last executing test programs:

1.040031727s ago: executing program 1 (id=676):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x98}}, 0x4048010)

1.030284818s ago: executing program 2 (id=678):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}], {0x95, 0x0, 0x0, 0x20000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)

1.029187597s ago: executing program 0 (id=679):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xc, 0x0, 0x45)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350604000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c0acd5db6538824c600d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cf6e3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x1, 0x3, 0xb, 0x5, 0xfffffffffffffff8, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x5, 0x3, 0xfffffffffffffffc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x55, &(0x7f0000000380)=""/85, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x4, 0x2, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa}, {0x3, 0x3, 0xa, 0x3}, {0x1, 0x3, 0xf, 0x9}, {0x2, 0x5, 0x5, 0x6}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x13, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f00000006c0)='\x00', <r7=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r6, r4, 0x30, 0x20, r3, @void, @void, @void, @value=r7, r5}, 0x20)

969.253413ms ago: executing program 1 (id=680):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3cf}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)

967.901002ms ago: executing program 2 (id=681):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000005c54294d00850000004f00000095000000000000002c1d165fd5f6519b67bce7778130974a3275fbf4503b40d65dacdd71b8ab49f0fc1b6a89d77f"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0a00000004000000dd0000000a80000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000500000047c36c6bef2d97ffe73ea2536cae9eab7acf8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000001300)=ANY=[@ANYRES16=r3], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1c, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000014c0)='percpu_alloc_percpu\x00', r2, 0x0, 0x7b}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000008000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x84}, {0x6}]})
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x80000000, 0xfffffffffffffffe}, 0x0, 0x3, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x26, 0x5, 0xe183, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$kcm(0xa, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1e, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="4cb75b319140cde3975500e4faf45d02e176e66dbb2c37967ad91a44395b2290db9a4173b573073eb7ddcf4db247026730c44f76fbcc2048434ddc1412add60563d0d4167b15b3ceb1531ebbd535e18664e6c5250a69c907aad0cec316c5bb55f91d1d8965bf6c6b5ba195788de839d5c07cd68b09703829e8a0c65a95e3d18e2c00850695fb0d58ce219ebdb70c5cbdf598d5a8642fe13a1e7ca75617c92bb1f40501509fd101ac525b9528"], &(0x7f0000000040)='GPL\x00', 0x4, 0xff8, &(0x7f0000000300)=""/4088, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x29, 0x37, &(0x7f0000000100)=r7, 0x120)
sendmsg$kcm(r6, &(0x7f0000002580)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x9, @loopback, 0xfffffff7}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000140)='2', 0x1}], 0x1}, 0x20000001)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x73)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[], 0x48}}, 0x0)

967.333541ms ago: executing program 1 (id=682):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61, 0x6f]}}, 0x0, 0x40}, 0x28)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10)
socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRES16=r2], 0xcfa4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r5, 0x0, 0x20000040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="070906000500cdebbf438000100000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, r5, r5, r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x2, 0x4, 0xf, 0xa}], 0x10, 0x8}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="000003009165a101010000aaaaaaaa07aaaaaaaaaaaa"])
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r7 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1a}, 0x5203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(r7, 0x0, 0x24000824)
r8 = socket$kcm(0x28, 0x1, 0x0)
recvmsg(r8, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)

899.207167ms ago: executing program 0 (id=683):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000001500599c6d0e0000ded650492d", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="f7663ca2b74627bf38ca49fa9452494f488ffc8a18382dff9dbb91e9dd7cfd7d827825f33d4732f168ac622d4c9b5a8cf2085136af0f498adf00040000007604631eb6cfe413e0a696569d7e26fc189b07a6fddf1708096d000000002f55fc44060dd876f1da6401a347985f2b874a67fb84ca67e93642dc1baf66286e7f8b0fdbfef4c8e2fb3fa4c043c4015ea76529b467ef19a256c81e803a"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18001f00000000feffff9500"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x880)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0x50, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x3c, 0x1, [@m_pedit={0x38, 0x1, 0x0, 0x0, {{0xa}, {0xc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe9db, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "39e718863d4fdd1ef40ef06d7ec4da31"}, @TCA_CT_MARK={0x8, 0x5, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x8050)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000141810ea000000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000030a01040000000000000000010000000900030073797a31000000000900010073797a31000000002800048008000140000000050800024f1b2fd2c51400030069703667726530000000000000000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/233, 0x0, 0xe9, 0x1, 0x8}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)

897.333553ms ago: executing program 1 (id=684):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1e, 0x6, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async)
socketpair(0x1e, 0x6, 0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
close(0x3)
recvmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x2140)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x28, 0x1, 0x28, 0x0) (async)
socketpair(0x28, 0x1, 0x28, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc0200"/12, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x1ec}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc0200"/12, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x1ec}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x4, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200049b0014"})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e0000000000cc011100fc010000000000000000000000000000ac1414aa0000000000000000000000000a010100000000d6e9550024bb3ebcda0c630000000000000000000000000001ff030000063500000a00020000000000000000000000000000000000000000000000000000000000000000000000ffffac1414aaac1e00010000000000000000000000003c040000ff34000002000a0000000000000000000000000000000000fe800000000000000000000000000020fe8000000000000000000000000000aa64010102000000000000000000000000330100000735000002000200"/247], 0x21c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000002a00000073114100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

789.676296ms ago: executing program 2 (id=685):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_attach_bpf(r0, 0x6b, 0x87, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)={'veth0\x00'})

755.009944ms ago: executing program 2 (id=686):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x200, 0x1946}, 0x1014, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="0088a800fff8ffffffffffe50000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@local, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async, rerun: 64)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='((]\x86\xde\xb5\xe9T)')
r5 = getpid()
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x94242, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x0, 0x8, 0xf, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/time\x00') (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002a000b6c8cff", 0xfffffffffffffdb9}, {&(0x7f0000000580)="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", 0xa}], 0x2}, 0x800)

659.273178ms ago: executing program 0 (id=687):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001f000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000a3000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001500010029bd700000030000e0000002000002000000000000000000e000000200000000000000000000000000000000000000000a00800000000071df4e0ff6cdc6e2d3c4e53e579c94557b0f266882e1128fddf641eae2a556cd5b78a5665c2ea75945c14ef3e0ec81731c09c4b3a54893af9f041bb39911395db585279620ea7c68d7b8f4fc56120fb75de5c5a1855984ccac30fbb0275ea7411aebe89eba5bd46813bf8821bc57e666e6b8e836b76d9bfa6a36152b62", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="80ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20)

609.212045ms ago: executing program 0 (id=688):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}], {0x95, 0x0, 0x0, 0x40000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)

608.2109ms ago: executing program 0 (id=689):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x23, 0x98, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x10) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
socket$kcm(0x25, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000000000000000000000800000002110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xb}, 0x94) (async)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0xff0a, 0x0) (async)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x10040080)

528.188735ms ago: executing program 1 (id=690):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r4, &(0x7f00000016c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x1, &(0x7f0000001640)=[{&(0x7f0000000100)="b4", 0x1}], 0x1}, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='\x00')
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})

409.172823ms ago: executing program 2 (id=691):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x404, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x3400, 0x0, 0x0, 0x8, 0x6f3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socket$kcm(0x28, 0x1, 0x0)
socket$kcm(0x28, 0x1, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1946}, 0x400, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xe048d302f6527ed6}, 0xfc2fd648db7d52be) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
socket$kcm(0x2a, 0x2, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x28, &(0x7f0000000000), 0x4) (async, rerun: 32)
recvmsg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010002) (rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2)

63.227192ms ago: executing program 1 (id=692):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x200, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x43, 0x2}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000008000000002001000000000000000000000000000100000000000000000a00002087002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005b07350081000000"], 0xc4}}, 0x2c000010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000", @ANYRESHEX], 0x0, 0x32, 0x0, 0x1}, 0x28)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001500011a"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2b, 0x0, 0x3ff0, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], <r6=>0x0}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000003c0)=',)/[\x00', <r8=>0x0}, 0x30)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140a, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008088}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="01c4b631e3d557e9c2013442deec434c9b78fa28934cf17e8a69598d54f15340a3c220e802166b6419500d1fa16c14f00fa4a41e5e095d21499eadcec2693b13b65e85d455f0c361c510dd2db5f65656f0b557b4254ec8a3bba623b28164aaba68852721d53d2dcb2e7bda8ddf659e42494b279b210ffc0123d864230ffdc3240e1b09a0152384bbf4eed06aa7f589ce601cae520376b1021e181f6523ceeabdaf2bdec45c0b983a40fb798e72b0f5cd4500c7fc6845be1862e44a155ee9b8bfb2155b", @ANYRES32=r8, @ANYRES64=r6], 0x20)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000080900010073797a300000000020000000080a010100000000000000000a0000040900020073797a300000000028000000060a010400000000000000000100000508000b40000000020900010073797a3000000000140000000a000000000000000000000004000000"], 0x90}}, 0x8000)

1.039532ms ago: executing program 0 (id=693):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xe5, 0x6, 0x8, 0xffff986a, 0x4}, 0x2}, [{0x800, 0x6, 0x3, 0x76, 0x9, 0x1000}, {0x7, 0x4, 0x2, 0xffffff03, 0xbe, 0x4324}, {0x0, 0x6, 0x1, 0x6, 0x2, 0xfffffbff}, {0x7, 0x2, 0x4, 0xfffffffa, 0x48, 0xa}, {0xe, 0x5, 0x2, 0xf, 0x21, 0xfffffff8}, {0x101, 0x4, 0x7, 0x7, 0x5cc6}, {0x1, 0x1800, 0x9, 0x80000000, 0x8, 0x7}, {0x89cc, 0x5, 0x9, 0xff, 0x9, 0x2}, {0x0, 0x3, 0xe, 0x3, 0x9, 0x7fff}, {0x5, 0x100009, 0x80000000, 0x7, 0xfff, 0x6}, {0x3, 0x4, 0x8, 0x800, 0x7, 0x9}, {0x1ff, 0x3, 0x1, 0x8, 0x7d2, 0x9}, {0xe, 0x8, 0x3, 0x81, 0x4, 0x6}, {0x7ff, 0x8, 0x7, 0x1200, 0x3ff, 0x4}, {0x5, 0x4, 0x0, 0x10001, 0x5bafd809}, {0x6b, 0x0, 0xe43, 0x4, 0x2, 0x2}, {0x4, 0x9, 0x5, 0x0, 0xfffff20d}, {0x5, 0x6, 0x401, 0x0, 0x3, 0xa}, {0x0, 0x9, 0xb0a, 0x80, 0x1, 0xcec8}, {0x4f, 0x9, 0x0, 0x9, 0x0, 0x7}, {0x5, 0x6, 0xddb, 0xc, 0x7d5f, 0x6}, {0x1, 0x4, 0x7, 0x3, 0x1, 0x6}, {0x5, 0x95ef, 0x400, 0x8, 0x3, 0xddc}, {0xe9c9, 0x0, 0x3, 0x1, 0xb69, 0xff}, {0x5, 0x2, 0x4, 0xf2, 0x41, 0x7}, {0x1, 0x5, 0x8, 0x6, 0xee, 0x15cbfbe0}, {0x4, 0x40, 0xc7, 0x539, 0x3, 0x30}, {0x95b, 0x7, 0x4, 0x3, 0xf7, 0xfffff000}, {0x0, 0x81, 0xffffffff, 0x0, 0x8, 0x6}, {0x9, 0x3, 0xc13, 0x3ff, 0x1, 0x800}, {0x0, 0x970, 0x4, 0x6, 0x7, 0x9}, {0x2251, 0xd, 0x5017, 0x1, 0x80000000, 0x2}, {0x0, 0xfff, 0x7, 0xfd, 0x8}, {0x3, 0x3ff, 0x80000001, 0x4, 0x5, 0xc4b}, {0x40008000, 0x400000, 0x6, 0xf52b, 0x2, 0x800}, {0xd, 0x8, 0xf7fffffc, 0x2, 0x5, 0x1}, {0x5, 0x8, 0x2, 0x6, 0x1, 0xae3f}, {0x8, 0xfffffff7, 0x6, 0x9, 0x5, 0xf}, {0x1, 0x7, 0x5510, 0x1000, 0xa, 0xa90}, {0xfffffffd, 0x0, 0x1, 0x1, 0x0, 0xff6}, {0x5, 0x4, 0xc5, 0xa, 0xf3a, 0x9}, {0x8, 0x3, 0x3, 0x0, 0x4, 0xfffffffc}, {0x3, 0x8, 0x7, 0xfff, 0xdb, 0xe70a}, {0x1, 0x4, 0x7ff, 0xa, 0x47, 0xb104}, {0x9, 0x2, 0x0, 0x9, 0x0, 0x80000000}, {0x8, 0x80000001, 0x9, 0xf2, 0xfffffff8, 0x7fff}, {0x800, 0x4, 0x800, 0x800, 0x8, 0x6}, {0x7ff, 0x80, 0x0, 0x5, 0x9, 0x2}, {0x6, 0x913d, 0x200, 0x35, 0x1, 0x1}, {0x100, 0x5, 0xe2, 0x1, 0x8001, 0x1}, {0x6, 0xe, 0x8000, 0x59b, 0x1, 0x403}, {0x3ff, 0x3, 0xac2b, 0x1, 0xdcb, 0x8}, {0x8000, 0x8, 0xd6, 0x8, 0x40, 0x3}, {0x9f2, 0xe, 0x6, 0x1, 0x7, 0x9}, {0x8, 0x50, 0x6, 0x4, 0x8, 0x3}, {0x7, 0x98e, 0x9, 0x8, 0x8, 0x4}, {0x3, 0x7, 0xd, 0xfffffff7, 0x3, 0x7}, {0x92cf, 0x1ff, 0x2, 0x1, 0x10001, 0x10001}, {0xed9e, 0x0, 0x1, 0x1, 0x0, 0x2fd}, {0x5, 0x5, 0x77d, 0x3ff, 0x101, 0x4}, {0x7, 0x2, 0x1, 0x0, 0x3, 0x3a29}, {0x5, 0x468, 0x0, 0x4, 0x10002, 0x7}, {0x71f, 0x1, 0x3, 0x7, 0x3da, 0x7}, {0x5, 0xffffffcb, 0x6, 0x40, 0x7ff, 0x8}, {0x1, 0x4, 0x3, 0xfffffffc, 0x3, 0x4}, {0x8, 0xd6, 0xd, 0x40, 0x3, 0x5}, {0x7, 0x9, 0x2, 0x4, 0x7, 0x7d4}, {0x724, 0x40, 0x1, 0x2, 0xa5d, 0x3}, {0x4000, 0x10000, 0xf, 0x0, 0x2, 0x1}, {0x3, 0x48, 0x0, 0x7, 0x2, 0x10}, {0xffffff01, 0x9, 0x800, 0x4, 0x80000000, 0x9}, {0x1bf, 0x2, 0x420, 0xffffffcf, 0x0, 0x5a7}, {0x0, 0xd75, 0x5, 0x3, 0x5, 0x3}, {0xfffffffd, 0xde6, 0x800, 0x0, 0xdd41, 0x844a}, {0x9, 0xa, 0x8, 0xb, 0x401, 0x7f}, {0x9, 0xffff, 0x9, 0x7, 0xffff8001, 0x7}, {0x9, 0x0, 0x10, 0x9, 0x10c, 0x3}, {0x4ef13826, 0x7fff, 0xe48, 0x8001, 0x8001, 0x1}, {0x9, 0x6, 0xa, 0x41b9, 0x8, 0xfffffffc}, {0x9, 0x6, 0x10, 0xc, 0x0, 0x1ff}, {0x3, 0x3, 0x5, 0x1, 0x10000, 0x1000}, {0x6, 0x1, 0x5, 0xef5, 0x14, 0x2}, {0x9, 0xfffffffe, 0x1, 0x9, 0x1184, 0xffffff86}, {0xb6, 0xfffffff7, 0x8, 0x47, 0x6, 0x1d34}, {0x1, 0x3, 0x2, 0x49a, 0x4, 0x3}, {0x8, 0x5, 0xff, 0x0, 0xe9, 0x7}, {0x401, 0x8, 0x10001, 0x1, 0x1ff, 0x6}, {0x4, 0x7c, 0x5, 0x2, 0x2, 0xf}, {0x5, 0x2, 0x3, 0x5, 0x90000, 0x7e0}, {0x1, 0x7, 0x2, 0xb, 0x7, 0x6}, {0x9, 0x9, 0x3, 0x0, 0x5, 0x1}, {0xd1e0, 0x7fff, 0x1, 0x69, 0x0, 0x1}, {0x4, 0x3ff, 0x4d7308a, 0x0, 0x80, 0x10}, {0x2, 0x4884507a, 0xfffffff9, 0x8000, 0x13, 0x10000}, {0x3ff, 0x400, 0x2, 0x7, 0x4}, {0x0, 0x3, 0x7, 0x5, 0x5, 0x6}, {0x7c6f, 0x4, 0x7fff, 0x0, 0x9, 0x8}, {0x1, 0x3, 0x9, 0x7fffffff, 0x9, 0x6}, {0xa, 0x8, 0x1, 0x2f6a49de, 0x5, 0x5}, {0x6, 0x6, 0xffffff5c, 0x5, 0x4, 0x4}, {0x83c, 0x9, 0x3, 0x5, 0x401, 0x1}, {0x1, 0xe, 0x2, 0xa0000, 0x5, 0x1000}, {0x7, 0x0, 0x7, 0x6, 0xa6, 0x4}, {0x0, 0x5, 0x101, 0xe, 0x5, 0xfdc}, {0x0, 0x3, 0x2, 0xfffffffd, 0xaa, 0x41f2}, {0xf3, 0x9d, 0xff, 0x0, 0x100, 0xf2a3f9e}, {0xff, 0x0, 0x4, 0x401, 0x8, 0x5}, {0x0, 0x0, 0xc4, 0x7, 0x0, 0x80000000}, {0x6, 0x3, 0x4, 0x3, 0x7f}, {0x0, 0x0, 0x4, 0x80000000, 0x441, 0x2}, {0xdc4, 0x8001, 0x8, 0x5, 0x4, 0x5}, {0x5, 0x6, 0x9, 0x4, 0x2, 0x4}, {0x8, 0x4, 0x6, 0x3ff, 0x5, 0x9}, {0x59, 0x30000, 0x5, 0x6, 0x6, 0x100}, {0x4, 0x92e, 0x8000004, 0x6, 0x10001, 0x5}, {0x9, 0x196, 0x6, 0x8, 0x8, 0x8}, {0x937, 0x8, 0x46ff, 0x2, 0x3, 0xffffffff}, {0x93, 0xfe8d, 0x80000001, 0x1000, 0x80000000, 0x3}, {0x80000000, 0xfffffff7, 0x0, 0xe6, 0x401, 0xad}, {0x9, 0x10, 0x2, 0xcf, 0x7f, 0x2}, {0x8, 0x6, 0x6, 0x7fff, 0x0, 0x9}, {0x3, 0x5ff, 0x73, 0xb, 0x7, 0x8}, {0x35aa, 0x8, 0x8, 0x5, 0x0, 0xeecf}, {0x5, 0x0, 0x7, 0x3, 0x7, 0x7d1}, {0x80, 0x9, 0x4, 0x9, 0xca4, 0x6}, {0x1e181914, 0x9, 0x5b2, 0xc, 0x3, 0x9}, {0x7b82, 0x57, 0x1, 0xff, 0x4}, {0x9, 0x1, 0x81, 0x3, 0x2, 0x9}], [{0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x75221050bb89365d}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {}, {}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x1}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}], 0x1}}]}, {0x3}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r3)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x47, 0x6, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x800, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000300)}, 0x6000, 0x0, 0x3, 0x9, 0xda20, 0xa, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xe, r3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000001140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x80, 0x0}, 0x20000010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 2 (id=694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x11, 0xa, 0x300)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r7}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xprtrdma_decode_seg\x00', r6}, 0x18)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x80047441, 0xf0ff1f00000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22235' (ED25519) to the list of known hosts.
syzkaller login: [   58.476711][ T5837] cgroup: Unknown subsys name 'net'
[   58.583192][ T5837] cgroup: Unknown subsys name 'cpuset'
[   58.587295][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.924436][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.675336][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.678554][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.682451][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.685834][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.690857][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.761415][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.764355][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.767393][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.773436][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.776213][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.780146][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.783501][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.786776][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.794720][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.797853][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.044617][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   66.107723][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   66.185897][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   66.234548][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.238017][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.242613][ T5849] bridge_slave_0: entered allmulticast mode
[   66.246570][ T5849] bridge_slave_0: entered promiscuous mode
[   66.252375][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.255189][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.257979][ T5856] bridge_slave_0: entered allmulticast mode
[   66.264419][ T5856] bridge_slave_0: entered promiscuous mode
[   66.286160][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.288974][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.292255][ T5849] bridge_slave_1: entered allmulticast mode
[   66.295854][ T5849] bridge_slave_1: entered promiscuous mode
[   66.299397][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.303004][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.305918][ T5856] bridge_slave_1: entered allmulticast mode
[   66.309743][ T5856] bridge_slave_1: entered promiscuous mode
[   66.385848][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.392535][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.405469][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.424980][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.455052][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.458043][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.461140][ T5853] bridge_slave_0: entered allmulticast mode
[   66.464866][ T5853] bridge_slave_0: entered promiscuous mode
[   66.496892][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.499763][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.502885][ T5853] bridge_slave_1: entered allmulticast mode
[   66.506712][ T5853] bridge_slave_1: entered promiscuous mode
[   66.539829][ T5849] team0: Port device team_slave_0 added
[   66.545986][ T5856] team0: Port device team_slave_0 added
[   66.552328][ T5856] team0: Port device team_slave_1 added
[   66.571544][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.576925][ T5849] team0: Port device team_slave_1 added
[   66.595446][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.642664][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.645460][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.655964][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.691235][ T5853] team0: Port device team_slave_0 added
[   66.694339][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.697073][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.708470][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.722869][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.725665][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.734991][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.740499][ T5853] team0: Port device team_slave_1 added
[   66.757487][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.759700][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.767938][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.809530][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.814226][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.824682][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.834390][ T5856] hsr_slave_0: entered promiscuous mode
[   66.837270][ T5856] hsr_slave_1: entered promiscuous mode
[   66.841473][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.844263][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.854322][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.898566][ T5849] hsr_slave_0: entered promiscuous mode
[   66.901110][ T5849] hsr_slave_1: entered promiscuous mode
[   66.903268][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   66.905106][ T5849] Cannot create hsr debugfs directory
[   66.977891][ T5853] hsr_slave_0: entered promiscuous mode
[   66.981433][ T5853] hsr_slave_1: entered promiscuous mode
[   66.984352][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   66.986625][ T5853] Cannot create hsr debugfs directory
[   67.239419][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.266768][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.285775][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.298177][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.326918][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.335506][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.344009][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.358363][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.409425][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.421141][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.427802][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.434632][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.562605][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.586069][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.603253][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.612360][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   67.619223][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   67.631288][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.633815][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.637805][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.640053][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.658141][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.661058][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.666294][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.669127][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.686344][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   67.712891][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.715761][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.739141][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.741726][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.770854][ T5859] Bluetooth: hci0: command tx timeout
[   67.851508][ T5852] Bluetooth: hci1: command tx timeout
[   67.853447][ T5859] Bluetooth: hci2: command tx timeout
[   67.963472][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.968828][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.012254][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.022702][ T5853] veth0_vlan: entered promiscuous mode
[   68.034478][ T5853] veth1_vlan: entered promiscuous mode
[   68.071368][ T5849] veth0_vlan: entered promiscuous mode
[   68.083264][ T5853] veth0_macvtap: entered promiscuous mode
[   68.094107][ T5856] veth0_vlan: entered promiscuous mode
[   68.097785][ T5849] veth1_vlan: entered promiscuous mode
[   68.103211][ T5853] veth1_macvtap: entered promiscuous mode
[   68.117120][ T5856] veth1_vlan: entered promiscuous mode
[   68.144577][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.164939][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.184728][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.192157][ T5849] veth0_macvtap: entered promiscuous mode
[   68.197488][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.202936][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.209873][ T5856] veth0_macvtap: entered promiscuous mode
[   68.214964][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.228986][ T5856] veth1_macvtap: entered promiscuous mode
[   68.233651][ T5849] veth1_macvtap: entered promiscuous mode
[   68.291337][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.311109][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.312697][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.314355][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.319565][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.345874][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.358228][ T5711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.363851][ T5711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.367395][ T5711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.385509][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.387565][ T5711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.390245][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.395761][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.404849][ T5711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.407808][ T5711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.442190][ T5711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.494830][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.531159][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.534010][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.549223][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.554378][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.581140][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.587413][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.605071][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.607915][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.614164][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.617159][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.647577][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.653566][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.778131][ T5920] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   68.786907][ T5920] veth1_vlan: entered allmulticast mode
[   68.845042][ T5920] team0: Device veth1_vlan failed to register rx_handler
[   69.353212][ T5920] syz.2.3 (5920) used greatest stack depth: 19256 bytes left
[   69.658899][ T5937] Illegal XDP return value 4294967274 on prog  (id 8) dev N/A, expect packet loss!
[   69.851687][ T5859] Bluetooth: hci0: command tx timeout
[   69.933027][ T5859] Bluetooth: hci2: command tx timeout
[   69.935358][ T5859] Bluetooth: hci1: command tx timeout
[   70.051228][ T5948] raw_sendmsg: syz.2.11 forgot to set AF_INET. Fix it!
[   70.570014][ T5979] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.20'.
[   70.576283][ T5979] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.624220][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21'.
[   70.631459][ T5981] netlink: 'syz.1.21': attribute type 21 has an invalid length.
[   70.936817][ T5994] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.24'.
[   70.989371][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.078378][ T6001] Zero length message leads to an empty skb
[   71.220919][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   71.227937][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   71.295877][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.299722][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.480027][ T6024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'.
[   71.527805][ T6026] netlink: 'syz.2.35': attribute type 10 has an invalid length.
[   71.534643][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.538506][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.549509][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.552989][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.556744][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.559773][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.566387][ T6026] team0: Port device bridge0 added
[   71.605518][ T6024] netlink: 'syz.0.34': attribute type 10 has an invalid length.
[   71.608763][ T6024] netlink: 168 bytes leftover after parsing attributes in process `syz.0.34'.
[   71.931796][ T5859] Bluetooth: hci0: command tx timeout
[   72.010571][ T5859] Bluetooth: hci1: command tx timeout
[   72.013154][ T5859] Bluetooth: hci2: command tx timeout
[   72.177717][ T6049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.41'.
[   72.190396][ T6049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.41'.
[   72.199121][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.204132][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.208881][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   72.213869][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.216863][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.515990][ T6055] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   73.482760][ T6060] syz.0.45 uses obsolete (PF_INET,SOCK_PACKET)
[   73.770205][    C0] hrtimer: interrupt took 39697 ns
[   74.011306][ T5859] Bluetooth: hci0: command tx timeout
[   74.090475][ T5852] Bluetooth: hci1: command tx timeout
[   74.092654][ T5859] Bluetooth: hci2: command tx timeout
[   74.152030][ T6095] netlink: 'syz.2.55': attribute type 21 has an invalid length.
[   74.167234][ T6095] netlink: 'syz.2.55': attribute type 6 has an invalid length.
[   77.574930][ T6135] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.622920][ T6135] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   77.697275][ T6135] netlink: 'syz.1.66': attribute type 39 has an invalid length.
[   77.724237][ T6141] netlink: 'syz.2.68': attribute type 2 has an invalid length.
[   77.728061][ T6141] netlink: 'syz.2.68': attribute type 1 has an invalid length.
[   77.731170][ T6141] netlink: 'syz.2.68': attribute type 2 has an invalid length.
[   77.734244][ T6141] netlink: 'syz.2.68': attribute type 1 has an invalid length.
[   77.972506][ T6155] netlink: 'syz.0.71': attribute type 29 has an invalid length.
[   78.136280][ T6161] netlink: 'syz.0.75': attribute type 1 has an invalid length.
[   78.183494][ T6165] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.230894][ T6166] netlink: 'syz.0.75': attribute type 7 has an invalid length.
[   78.238903][ T6166] __nla_validate_parse: 6 callbacks suppressed
[   78.238918][ T6166] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.75'.
[   78.397300][ T6163] bond0: (slave bond_slave_0): Releasing backup interface
[   78.700723][ T6176] netlink: 830 bytes leftover after parsing attributes in process `syz.1.78'.
[   79.171584][ T6197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.83'.
[   79.642714][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'.
[   80.256187][ T6241] : port 1(veth0_to_bridge) entered blocking state
[   80.277714][ T6241] : port 1(veth0_to_bridge) entered disabled state
[   80.283274][ T6241] veth0_to_bridge: entered allmulticast mode
[   80.412195][ T6241] veth0_to_bridge: entered promiscuous mode
[   80.423406][ T6249] validate_nla: 1 callbacks suppressed
[   80.423431][ T6249] netlink: 'syz.1.101': attribute type 17 has an invalid length.
[   80.584464][ T6252] netlink: 'syz.0.102': attribute type 12 has an invalid length.
[   80.586993][ T6252] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.102'.
[   80.747170][ T6255] netlink: 56 bytes leftover after parsing attributes in process `syz.1.103'.
[   81.445255][ T6267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.721513][ T6272] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[   84.472073][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2750359048 wd_nsec: 2750343594
[   87.251541][   T24] cfg80211: failed to load regulatory.db
[   87.499270][ T6276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.108'.
[   88.567318][ T6289] netlink: 'syz.2.112': attribute type 7 has an invalid length.
[   88.569971][ T6289] netlink: 140 bytes leftover after parsing attributes in process `syz.2.112'.
[   88.653597][ T6287] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.111'.
[   88.690319][ T6299] netlink: 64 bytes leftover after parsing attributes in process `syz.0.113'.
[   88.690688][ T6294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.113'.
[   88.768679][ T6302] netlink: 4144 bytes leftover after parsing attributes in process `syz.1.115'.
[   88.806179][ T6302] netlink: 'syz.1.115': attribute type 2 has an invalid length.
[   89.443474][ T6333] netlink: 'syz.1.126': attribute type 21 has an invalid length.
[   89.546313][ T6335] netlink: 'syz.1.127': attribute type 3 has an invalid length.
[   89.549437][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'.
[   90.019836][ T6359] netlink: 64 bytes leftover after parsing attributes in process `syz.2.135'.
[   90.042986][ T6354] syzkaller0: entered promiscuous mode
[   90.044850][ T6354] syzkaller0: entered allmulticast mode
[   90.296428][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[   90.299641][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[   90.470573][ T6381] sctp: [Deprecated]: syz.1.141 (pid 6381) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.470573][ T6381] Use struct sctp_sack_info instead
[   90.546291][ T6384] netlink: 'syz.0.142': attribute type 27 has an invalid length.
[   90.552620][ T6383] netlink: del zone limit has 4 unknown bytes
[   90.553017][ T6386] netlink: del zone limit has 4 unknown bytes
[   90.556755][ T6383] netlink: del zone limit has 4 unknown bytes
[   90.562386][ T6386] netlink: del zone limit has 4 unknown bytes
[   90.562616][ T6383] netlink: del zone limit has 4 unknown bytes
[   90.566781][ T6386] netlink: del zone limit has 4 unknown bytes
[   90.569327][ T6383] netlink: del zone limit has 4 unknown bytes
[   90.573440][ T6386] netlink: del zone limit has 4 unknown bytes
[   90.573445][ T6383] netlink: del zone limit has 4 unknown bytes
[   90.574349][ T6383] netlink: del zone limit has 4 unknown bytes
[   90.878789][ T6394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.887539][ T6394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.894808][ T6394] bond0 (unregistering): Released all slaves
[   91.538811][ T6409] _Z`Ԁ@S!!: entered promiscuous mode
[   91.807017][ T6413] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   91.809716][ T6413] netlink: 'syz.2.148': attribute type 2 has an invalid length.
[   91.814931][ T6413] netlink: 'syz.2.148': attribute type 3 has an invalid length.
[   91.817840][ T6413] netlink: 'syz.2.148': attribute type 5 has an invalid length.
[   91.821978][ T6413] netlink: 'syz.2.148': attribute type 6 has an invalid length.
[   92.126485][ T6427] @: renamed from bond_slave_0
[   92.128851][ T5859] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[   92.805809][ T6437] __nla_validate_parse: 5 callbacks suppressed
[   92.805827][ T6437] netlink: 26 bytes leftover after parsing attributes in process `syz.2.156'.
[   93.050003][ T5859] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   93.050022][ T5859] Bluetooth: unknown link type 110
[   93.055741][ T5859] Bluetooth: hci2: connection err: -111
[   93.064958][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'.
[   93.068284][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'.
[   93.193467][ T6444] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.158'.
[   93.319541][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.589164][ T6458] validate_nla: 3 callbacks suppressed
[   93.589176][ T6458] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   93.595084][ T6457] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   93.665427][ T6448] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.160'.
[   93.687695][ T6454] netlink: 'syz.2.160': attribute type 11 has an invalid length.
[   93.780079][ T6457] syz.0.162 (6457) used greatest stack depth: 18600 bytes left
[   93.899034][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'.
[   93.903725][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'.
[   94.839089][ T6488] netlink: 'syz.2.171': attribute type 13 has an invalid length.
[   94.843096][ T6488] netlink: 'syz.2.171': attribute type 17 has an invalid length.
[   95.264895][ T6495] netlink: 'syz.0.174': attribute type 10 has an invalid length.
[   95.268875][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.174'.
[   95.405336][ T6495] ipvlan1: entered promiscuous mode
[   95.407318][ T6495] ipvlan1: entered allmulticast mode
[   95.409259][ T6495] veth0_vlan: entered allmulticast mode
[   95.425887][ T6495] bridge0: port 3(ipvlan1) entered blocking state
[   95.428802][ T6495] bridge0: port 3(ipvlan1) entered disabled state
[   95.588675][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   95.729019][ T6527] netlink: 'syz.2.185': attribute type 29 has an invalid length.
[   95.733687][ T6527] netlink: 'syz.2.185': attribute type 29 has an invalid length.
[   95.747693][ T6527] netlink: 'syz.2.185': attribute type 29 has an invalid length.
[   95.837929][ T6537] netlink: 'syz.2.187': attribute type 2 has an invalid length.
[   96.019521][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.027549][ T6548] team0: Port device bond0 added
[   96.609171][ T6557] net_ratelimit: 37 callbacks suppressed
[   96.609210][ T6557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.816941][ T6564] netlink: 14 bytes leftover after parsing attributes in process `syz.1.196'.
[   99.129867][ T6564] hsr_slave_0: left promiscuous mode
[   99.134460][ T6564] hsr_slave_1: left promiscuous mode
[   99.248237][ T6570] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   99.365137][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'.
[   99.517377][ T6592] validate_nla: 2 callbacks suppressed
[   99.517430][ T6592] netlink: 'syz.2.205': attribute type 39 has an invalid length.
[   99.599969][ T6602] netlink: 'syz.0.206': attribute type 10 has an invalid length.
[  100.052410][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.210'.
[  100.535473][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'.
[  100.739607][ T6645] tap0: tun_chr_ioctl cmd 21731
[  100.752335][ T6645] tap0: tun_chr_ioctl cmd 2147767521
[  104.140378][ T6671] xt_l2tp: unknown flags: 51
[  104.384438][ T6689] netlink: 68 bytes leftover after parsing attributes in process `syz.1.233'.
[  104.474387][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'.
[  104.477940][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'.
[  104.575215][ T6698] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.238'.
[  104.581548][ T6698] debugfs: '`]Iq!>s*!)' already exists in 'ieee80211'
[  104.609465][ T6700] veth0_vlan: entered allmulticast mode
[  104.623552][ T6698] netlink: 'syz.0.238': attribute type 2 has an invalid length.
[  104.709277][ T6700] veth0_vlan: left promiscuous mode
[  104.717106][ T6700] veth0_vlan: entered promiscuous mode
[  104.768310][ T6708] netlink: 'syz.0.242': attribute type 4 has an invalid length.
[  104.816359][ T6700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.239'.
[  105.478974][ T6735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.183263][ T6747] netlink: 'syz.2.254': attribute type 10 has an invalid length.
[  106.208186][ T6747] team0: Port device geneve1 added
[  106.311893][ T6754] netlink: 64 bytes leftover after parsing attributes in process `syz.0.258'.
[  106.434791][ T6754] netlink: 'syz.0.258': attribute type 29 has an invalid length.
[  106.438901][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'.
[  106.603503][ T6777] netlink: 'syz.2.266': attribute type 6 has an invalid length.
[  106.618861][ T6777] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.266'.
[  106.760756][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'.
[  106.773191][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'.
[  107.269649][ T6812] netlink: 'syz.2.277': attribute type 10 has an invalid length.
[  107.331957][ T6814] rdma_rxe: rxe_newlink: failed to add lo
[  108.067683][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.096965][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.109847][ T6816] bond0 (unregistering): Released all slaves
[  109.507097][ T6872] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  109.540652][ T6872] veth0_vlan: entered allmulticast mode
[  109.629886][ T6872] veth0_vlan: left promiscuous mode
[  109.639839][ T6872] veth0_vlan: entered promiscuous mode
[  110.121330][ T6909] __nla_validate_parse: 1 callbacks suppressed
[  110.121341][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'.
[  110.281456][ T6923] netlink: 'syz.2.315': attribute type 10 has an invalid length.
[  110.287842][ T6923] macvlan0: entered promiscuous mode
[  110.305301][ T6923] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  110.309015][ T6920] netlink: 180 bytes leftover after parsing attributes in process `syz.1.312'.
[  110.317162][ T6922] sctp: [Deprecated]: syz.2.315 (pid 6922) Use of int in max_burst socket option deprecated.
[  110.317162][ T6922] Use struct sctp_assoc_value instead
[  113.486872][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'.
[  113.529828][ T6935] syzkaller0: entered promiscuous mode
[  113.532523][ T6935] syzkaller0: entered allmulticast mode
[  115.279045][ T6989] netlink: 'syz.0.337': attribute type 3 has an invalid length.
[  115.282421][ T6989] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[  115.285782][ T6989] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.337'.
[  117.662444][ T7000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.341'.
[  117.896528][ T6994] netlink: 196 bytes leftover after parsing attributes in process `syz.2.338'.
[  117.943262][ T6994] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.338'.
[  117.951013][ T6993] C: renamed from team_slave_0 (while UP)
[  117.958417][ T6993] netlink: 'syz.1.339': attribute type 3 has an invalid length.
[  117.961563][ T6993] netlink: 'syz.1.339': attribute type 1 has an invalid length.
[  117.964066][ T6993] netlink: 116 bytes leftover after parsing attributes in process `syz.1.339'.
[  117.966825][ T6993] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  118.070013][ T7012] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.344'.
[  118.471984][ T7034] netlink: 'syz.2.353': attribute type 1 has an invalid length.
[  118.687508][ T7041] netlink: 'syz.1.356': attribute type 29 has an invalid length.
[  118.693527][ T7041] netlink: 'syz.1.356': attribute type 29 has an invalid length.
[  118.697600][ T7041] netlink: 596 bytes leftover after parsing attributes in process `syz.1.356'.
[  119.113919][ T7053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.360'.
[  119.303639][ T7065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.363'.
[  119.312196][ T7065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.363'.
[  119.512690][ T7078] netlink: 'syz.0.368': attribute type 10 has an invalid length.
[  119.516817][ T7078] veth1_vlan: entered allmulticast mode
[  119.696223][ T7088] sctp: [Deprecated]: syz.2.369 (pid 7088) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.696223][ T7088] Use struct sctp_sack_info instead
[  120.563176][ T7107] __nla_validate_parse: 3 callbacks suppressed
[  120.563191][ T7107] netlink: 76 bytes leftover after parsing attributes in process `syz.2.375'.
[  120.991498][ T7122] IPv6: NLM_F_CREATE should be specified when creating new route
[  121.132853][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[  121.161534][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[  121.186488][ T7130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'.
[  121.191641][ T7130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'.
[  121.198914][ T7130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'.
[  121.205516][ T7130] netlink: 'syz.1.383': attribute type 29 has an invalid length.
[  121.209168][ T7130] netlink: 'syz.1.383': attribute type 29 has an invalid length.
[  121.348367][ T7143] netlink: 'syz.0.388': attribute type 7 has an invalid length.
[  121.540512][ T7152] netlink: 'syz.0.392': attribute type 21 has an invalid length.
[  121.601855][ T7155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.393'.
[  121.609038][ T7156] vlan0: entered allmulticast mode
[  121.618750][ T7156] team0: Port device vlan0 added
[  121.660401][ T7155] syzkaller0: entered promiscuous mode
[  121.662625][ T7155] syzkaller0: entered allmulticast mode
[  122.669140][ T7165] syzkaller0: entered promiscuous mode
[  122.675005][ T7165] syzkaller0: entered allmulticast mode
[  123.594923][ T7177] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  123.768790][ T7197] validate_nla: 1 callbacks suppressed
[  123.768826][ T7197] netlink: 'syz.2.401': attribute type 10 has an invalid length.
[  123.777270][ T7197] team0: Device veth1_vlan is already a lower device of the team interface
[  123.980596][ T7205] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[  123.983440][ T7205] netlink: 'syz.0.406': attribute type 3 has an invalid length.
[  123.986171][ T7205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.406'.
[  123.998692][ T7205] netlink: 108 bytes leftover after parsing attributes in process `syz.0.406'.
[  124.114905][ T7207] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[  124.659656][ T7215] netlink: 'syz.1.409': attribute type 11 has an invalid length.
[  125.157557][ T7264] netlink: 'syz.2.425': attribute type 4 has an invalid length.
[  125.332065][ T7265] netlink: zone id is out of range
[  125.361922][ T7265] netlink: zone id is out of range
[  125.363918][ T7265] netlink: zone id is out of range
[  125.420883][ T7263] netlink: del zone limit has 4 unknown bytes
[  125.912750][ T7265] netlink: set zone limit has 4 unknown bytes
[  126.311779][ T7304] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  126.334537][ T7304] netlink: 'syz.2.435': attribute type 10 has an invalid length.
[  126.369482][ T7304] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  126.556873][ T7316] cgroup: fork rejected by pids controller in /syz2
[  126.584379][ T7321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.442'.
[  127.071240][ T7450] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.450'.
[  127.113417][ T7447] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  127.258016][ T7448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'.
[  127.568564][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.572876][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.576499][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.581386][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.586580][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.659626][ T7471] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[  127.781982][ T7479] netlink: 'syz.1.458': attribute type 11 has an invalid length.
[  127.785240][ T7479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.458'.
[  127.949796][ T7467] chnl_net:caif_netlink_parms(): no params data found
[  128.207058][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.209368][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.213666][ T7467] bridge_slave_0: entered allmulticast mode
[  128.216573][ T7467] bridge_slave_0: entered promiscuous mode
[  128.222352][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.227003][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.233089][ T7467] bridge_slave_1: entered allmulticast mode
[  128.238562][ T7467] bridge_slave_1: entered promiscuous mode
[  128.379806][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.396756][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.491463][ T7467] team0: Port device team_slave_0 added
[  128.494887][ T7467] team0: Port device team_slave_1 added
[  128.628012][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.632725][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.643963][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.653187][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.655837][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.675776][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.751512][   T27] wlan1: Trigger new scan to find an IBSS to join
[  128.762234][ T7467] hsr_slave_0: entered promiscuous mode
[  128.764828][ T7467] hsr_slave_1: entered promiscuous mode
[  128.772113][ T7467] debugfs: 'hsr0' already exists in 'hsr'
[  128.774395][ T7467] Cannot create hsr debugfs directory
[  128.928207][ T7509] netlink: 'syz.0.462': attribute type 2 has an invalid length.
[  128.931728][ T7509] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[  129.008007][ T7514] xt_socket: unknown flags 0x6
[  129.098981][ T7467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.112418][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.466'.
[  129.120584][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.466'.
[  129.123790][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.466'.
[  129.175273][ T7467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.192604][ T7528] =======================================================
[  129.192604][ T7528] WARNING: The mand mount option has been deprecated and
[  129.192604][ T7528]          and is ignored by this kernel. Remove the mand
[  129.192604][ T7528]          option from the mount to silence this warning.
[  129.192604][ T7528] =======================================================
[  129.206357][ T7528] tmpfs: Bad value for 'gid'
[  129.208172][ T7528] tmpfs: Bad value for 'gid'
[  129.268134][ T7467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.308213][ T7535] netlink: 148 bytes leftover after parsing attributes in process `syz.1.473'.
[  129.388602][ T7467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.611141][ T5852] Bluetooth: hci2: command tx timeout
[  129.625617][ T7467] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  129.636243][ T7467] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  129.646455][ T7467] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  129.655163][ T7467] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  129.775614][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.794327][ T7467] 8021q: adding VLAN 0 to HW filter on device team0
[  129.802077][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.805044][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.832076][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.834990][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.860009][ T7467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.868164][ T7467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.061469][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.093055][ T7467] veth0_vlan: entered promiscuous mode
[  130.099392][ T7467] veth1_vlan: entered promiscuous mode
[  130.124085][ T7467] veth0_macvtap: entered promiscuous mode
[  130.141733][ T7467] veth1_macvtap: entered promiscuous mode
[  130.159459][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.169353][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.178441][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.183055][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.192615][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.196049][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.250083][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.254871][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.273709][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.276571][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.324135][ T7575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.451'.
[  130.327292][ T7575] netlink: 46 bytes leftover after parsing attributes in process `syz.2.451'.
[  130.448614][ T7581] : renamed from vlan0 (while UP)
[  131.690728][ T5852] Bluetooth: hci2: command tx timeout
[  131.772232][   T36] wlan1: Trigger new scan to find an IBSS to join
[  131.887216][ T7658] __nla_validate_parse: 7 callbacks suppressed
[  131.887282][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  132.195151][ T7673] netlink: 14 bytes leftover after parsing attributes in process `syz.1.510'.
[  132.392170][ T7687] netlink: 'syz.1.514': attribute type 17 has an invalid length.
[  132.522074][ T7682] netlink: 72 bytes leftover after parsing attributes in process `syz.2.513'.
[  132.736082][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.738083][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  133.530041][ T7710] lo: entered allmulticast mode
[  133.533331][ T7704] netlink: 'syz.2.518': attribute type 16 has an invalid length.
[  133.536521][ T7704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.518'.
[  133.541611][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.551390][ T7710] lo: entered promiscuous mode
[  133.552969][ T7710] lo: left allmulticast mode
[  133.564869][ T7712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.520'.
[  133.648400][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.523'.
[  133.750399][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[  133.769084][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[  133.774839][ T5852] Bluetooth: hci2: command tx timeout
[  134.244292][ T7757] netlink: 'syz.2.532': attribute type 10 has an invalid length.
[  134.257560][ T7757] 8021q: adding VLAN 0 to HW filter on device team0
[  134.262920][ T7757] bond0: (slave team0): Enslaving as an active interface with an up link
[  134.634018][ T7759] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  134.753964][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'.
[  134.759544][ T7765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.762619][ T7765] IPv6: NLM_F_CREATE should be set when creating new route
[  134.765417][ T7765] IPv6: NLM_F_CREATE should be set when creating new route
[  134.768031][ T7765] IPv6: NLM_F_CREATE should be set when creating new route
[  134.811729][   T26] wlan1: Creating new IBSS network, BSSID 82:97:b1:ea:71:7d
[  135.057671][ T7773] netlink: 'syz.0.540': attribute type 2 has an invalid length.
[  135.063300][ T7773] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  135.357149][ T7783] netlink: 'syz.2.542': attribute type 3 has an invalid length.
[  135.363261][ T7783] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.542'.
[  135.850571][ T5852] Bluetooth: hci2: command tx timeout
[  137.197038][ T7823] __nla_validate_parse: 1 callbacks suppressed
[  137.197053][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'.
[  137.258792][ T7833] netlink: 'syz.0.558': attribute type 21 has an invalid length.
[  137.262212][ T7833] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.558'.
[  137.356516][ T7838] netlink: 312 bytes leftover after parsing attributes in process `syz.0.559'.
[  137.365391][ T7838] netlink: 'syz.0.559': attribute type 19 has an invalid length.
[  137.373131][ T7838] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  137.376361][ T7838] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  137.883836][ T7844] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[  137.907076][ T7844] netlink: 'syz.0.562': attribute type 39 has an invalid length.
[  138.205287][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[  138.223958][ T5852] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6
[  138.262247][ T7859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  138.339166][ T7860] netlink: 460 bytes leftover after parsing attributes in process `syz.0.567'.
[  138.447055][ T7862] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  138.836028][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  139.710645][ T7889] validate_nla: 4 callbacks suppressed
[  139.710664][ T7889] netlink: 'syz.2.577': attribute type 39 has an invalid length.
[  140.200046][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.580'.
[  140.782160][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'.
[  143.794290][ T7919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.584'.
[  143.884024][ T7918] netlink: 'syz.1.584': attribute type 11 has an invalid length.
[  143.886530][ T7918] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.584'.
[  143.911252][ T7926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.585'.
[  143.919331][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.585'.
[  143.932075][ T7926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.585'.
[  143.942631][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.951730][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.585'.
[  144.345308][ T7954] netlink: 1 bytes leftover after parsing attributes in process `syz.1.597'.
[  144.455847][ T7961] netlink: 'syz.0.598': attribute type 10 has an invalid length.
[  144.458959][ T7961] netlink: 55 bytes leftover after parsing attributes in process `syz.0.598'.
[  144.493176][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[  145.088129][ T7968] syzkaller0: entered promiscuous mode
[  145.097449][ T7968] syzkaller0: entered allmulticast mode
[  145.252267][ T7981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.367218][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.606'.
[  145.412247][ T7989] rdma_rxe: rxe_newlink: failed to add lo
[  145.657725][ T8011] netlink: 'syz.1.615': attribute type 10 has an invalid length.
[  145.667454][ T8011] geneve0: entered promiscuous mode
[  145.756958][ T8009] tun0: tun_chr_ioctl cmd 1074025675
[  145.763489][ T8009] tun0: persist enabled
[  145.769087][ T8009] tun0: tun_chr_ioctl cmd 1074025675
[  145.776331][ T8009] tun0: persist disabled
[  146.235829][ T8037] netlink: 'syz.2.625': attribute type 27 has an invalid length.
[  146.267662][ T8053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.968974][ T8108] netlink: 'syz.2.646': attribute type 10 has an invalid length.
[  146.998175][ T8108] team0: Port device geneve1 added
[  147.424321][ T8127] netlink: 'syz.2.653': attribute type 27 has an invalid length.
[  147.427388][ T8127] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  147.542969][ T8137] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  147.877410][ T8157] netlink: 'syz.2.663': attribute type 10 has an invalid length.
[  148.093494][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.102637][ T8163] netlink: 'syz.0.666': attribute type 10 has an invalid length.
[  148.369794][ T8189] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  148.868722][ T8226] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  149.408444][ T8243] __nla_validate_parse: 9 callbacks suppressed
[  149.408503][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'.
[  149.414011][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'.
[  254.500196][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  254.503074][    C1] rcu: 	1-...!: (10500 ticks this GP) idle=b0c4/1/0x4000000000000000 softirq=25083/1361356 fqs=0
[  254.509276][    C1] rcu: 	(t=10501 jiffies g=17985 q=446 ncpus=2)
[  254.512012][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g17985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  254.517039][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=9380
[  254.520241][    C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g17985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  254.524933][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  254.529128][    C1] rcu: RCU grace-period kthread stack dump:
[  254.531615][    C1] task:rcu_preempt     state:I stack:26728 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  254.535764][    C1] Call Trace:
[  254.537191][    C1]  <TASK>
[  254.538453][    C1]  __schedule+0x1798/0x4cc0
[  254.540396][    C1]  ? __lock_acquire+0xab9/0xd20
[  254.542466][    C1]  ? __pfx___schedule+0x10/0x10
[  254.544533][    C1]  ? schedule+0x91/0x360
[  254.546270][    C1]  schedule+0x165/0x360
[  254.548063][    C1]  schedule_timeout+0x12b/0x270
[  254.550086][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  254.552298][    C1]  ? __pfx_process_timeout+0x10/0x10
[  254.554555][    C1]  ? prepare_to_swait_event+0x341/0x380
[  254.556939][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  254.558953][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  254.561007][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.563127][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  254.565289][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  254.567408][    C1]  ? finish_swait+0xcd/0x1f0
[  254.569336][    C1]  rcu_gp_kthread+0x99/0x390
[  254.571299][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  254.573459][    C1]  ? __kthread_parkme+0x7b/0x200
[  254.575514][    C1]  ? __kthread_parkme+0x1a1/0x200
[  254.577612][    C1]  kthread+0x711/0x8a0
[  254.579358][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  254.581542][    C1]  ? __pfx_kthread+0x10/0x10
[  254.583472][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.585727][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.588036][    C1]  ? __pfx_kthread+0x10/0x10
[  254.589963][    C1]  ret_from_fork+0x439/0x7d0
[  254.591889][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  254.594079][    C1]  ? __switch_to_asm+0x39/0x70
[  254.596104][    C1]  ? __switch_to_asm+0x33/0x70
[  254.598113][    C1]  ? __pfx_kthread+0x10/0x10
[  254.600065][    C1]  ret_from_fork_asm+0x1a/0x30
[  254.602153][    C1]  </TASK>
[  254.603514][    C1] Sending NMI from CPU 1 to CPUs 0:
[  254.603575][    C0] NMI backtrace for cpu 0
[  254.603606][    C0] CPU: 0 UID: 0 PID: 8249 Comm: syz.2.694 Not tainted syzkaller #0 PREEMPT(full) 
[  254.603637][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.603652][    C0] RIP: 0010:lock_release+0xec/0x3e0
[  254.603685][    C0] Code: 11 c7 44 24 20 01 00 00 00 83 3d 2e 62 06 0e 00 0f 84 96 01 00 00 41 8b 87 e8 0a 00 00 85 c0 0f 84 1d 01 00 00 4c 89 6c 24 18 <48> 89 5c 24 08 44 8d 60 ff 49 8d af f0 0a 00 00 4d 63 ec 48 89 04
[  254.603695][    C0] RSP: 0018:ffffc90000007818 EFLAGS: 00000002
[  254.603707][    C0] RAX: 0000000000000002 RBX: 0000000000000087 RCX: 977e10cb4dc6b300
[  254.603716][    C0] RDX: 0000000000010000 RSI: ffffffff8d9ce581 RDI: ffffffff8be34280
[  254.603724][    C0] RBP: ffffc90000007918 R08: 0000000000000003 R09: 0000000000000004
[  254.603732][    C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: dffffc0000000000
[  254.603741][    C0] R13: ffffffff81ada91e R14: ffff88804b027a98 R15: ffff88801fd95640
[  254.603750][    C0] FS:  00007fb8117cd6c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  254.603758][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.603766][    C0] CR2: 00007fe80a235ba8 CR3: 000000003e344000 CR4: 00000000000006f0
[  254.603796][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  254.603805][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  254.603813][    C0] Call Trace:
[  254.603852][    C0]  <IRQ>
[  254.603859][    C0]  ? hrtimer_try_to_cancel+0x3be/0x420
[  254.603874][    C0]  _raw_spin_unlock_irqrestore+0x70/0x110
[  254.603889][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.603903][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.603915][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.603929][    C0]  hrtimer_try_to_cancel+0x3be/0x420
[  254.603943][    C0]  hrtimer_cancel+0x3b/0x50
[  254.603954][    C0]  cpu_clock_event_stop+0xd9/0x130
[  254.603973][    C0]  __perf_event_overflow+0x580/0xe40
[  254.603990][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  254.604004][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  254.604024][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  254.604044][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  254.604061][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  254.604085][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.604098][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.604112][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  254.604129][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  254.604146][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  254.604164][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  254.604180][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  254.604201][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  254.604216][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  254.604231][    C0]  </IRQ>
[  254.604235][    C0]  <TASK>
[  254.604239][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  254.604253][    C0] RIP: 0010:unwind_next_frame+0x348/0x2390
[  254.604267][    C0] Code: 48 81 fb f0 aa b1 8f 0f 83 48 11 00 00 48 c7 c0 f0 aa b1 8f 49 29 c5 48 c7 c6 78 c2 2a 90 49 c1 fd 02 4a 8d 14 6d 00 00 00 00 <4c> 01 ea 48 01 d2 48 01 f2 48 bd 00 00 00 00 00 fc ff df 0f 84 37
[  254.604277][    C0] RSP: 0018:ffffc90006b97858 EFLAGS: 00000246
[  254.604288][    C0] RAX: ffffffff8fdde32c RBX: ffffffff8fdde330 RCX: ffffffff8fdde334
[  254.604297][    C0] RDX: 0000000000000000 RSI: ffffffff906d16d8 RDI: ffffffff8be34220
[  254.604305][    C0] RBP: ffffffff8fdde334 R08: 0000000000000001 R09: ffffffff8172d195
[  254.604313][    C0] R10: ffffc90006b97978 R11: ffffffff81ac4d00 R12: ffffffff84ffea3c
[  254.604322][    C0] R13: 0000000000000000 R14: ffffc90006b97928 R15: ffffffff8fdde330
[  254.604331][    C0]  ? ref_tracker_alloc+0x17c/0x460
[  254.604344][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  254.604359][    C0]  ? unwind_next_frame+0xa5/0x2390
[  254.604375][    C0]  ? unwind_next_frame+0xd4/0x2390
[  254.604390][    C0]  ? unwind_next_frame+0xa5/0x2390
[  254.604403][    C0]  ? ref_tracker_alloc+0x17d/0x460
[  254.604417][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  254.604431][    C0]  arch_stack_walk+0x11c/0x150
[  254.604447][    C0]  ? ref_tracker_alloc+0x17d/0x460
[  254.604461][    C0]  stack_trace_save+0x9c/0xe0
[  254.604475][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  254.604488][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  254.604505][    C0]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  254.604524][    C0]  ref_tracker_alloc+0x17d/0x460
[  254.604538][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  254.604556][    C0]  ? sock_lock_init+0x41c/0x870
[  254.604573][    C0]  ? sk_prot_alloc+0x161/0x220
[  254.604589][    C0]  sk_alloc+0x1b1/0x370
[  254.604606][    C0]  tipc_sk_create+0x164/0x28e0
[  254.604621][    C0]  ? security_inode_alloc+0x39/0x330
[  254.604637][    C0]  ? __lock_acquire+0xab9/0xd20
[  254.604657][    C0]  ? __pfx_tipc_sk_create+0x10/0x10
[  254.604674][    C0]  ? rcu_read_unlock+0x87/0xa0
[  254.604688][    C0]  __sock_create+0x4b3/0x9f0
[  254.604704][    C0]  __sys_socketpair+0x1c5/0x560
[  254.604720][    C0]  __x64_sys_socketpair+0x9b/0xb0
[  254.604735][    C0]  do_syscall_64+0xfa/0x3b0
[  254.604750][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.604761][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  254.604776][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.604787][    C0] RIP: 0033:0x7fb81098eba9
[  254.604800][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.604809][    C0] RSP: 002b:00007fb8117cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  254.604846][    C0] RAX: ffffffffffffffda RBX: 00007fb810bd5fa0 RCX: 00007fb81098eba9
[  254.604855][    C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e
[  254.604862][    C0] RBP: 00007fb810a11e19 R08: 0000000000000000 R09: 0000000000000000
[  254.604870][    C0] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  254.604877][    C0] R13: 00007fb810bd6038 R14: 00007fb810bd5fa0 R15: 00007fffff098138
[  254.604892][    C0]  </TASK>
[  254.605561][    C1] CPU: 1 UID: 0 PID: 8243 Comm: syz.0.693 Not tainted syzkaller #0 PREEMPT(full) 
[  254.605580][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.605588][    C1] RIP: 0010:rcu_check_gp_start_stall+0x2/0x470
[  254.605608][    C1] Code: 8b 54 24 10 45 89 e8 8b 4c 24 08 4c 89 f2 48 8b 34 24 e9 88 f7 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 54 53 48 f7 05 7e f3 6c 0c 03 00 00 00 75 10 48 8b 05 75
[  254.605619][    C1] RSP: 0018:ffffc900001e0bd0 EFLAGS: 00000202
[  254.605631][    C1] RAX: 0000000000000064 RBX: 000000000000012c RCX: fa1f8136d455fa00
[  254.605639][    C1] RDX: 0000000000000002 RSI: 0000000000002904 RDI: ffffffff8e13f440
[  254.605647][    C1] RBP: ffffc900001e0e30 R08: ffffffff8fa3b237 R09: 1ffffffff1f47646
[  254.605655][    C1] R10: dffffc0000000000 R11: fffffbfff1f47647 R12: dffffc0000000000
[  254.605664][    C1] R13: 1ffff11026cc75f2 R14: ffff88813663af80 R15: ffffffff8e13f440
[  254.605671][    C1] FS:  00007f08fd3756c0(0000) GS:ffff8881a3c12000(0000) knlGS:0000000000000000
[  254.605680][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.605686][    C1] CR2: 0000200000001140 CR3: 000000003fd80000 CR4: 00000000000006f0
[  254.605725][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  254.605732][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 000000000099060a
[  254.605738][    C1] Call Trace:
[  254.605744][    C1]  <IRQ>
[  254.605750][    C1]  rcu_core+0x5fa/0x1770
[  254.605772][    C1]  ? __lock_acquire+0xab9/0xd20
[  254.605796][    C1]  ? ktime_get+0x3e/0x1f0
[  254.605811][    C1]  ? __pfx_rcu_core+0x10/0x10
[  254.605872][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  254.605885][    C1]  ? sched_clock+0x3f/0x60
[  254.605903][    C1]  ? sched_clock_cpu+0x74/0x430
[  254.605913][    C1]  ? ktime_get+0x3e/0x1f0
[  254.605929][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  254.605944][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  254.605956][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  254.605983][    C1]  handle_softirqs+0x286/0x870
[  254.606001][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  254.606019][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  254.606035][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  254.606052][    C1]  __irq_exit_rcu+0xca/0x1f0
[  254.606064][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  254.606085][    C1]  irq_exit_rcu+0x9/0x30
[  254.606096][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  254.606110][    C1]  </IRQ>
[  254.606114][    C1]  <TASK>
[  254.606120][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  254.606133][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  254.606147][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  254.606157][    C1] RSP: 0018:ffffc900071a73a0 EFLAGS: 00000246
[  254.606167][    C1] RAX: ffffffff81b4621b RBX: 1ffff11009608341 RCX: 0000000000080000
[  254.606176][    C1] RDX: ffffc90003ac2000 RSI: 000000000007ffff RDI: 0000000000080000
[  254.606184][    C1] RBP: ffffc900071a7520 R08: ffffffff8fa3b237 R09: 1ffffffff1f47646
[  254.606193][    C1] R10: dffffc0000000000 R11: fffffbfff1f47647 R12: ffff88804b041a08
[  254.606201][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  254.606218][    C1]  ? smp_call_function_many_cond+0xd4b/0x12d0
[  254.606244][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  254.606269][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  254.606281][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  254.606298][    C1]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  254.606318][    C1]  ? __pfx___text_poke+0x10/0x10
[  254.606344][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  254.606359][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  254.606375][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  254.606393][    C1]  ? __pfx_smp_text_poke_batch_add+0x10/0x10
[  254.606409][    C1]  ? trace_contention_end+0x39/0x120
[  254.606430][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  254.606448][    C1]  ? irqentry_exit+0x74/0x90
[  254.606465][    C1]  ? arch_static_call_transform+0x2d/0xc0
[  254.606478][    C1]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  254.606502][    C1]  __static_call_transform+0x4eb/0x750
[  254.606520][    C1]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  254.606540][    C1]  ? __pfx___static_call_transform+0x10/0x10
[  254.606563][    C1]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  254.606581][    C1]  ? __static_call_validate+0x148/0x240
[  254.606593][    C1]  ? 0xffffffffa0003d80
[  254.606604][    C1]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  254.606622][    C1]  arch_static_call_transform+0x98/0xc0
[  254.606638][    C1]  __static_call_update+0xe4/0x5d0
[  254.606658][    C1]  ? 0xffffffffa0003d80
[  254.606667][    C1]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  254.606687][    C1]  ? __pfx_sort+0x10/0x10
[  254.606703][    C1]  ? __pfx___static_call_update+0x10/0x10
[  254.606726][    C1]  ? 0xffffffffa0003d80
[  254.606742][    C1]  ? 0xffffffffa0003d80
[  254.606755][    C1]  ? 0xffffffffa0003d80
[  254.606766][    C1]  bpf_dispatcher_change_prog+0xacd/0xc90
[  254.606787][    C1]  ? 0xffffffffa0003d80
[  254.606800][    C1]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  254.606841][    C1]  ? 0xffffffffa00008c8
[  254.606892][    C1]  ? _copy_from_user+0x94/0xb0
[  254.606910][    C1]  ? bpf_test_init+0x133/0x170
[  254.606924][    C1]  ? xdp_convert_md_to_buff+0x5b/0x330
[  254.606942][    C1]  bpf_prog_test_run_xdp+0x65d/0x1000
[  254.606972][    C1]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  254.606992][    C1]  ? __fget_files+0x2a/0x420
[  254.607011][    C1]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  254.607027][    C1]  bpf_prog_test_run+0x2c7/0x340
[  254.607049][    C1]  __sys_bpf+0x562/0x860
[  254.607068][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  254.607099][    C1]  ? do_syscall_64+0xb7/0x3b0
[  254.607116][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  254.607135][    C1]  ? rcu_is_watching+0x15/0xb0
[  254.607155][    C1]  __x64_sys_bpf+0x7c/0x90
[  254.607171][    C1]  do_syscall_64+0xfa/0x3b0
[  254.607187][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.607199][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  254.607216][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.607228][    C1] RIP: 0033:0x7f08fc58eba9
[  254.607239][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.607249][    C1] RSP: 002b:00007f08fd375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  254.607261][    C1] RAX: ffffffffffffffda RBX: 00007f08fc7d5fa0 RCX: 00007f08fc58eba9
[  254.607269][    C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  254.607277][    C1] RBP: 00007f08fc611e19 R08: 0000000000000000 R09: 0000000000000000
[  254.607284][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.607291][    C1] R13: 00007f08fc7d6038 R14: 00007f08fc7d5fa0 R15: 00007ffc67084fd8
[  254.607316][    C1]  </TASK>

VM DIAGNOSIS:
17:38:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000087 RCX=977e10cb4dc6b300 RDX=0000000000000001
RSI=ffffffff8dbaa117 RDI=ffffffff8be34280 RBP=ffff88801fd96158 RSP=ffffc90000007818
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f00
R12=0000000000000001 R13=0000000000000001 R14=ffff88804b027a98 R15=ffff88801fd95640
RIP=ffffffff819d82fa RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb8117cd6c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe80a235ba8 CR3=000000003e344000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb810ba7498 00007fb810ba7470 XMM03=00007fb810ba74a8 00007fb810ba74a0
XMM04=00007fb81170d100 00007fb810ba7460 XMM05=00007fb810ba7478 00007fb810ba74c0
XMM06=00007fb810ba74b8 00007fb810ba74b0 XMM07=00007fb810ba74a8 00007fb810ba74a0
XMM08=0000000000000000 00007fb810a12ee7 XMM09=0000000000000000 00007fb810a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dff10
R8 =ffff888021840237 R9 =1ffff11004308046 R10=dffffc0000000000 R11=ffffffff855018c0
R12=dffffc0000000000 R13=ffffffff99b03906 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550193c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f08fd3756c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001140 CR3=000000003fd80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=000000000099060a
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f08fc7a7498 00007f08fc7a7470 XMM03=00007f08fc7a74a8 00007f08fc7a74a0
XMM04=00007f08fd30d100 00007f08fc7a7460 XMM05=00007f08fc7a7478 00007f08fc7a74c0
XMM06=00007f08fc7a74b8 00007f08fc7a74b0 XMM07=00007f08fc7a74a8 00007f08fc7a74a0
XMM08=0000000000000000 00007f08fc612ee7 XMM09=0000000000000000 00007f08fc612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
