last executing test programs:

1.642170611s ago: executing program 0 (id=246):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc)

1.582523798s ago: executing program 0 (id=248):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d300000080e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

1.582089118s ago: executing program 0 (id=250):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback, 0xffffffffffffffff, 0x31, 0x7}, 0x20)

1.509881939s ago: executing program 0 (id=253):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000840)={'some', 0x20, 0x7fffffff, 0x20, 0xffff}, 0x2f)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, &(0x7f00000004c0)=""/167, &(0x7f0000000600)="75930a96ce8090d3b862b81bb633b10782da65f62c75cefa4f3b2116602bd2aa2e8a1d70af8b5d5ebe0afeeb64534e1b1cccb5426c6b2d63607aeebf6b826efe0ed6dc7eec2f1529f5414cddb3ec265cc0d9f26dd5bf5463ea80467e8db85da9a6a5532bb6d4cae96e9459afd3f11cc51a6ee0e8502dabdef8f93b8add4a1803bee553f32fb498dd7ac26645", &(0x7f00000006c0)="62397852f404cedb221896bbc857ea5f665b5eae947208d0cdf7254294ffa765f83c294ff6a3b3d0e00ef44582350b04103e4656e58eb5ce06c5d32f1eb809f996f8b7610b60749a5df889049fc5d2417ef23e40c4dc8d3dc213069a64b3e539b3cc118cc5516f7e9f75328b20f9a6e1fbd882d09dfebc655b6f6d263bb3061d0704280ed77dfc1ba1", 0x2, r4, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010000}, 0x20040)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ec0)={@fallback, 0xffffffffffffffff, 0x6, 0x3c}, 0x20)

1.461436068s ago: executing program 2 (id=254):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x12, &(0x7f0000000040)=r0, 0x4)

1.398985726s ago: executing program 2 (id=255):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98)

1.272478306s ago: executing program 1 (id=258):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r1, r0, 0x4}, 0xa)

1.272310423s ago: executing program 2 (id=259):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020"], 0xfe33)

1.172437551s ago: executing program 1 (id=260):
socketpair(0xa, 0x1, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x82, &(0x7f0000000000)=r5, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.172143926s ago: executing program 2 (id=261):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r9}, 0xa)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000001c80)="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", 0xd4d}], 0x1}, 0x0)
write$cgroup_int(r7, &(0x7f00000004c0)=0x200000000000001, 0x12)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

951.008326ms ago: executing program 1 (id=262):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)

859.938846ms ago: executing program 1 (id=263):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x4, &(0x7f0000000040)=r1, 0x4)

790.156303ms ago: executing program 1 (id=264):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x2, 0x10, 0x5, 0x0, 0x338682d1, 0x80000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x49}, 0x100000, 0xd, 0x6, 0x1, 0x2, 0x9, 0x6, 0x0, 0x7, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x7, r0, 0x2)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

610.572228ms ago: executing program 1 (id=265):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

609.46922ms ago: executing program 0 (id=266):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000000000000010000040018ed700000000001000000010000000000b68318bd5a3f0e875dcd40ff139e8fb18c7241747fe16c84fd7b7e36f4572df38d074c6aab5249fac744639f9be2a81744298505f7d99bd66b36fa7038ee4b15a04e38f8181fe9ca0c9ceaf3b86704e70b0fb653d93a82b157ec950d050c64e32c164a1bb39232b43ee398e224e6d16553969831a5b8b93d453d80b463c95bc7e18e5b17d0525ce0800320d67c3033da7e00c70f88613b08eeaf760435f2f63d"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x40}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)

116.871206ms ago: executing program 2 (id=267):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40088)

267.259µs ago: executing program 2 (id=268):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40801)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

0s ago: executing program 0 (id=269):
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32d00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44998' (ED25519) to the list of known hosts.
syzkaller login: [   49.057867][ T5775] cgroup: Unknown subsys name 'net'
[   49.200801][ T5775] cgroup: Unknown subsys name 'cpuset'
[   49.206876][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.346083][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.813883][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.817898][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.821070][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.825610][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.828709][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.908126][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.911513][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.914617][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.917755][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.920549][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.962654][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.966668][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.970191][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.973908][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.977530][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.162804][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   56.321434][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.363309][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.367019][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.370244][ T5843] bridge_slave_0: entered allmulticast mode
[   56.375309][ T5843] bridge_slave_0: entered promiscuous mode
[   56.392316][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.395512][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.398609][ T5843] bridge_slave_1: entered allmulticast mode
[   56.402475][ T5843] bridge_slave_1: entered promiscuous mode
[   56.442378][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.447552][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.462295][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.522952][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.526949][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.529397][ T5848] bridge_slave_0: entered allmulticast mode
[   56.532831][ T5848] bridge_slave_0: entered promiscuous mode
[   56.537970][ T5843] team0: Port device team_slave_0 added
[   56.541809][ T5843] team0: Port device team_slave_1 added
[   56.551006][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.555044][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.558067][ T5848] bridge_slave_1: entered allmulticast mode
[   56.561940][ T5848] bridge_slave_1: entered promiscuous mode
[   56.613821][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.618533][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.621420][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.633931][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.658877][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.662683][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.665910][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.676266][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.680833][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.683416][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.687652][ T5850] bridge_slave_0: entered allmulticast mode
[   56.691207][ T5850] bridge_slave_0: entered promiscuous mode
[   56.697423][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.700048][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.702858][ T5850] bridge_slave_1: entered allmulticast mode
[   56.707129][ T5850] bridge_slave_1: entered promiscuous mode
[   56.755553][ T5848] team0: Port device team_slave_0 added
[   56.775465][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.781709][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.787046][ T5848] team0: Port device team_slave_1 added
[   56.849830][ T5843] hsr_slave_0: entered promiscuous mode
[   56.852549][ T5843] hsr_slave_1: entered promiscuous mode
[   56.865658][ T5850] team0: Port device team_slave_0 added
[   56.878654][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.881101][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.890806][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.896407][ T5850] team0: Port device team_slave_1 added
[   56.904428][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.906718][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.916419][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.980730][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.983052][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.993679][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.028890][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.031367][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.040178][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.092689][ T5848] hsr_slave_0: entered promiscuous mode
[   57.096052][ T5848] hsr_slave_1: entered promiscuous mode
[   57.099101][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.101578][ T5848] Cannot create hsr debugfs directory
[   57.125595][ T5850] hsr_slave_0: entered promiscuous mode
[   57.128023][ T5850] hsr_slave_1: entered promiscuous mode
[   57.130791][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.132712][ T5850] Cannot create hsr debugfs directory
[   57.292410][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.324916][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.331880][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.367542][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.456179][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.465599][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.472588][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.480518][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.527768][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.539199][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.546073][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.553263][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.586386][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.620793][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   57.635104][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.637778][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.657088][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.659899][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.677016][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.697673][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.728802][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.756091][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.767924][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.770768][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.789522][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.792244][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.796678][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.799417][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.823777][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.826986][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.875827][ T5239] Bluetooth: hci0: command tx timeout
[   57.903706][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.925631][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.964682][ T5239] Bluetooth: hci1: command tx timeout
[   57.983757][ T5843] veth0_vlan: entered promiscuous mode
[   57.999094][ T5843] veth1_vlan: entered promiscuous mode
[   58.035065][ T5239] Bluetooth: hci2: command tx timeout
[   58.050827][ T5843] veth0_macvtap: entered promiscuous mode
[   58.061709][ T5843] veth1_macvtap: entered promiscuous mode
[   58.090382][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.102868][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.113039][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.123157][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.132367][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.143217][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.151612][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.169253][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.252209][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.259473][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.274108][ T5850] veth0_vlan: entered promiscuous mode
[   58.308320][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.312557][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.312653][ T5850] veth1_vlan: entered promiscuous mode
[   58.318259][ T5848] veth0_vlan: entered promiscuous mode
[   58.330425][ T5848] veth1_vlan: entered promiscuous mode
[   58.357014][ T5850] veth0_macvtap: entered promiscuous mode
[   58.371578][ T5850] veth1_macvtap: entered promiscuous mode
[   58.374038][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.376331][ T5848] veth0_macvtap: entered promiscuous mode
[   58.392708][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.405045][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.408286][ T5848] veth1_macvtap: entered promiscuous mode
[   58.416089][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.420190][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.424061][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.457265][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.463652][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.488738][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.507247][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.523379][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.531805][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.560801][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.615578][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.618801][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.660372][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.663400][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.696505][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.699005][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.746298][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.748930][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.883541][ T5926] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.929991][ T5928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.264088][    C1] hrtimer: interrupt took 33009 ns
[   59.468259][ T5938] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11'.
[   59.708027][ T5924] syz.2.3 (5924) used greatest stack depth: 18872 bytes left
[   59.778550][ T5953] netlink: 2 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.954841][ T5239] Bluetooth: hci0: command tx timeout
[   60.034713][ T5239] Bluetooth: hci1: command tx timeout
[   60.116554][ T5239] Bluetooth: hci2: command tx timeout
[   60.322618][ T5970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.382376][ T5970] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.389101][ T5972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.786467][ T5983] netlink: 84 bytes leftover after parsing attributes in process `syz.0.32'.
[   60.926740][ T5239] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17
[   60.926759][ T5239] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[   60.981663][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[   61.375841][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'.
[   61.713108][ T6015] netlink: 'syz.0.43': attribute type 11 has an invalid length.
[   62.034526][ T5239] Bluetooth: hci0: command tx timeout
[   62.045812][ T6021] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.46'.
[   62.056848][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   62.114439][ T5239] Bluetooth: hci1: command tx timeout
[   62.194891][ T5239] Bluetooth: hci2: command tx timeout
[   63.058579][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[   63.500356][ T6063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.114904][ T5239] Bluetooth: hci0: command tx timeout
[   64.195131][ T5239] Bluetooth: hci1: command tx timeout
[   64.264961][ T6084] __nla_validate_parse: 2 callbacks suppressed
[   64.264973][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'.
[   64.275014][ T5239] Bluetooth: hci2: command tx timeout
[   64.279924][ T6080] Zero length message leads to an empty skb
[   64.356750][ T6090] netlink: 'syz.1.78': attribute type 37 has an invalid length.
[   64.499790][ T6080] =======================================================
[   64.499790][ T6080] WARNING: The mand mount option has been deprecated and
[   64.499790][ T6080]          and is ignored by this kernel. Remove the mand
[   64.499790][ T6080]          option from the mount to silence this warning.
[   64.499790][ T6080] =======================================================
[   65.520688][ T6102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.84'.
[   65.558446][ T6110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   65.561798][ T6110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   65.581008][ T6112] netlink: 'syz.1.88': attribute type 29 has an invalid length.
[   65.584533][ T6112] netlink: 'syz.1.88': attribute type 29 has an invalid length.
[   65.587550][ T6112] netlink: 'syz.1.88': attribute type 29 has an invalid length.
[   65.882387][ T6143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.103'.
[   65.919527][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'.
[   66.051433][ T6149] blkio.reset_stats is deprecated
[   66.276877][ T6179] netlink: 825 bytes leftover after parsing attributes in process `syz.2.121'.
[   66.280416][ T6179] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.121'.
[   66.395697][ T6177] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   66.601801][ T6177] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.632467][ T6177] syz.0.119 (6177) used greatest stack depth: 18616 bytes left
[   66.753295][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'.
[   68.468211][ T6216] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.138'.
[   68.560161][ T6222] netlink: 'syz.0.141': attribute type 6 has an invalid length.
[   68.570349][ T6224] netlink: 'syz.1.142': attribute type 2 has an invalid length.
[   69.566957][ T6244] netlink: 'syz.0.150': attribute type 2 has an invalid length.
[   69.580526][ T6244] netlink: 'syz.0.150': attribute type 1 has an invalid length.
[   69.590246][ T6244] __nla_validate_parse: 2 callbacks suppressed
[   69.590521][ T6244] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.150'.
[   69.607831][ T6244] block nbd5: not configured, cannot reconfigure
[   69.765299][ T6248] syzkaller0: entered promiscuous mode
[   69.774366][ T6248] syzkaller0: entered allmulticast mode
[   70.033291][ T6267] netlink: 'syz.0.161': attribute type 29 has an invalid length.
[   70.045246][ T6267] netlink: 'syz.0.161': attribute type 29 has an invalid length.
[   70.057579][ T6267] netlink: 'syz.0.161': attribute type 29 has an invalid length.
[   70.123349][ T6274] netlink: 'syz.0.164': attribute type 29 has an invalid length.
[   70.127832][ T6274] netlink: 'syz.0.164': attribute type 29 has an invalid length.
[   70.178554][ T6279] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   70.544041][ T6287] netlink: 'syz.1.171': attribute type 6 has an invalid length.
[   70.576584][ T6287] netlink: 168 bytes leftover after parsing attributes in process `syz.1.171'.
[   70.643273][ T6298] netlink: 798 bytes leftover after parsing attributes in process `syz.0.173'.
[   70.786970][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[   70.790895][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   70.890431][ T6315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.181'.
[   70.894915][ T6315] unsupported nlmsg_type 40
[   70.906217][ T6315] netlink: 'syz.2.181': attribute type 12 has an invalid length.
[   70.910386][ T6315] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.181'.
[   71.396187][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.398418][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.801566][    C1] Illegal XDP return value 16128 on prog  (id 65) dev bond_slave_0, expect packet loss!
[   71.870554][ T6343] netlink: 160 bytes leftover after parsing attributes in process `syz.2.191'.
[   71.934662][ T6345] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[   72.179607][ T6345] batman_adv: batadv0: Adding interface: netdevsim0
[   72.182448][ T6345] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.198803][ T6345] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   72.240854][ T6350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.069003][ T6395] netlink: 304 bytes leftover after parsing attributes in process `syz.0.213'.
[   73.251327][ T6411] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   73.313287][ T6405] wg0 speed is unknown, defaulting to 1000
[   73.346398][ T6405] wg0 speed is unknown, defaulting to 1000
[   73.393589][ T6405] wg0 speed is unknown, defaulting to 1000
[   73.602458][ T6405] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.786948][ T6405] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   74.093057][ T6405] wg0 speed is unknown, defaulting to 1000
[   74.127558][ T6405] wg0 speed is unknown, defaulting to 1000
[   74.149869][ T6405] wg0 speed is unknown, defaulting to 1000
[   74.269484][ T6431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.228'.
[   74.496409][ T6447] xt_limit: Overflow, try lower: 271964/0
[   74.792284][ T6449] __nla_validate_parse: 2 callbacks suppressed
[   74.792299][ T6449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.236'.
[   74.799931][ T6449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.236'.
[   74.970095][ T5239] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[   75.158334][ T6467] validate_nla: 7 callbacks suppressed
[   75.158345][ T6467] netlink: 'syz.2.243': attribute type 2 has an invalid length.
[   75.165188][ T6467] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.243'.
[   75.346663][ T6481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.252'.
[   75.452240][ T6491] netlink: 202232 bytes leftover after parsing attributes in process `syz.1.256'.
[   75.457155][ T6491] netlink: zone id is out of range
[   75.459534][ T6491] netlink: zone id is out of range
[   75.616811][ T6499] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.259'.
[   75.776083][ T6502] wg0 speed is unknown, defaulting to 1000
[   76.390588][ T6518] wg0 speed is unknown, defaulting to 1000
[   76.859165][ T6516] ------------[ cut here ]------------
[   76.860981][ T6516] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[   76.876395][ T6516] WARNING: CPU: 1 PID: 6516 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20
[   76.902596][ T6516] Modules linked in:
[   76.908371][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(full) 
[   76.912617][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.919651][ T6516] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   76.927853][ T6516] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 4f 2e aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   76.936785][ T6516] RSP: 0018:ffffc900066bef08 EFLAGS: 00010282
[   76.940024][ T6516] RAX: ee0bd7cef908bb00 RBX: 00000000ffffdfcc RCX: 0000000000080000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   76.943739][ T6516] RDX: ffffc90003902000 RSI: 0000000000061a10 RDI: 0000000000061a11
[   76.960512][ T6516] RBP: 00000000ffffdfcd R08: ffffc900066bebe7 R09: 1ffff92000cd7d7c
[   76.980968][ T6516] R10: dffffc0000000000 R11: fffff52000cd7d7d R12: ffff888119a56258
[   76.985432][ T6516] R13: ffff888119a56278 R14: ffff888119a56290 R15: 00000000ffffdfcc
[   76.989975][ T6516] FS:  00007feb0acea6c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[   77.008456][ T6516] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.012289][ T6516] CR2: 00007fcce2dd7dac CR3: 0000000107a3c000 CR4: 00000000000006f0
[   77.124218][ T6516] Call Trace:
[   77.131173][ T6516]  <TASK>
[   77.133899][ T6516]  reg_set_min_max+0x214/0x300
[   77.137535][ T6516]  check_cond_jmp_op+0x1625/0x2910
[   77.140295][ T6516]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   77.142810][ T6516]  do_check+0x6751/0xe520
[   77.146111][ T6516]  ? __pfx_do_check+0x10/0x10
[   77.147805][ T6516]  ? init_func_state+0x1ddf/0x2d20
[   77.149984][ T6516]  do_check_common+0x1949/0x24f0
[   77.152231][ T6516]  bpf_check+0x1746a/0x1d2c0
[   77.154469][ T6516]  ? __pfx_perf_tp_event+0x10/0x10
[   77.156780][ T6516]  ? migrate_enable+0x29c/0x3c0
[   77.163306][ T6516]  ? perf_trace_run_bpf_submit+0xee/0x170
[   77.167611][ T6516]  ? __pfx_trace_call_bpf+0x10/0x10
[   77.171228][ T6516]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   77.176024][ T6516]  ? css_rstat_updated+0x23a/0x4f0
[   77.179566][ T6516]  ? __lock_acquire+0xab9/0xd20
[   77.183240][ T6516]  ? __pfx_bpf_check+0x10/0x10
[   77.186835][ T6516]  ? ktime_get_with_offset+0x8c/0x2a0
[   77.190652][ T6516]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   77.193947][ T6516]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.196760][ T6516]  ? ktime_get_with_offset+0x8c/0x2a0
[   77.200056][ T6516]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   77.203240][ T6516]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   77.208237][ T6516]  ? __asan_memset+0x22/0x50
[   77.211205][ T6516]  ? bpf_obj_name_cpy+0x194/0x1e0
[   77.213791][ T6516]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   77.216621][ T6516]  ? security_bpf_prog_load+0x7f/0x310
[   77.219700][ T6516]  bpf_prog_load+0x1318/0x1930
[   77.222846][ T6516]  ? __pfx_bpf_prog_load+0x10/0x10
[   77.226971][ T6516]  ? bpf_lsm_bpf+0x9/0x20
[   77.233668][ T6516]  ? security_bpf+0x7e/0x300
[   77.241677][ T6516]  __sys_bpf+0x528/0x870
[   77.244261][ T6516]  ? __pfx___sys_bpf+0x10/0x10
[   77.248294][ T6516]  __x64_sys_bpf+0x7c/0x90
[   77.250763][ T6516]  do_syscall_64+0xfa/0x3b0
[   77.253433][ T6516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.256735][ T6516]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   77.259854][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.262441][ T6516] RIP: 0033:0x7feb09d8eba9
[   77.264535][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.275818][ T6516] RSP: 002b:00007feb0acea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   77.279319][ T6516] RAX: ffffffffffffffda RBX: 00007feb09fd5fa0 RCX: 00007feb09d8eba9
[   77.282539][ T6516] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   77.285999][ T6516] RBP: 00007feb09e11e19 R08: 0000000000000000 R09: 0000000000000000
[   77.289317][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.292620][ T6516] R13: 00007feb09fd6038 R14: 00007feb09fd5fa0 R15: 00007fff087d7638
[   77.296212][ T6516]  </TASK>
[   77.297564][ T6516] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   77.300614][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(full) 
[   77.304507][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.308805][ T6516] Call Trace:
[   77.310165][ T6516]  <TASK>
[   77.311562][ T6516]  dump_stack_lvl+0x99/0x250
[   77.313498][ T6516]  ? __asan_memcpy+0x40/0x70
[   77.315439][ T6516]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.317588][ T6516]  ? __pfx__printk+0x10/0x10
[   77.319486][ T6516]  vpanic+0x281/0x750
[   77.321252][ T6516]  ? __pfx__printk+0x10/0x10
[   77.323264][ T6516]  ? __pfx_vpanic+0x10/0x10
[   77.325226][ T6516]  ? is_bpf_text_address+0x26/0x2b0
[   77.327507][ T6516]  panic+0xb9/0xc0
[   77.329152][ T6516]  ? __pfx_panic+0x10/0x10
[   77.331032][ T6516]  __warn+0x31b/0x4b0
[   77.332759][ T6516]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   77.335179][ T6516]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   77.337563][ T6516]  report_bug+0x2be/0x4f0
[   77.339431][ T6516]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   77.341824][ T6516]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   77.344130][ T6516]  ? reg_bounds_sanity_check+0x6e8/0xc20
[   77.346418][ T6516]  handle_bug+0x84/0x160
[   77.348239][ T6516]  exc_invalid_op+0x1a/0x50
[   77.350165][ T6516]  asm_exc_invalid_op+0x1a/0x20
[   77.352274][ T6516] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   77.354906][ T6516] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 4f 2e aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   77.362585][ T6516] RSP: 0018:ffffc900066bef08 EFLAGS: 00010282
[   77.365039][ T6516] RAX: ee0bd7cef908bb00 RBX: 00000000ffffdfcc RCX: 0000000000080000
[   77.368178][ T6516] RDX: ffffc90003902000 RSI: 0000000000061a10 RDI: 0000000000061a11
[   77.371276][ T6516] RBP: 00000000ffffdfcd R08: ffffc900066bebe7 R09: 1ffff92000cd7d7c
[   77.374439][ T6516] R10: dffffc0000000000 R11: fffff52000cd7d7d R12: ffff888119a56258
[   77.377912][ T6516] R13: ffff888119a56278 R14: ffff888119a56290 R15: 00000000ffffdfcc
[   77.381366][ T6516]  reg_set_min_max+0x214/0x300
[   77.383449][ T6516]  check_cond_jmp_op+0x1625/0x2910
[   77.385773][ T6516]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   77.388084][ T6516]  do_check+0x6751/0xe520
[   77.390087][ T6516]  ? __pfx_do_check+0x10/0x10
[   77.392022][ T6516]  ? init_func_state+0x1ddf/0x2d20
[   77.394539][ T6516]  do_check_common+0x1949/0x24f0
[   77.396985][ T6516]  bpf_check+0x1746a/0x1d2c0
[   77.398835][ T6516]  ? __pfx_perf_tp_event+0x10/0x10
[   77.400940][ T6516]  ? migrate_enable+0x29c/0x3c0
[   77.403091][ T6516]  ? perf_trace_run_bpf_submit+0xee/0x170
[   77.405419][ T6516]  ? __pfx_trace_call_bpf+0x10/0x10
[   77.407679][ T6516]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   77.410473][ T6516]  ? css_rstat_updated+0x23a/0x4f0
[   77.412673][ T6516]  ? __lock_acquire+0xab9/0xd20
[   77.414782][ T6516]  ? __pfx_bpf_check+0x10/0x10
[   77.416856][ T6516]  ? ktime_get_with_offset+0x8c/0x2a0
[   77.419183][ T6516]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   77.421788][ T6516]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.424014][ T6516]  ? ktime_get_with_offset+0x8c/0x2a0
[   77.426184][ T6516]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   77.428783][ T6516]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   77.431635][ T6516]  ? __asan_memset+0x22/0x50
[   77.433635][ T6516]  ? bpf_obj_name_cpy+0x194/0x1e0
[   77.435797][ T6516]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   77.438024][ T6516]  ? security_bpf_prog_load+0x7f/0x310
[   77.440395][ T6516]  bpf_prog_load+0x1318/0x1930
[   77.442478][ T6516]  ? __pfx_bpf_prog_load+0x10/0x10
[   77.444734][ T6516]  ? bpf_lsm_bpf+0x9/0x20
[   77.446612][ T6516]  ? security_bpf+0x7e/0x300
[   77.448655][ T6516]  __sys_bpf+0x528/0x870
[   77.450535][ T6516]  ? __pfx___sys_bpf+0x10/0x10
[   77.452741][ T6516]  __x64_sys_bpf+0x7c/0x90
[   77.454667][ T6516]  do_syscall_64+0xfa/0x3b0
[   77.456598][ T6516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.459140][ T6516]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   77.461802][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.464315][ T6516] RIP: 0033:0x7feb09d8eba9
[   77.466204][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.474140][ T6516] RSP: 002b:00007feb0acea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   77.477500][ T6516] RAX: ffffffffffffffda RBX: 00007feb09fd5fa0 RCX: 00007feb09d8eba9
[   77.480836][ T6516] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   77.484239][ T6516] RBP: 00007feb09e11e19 R08: 0000000000000000 R09: 0000000000000000
[   77.487631][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.491003][ T6516] R13: 00007feb09fd6038 R14: 00007feb09fd5fa0 R15: 00007fff087d7638
[   77.494383][ T6516]  </TASK>
[   77.496454][ T6516] Kernel Offset: disabled
[   77.498349][ T6516] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:03:03  Registers:
info registers vcpu 0

CPU#0
RAX=00000000a822de97 RBX=ffff8880281ba201 RCX=00000000a822de97 RDX=ffffc9000678df80
RSI=0000000000000020 RDI=00000000fdf431c6 RBP=0000000046581df1 RSP=ffffc9000678ded8
R8 =0000000014ee90e4 R9 =00000000043fe6ba R10=0000000000000010 R11=ffffffff81ac4d00
R12=dffffc0000000000 R13=0000000000152c4a R14=ffffc9000678df80 R15=1ffff1100503744a
RIP=ffffffff84ff4a04 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f57987d7dac CR3=0000000113194000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f57987a7498 00007f57987a7470 XMM03=00007f57987a74a8 00007f57987a74a0
XMM04=00007f579930d100 00007f57987a7460 XMM05=00007f57987a7478 00007f57987a74c0
XMM06=00007f57987a74b8 00007f57987a74b0 XMM07=00007f57987a74a8 00007f57987a74a0
XMM08=0000000000000000 00007f5798612ee7 XMM09=0000000000000000 00007f5798612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000003a1 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000003a1 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0068
R8 =0000000000000000 R9 =ffffffff81ae170e R10=0000000000000003 R11=ffffffff81704490
R12=0000000010000d6b R13=dffffc0000000000 R14=00000000000003a1 R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feb0acea6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcce2dd7dac CR3=0000000107a3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007feb09e12e53
XMM06=0000000000000000 00007feb09e12e4d XMM07=0000000000000000 00007feb09e12e61
XMM08=0000000000000000 00007feb09e12ee7 XMM09=0000000000000000 00007feb09e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
