left promiscuous mode
[  183.637848][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.644310][ T5897] bridge_slave_0: left allmulticast mode
[  183.646127][ T5897] bridge_slave_0: left promiscuous mode
[  183.648103][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.977984][ T8000] netlink: 'syz.5.691': attribute type 6 has an invalid length.
[  183.993146][ T8000] netlink: 144448 bytes leftover after parsing attributes in process `syz.5.691'.
[  184.044935][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.056188][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.065430][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.071313][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.074251][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.106162][ T5887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.114001][ T5887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.121775][ T5887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.133089][ T5887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.145258][ T5887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.152692][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.170485][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.175314][ T5897] bond0 (unregistering): Released all slaves
[  184.219676][ T8001] wlan1 speed is unknown, defaulting to 1000
[  184.275379][ T8005] wlan1 speed is unknown, defaulting to 1000
[  184.360686][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.694'.
[  184.666951][ T8001] chnl_net:caif_netlink_parms(): no params data found
[  184.815528][ T8005] chnl_net:caif_netlink_parms(): no params data found
[  184.843851][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.846352][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.854443][ T8001] bridge_slave_0: entered allmulticast mode
[  184.857885][ T8001] bridge_slave_0: entered promiscuous mode
[  184.879710][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.882151][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.884562][ T8001] bridge_slave_1: entered allmulticast mode
[  184.887983][ T8001] bridge_slave_1: entered promiscuous mode
[  184.906836][ T5897] hsr_slave_0: left promiscuous mode
[  184.910707][ T5897] hsr_slave_1: left promiscuous mode
[  184.912922][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.915697][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.137081][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  185.181812][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  185.282529][ T8036] netlink: 2 bytes leftover after parsing attributes in process `syz.5.696'.
[  185.586748][ T8036] batadv_slave_1: entered promiscuous mode
[  185.615921][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.641569][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.730066][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.732349][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.734757][ T8005] bridge_slave_0: entered allmulticast mode
[  185.737986][ T8005] bridge_slave_0: entered promiscuous mode
[  185.747557][ T8001] team0: Port device team_slave_0 added
[  185.754131][ T8001] team0: Port device team_slave_1 added
[  185.830182][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.834180][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.837159][ T8005] bridge_slave_1: entered allmulticast mode
[  185.842233][ T8005] bridge_slave_1: entered promiscuous mode
[  185.846060][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.852380][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.870506][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.983372][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.985618][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.997677][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.006378][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.014001][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.060889][ T8005] team0: Port device team_slave_0 added
[  186.075775][ T8005] team0: Port device team_slave_1 added
[  186.121320][ T8001] hsr_slave_0: entered promiscuous mode
[  186.129653][ T8001] hsr_slave_1: entered promiscuous mode
[  186.133201][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.135420][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.144490][ T5236] Bluetooth: hci0: command tx timeout
[  186.149334][ T8005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.156474][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.164145][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.174598][ T8005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.219049][ T5236] Bluetooth: hci1: command tx timeout
[  186.346186][ T8005] hsr_slave_0: entered promiscuous mode
[  186.350240][ T8005] hsr_slave_1: entered promiscuous mode
[  186.353156][ T8005] debugfs: 'hsr0' already exists in 'hsr'
[  186.355482][ T8005] Cannot create hsr debugfs directory
[  186.389798][ T5897] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.522312][ T5897] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.632182][ T8071] netlink: 'syz.5.705': attribute type 10 has an invalid length.
[  186.640727][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.705'.
[  186.641843][ T5897] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.705735][ T8071] batadv0: entered promiscuous mode
[  186.711723][ T8071] batadv0: entered allmulticast mode
[  186.798330][ T8071] bridge0: port 1(batadv0) entered blocking state
[  186.815667][ T8071] bridge0: port 1(batadv0) entered disabled state
[  186.989035][ T5915] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  186.989350][ T8071] bridge0: port 1(batadv0) entered blocking state
[  186.993126][ T5915] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  187.002928][ T8071] bridge0: port 1(batadv0) entered forwarding state
[  187.095247][ T5897] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.200463][ T8001] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  187.221936][ T8001] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  187.245320][ T8001] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  187.255804][ T8001] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  187.315987][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.397536][ T8005] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  187.419892][ T5897] bridge_slave_1: left allmulticast mode
[  187.422333][ T5897] bridge_slave_1: left promiscuous mode
[  187.424808][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.432182][ T5897] bridge_slave_0: left allmulticast mode
[  187.434681][ T5897] bridge_slave_0: left promiscuous mode
[  187.437272][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.773213][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.779586][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.785326][ T5897] bond0 (unregistering): Released all slaves
[  187.798997][ T8005] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  187.806342][ T8005] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  187.823163][ T8005] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  187.914015][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.958449][ T8001] 8021q: adding VLAN 0 to HW filter on device team0
[  187.987658][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.990710][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.012558][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.015576][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.210221][ T5236] Bluetooth: hci0: command tx timeout
[  188.246178][ T5897] hsr_slave_0: left promiscuous mode
[  188.254936][ T5897] hsr_slave_1: left promiscuous mode
[  188.257750][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.263003][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.266823][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.270343][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.283229][ T5897] veth1_macvtap: left promiscuous mode
[  188.285581][ T5897] veth0_macvtap: left promiscuous mode
[  188.288115][ T5897] veth1_vlan: left promiscuous mode
[  188.290606][ T5236] Bluetooth: hci1: command tx timeout
[  188.293098][ T5897] veth0_vlan: left promiscuous mode
[  188.666540][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  188.703766][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  189.006647][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.065933][ T8005] 8021q: adding VLAN 0 to HW filter on device team0
[  189.084029][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.086753][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.107486][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.110276][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.156626][ T8111] C: renamed from team_slave_0 (while UP)
[  189.163115][ T8111] netlink: 'syz.5.709': attribute type 1 has an invalid length.
[  189.166052][ T8111] netlink: 152 bytes leftover after parsing attributes in process `syz.5.709'.
[  189.193335][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.437500][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.655048][ T8001] veth0_vlan: entered promiscuous mode
[  189.694319][ T8001] veth1_vlan: entered promiscuous mode
[  189.735360][ T8001] veth0_macvtap: entered promiscuous mode
[  189.752841][ T8001] veth1_macvtap: entered promiscuous mode
[  189.774064][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.792625][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.812312][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.817494][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.828316][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.853240][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.909248][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.912390][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.951672][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.954893][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.977219][ T8005] veth0_vlan: entered promiscuous mode
[  190.003906][ T8005] veth1_vlan: entered promiscuous mode
[  190.071975][ T8005] veth0_macvtap: entered promiscuous mode
[  190.076155][ T8005] veth1_macvtap: entered promiscuous mode
[  190.104142][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.124953][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.173402][ T5897] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.181596][ T5897] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.196064][ T5897] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.224785][ T5897] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.289228][ T5236] Bluetooth: hci0: command tx timeout
[  190.301614][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.304097][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.369452][ T5236] Bluetooth: hci1: command tx timeout
[  190.552623][ T8167] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.717'.
[  190.565045][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.568134][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.731597][ T8178] netlink: 'syz.7.719': attribute type 21 has an invalid length.
[  190.906518][ T8193] netlink: 'syz.7.726': attribute type 21 has an invalid length.
[  191.061758][ T8205] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.732'.
[  191.736261][ T5236] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[  192.179241][ T8256] syzkaller0: entered promiscuous mode
[  192.186167][ T8256] syzkaller0: entered allmulticast mode
[  192.370434][ T5236] Bluetooth: hci0: command tx timeout
[  192.432612][ T8280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.765'.
[  192.453114][ T5236] Bluetooth: hci1: command tx timeout
[  192.537147][ T8286] netlink: 'syz.8.768': attribute type 2 has an invalid length.
[  192.540395][ T8286] netlink: 'syz.8.768': attribute type 9 has an invalid length.
[  192.543618][ T8286] netlink: 132 bytes leftover after parsing attributes in process `syz.8.768'.
[  192.647372][ T8281] delete_channel: no stack
[  192.739821][ T8294] netlink: 'syz.5.771': attribute type 1 has an invalid length.
[  192.743757][ T8294] netlink: 'syz.5.771': attribute type 2 has an invalid length.
[  192.792905][ T8297] netlink: 'syz.8.770': attribute type 1 has an invalid length.
[  193.442217][ T8318] netlink: 104 bytes leftover after parsing attributes in process `syz.5.781'.
[  193.467072][ T8313] netlink: 'syz.8.779': attribute type 29 has an invalid length.
[  193.476148][ T8313] netlink: 'syz.8.779': attribute type 29 has an invalid length.
[  193.488316][ T8313] netlink: 500 bytes leftover after parsing attributes in process `syz.8.779'.
[  193.572266][ T8326] netlink: 104 bytes leftover after parsing attributes in process `syz.7.785'.
[  193.636574][ T8329] netlink: 'syz.8.786': attribute type 21 has an invalid length.
[  193.830156][ T8343] netlink: 'syz.5.792': attribute type 1 has an invalid length.
[  194.055731][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.058245][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.078022][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.8.793'.
[  194.164216][ T8360] netlink: 'syz.7.799': attribute type 1 has an invalid length.
[  194.423493][ T8366] netlink: 132 bytes leftover after parsing attributes in process `syz.7.801'.
[  195.200248][ T8386] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.808'.
[  195.307921][ T8390] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.810'.
[  195.331854][ T8392] netlink: 56 bytes leftover after parsing attributes in process `syz.5.811'.
[  197.004444][ T8469] openvswitch: netlink: IP tunnel dst address not specified
[  197.435627][ T5236] Bluetooth: hci0: unexpected event 0x31 length: 82 > 6
[  197.462317][ T8501] __nla_validate_parse: 6 callbacks suppressed
[  197.462334][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.7.857'.
[  197.473943][ T8501] ipvlan1: entered promiscuous mode
[  197.478281][ T8501] ipvlan1: entered allmulticast mode
[  197.480735][ T8501] veth0_vlan: entered allmulticast mode
[  197.490211][ T8501] bridge0: port 3(ipvlan1) entered blocking state
[  197.536918][ T8501] bridge0: port 3(ipvlan1) entered disabled state
[  197.546884][ T8501] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  198.714818][ T8514] netlink: 763 bytes leftover after parsing attributes in process `syz.5.862'.
[  198.803199][ T8520] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  198.859410][ T8523] netlink: 65051 bytes leftover after parsing attributes in process `syz.8.866'.
[  199.103311][ T8539] netlink: 188 bytes leftover after parsing attributes in process `syz.5.870'.
[  199.443410][ T8554] wlan1 speed is unknown, defaulting to 1000
[  200.285324][ T8584] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.882'.
[  200.547128][ T8607] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.892'.
[  201.255769][ T8641] netlink: 42496 bytes leftover after parsing attributes in process `syz.7.905'.
[  201.875945][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.7.917'.
[  202.049117][ T8687] validate_nla: 9 callbacks suppressed
[  202.049133][ T8687] netlink: 'syz.8.921': attribute type 2 has an invalid length.
[  202.054883][ T8687] netlink: 'syz.8.921': attribute type 8 has an invalid length.
[  202.057955][ T8687] netlink: 44 bytes leftover after parsing attributes in process `syz.8.921'.
[  202.066755][ T8685] openvswitch: netlink: IPv4 tun info is not correct
[  202.814897][ T8688] ------------[ cut here ]------------
[  202.816926][ T8688] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  202.841798][ T8688] WARNING: CPU: 0 PID: 8688 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x6e6/0xc20
[  202.845825][ T8688] Modules linked in:
[  202.847558][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.7.919 Not tainted syzkaller #0 PREEMPT(full) 
[  202.852635][ T8688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.856569][ T8688] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  202.859544][ T8688] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 bf f6 a9 ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  202.867099][ T8688] RSP: 0018:ffffc900037feee8 EFLAGS: 00010286
[  202.869660][ T8688] RAX: e659de87f7d94a00 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  202.872798][ T8688] RDX: ffffc9000f4f1000 RSI: 000000000002e896 RDI: 000000000002e897
[  202.875902][ T8688] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  202.879436][ T8688] R10: dffffc0000000000 R11: fffffbfff1bfa23c R12: ffff88810f783230
[  202.882696][ T8688] R13: ffff88810f783250 R14: ffff88810f783268 R15: 00000000ffffdfcc
[  202.885814][ T8688] FS:  00007f56c51c26c0(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  202.889581][ T8688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.892198][ T8688] CR2: 00007fd5aa7056c0 CR3: 0000000020980000 CR4: 00000000000006f0
[  202.895307][ T8688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  202.898901][ T8688] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  202.902040][ T8688] Call Trace:
[  202.903356][ T8688]  <TASK>
[  202.904579][ T8688]  reg_set_min_max+0x214/0x300
[  202.906468][ T8688]  check_cond_jmp_op+0x1985/0x2d50
[  202.908627][ T8688]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  202.910744][ T8688]  ? do_check+0x5ddf/0xed30
[  202.912527][ T8688]  ? kfree+0x18e/0x440
[  202.914167][ T8688]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  202.916435][ T8688]  do_check+0x5a8e/0xed30
[  202.918180][ T8688]  ? do_check+0xf41/0xed30
[  202.920163][ T8688]  ? __pfx_do_check+0x10/0x10
[  202.922060][ T8688]  ? do_check_common+0x422/0x24e0
[  202.924035][ T8688]  do_check_common+0x1938/0x24e0
[  202.926011][ T8688]  bpf_check+0x183d4/0x1d720
[  202.927797][ T8688]  ? is_bpf_text_address+0x26/0x2b0
[  202.929987][ T8688]  ? is_bpf_text_address+0x292/0x2b0
[  202.932066][ T8688]  ? is_bpf_text_address+0x26/0x2b0
[  202.934114][ T8688]  ? __lock_acquire+0xab9/0xd20
[  202.936098][ T8688]  ? __mutex_trylock_common+0x153/0x260
[  202.938300][ T8688]  ? __pfx___mutex_trylock_common+0x10/0x10
[  202.940841][ T8688]  ? css_rstat_updated+0x23a/0x4f0
[  202.942915][ T8688]  ? __lock_acquire+0xab9/0xd20
[  202.944914][ T8688]  ? __pfx_bpf_check+0x10/0x10
[  202.946839][ T8688]  ? ktime_get_with_offset+0x8c/0x2a0
[  202.949059][ T8688]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  202.951542][ T8688]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.954080][ T8688]  ? ktime_get_with_offset+0x8c/0x2a0
[  202.956219][ T8688]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  202.959182][ T8688]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  202.961793][ T8688]  ? __asan_memset+0x22/0x50
[  202.963651][ T8688]  ? bpf_obj_name_cpy+0x194/0x1e0
[  202.965705][ T8688]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  202.967762][ T8688]  ? security_bpf_prog_load+0x7f/0x310
[  202.970098][ T8688]  bpf_prog_load+0x13ba/0x19e0
[  202.972060][ T8688]  ? __pfx_bpf_prog_load+0x10/0x10
[  202.974141][ T8688]  ? bpf_lsm_bpf+0x9/0x20
[  202.975872][ T8688]  ? security_bpf+0x7e/0x300
[  202.977717][ T8688]  __sys_bpf+0x507/0x860
[  202.979572][ T8688]  ? __pfx___sys_bpf+0x10/0x10
[  202.981475][ T8688]  ? kvm_sched_clock_read+0x11/0x20
[  202.983640][ T8688]  __x64_sys_bpf+0x7c/0x90
[  202.985433][ T8688]  do_syscall_64+0xfa/0x3b0
[  202.987229][ T8688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.989726][ T8688]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  202.992203][ T8688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.994574][ T8688] RIP: 0033:0x7f56c438ec29
[  202.996332][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.004255][ T8688] RSP: 002b:00007f56c51c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  203.007830][ T8688] RAX: ffffffffffffffda RBX: 00007f56c45d6090 RCX: 00007f56c438ec29
[  203.012981][ T8688] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  203.016108][ T8688] RBP: 00007f56c4411e41 R08: 0000000000000000 R09: 0000000000000000
[  203.020388][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.023554][ T8688] R13: 00007f56c45d6128 R14: 00007f56c45d6090 R15: 00007ffd66759008
[  203.026697][ T8688]  </TASK>
[  203.027950][ T8688] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  203.030806][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.7.919 Not tainted syzkaller #0 PREEMPT(full) 
[  203.034339][ T8688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.038193][ T8688] Call Trace:
[  203.039415][ T8688]  <TASK>
[  203.040341][ T8688]  dump_stack_lvl+0x99/0x250
[  203.042016][ T8688]  ? __asan_memcpy+0x40/0x70
[  203.043871][ T8688]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.045955][ T8688]  ? __pfx__printk+0x10/0x10
[  203.047839][ T8688]  vpanic+0x281/0x750
[  203.049422][ T8688]  ? __pfx__printk+0x10/0x10
[  203.051170][ T8688]  ? __pfx_vpanic+0x10/0x10
[  203.053002][ T8688]  ? is_bpf_text_address+0x26/0x2b0
[  203.055080][ T8688]  panic+0xb9/0xc0
[  203.056514][ T8688]  ? __pfx_panic+0x10/0x10
[  203.058201][ T8688]  __warn+0x31b/0x4b0
[  203.059756][ T8688]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  203.061908][ T8688]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  203.063959][ T8688]  report_bug+0x2be/0x4f0
[  203.065685][ T8688]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  203.067911][ T8688]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  203.070116][ T8688]  ? reg_bounds_sanity_check+0x6e8/0xc20
[  203.072301][ T8688]  handle_bug+0x84/0x160
[  203.074014][ T8688]  exc_invalid_op+0x1a/0x50
[  203.075809][ T8688]  asm_exc_invalid_op+0x1a/0x20
[  203.077731][ T8688] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  203.080219][ T8688] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 bf f6 a9 ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  203.087487][ T8688] RSP: 0018:ffffc900037feee8 EFLAGS: 00010286
[  203.089830][ T8688] RAX: e659de87f7d94a00 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  203.092776][ T8688] RDX: ffffc9000f4f1000 RSI: 000000000002e896 RDI: 000000000002e897
[  203.095727][ T8688] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
[  203.098872][ T8688] R10: dffffc0000000000 R11: fffffbfff1bfa23c R12: ffff88810f783230
[  203.102176][ T8688] R13: ffff88810f783250 R14: ffff88810f783268 R15: 00000000ffffdfcc
[  203.105505][ T8688]  reg_set_min_max+0x214/0x300
[  203.107479][ T8688]  check_cond_jmp_op+0x1985/0x2d50
[  203.109619][ T8688]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  203.111901][ T8688]  ? do_check+0x5ddf/0xed30
[  203.113768][ T8688]  ? kfree+0x18e/0x440
[  203.115423][ T8688]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  203.117922][ T8688]  do_check+0x5a8e/0xed30
[  203.119768][ T8688]  ? do_check+0xf41/0xed30
[  203.121666][ T8688]  ? __pfx_do_check+0x10/0x10
[  203.123655][ T8688]  ? do_check_common+0x422/0x24e0
[  203.125632][ T8688]  do_check_common+0x1938/0x24e0
[  203.127733][ T8688]  bpf_check+0x183d4/0x1d720
[  203.129630][ T8688]  ? is_bpf_text_address+0x26/0x2b0
[  203.131752][ T8688]  ? is_bpf_text_address+0x292/0x2b0
[  203.133973][ T8688]  ? is_bpf_text_address+0x26/0x2b0
[  203.136151][ T8688]  ? __lock_acquire+0xab9/0xd20
[  203.138197][ T8688]  ? __mutex_trylock_common+0x153/0x260
[  203.140503][ T8688]  ? __pfx___mutex_trylock_common+0x10/0x10
[  203.142911][ T8688]  ? css_rstat_updated+0x23a/0x4f0
[  203.145003][ T8688]  ? __lock_acquire+0xab9/0xd20
[  203.147005][ T8688]  ? __pfx_bpf_check+0x10/0x10
[  203.149043][ T8688]  ? ktime_get_with_offset+0x8c/0x2a0
[  203.151196][ T8688]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  203.153634][ T8688]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.155809][ T8688]  ? ktime_get_with_offset+0x8c/0x2a0
[  203.158062][ T8688]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  203.160682][ T8688]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  203.163414][ T8688]  ? __asan_memset+0x22/0x50
[  203.165339][ T8688]  ? bpf_obj_name_cpy+0x194/0x1e0
[  203.167439][ T8688]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  203.169576][ T8688]  ? security_bpf_prog_load+0x7f/0x310
[  203.171780][ T8688]  bpf_prog_load+0x13ba/0x19e0
[  203.173781][ T8688]  ? __pfx_bpf_prog_load+0x10/0x10
[  203.175918][ T8688]  ? bpf_lsm_bpf+0x9/0x20
[  203.177705][ T8688]  ? security_bpf+0x7e/0x300
[  203.179664][ T8688]  __sys_bpf+0x507/0x860
[  203.181407][ T8688]  ? __pfx___sys_bpf+0x10/0x10
[  203.183311][ T8688]  ? kvm_sched_clock_read+0x11/0x20
[  203.185476][ T8688]  __x64_sys_bpf+0x7c/0x90
[  203.187330][ T8688]  do_syscall_64+0xfa/0x3b0
[  203.189222][ T8688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.191577][ T8688]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  203.193979][ T8688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.196268][ T8688] RIP: 0033:0x7f56c438ec29
[  203.198016][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.205508][ T8688] RSP: 002b:00007f56c51c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  203.208851][ T8688] RAX: ffffffffffffffda RBX: 00007f56c45d6090 RCX: 00007f56c438ec29
[  203.211928][ T8688] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  203.215032][ T8688] RBP: 00007f56c4411e41 R08: 0000000000000000 R09: 0000000000000000
[  203.218127][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.221333][ T8688] R13: 00007f56c45d6128 R14: 00007f56c45d6090 R15: 00007ffd66759008
[  203.224525][ T8688]  </TASK>
[  203.226433][ T8688] Kernel Offset: disabled
[  203.228155][ T8688] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:17:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000003143a RDI=000000000003143b RBP=00000000000003f8 RSP=ffffc900037fe690
R8 =ffff888106c40237 R9 =1ffff11020d88046 R10=dffffc0000000000 R11=ffffffff85504b00
R12=dffffc0000000000 R13=ffffffff99b048e3 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f56c51c26c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd5aa7056c0 CR3=0000000020980000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f56c4412e7b
XMM06=0000000000000000 00007f56c4412e75 XMM07=0000000000000000 00007f56c4412e89
XMM08=0000000000000000 00007f56c4412f0f XMM09=0000000000000000 00007f56c4412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000007f690 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000007f690 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae1b4e R10=0000000000000003 R11=ffffffff81704490
R12=000000001000848a R13=dffffc0000000000 R14=000000000007f690 R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055aeea0f1000 CR3=0000000106b0c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
