last executing test programs:

2.019863732s ago: executing program 2 (id=651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000104010300000000000000000100000a080004400000000105000100010000000a0002000000000924"], 0x30}, 0x1, 0x0, 0x0, 0x20004891}, 0x8000)
getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x10049014)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0x3)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x5, 0x9, 0x6, 0x5e9}, {0x9, 0x7, 0x84, 0xa}, {0x4, 0x4, 0xc3, 0xd}, {0x7, 0x2, 0x3, 0xffff}, {0x8, 0xff, 0x7, 0xb8}, {0xf, 0x5, 0x0, 0xd}, {0x2, 0xc, 0x4, 0x2}, {0x7, 0x8, 0x5, 0x10000000}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071108b00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1.833678889s ago: executing program 1 (id=655):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb7, &(0x7f0000000080)=""/183, 0x41000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb7, &(0x7f0000000080)=""/183, 0x41000}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
socket(0x2b, 0x1, 0x24000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="874d99e4a67f5e1243d6aefc02bcc2faa841ab1cebf96a2ba4aa94f3405b31a21c4feee3918abe861e7f58b562db028c4d74c8a1ffcde730fdb28b2abc7bd054276d069dcffafd710c181c65702beac8d867e07849a316b8369204815aea3682ba641e1697ba4ce502fc2567eb55aef37b2c44f1088163c6b2af79f00447f41734170bfd4d57fade6bab", &(0x7f0000000280)=""/54}, 0x20)

1.829970711s ago: executing program 1 (id=657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
socketpair(0xa, 0x5, 0x8000003, &(0x7f0000001700))
socket$kcm(0x2, 0x922000000001, 0x106)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000008000000feffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000002000000000000000000000000000005d0669cbe86199bd39ae165980817b404075820769cebf12636adede04553a76379234d86bd978c934266b353da5c794925b518eab8cb4081b5e2b2276b6cf474f99f3023727ea7afd33000607dc588dfed9581b27f8dbcd5f9ca0b4f3e64ada683fe5ae7452980cac08eeecf32832a0ce95ab179d1f"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x36)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r9, &(0x7f00000000c0), 0x26)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x21, 0x2, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000000000140000001100010005000000000000000000000a"], 0xe0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000005700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

1.412202407s ago: executing program 1 (id=658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040084)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x401, 0xe}, 0x140}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="006200000000000000e2bedb581c25ba29000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001f000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)={r3})
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3ff)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x90)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.152048085s ago: executing program 2 (id=661):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, r1, 0x1, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/27}, 0x20)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
close(0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="0c00008005000100980000000c000800ffffffff00000000"], 0x38}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x54}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
setsockopt$sock_attach_bpf(r6, 0x29, 0x30, 0x0, 0x108)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000001580)=""/4096, 0x1000, <r7=>0x0, &(0x7f0000002580)=""/4096, 0x1000}}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003600)={0x11, 0x6, &(0x7f0000000400)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @generic={0xcc, 0x8, 0x7, 0x65, 0x8}], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x25, &(0x7f0000000480)=""/37, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x8, 0x49f, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003580)=[r2, r0, r2, 0xffffffffffffffff], &(0x7f00000035c0)=[{0x2, 0x4, 0x7, 0x8}], 0x10, 0x8}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000036c0)=@base={0x1a, 0x5, 0x3, 0x8, 0x40000, r2, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000003800)={0x16, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd={0x18, 0xb, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x4, 0x1, 0xa, 0xffffffffffffffc0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x7901, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x9, 0x4, 0x9b1e}, 0x10, r7, r8, 0x5, &(0x7f0000003740)=[0x1, r2, r9, r2, r2, r5, r2, r2], &(0x7f0000003780)=[{0x4, 0x1, 0x9}, {0x3, 0x4, 0x8, 0x1}, {0x0, 0x1, 0xd, 0x6}, {0x0, 0x2, 0x6, 0x5}, {0x3, 0x2, 0x9, 0x8}], 0x10, 0x500}, 0x94)

1.050818087s ago: executing program 2 (id=663):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2a, 0x2, 0x0) (async)
r2 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5411, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c01000000000104fdffffff00000000fc010000000000000000000000000001200100000000000000000000000000020004000000000000000080200000000087f5ca297d817a660a09b8b82f912d635b16598f540c579d48c75a78cb63ed70814c8c7995a922bcf36db63ccdee5c4b7bf34017261286cd67d62f0d54cf549f645fd76f91e35c2137caddd12a7de71cb44b9c506062e497d80bfbfcc9b2e7ad918d260d9383b4cfcbd7ce66a1369c617cc1e2664300"/194, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000200000000000000000000000000000003000000feffffff0000000000000000900000000000000008000000fdffffff04001b0014000d00ac1e000100"/200], 0x10c}}, 0x4808)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@flushsa={0x7c, 0x1c, 0x400, 0x70bd2b, 0x25dfdbfe, {0x2b}, [@coaddr={0x14, 0xe, @in=@loopback}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @lastused={0xc, 0xf, 0xdc}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@private=0xb010101, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004085}, 0x4008004)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f000300000008004b00134e9c0008000300000000000800150004000000080001"], 0x38}}, 0x0)

1.049019481s ago: executing program 0 (id=664):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eacad3e45fdf123, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0xc, &(0x7f0000000500), 0x4)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
close(r0)

991.932874ms ago: executing program 2 (id=665):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x2100, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a11000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140)=0x1)

911.885336ms ago: executing program 2 (id=666):
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd00, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xd}, 0x2018, 0x10, 0x0, 0x9, 0x1000, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="9a275fc08f7ac2793b12", @ANYBLOB="7f00"/20, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="05000000030000000100"/28, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYRESHEX=r6, @ANYRES32=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x16, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, 0x0, 0x0)

910.524575ms ago: executing program 0 (id=667):
r0 = socket$kcm(0x10, 0x6, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000140)=""/227, 0xe3}], 0x10000000000002a3, &(0x7f0000000000)=""/48, 0x20}, 0x40010001)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000940)=""/244, 0xf4}, {&(0x7f0000001140)=""/4058, 0xfda}, {&(0x7f0000002940)=""/4106, 0x100a}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000580)=""/104, 0x68}], 0x7}, 0x10100)
recvmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x10000)

910.100194ms ago: executing program 0 (id=668):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000002500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x400000c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10)
openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x7c, 0xa, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1b66}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x64b}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x10}, @IPSET_ATTR_CIDR={0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x400a1)

772.970357ms ago: executing program 0 (id=669):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="603b429ee6d5"})
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000))
openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@var={0xf, 0x0, 0x0, 0xe, 0x3, 0x2}, @fwd={0x1}, @union={0xd, 0x4, 0x0, 0x5, 0x0, 0x6, [{0x7, 0x0, 0x446}, {0x0, 0x0, 0x8}, {0xf, 0x2, 0x5}, {0x4, 0x0, 0x4}]}, @float={0x10, 0x0, 0x0, 0x10, 0x6}]}, {0x0, [0x0, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000480)=""/173, 0x83, 0xad, 0x1, 0x8, 0x10000}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000240)}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)=@in6={0xa, 0x4e23, 0x2, @remote, 0x6}, 0x1c, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x1}, 0x4000814)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffffffffff83}, 0x200, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x10)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002280)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0}, 0x94)

473.24091ms ago: executing program 0 (id=670):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x2000, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1f14, '\x00', r0, 0xffffffffffffffff, 0x202, 0x4, 0x4}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x164, 0x24, 0x301, 0x70bd25, 0x25dfdbfd, {0x5}, [@nested={0x14f, 0x14e, 0x0, 0x1, [@nested={0x8, 0x2c, 0x0, 0x1, [@nested={0x4, 0x2a}]}, @generic="05c9fa1a1ddcd52183d3958b4e11b79d320d5f1a2d4ca8a1405e06288f1fe2bf92aa8d8d6c06d3c693e96735b902df0000800dcaf1babe99261e3815bd2bb619a66f0003f31316f57d1858d58681e3f63d9064ede0c3c3e27bfc3c8842d3e300ae3e1f68dae1835075c650b927d78b8e97d3bd3ba32a28e1726c774b30af1c6656aaec443902a9520523aa2518f3ccf60f9692ba012facb41c2bf200b7b43b93a51d99294a", @typed={0x8, 0x149, 0x0, 0x0, @pid}, @generic="5884cd6639d08f56f4fb73eb28317d15aa32302c40d61ada6e264ed3197eda4c3883be786a0ead97603c61e111499bbce28d67a0a6be6f01e3722e660017f36e8ed45e93600ec5ded308420d7d662742fd85d4da42980f783c148de403d901a4eca746878a9d912d269fb286603e11b068b6f758f2738a3ae3d90cb33e8e76444b4816122f2516042ee9120c24b3e3786ea5d11dcc12"]}]}, 0x164}, 0x1, 0x0, 0x0, 0x448d3}, 0x40)
recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000040)
socket$kcm(0x11, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e81f7", 0xb}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x9, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x4050)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x2c}}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

471.04286ms ago: executing program 1 (id=671):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, &(0x7f0000000080), &(0x7f0000000500)=r0, 0x8}, 0x20)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xd}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000580)="059dfb11c28d5eff6fba95a36e0b6f76027bc40282a66271f741a87b21ce9e3f8dabe36f66b42423559c1c02c98ef502a01be06e9aedd0923614f4b9f0f111348c23fd361bfe161b87a0c03b361d1190f1e5b705b6e013", 0x57}, {&(0x7f0000000880)="8fcd52432d9d373e9b540f236f371922dbaccf8da39c5bfdf515857988d898464b330e427194f6f83a5d5bac756de5402e735bcf769dfa9afd08c9f41577a62e385fbf2c659591365ab1a09f20939b1236450795e5dfc018ddb595b01dd0902eec6299dcca6385b83c5d76a83222265ccb48a06cbeca672d0582c9d56fbadd785681c6572880dd8b789748e71e53548bce6486ca1119b9367787c5b0e53c7d91a159fe", 0xa3}], 0x2, 0x0, 0x0, 0xc011}, 0x20008001)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044943, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1600000004000000", @ANYRES32, @ANYBLOB="3458d958a5adacde036d8b5da9d8b327f08788b278282c099b61cd1abce64c36665c3ca2aa5a85e23687b369c340f700fb0e4e9cdf2de4450ebf92de8137f2884e3747124eb46e70fc19a2ef96b7d010e239cddd92ca78f22d1dfd82ef04ec582360a08cae147d39cb6a8ff58f22ecaddbd09ec3c9cef7f6f0078b921c0e13ab5c1cff0ac2a9222ee21048d7b5fe0031c8d14c71076aaebabc27868b20bc0f72791069553973ad929f97afc80213f8ca1620cc2377672b9811", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20)
socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x9, 0x4}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000180)={0x1, 0x3, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @empty]})
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

355.555631ms ago: executing program 2 (id=672):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000640), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc2608000000001fbf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000100000000ff0f000000000000122000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000a0000000000000000007476c0ff0000000095000000000000008c891ba842b3f99d24cc288402ec9a9a7e7c527c6a2b94e6503aafde98f36c3ae74e3a4ec2d88ba66381f626540d0f9f5df6d19fbbcb3dc6c2dbcb64392994a1c1ce300f45cbddf7a51935b48bd11c33ce1ad061b32543b1deacf55ebf185dba81ae76bb81fe4792c90162d52ab74c783e8b18955e11293d917d9b7c1b3938da09a6f92978062681e46acfe595833001ec55fd19da4bf0070000"], 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0x7fffffffffdfffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000100)=0x4000000005, 0x12)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r8)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
write$cgroup_type(r8, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230040)
close(0x3)

93.32379ms ago: executing program 1 (id=673):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000062004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x21)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0xee, 0xfffffff8, 0x40000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0xe}, 0x50)

2.107363ms ago: executing program 1 (id=674):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711215000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0xa, 0x9, 0x8, 0x2}, 0x50)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x0, 0x1003, 0x1, 0x1}}, 0x80, 0x0}, 0x4000059)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0x0, 0x4, 0x3fe, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f086dd1bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e5feca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000040), &(0x7f0000000100)=r5}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r7}, 0x38)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in=@loopback, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7a, 0xffff8c89}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000200)=@framed={{}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x4, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r8, r0}, 0xc)
socket$inet6(0xa, 0x80000, 0xe297dbd)

0s ago: executing program 0 (id=675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xfe32, 0x4, 0x1, 0x2}, {0x1, 0x0, 0x1, 0x10000}]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = getpid()
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000010c0), 0x5}, 0x828, 0x2, 0x0, 0x0, 0x9, 0x800001, 0x7fff, 0x0, 0x2000000, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x600c81, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r4, 0x0, 0x64)
socket$kcm(0xa, 0x2, 0x73)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:65103' (ED25519) to the list of known hosts.
syzkaller login: [   57.660334][ T5830] cgroup: Unknown subsys name 'net'
[   57.812459][ T5830] cgroup: Unknown subsys name 'cpuset'
[   57.820606][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.361587][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.955857][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.960766][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.964538][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.968620][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.972462][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.976869][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.014408][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.018623][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.029207][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.032771][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.083339][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.088736][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.092781][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.097760][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.101230][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.442060][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   66.540829][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   66.572843][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   66.654701][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.659177][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.662316][ T5846] bridge_slave_0: entered allmulticast mode
[   66.666327][ T5846] bridge_slave_0: entered promiscuous mode
[   66.705684][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.709875][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.712970][ T5846] bridge_slave_1: entered allmulticast mode
[   66.717323][ T5846] bridge_slave_1: entered promiscuous mode
[   66.800766][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.803786][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.807057][ T5850] bridge_slave_0: entered allmulticast mode
[   66.810962][ T5850] bridge_slave_0: entered promiscuous mode
[   66.849232][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.856507][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.862613][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.865637][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.870436][ T5850] bridge_slave_1: entered allmulticast mode
[   66.874657][ T5850] bridge_slave_1: entered promiscuous mode
[   66.892691][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.896039][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.901226][ T5857] bridge_slave_0: entered allmulticast mode
[   66.905580][ T5857] bridge_slave_0: entered promiscuous mode
[   66.941870][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.944998][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.948498][ T5857] bridge_slave_1: entered allmulticast mode
[   66.952172][ T5857] bridge_slave_1: entered promiscuous mode
[   66.972552][ T5846] team0: Port device team_slave_0 added
[   66.978293][ T5846] team0: Port device team_slave_1 added
[   66.983815][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.009215][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.033409][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.050828][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.053244][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.063137][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.070551][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.072730][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.082087][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.089893][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.144724][ T5850] team0: Port device team_slave_0 added
[   67.151737][ T5850] team0: Port device team_slave_1 added
[   67.156447][ T5857] team0: Port device team_slave_0 added
[   67.161640][ T5857] team0: Port device team_slave_1 added
[   67.248862][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.251802][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.263575][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.274873][ T5846] hsr_slave_0: entered promiscuous mode
[   67.280016][ T5846] hsr_slave_1: entered promiscuous mode
[   67.284106][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.287530][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.298224][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.303460][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.306287][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.316754][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.329739][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.332467][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.342953][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.473172][ T5857] hsr_slave_0: entered promiscuous mode
[   67.476599][ T5857] hsr_slave_1: entered promiscuous mode
[   67.480000][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   67.482412][ T5857] Cannot create hsr debugfs directory
[   67.530527][ T5850] hsr_slave_0: entered promiscuous mode
[   67.534047][ T5850] hsr_slave_1: entered promiscuous mode
[   67.537870][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   67.540308][ T5850] Cannot create hsr debugfs directory
[   67.912254][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.928603][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.939725][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.960911][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.021363][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.030097][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.039081][ T5852] Bluetooth: hci0: command tx timeout
[   68.051994][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.062185][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.107463][ T5852] Bluetooth: hci1: command tx timeout
[   68.180170][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.187090][ T5852] Bluetooth: hci2: command tx timeout
[   68.195333][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.218885][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.236444][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.322297][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.381973][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.392061][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   68.414956][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.418522][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.443904][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.447092][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.471480][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   68.510625][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.513791][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.537585][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.540519][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.564860][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.614360][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   68.637285][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.640326][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.664269][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.667466][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.870053][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.953337][ T5850] veth0_vlan: entered promiscuous mode
[   68.980792][ T5850] veth1_vlan: entered promiscuous mode
[   69.001759][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.036382][ T5850] veth0_macvtap: entered promiscuous mode
[   69.053952][ T5850] veth1_macvtap: entered promiscuous mode
[   69.082466][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.098803][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.111064][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.128878][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.133894][ T5846] veth0_vlan: entered promiscuous mode
[   69.136627][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.141531][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.151728][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.173330][ T5846] veth1_vlan: entered promiscuous mode
[   69.258708][ T5846] veth0_macvtap: entered promiscuous mode
[   69.296648][ T5846] veth1_macvtap: entered promiscuous mode
[   69.321925][ T5857] veth0_vlan: entered promiscuous mode
[   69.331228][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.339284][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.351872][ T5857] veth1_vlan: entered promiscuous mode
[   69.366080][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.392756][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.398854][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.412044][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.446046][ T5857] veth0_macvtap: entered promiscuous mode
[   69.459564][ T5857] veth1_macvtap: entered promiscuous mode
[   69.475570][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.488796][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.499349][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.528003][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.532242][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.539659][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.576390][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.581729][ T5915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.596579][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.607423][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.631505][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.654920][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.657641][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.661778][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.785705][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.830995][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.838119][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.916509][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.924649][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.983903][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.988629][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.008865][ T5922] netlink: 'syz.0.6': attribute type 2 has an invalid length.
[   70.011742][ T5922] netlink: 'syz.0.6': attribute type 8 has an invalid length.
[   70.024250][ T5922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6'.
[   70.095835][ T5924] TCP: TCP_TX_DELAY enabled
[   70.108549][ T5852] Bluetooth: hci0: command tx timeout
[   70.137772][ T5927] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   70.140484][ T5927] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3'.
[   70.187178][ T5852] Bluetooth: hci1: command tx timeout
[   70.268922][ T5852] Bluetooth: hci2: command tx timeout
[   70.417825][ T5943] netlink: 'syz.1.9': attribute type 32 has an invalid length.
[   70.421617][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   70.508924][ T5954] netlink: 'syz.0.14': attribute type 10 has an invalid length.
[   70.525265][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.551130][ T5954] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   70.623613][ T5878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.628850][ T5961] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   70.635038][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.639890][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.664131][ T5954] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   70.674176][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.674463][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.675929][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.676142][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.691817][ T5961] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   70.865583][    C0] hrtimer: interrupt took 33355 ns
[   71.203278][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.206428][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.747771][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22'.
[   71.879097][ T5993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24'.
[   71.882542][ T5993] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   71.890937][ T5993] netlink: 'syz.1.24': attribute type 2 has an invalid length.
[   71.893422][ T5993] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.24'.
[   71.991892][ T5997] netlink: 164 bytes leftover after parsing attributes in process `syz.2.23'.
[   72.000410][ T5997] netlink: 164 bytes leftover after parsing attributes in process `syz.2.23'.
[   72.187378][ T5852] Bluetooth: hci0: command tx timeout
[   72.268650][ T5852] Bluetooth: hci1: command tx timeout
[   72.347285][ T5852] Bluetooth: hci2: command tx timeout
[   72.681325][ T6013] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   72.695853][ T6013] netlink: 'syz.0.28': attribute type 4 has an invalid length.
[   74.270018][ T5852] Bluetooth: hci0: command tx timeout
[   74.349418][ T5852] Bluetooth: hci1: command tx timeout
[   74.427851][ T5852] Bluetooth: hci2: command tx timeout
[   77.725580][ T6031] : renamed from wg2 (while UP)
[   77.735992][ T6037] netlink: 'syz.1.35': attribute type 7 has an invalid length.
[   78.006318][ T6060] __nla_validate_parse: 36 callbacks suppressed
[   78.006343][ T6060] netlink: 196 bytes leftover after parsing attributes in process `syz.1.43'.
[   78.100407][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'.
[   78.125972][ T6057] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.42'.
[   78.225251][ T6071] netlink: 'syz.1.46': attribute type 21 has an invalid length.
[   78.229251][ T6071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.46'.
[   78.232360][ T6071] netlink: 3 bytes leftover after parsing attributes in process `syz.1.46'.
[   78.254348][ T6073] netlink: 'syz.2.45': attribute type 39 has an invalid length.
[   78.264804][ T6073] veth0_macvtap: left promiscuous mode
[   78.365670][ T6073] netlink: 180 bytes leftover after parsing attributes in process `syz.2.45'.
[   78.529208][ T6081] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   78.531753][ T6081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.540001][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.079918][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[   79.088727][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[   80.271551][ T6116] openvswitch: netlink: IP tunnel dst address not specified
[   80.359735][ T6117] Zero length message leads to an empty skb
[   80.784061][ T6124] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.811316][ T6128] delete_channel: no stack
[   80.813589][ T6128] delete_channel: no stack
[   80.894793][ T6133] netlink: 22319 bytes leftover after parsing attributes in process `syz.2.65'.
[   80.899169][ T6133] netlink: 22319 bytes leftover after parsing attributes in process `syz.2.65'.
[   81.824794][ T6154] lo speed is unknown, defaulting to 1000
[   81.844433][ T6154] lo speed is unknown, defaulting to 1000
[   81.895119][ T6154] lo speed is unknown, defaulting to 1000
[   81.990544][ T6154] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.315596][ T6154] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   82.634425][ T6154] lo speed is unknown, defaulting to 1000
[   82.642843][ T6154] lo speed is unknown, defaulting to 1000
[   82.655580][ T6154] lo speed is unknown, defaulting to 1000
[   82.761589][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.885691][ T6198] netlink: 'syz.1.86': attribute type 21 has an invalid length.
[   82.889753][ T6198] netlink: 'syz.1.86': attribute type 3 has an invalid length.
[   82.899391][ T6198] netlink: 'syz.1.86': attribute type 13 has an invalid length.
[   82.909369][ T6198] netlink: 'syz.1.86': attribute type 17 has an invalid length.
[   83.004657][ T6201] netlink: 'syz.0.85': attribute type 2 has an invalid length.
[   83.011981][ T6201] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   83.014424][ T6201] __nla_validate_parse: 69 callbacks suppressed
[   83.014435][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   83.022626][ T6202] netlink: 'syz.2.87': attribute type 2 has an invalid length.
[   83.025258][ T6202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.87'.
[   83.085220][ T6198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.096889][ T5851] lo speed is unknown, defaulting to 1000
[   83.422318][ T6210] : renamed from hsr0 (while UP)
[   83.693870][ T6228] netlink: 'syz.2.95': attribute type 27 has an invalid length.
[   83.700050][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'.
[   83.708144][ T6228] netlink: 'syz.2.95': attribute type 3 has an invalid length.
[   83.753464][ T6228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.95'.
[   83.972499][ T6239] netlink: 'syz.0.98': attribute type 10 has an invalid length.
[   84.422510][    T9] cfg80211: failed to load regulatory.db
[   84.774591][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[   84.948253][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.110'.
[   84.952366][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.110'.
[   84.956087][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.110'.
[   85.006355][ T6286] netlink: 160 bytes leftover after parsing attributes in process `syz.1.112'.
[   85.045768][ T6287] syzkaller0: entered promiscuous mode
[   85.049919][ T6287] syzkaller0: entered allmulticast mode
[   85.126369][ T6286] batman_adv: batadv0: Adding interface: netdevsim0
[   85.131096][ T6286] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.140473][ T6286] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   86.202088][ T6342] netlink: 92 bytes leftover after parsing attributes in process `syz.2.126'.
[   88.400033][ T6424] __nla_validate_parse: 6 callbacks suppressed
[   88.400077][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   88.575922][ T6432] validate_nla: 9 callbacks suppressed
[   88.575959][ T6432] netlink: 'syz.2.155': attribute type 21 has an invalid length.
[   88.582178][ T6432] netlink: 164 bytes leftover after parsing attributes in process `syz.2.155'.
[   91.176421][ T6489] IPv6: Can't replace route, no match found
[   91.662646][ T6492] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[   93.010075][ T6515] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   93.064460][ T6515] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   93.069246][ T6515] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   93.074235][ T6515] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   93.182678][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   93.182901][ T6517] =======================================================
[   93.182901][ T6517] WARNING: The mand mount option has been deprecated and
[   93.182901][ T6517]          and is ignored by this kernel. Remove the mand
[   93.182901][ T6517]          option from the mount to silence this warning.
[   93.182901][ T6517] =======================================================
[   93.333448][ T6532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.183'.
[   93.371971][ T6539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.185'.
[   93.376312][ T6539] netlink: 43 bytes leftover after parsing attributes in process `syz.0.185'.
[   93.381955][ T6539] netlink: 'syz.0.185': attribute type 5 has an invalid length.
[   93.383266][ T6538] netlink: 'syz.2.184': attribute type 2 has an invalid length.
[   93.385847][   T33] audit: type=1107 audit(1758099824.103:2): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f AO
[   93.385847][   T33] P)(4{:S'
[   93.397186][ T6539] netlink: 43 bytes leftover after parsing attributes in process `syz.0.185'.
[   93.441571][ T6541] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.444681][ T6541] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.472354][ T6536] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   93.474958][ T6536] netlink: 17 bytes leftover after parsing attributes in process `syz.1.182'.
[   93.492397][ T6544] netlink: 'syz.0.186': attribute type 21 has an invalid length.
[   93.495404][ T6544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.186'.
[   93.512419][ T6544] netlink: 'syz.0.186': attribute type 5 has an invalid length.
[   93.835117][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   93.959202][ T6557] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   94.557840][ T6582] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   94.574941][ T6584] netlink: 176 bytes leftover after parsing attributes in process `syz.1.201'.
[   94.731672][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[   94.768654][ T6597] netlink: 'syz.2.207': attribute type 15 has an invalid length.
[   94.843523][ T6608] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   94.846471][ T6607] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   94.871328][ T6611] netlink: 830 bytes leftover after parsing attributes in process `syz.2.211'.
[   95.233510][ T6627] netlink: 'syz.1.216': attribute type 21 has an invalid length.
[   95.248081][ T6627] netlink: 212256 bytes leftover after parsing attributes in process `syz.1.216'.
[   95.253644][ T6627] netlink: zone id is out of range
[   95.255802][ T6627] netlink: zone id is out of range
[   95.258279][ T6627] netlink: zone id is out of range
[   95.262438][ T6627] netlink: zone id is out of range
[   95.264681][ T6627] netlink: zone id is out of range
[   95.268357][ T6627] netlink: zone id is out of range
[   95.270466][ T6627] netlink: zone id is out of range
[   95.272493][ T6627] netlink: zone id is out of range
[   95.274593][ T6627] netlink: zone id is out of range
[   95.279125][ T6627] netlink: zone id is out of range
[   95.418632][ T6633] netlink: 14 bytes leftover after parsing attributes in process `syz.1.219'.
[   95.428257][ T6633] hsr_slave_0: left promiscuous mode
[   95.434126][ T6633] hsr_slave_1: left promiscuous mode
[   95.649520][ T6637] netlink: 22 bytes leftover after parsing attributes in process `syz.2.220'.
[   95.684662][ T6641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.221'.
[  100.829343][ T6721] __nla_validate_parse: 4 callbacks suppressed
[  100.829369][ T6721] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.246'.
[  100.849294][ T6719] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.246'.
[  100.930509][ T6719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.246'.
[  104.592963][ T6735] net_ratelimit: 3 callbacks suppressed
[  104.592991][ T6735] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  104.996454][ T6740] netlink: 'syz.0.249': attribute type 1 has an invalid length.
[  104.999943][ T6740] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.249'.
[  105.135204][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'.
[  105.141243][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[  105.935217][ T5850] cgroup: fork rejected by pids controller in /syz0
[  108.172264][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'.
[  108.390525][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.729555][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.786224][ T6756] syz.1.254: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  108.799746][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT(full) 
[  108.799776][ T6756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.799786][ T6756] Call Trace:
[  108.799794][ T6756]  <TASK>
[  108.799806][ T6756]  dump_stack_lvl+0x189/0x250
[  108.799857][ T6756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.799876][ T6756]  ? __pfx__printk+0x10/0x10
[  108.799897][ T6756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.799918][ T6756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.799934][ T6756]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  108.799952][ T6756]  warn_alloc+0x214/0x310
[  108.799975][ T6756]  ? __pfx_warn_alloc+0x10/0x10
[  108.799996][ T6756]  ? __get_vm_area_node+0x28f/0x300
[  108.800019][ T6756]  ? hash_netport4_resize+0x235/0x1b60
[  108.800047][ T6756]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  108.800089][ T6756]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  108.800115][ T6756]  ? rcu_is_watching+0x15/0xb0
[  108.800131][ T6756]  ? hash_netport4_resize+0x235/0x1b60
[  108.800149][ T6756]  ? hash_netport4_resize+0x235/0x1b60
[  108.800163][ T6756]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  108.800186][ T6756]  ? hash_netport4_resize+0x235/0x1b60
[  108.800209][ T6756]  hash_netport4_resize+0x235/0x1b60
[  108.800226][ T6756]  ? hash_netport4_uadt+0xc97/0xf30
[  108.800248][ T6756]  ? __pfx_hash_netport4_add+0x10/0x10
[  108.800266][ T6756]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  108.800324][ T6756]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  108.800350][ T6756]  call_ad+0x44e/0xb00
[  108.800374][ T6756]  ? __pfx_call_ad+0x10/0x10
[  108.800397][ T6756]  ? __nla_parse+0x40/0x60
[  108.800439][ T6756]  ip_set_ad+0x791/0x930
[  108.800460][ T6756]  ? __pfx_ip_set_ad+0x10/0x10
[  108.800501][ T6756]  nfnetlink_rcv_msg+0xb4d/0x1130
[  108.800521][ T6756]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  108.800548][ T6756]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  108.800560][ T6756]  ? kasan_save_free_info+0x46/0x50
[  108.800598][ T6756]  ? perf_trace_preemptirq_template+0xa3/0x340
[  108.800620][ T6756]  ? kasan_quarantine_put+0x3d/0x220
[  108.800655][ T6756]  netlink_rcv_skb+0x208/0x470
[  108.800677][ T6756]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  108.800692][ T6756]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  108.800716][ T6756]  ? bpf_lsm_capable+0x9/0x20
[  108.800737][ T6756]  ? security_capable+0x7e/0x2e0
[  108.800761][ T6756]  nfnetlink_rcv+0x26a/0x2520
[  108.800778][ T6756]  ? __dev_queue_xmit+0x1d79/0x3b50
[  108.800809][ T6756]  ? __dev_queue_xmit+0x27b/0x3b50
[  108.800837][ T6756]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  108.800850][ T6756]  ? __pfx___dev_queue_xmit+0x10/0x10
[  108.800879][ T6756]  ? ref_tracker_free+0x63a/0x7d0
[  108.800895][ T6756]  ? __asan_memcpy+0x40/0x70
[  108.800915][ T6756]  ? __pfx_ref_tracker_free+0x10/0x10
[  108.800940][ T6756]  ? skb_clone+0x246/0x3a0
[  108.800966][ T6756]  ? __netlink_deliver_tap+0x807/0x850
[  108.800981][ T6756]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.801002][ T6756]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.801022][ T6756]  netlink_unicast+0x82f/0x9e0
[  108.801045][ T6756]  ? __pfx_netlink_unicast+0x10/0x10
[  108.801059][ T6756]  ? netlink_sendmsg+0x642/0xb30
[  108.801073][ T6756]  ? skb_put+0x11b/0x210
[  108.801091][ T6756]  netlink_sendmsg+0x805/0xb30
[  108.801115][ T6756]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.801133][ T6756]  ? aa_sock_msg_perm+0xf1/0x1d0
[  108.801152][ T6756]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  108.801168][ T6756]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.801184][ T6756]  __sock_sendmsg+0x21c/0x270
[  108.801202][ T6756]  ____sys_sendmsg+0x505/0x830
[  108.801226][ T6756]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.801251][ T6756]  ? import_iovec+0x74/0xa0
[  108.801275][ T6756]  ___sys_sendmsg+0x21f/0x2a0
[  108.801327][ T6756]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.801372][ T6756]  ? __fget_files+0x2a/0x420
[  108.801387][ T6756]  ? __fget_files+0x3a0/0x420
[  108.801409][ T6756]  __x64_sys_sendmsg+0x19b/0x260
[  108.801427][ T6756]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  108.801454][ T6756]  ? rcu_is_watching+0x15/0xb0
[  108.801472][ T6756]  ? do_syscall_64+0xbe/0x3b0
[  108.801493][ T6756]  do_syscall_64+0xfa/0x3b0
[  108.801508][ T6756]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.801524][ T6756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.801541][ T6756]  ? exc_page_fault+0x9f/0xf0
[  108.801555][ T6756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.801570][ T6756] RIP: 0033:0x7f4785f8eba9
[  108.801587][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.801600][ T6756] RSP: 002b:00007f4786e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.801617][ T6756] RAX: ffffffffffffffda RBX: 00007f47861d5fa0 RCX: 00007f4785f8eba9
[  108.801627][ T6756] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008
[  108.801636][ T6756] RBP: 00007f4786011e19 R08: 0000000000000000 R09: 0000000000000000
[  108.801653][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.801661][ T6756] R13: 00007f47861d6038 R14: 00007f47861d5fa0 R15: 00007ffc7a2405e8
[  108.801686][ T6756]  </TASK>
[  108.801692][ T6756] Mem-Info:
[  108.896606][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.899505][ T6756] active_anon:5398 inactive_anon:0 isolated_anon:0
[  108.899505][ T6756]  active_file:9953 inactive_file:38254 isolated_file:0
[  108.899505][ T6756]  unevictable:1768 dirty:40 writeback:0
[  108.899505][ T6756]  slab_reclaimable:9742 slab_unreclaimable:66345
[  108.899505][ T6756]  mapped:18053 shmem:2434 pagetables:891
[  108.899505][ T6756]  sec_pagetables:0 bounce:0
[  108.899505][ T6756]  kernel_misc_reclaimable:0
[  108.899505][ T6756]  free:276683 free_pcp:20245 free_cma:0
[  108.904213][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.907983][ T6756] Node 0 active_anon:13164kB inactive_anon:0kB active_file:26380kB inactive_file:2260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25600kB dirty:132kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3492kB pagetables:1972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  108.911323][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  108.911424][ T6756] Node 1 active_anon:8428kB inactive_anon:0kB active_file:13432kB inactive_file:150756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46612kB dirty:28kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7760kB pagetables:1592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  108.915001][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.915361][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.919850][ T6756] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.085222][ T6756] lowmem_reserve[]: 0 811 811 811 811
[  109.087587][ T6756] Node 0 DMA32 free:385936kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13164kB inactive_anon:0kB active_file:26380kB inactive_file:2260kB unevictable:3536kB writepending:132kB present:1556484kB managed:830844kB mlocked:0kB bounce:0kB free_pcp:34816kB local_pcp:15136kB free_cma:0kB
[  109.087761][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.100897][ T6756] lowmem_reserve[]: 0 0 0 0 0
[  109.104663][ T6756] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.123623][ T6756] lowmem_reserve[]: 0 0 854 854 854
[  109.125992][ T6756] Node 1 Normal free:246820kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8428kB inactive_anon:0kB active_file:13432kB inactive_file:150756kB unevictable:3536kB writepending:28kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46124kB local_pcp:26508kB free_cma:0kB
[  109.139903][ T6756] lowmem_reserve[]: 0 0 0 0 0
[  109.142041][ T6756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  109.148490][ T6756] Node 0 DMA32: 520*4kB (UME) 469*8kB (UME) 382*16kB (UME) 297*32kB (UME) 178*64kB (UME) 155*128kB (UME) 46*256kB (UM) 40*512kB (UME) 20*1024kB (U) 7*2048kB (UME) 65*4096kB (M) = 385992kB
[  109.156236][ T6756] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  109.163682][ T6756] Node 1 Normal: 72*4kB (UME) 154*8kB (UME) 94*16kB (ME) 59*32kB (UM) 57*64kB (UME) 43*128kB (UME) 3*256kB (ME) 5*512kB (UME) 2*1024kB (UM) 5*2048kB (UM) 53*4096kB (UM) = 246768kB
[  109.174162][ T6756] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  109.180214][ T6756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  109.184300][ T6756] 50641 total pagecache pages
[  109.186338][ T6756] 0 pages in swap cache
[  109.189191][ T6756] Free swap  = 124996kB
[  109.191381][ T6756] Total swap = 124996kB
[  109.193188][ T6756] 786301 pages RAM
[  109.194751][ T6756] 0 pages HighMem/MovableOnly
[  109.197304][ T6756] 241358 pages reserved
[  109.199050][ T6756] 0 pages cma reserved
[  109.219765][ T6770] lo speed is unknown, defaulting to 1000
[  109.349798][ T5852] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  109.471185][   T12] bridge_slave_1: left allmulticast mode
[  109.487877][   T12] bridge_slave_1: left promiscuous mode
[  109.493907][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.524214][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[  109.561776][   T12] bridge_slave_0: left allmulticast mode
[  109.564197][   T12] bridge_slave_0: left promiscuous mode
[  109.575367][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.006564][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.013907][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.025960][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  110.036998][   T12] bond0 (unregistering): Released all slaves
[  110.155020][ T6770] chnl_net:caif_netlink_parms(): no params data found
[  110.459954][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.466898][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.469391][ T6770] bridge_slave_0: entered allmulticast mode
[  110.472265][ T6770] bridge_slave_0: entered promiscuous mode
[  110.578195][ T6816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.594546][ T6816] syz.1.268 (6816) used greatest stack depth: 19832 bytes left
[  110.614887][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.627938][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.639620][ T6770] bridge_slave_1: entered allmulticast mode
[  110.644051][ T6770] bridge_slave_1: entered promiscuous mode
[  110.710314][ T6770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.726229][   T12] hsr_slave_0: left promiscuous mode
[  110.739871][   T12] hsr_slave_1: left promiscuous mode
[  110.742069][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.744633][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.760159][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.762515][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.791185][   T12] veth1_macvtap: left promiscuous mode
[  110.793211][   T12] veth0_macvtap: left promiscuous mode
[  110.795062][   T12] veth1_vlan: left promiscuous mode
[  110.797749][   T12] veth0_vlan: left promiscuous mode
[  110.987538][ T5852] Bluetooth: hci1: command tx timeout
[  111.460345][   T12] team0 (unregistering): Port device team_slave_1 removed
[  111.497037][   T12] team0 (unregistering): Port device team_slave_0 removed
[  111.901577][ T6770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.994523][ T6770] team0: Port device team_slave_0 added
[  112.017600][ T6770] team0: Port device team_slave_1 added
[  112.063731][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.064624][ T6855] netlink: 176 bytes leftover after parsing attributes in process `syz.1.277'.
[  112.072645][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.086313][ T6770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.114783][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.146889][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.177069][ T6770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.252603][ T6770] hsr_slave_0: entered promiscuous mode
[  112.255196][ T6770] hsr_slave_1: entered promiscuous mode
[  112.756519][ T6770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  112.765365][ T6770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  112.773109][ T6770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  112.781688][ T6770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  112.922621][ T6770] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.948426][ T6770] 8021q: adding VLAN 0 to HW filter on device team0
[  112.962791][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.966097][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.985776][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.988301][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.069286][ T5852] Bluetooth: hci1: command tx timeout
[  113.084821][ T6898] tmpfs: Bad value for 'uid'
[  113.090444][ T6898] tmpfs: Bad value for 'uid'
[  113.442213][ T6770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.572754][ T6770] veth0_vlan: entered promiscuous mode
[  113.593957][ T6770] veth1_vlan: entered promiscuous mode
[  113.653800][ T6770] veth0_macvtap: entered promiscuous mode
[  113.671280][ T6770] veth1_macvtap: entered promiscuous mode
[  113.694677][ T6770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.699257][ T6924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  113.710388][ T6770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.722254][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.725970][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.732159][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.744895][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.838028][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.840576][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.882021][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.885119][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.975673][ T6927] wg0 speed is unknown, defaulting to 1000
[  113.993967][ T6927] wg0 speed is unknown, defaulting to 1000
[  114.004202][ T6927] wg0 speed is unknown, defaulting to 1000
[  114.428782][ T6927] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  114.684597][ T6927] wg0 speed is unknown, defaulting to 1000
[  114.699499][ T6927] wg0 speed is unknown, defaulting to 1000
[  114.702362][ T6927] wg0 speed is unknown, defaulting to 1000
[  114.763230][ T6953] netlink: 208192 bytes leftover after parsing attributes in process `syz.1.291'.
[  114.766132][ T6953] netlink: 'syz.1.291': attribute type 1 has an invalid length.
[  114.768977][ T6953] netlink: 'syz.1.291': attribute type 2 has an invalid length.
[  114.804999][ T6954] netlink: 44 bytes leftover after parsing attributes in process `syz.2.292'.
[  115.155127][ T5852] Bluetooth: hci1: command tx timeout
[  117.421979][ T5852] Bluetooth: hci1: command tx timeout
[  119.039435][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1042531819 wd_nsec: 1042531508
[  123.090413][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'.
[  123.173266][ T6957] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.293'.
[  123.227413][ T6968] netlink: 5192 bytes leftover after parsing attributes in process `syz.2.298'.
[  123.938443][ T6979] netlink: 'syz.1.301': attribute type 10 has an invalid length.
[  123.990469][ T6984] netlink: 'syz.1.301': attribute type 11 has an invalid length.
[  123.998902][ T6984] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.301'.
[  124.279388][ T6976] syz.0.299 (6976) used greatest stack depth: 19656 bytes left
[  124.357860][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.715603][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'.
[  124.730765][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'.
[  125.225459][ T6980] netlink: 276 bytes leftover after parsing attributes in process `syz.2.300'.
[  125.412920][ T6979] team0: Port device wlan1 added
[  125.474929][ T6979] syz.1.301 (6979) used greatest stack depth: 18888 bytes left
[  125.504733][ T7007] openvswitch: netlink: Flow key attr not present in new flow.
[  125.922298][ T7012] Driver unsupported XDP return value 0 on prog  (id 260) dev N/A, expect packet loss!
[  126.523176][ T7018] syzkaller0: entered promiscuous mode
[  126.525982][ T7018] syzkaller0: entered allmulticast mode
[  127.546341][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'.
[  127.555722][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'.
[  127.563498][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'.
[  127.832030][ T7045] openvswitch: netlink: Missing valid actions attribute.
[  127.847819][ T7045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.861174][ T7047] netlink: 'syz.0.317': attribute type 9 has an invalid length.
[  128.100960][ T7063] netlink: 'syz.0.322': attribute type 21 has an invalid length.
[  128.104368][ T7063] netlink: 'syz.0.322': attribute type 6 has an invalid length.
[  128.127426][ T7063] __nla_validate_parse: 33 callbacks suppressed
[  128.127443][ T7063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'.
[  128.140326][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'.
[  128.575658][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'.
[  128.594974][ T7071] netlink: 'syz.0.324': attribute type 21 has an invalid length.
[  128.599685][ T7071] netlink: 128 bytes leftover after parsing attributes in process `syz.0.324'.
[  129.352055][ T7099] syzkaller0: entered promiscuous mode
[  129.354371][ T7099] syzkaller0: entered allmulticast mode
[  129.582500][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[  129.963218][ T7113] netlink: 'syz.2.337': attribute type 5 has an invalid length.
[  130.619895][ T7123] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.339'.
[  131.005423][ T7136] netlink: 300 bytes leftover after parsing attributes in process `syz.0.343'.
[  131.039663][ T7144] netlink: 17 bytes leftover after parsing attributes in process `syz.1.345'.
[  131.354350][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[  132.510073][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.515339][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.658926][ T7202] netlink: 22 bytes leftover after parsing attributes in process `syz.0.360'.
[  132.833186][ T7206] lo speed is unknown, defaulting to 1000
[  132.853352][ T7206] wg0 speed is unknown, defaulting to 1000
[  132.866415][ T7207] netlink: 'syz.2.362': attribute type 21 has an invalid length.
[  133.260750][ T7216] __nla_validate_parse: 1 callbacks suppressed
[  133.260766][ T7216] netlink: 14 bytes leftover after parsing attributes in process `syz.2.364'.
[  133.270195][ T7216] hsr_slave_0: left promiscuous mode
[  133.273308][ T7216] hsr_slave_1: left promiscuous mode
[  133.577061][ T7224] openvswitch: netlink: Key type 50 is out of range max 32
[  134.045125][ T7245] tap0: tun_chr_ioctl cmd 1074025677
[  134.053066][ T7245] tap0: linktype set to 6
[  134.134379][ T7253] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  134.249973][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.375'.
[  134.634246][ T7272] netlink: 'syz.2.377': attribute type 64 has an invalid length.
[  134.893182][ T7294] netlink: 'syz.1.383': attribute type 21 has an invalid length.
[  134.897121][ T7294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.383'.
[  135.209163][ T7305] netlink: 'syz.1.386': attribute type 6 has an invalid length.
[  135.222952][ T7305] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.386'.
[  136.206981][ T7338] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.396'.
[  136.283099][ T7348] netlink: 104 bytes leftover after parsing attributes in process `syz.2.398'.
[  136.298733][ T7348] netlink: 104 bytes leftover after parsing attributes in process `syz.2.398'.
[  136.519708][ T7360] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.402'.
[  136.576293][ T7366] netlink: 'syz.0.403': attribute type 29 has an invalid length.
[  136.580218][ T7367] netlink: 'syz.0.403': attribute type 29 has an invalid length.
[  136.585138][ T7366] netlink: 500 bytes leftover after parsing attributes in process `syz.0.403'.
[  136.588325][ T7366] unsupported nla_type 58
[  136.628204][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'.
[  136.635755][ T7355] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  136.651195][ T7355] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  136.788524][ T7355] team0: Port device dummy0 added
[  136.829985][ T7355] syz.1.399 (7355) used greatest stack depth: 18488 bytes left
[  137.253881][ T7396] netlink: 'syz.2.412': attribute type 39 has an invalid length.
[  137.471335][ T7399] netlink: 'syz.2.412': attribute type 4 has an invalid length.
[  137.614561][ T7420] netlink: 'syz.1.418': attribute type 3 has an invalid length.
[  137.668782][ T7424] syzkaller0: entered promiscuous mode
[  137.671327][ T7424] syzkaller0: entered allmulticast mode
[  137.782718][ T7427] netlink: 'syz.1.420': attribute type 10 has an invalid length.
[  137.880428][ T7427] team0: Port device dummy0 removed
[  137.926012][ T7427] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  138.462237][ T7455] __nla_validate_parse: 6 callbacks suppressed
[  138.462249][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[  138.469352][ T7455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.505543][ T7457] netlink: 'syz.2.429': attribute type 1 has an invalid length.
[  138.508990][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  138.606587][ T7468] netlink: 'syz.2.432': attribute type 21 has an invalid length.
[  138.612331][ T7468] netlink: 100 bytes leftover after parsing attributes in process `syz.2.432'.
[  138.643923][ T7470] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.434'.
[  138.671271][ T7472] netlink: 64 bytes leftover after parsing attributes in process `syz.0.433'.
[  138.679717][ T7475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'.
[  138.772731][ T7475] netlink: 92 bytes leftover after parsing attributes in process `syz.2.435'.
[  138.866027][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.436'.
[  138.887301][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.436'.
[  139.333105][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'.
[  140.191131][ T7523] openvswitch: netlink: Unknown nsh attribute 0
[  140.193355][ T7523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.323149][ T7530] validate_nla: 2 callbacks suppressed
[  140.323204][ T7530] netlink: 'syz.2.451': attribute type 2 has an invalid length.
[  140.444392][ T7547] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  140.636617][ T7553] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.649512][ T7543] syzkaller0: entered promiscuous mode
[  141.944007][ T7569] netlink: 'syz.0.461': attribute type 11 has an invalid length.
[  141.984619][ T7570] netlink: 'syz.0.461': attribute type 11 has an invalid length.
[  141.990878][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.118270][ T7582] netlink: 'syz.1.464': attribute type 1 has an invalid length.
[  142.167877][ T7586] netlink: 'syz.1.465': attribute type 10 has an invalid length.
[  142.170642][ T7586] netlink: 'syz.1.465': attribute type 19 has an invalid length.
[  142.392242][ T7603] netlink: 'syz.2.471': attribute type 12 has an invalid length.
[  145.493814][ T7617] __nla_validate_parse: 14 callbacks suppressed
[  145.493869][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'.
[  145.509577][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'.
[  145.596095][ T7617] netlink: 'syz.1.474': attribute type 7 has an invalid length.
[  145.602589][ T7617] netlink: 'syz.1.474': attribute type 8 has an invalid length.
[  145.767489][ T7628] netlink: 'syz.0.476': attribute type 10 has an invalid length.
[  145.771875][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'.
[  145.791972][ T7628] ipvlan1: entered promiscuous mode
[  145.793878][ T7628] ipvlan1: entered allmulticast mode
[  145.798426][ T7628] veth0_vlan: entered allmulticast mode
[  145.808639][ T7628] bridge0: port 3(ipvlan1) entered blocking state
[  145.813791][ T7628] bridge0: port 3(ipvlan1) entered disabled state
[  145.829245][ T7628] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  146.576454][ T7640] netlink: 'syz.0.480': attribute type 4 has an invalid length.
[  146.833981][ T7656] netlink: 948 bytes leftover after parsing attributes in process `syz.2.486'.
[  147.900069][ T7699] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[  147.903376][ T7699] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  147.913754][ T7697] netlink: 84 bytes leftover after parsing attributes in process `syz.1.496'.
[  147.918607][ T7699] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  147.922635][ T7699] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  148.109480][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'.
[  148.175208][ T7712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.238655][ T7721] netlink: 'syz.0.504': attribute type 2 has an invalid length.
[  148.242186][ T7721] netlink: 164 bytes leftover after parsing attributes in process `syz.0.504'.
[  148.249198][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'.
[  148.458734][ T7728] netlink: 'syz.0.505': attribute type 10 has an invalid length.
[  148.564836][ T7728] team0 (unregistering): Port device team_slave_0 removed
[  148.573582][ T7728] team0 (unregistering): Port device team_slave_1 removed
[  148.917583][ T7745] xt_l2tp: invalid flags combination: 0
[  148.975918][ T7746] netlink: 260 bytes leftover after parsing attributes in process `syz.1.510'.
[  149.677067][ T7780] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.521'.
[  149.712332][ T7783] xt_l2tp: missing protocol rule (udp|l2tpip)
[  150.265226][ T7829] batman_adv: batadv0: Adding interface: netdevsim0
[  150.268856][ T7829] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.279290][ T7829] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  150.482946][ T7840] GPL: port 1(gretap0) entered blocking state
[  150.485432][ T7840] GPL: port 1(gretap0) entered disabled state
[  150.491337][ T7840] gretap0: entered allmulticast mode
[  150.506505][ T7840] gretap0: entered promiscuous mode
[  151.946125][ T7885] validate_nla: 9 callbacks suppressed
[  151.946136][ T7885] netlink: 'syz.2.553': attribute type 10 has an invalid length.
[  151.951922][ T7885] veth1_macvtap: left promiscuous mode
[  153.024573][ T7910] __nla_validate_parse: 4 callbacks suppressed
[  153.024589][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'.
[  153.110680][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'.
[  153.121209][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[  153.267719][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[  153.444286][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  154.065383][ T7912] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.560'.
[  154.484653][ T7943] netlink: 'syz.2.571': attribute type 1 has an invalid length.
[  154.829253][ T7950] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  154.979643][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[  155.027646][ T7955] netlink: 72 bytes leftover after parsing attributes in process `syz.1.575'.
[  155.070120][ T7955] netlink: 72 bytes leftover after parsing attributes in process `syz.1.575'.
[  155.123371][ T7955] netlink: 72 bytes leftover after parsing attributes in process `syz.1.575'.
[  155.223887][ T7973] pim6reg1: entered allmulticast mode
[  155.231804][ T7973] pim6reg1: left allmulticast mode
[  155.411017][ T7982] syz.1.580 uses obsolete (PF_INET,SOCK_PACKET)
[  155.693085][ T7999] netlink: 'syz.2.582': attribute type 10 has an invalid length.
[  155.696258][ T7999] ipvlan1: entered promiscuous mode
[  155.701116][ T7999] ipvlan1: entered allmulticast mode
[  155.702925][ T7999] veth0_vlan: entered allmulticast mode
[  155.711287][ T7999] bridge0: port 3(ipvlan1) entered blocking state
[  155.714300][ T7999] bridge0: port 3(ipvlan1) entered disabled state
[  155.723985][ T7999] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  157.183496][ T8020] siw: device registration error -23
[  157.316354][ T8028] netlink: 'syz.1.594': attribute type 2 has an invalid length.
[  157.319820][ T8028] netlink: 'syz.1.594': attribute type 8 has an invalid length.
[  157.509474][ T8050] netlink: 'syz.0.599': attribute type 3 has an invalid length.
[  157.515779][ T8050] netlink: 'syz.0.599': attribute type 10 has an invalid length.
[  157.728776][ T8060] netlink: 'syz.0.603': attribute type 1 has an invalid length.
[  158.636135][ T8071] __nla_validate_parse: 11 callbacks suppressed
[  158.636154][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'.
[  158.769581][ T8102] netlink: 'syz.0.615': attribute type 9 has an invalid length.
[  158.823334][ T8102] netlink: 68 bytes leftover after parsing attributes in process `syz.0.615'.
[  158.830404][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'.
[  158.834160][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'.
[  158.875661][ T8107] netlink: 168 bytes leftover after parsing attributes in process `syz.1.616'.
[  159.006031][ T8115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.620'.
[  159.123353][ T8124] netlink: 10 bytes leftover after parsing attributes in process `syz.1.623'.
[  159.150575][ T8122] netlink: 180 bytes leftover after parsing attributes in process `syz.0.622'.
[  159.203961][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'.
[  159.261106][ T8122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  159.410442][ T8134] xt_limit: Overflow, try lower: 271964/0
[  159.416666][ T8134] netlink: 72 bytes leftover after parsing attributes in process `syz.0.626'.
[  160.103277][ T8154] netlink: 'syz.1.635': attribute type 26 has an invalid length.
[  160.228646][ T8158] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  160.725354][ T8166] netlink: 'syz.2.639': attribute type 1 has an invalid length.
[  161.208746][ T5297] udevd[5297]: worker [7615] terminated by signal 33 (Unknown signal 33)
[  161.217695][ T8267] netlink: 'syz.0.641': attribute type 10 has an invalid length.
[  161.246079][ T8267] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  161.859406][ T8292] netlink: 'syz.2.646': attribute type 3 has an invalid length.
[  162.373141][ T8313] validate_nla: 2 callbacks suppressed
[  162.373238][ T8313] netlink: 'syz.2.651': attribute type 1 has an invalid length.
[  162.772873][ T8325] netlink: 'syz.0.656': attribute type 10 has an invalid length.
[  162.783406][ T8325] bridge0: port 3(ipvlan1) entered blocking state
[  162.786470][ T8325] bridge0: port 3(ipvlan1) entered disabled state
[  162.956370][ T8325] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  163.102961][ T8339] netlink: 'syz.0.660': attribute type 21 has an invalid length.
[  163.107495][ T8335] netlink: 'syz.0.660': attribute type 21 has an invalid length.
[  163.311867][ T8354] netlink: 'syz.2.665': attribute type 10 has an invalid length.
[  163.315423][ T8354] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  164.005780][ T8372] netlink: 'syz.1.671': attribute type 10 has an invalid length.
[  164.009916][ T8372] __nla_validate_parse: 18 callbacks suppressed
[  164.009970][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.671'.
[  164.018487][ T8372] ipvlan1: entered promiscuous mode
[  164.020854][ T8372] ipvlan1: entered allmulticast mode
[  164.023223][ T8372] veth0_vlan: entered allmulticast mode
[  164.044394][ T8372] bridge0: port 3(ipvlan1) entered blocking state
[  164.050085][ T8372] bridge0: port 3(ipvlan1) entered disabled state
[  164.060366][ T8369] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.670'.
[  164.099932][ T8372] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  164.384152][ T8379] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.675'.
[  164.384695][ T8380] ==================================================================
[  164.390624][ T8380] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  164.393073][ T8380] Read of size 1 at addr ffff888125679530 by task syz.1.674/8380
[  164.396468][ T8380] 
[  164.397835][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.1.674 Not tainted syzkaller #0 PREEMPT(full) 
[  164.397851][ T8380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.397859][ T8380] Call Trace:
[  164.397864][ T8380]  <TASK>
[  164.397869][ T8380]  dump_stack_lvl+0x189/0x250
[  164.397885][ T8380]  ? __kasan_check_byte+0x12/0x40
[  164.397901][ T8380]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.397910][ T8380]  ? lock_release+0x4b/0x3e0
[  164.397927][ T8380]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.397939][ T8380]  print_report+0xca/0x240
[  164.397947][ T8380]  ? xfrm_state_find+0x2cf2/0x5400
[  164.397957][ T8380]  kasan_report+0x118/0x150
[  164.397969][ T8380]  ? xfrm_state_find+0x2cf2/0x5400
[  164.397981][ T8380]  xfrm_state_find+0x2cf2/0x5400
[  164.397997][ T8380]  ? perf_trace_preemptirq_template+0x280/0x340
[  164.398010][ T8380]  ? xfrm_state_find+0x1da/0x5400
[  164.398044][ T8380]  ? __pfx_xfrm_state_find+0x10/0x10
[  164.398059][ T8380]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  164.398080][ T8380]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  164.398094][ T8380]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  164.398108][ T8380]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  164.398122][ T8380]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  164.398140][ T8380]  ? xfrm_expand_policies+0x41f/0x6a0
[  164.398152][ T8380]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  164.398165][ T8380]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  164.398177][ T8380]  ? __asan_memset+0x22/0x50
[  164.398187][ T8380]  xfrm_lookup_route+0x3c/0x1c0
[  164.398199][ T8380]  ip_tunnel_xmit+0x96b/0x2390
[  164.398215][ T8380]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  164.398226][ T8380]  ? gre_build_header+0x31c/0xa40
[  164.398240][ T8380]  ? __pfx_gre_build_header+0x10/0x10
[  164.398250][ T8380]  ? iptunnel_handle_offloads+0x2fd/0x630
[  164.398260][ T8380]  ipgre_xmit+0x89e/0xc50
[  164.398272][ T8380]  ? __pfx_ipgre_xmit+0x10/0x10
[  164.398284][ T8380]  dev_hard_start_xmit+0x2d7/0x830
[  164.398300][ T8380]  __dev_queue_xmit+0x1b8d/0x3b50
[  164.398311][ T8380]  ? do_syscall_64+0xfa/0x3b0
[  164.398323][ T8380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.398333][ T8380]  ? __dev_queue_xmit+0x27b/0x3b50
[  164.398346][ T8380]  ? __pfx___dev_queue_xmit+0x10/0x10
[  164.398359][ T8380]  ? rcu_is_watching+0x15/0xb0
[  164.398371][ T8380]  ? pskb_expand_head+0xae0/0x1150
[  164.398381][ T8380]  ? __bpf_redirect+0x56d/0xe40
[  164.398391][ T8380]  __bpf_tx_skb+0x18e/0x260
[  164.398402][ T8380]  bpf_clone_redirect+0x272/0x3d0
[  164.398411][ T8380]  ? bpf_test_run+0x197/0x7b0
[  164.398420][ T8380]  bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68
[  164.398428][ T8380]  ? perf_prepare_sample+0x20/0x2390
[  164.398441][ T8380]  ? preempt_schedule+0xae/0xc0
[  164.398449][ T8380]  ? bpf_test_run+0x197/0x7b0
[  164.398457][ T8380]  ? preempt_schedule_common+0x83/0xd0
[  164.398465][ T8380]  ? preempt_schedule+0xae/0xc0
[  164.398471][ T8380]  ? __pfx_preempt_schedule+0x10/0x10
[  164.398486][ T8380]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  164.398496][ T8380]  ? preempt_schedule_thunk+0x16/0x30
[  164.398509][ T8380]  ? __local_bh_disable_ip+0xf1/0x190
[  164.398520][ T8380]  ? __pfx___cant_migrate+0x10/0x10
[  164.398528][ T8380]  ? __local_bh_enable_ip+0x13e/0x1c0
[  164.398536][ T8380]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  164.398545][ T8380]  ? bpf_test_timer_continue+0x136/0x350
[  164.398557][ T8380]  bpf_test_run+0x318/0x7b0
[  164.398570][ T8380]  ? __pfx_bpf_test_run+0x10/0x10
[  164.398583][ T8380]  ? bpf_prog_test_run_skb+0x6ac/0x1560
[  164.398591][ T8380]  ? convert___skb_to_skb+0x3d/0x590
[  164.398599][ T8380]  bpf_prog_test_run_skb+0xb30/0x1560
[  164.398610][ T8380]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  164.398618][ T8380]  bpf_prog_test_run+0x2c7/0x340
[  164.398631][ T8380]  __sys_bpf+0x581/0x870
[  164.398641][ T8380]  ? __pfx___sys_bpf+0x10/0x10
[  164.398656][ T8380]  __x64_sys_bpf+0x7c/0x90
[  164.398665][ T8380]  do_syscall_64+0xfa/0x3b0
[  164.398674][ T8380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.398681][ T8380]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.398690][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.398697][ T8380] RIP: 0033:0x7f4785f8eba9
[  164.398706][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.398713][ T8380] RSP: 002b:00007f4786e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  164.398724][ T8380] RAX: ffffffffffffffda RBX: 00007f47861d5fa0 RCX: 00007f4785f8eba9
[  164.398729][ T8380] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  164.398734][ T8380] RBP: 00007f4786011e19 R08: 0000000000000000 R09: 0000000000000000
[  164.398739][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.398744][ T8380] R13: 00007f47861d6038 R14: 00007f47861d5fa0 R15: 00007ffc7a2405e8
[  164.398753][ T8380]  </TASK>
[  164.398756][ T8380] 
[  164.581940][ T8380] Allocated by task 7675:
[  164.583616][ T8380]  kasan_save_track+0x3e/0x80
[  164.585509][ T8380]  __kasan_slab_alloc+0x6c/0x80
[  164.587452][ T8380]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  164.589537][ T8380]  xfrm_state_alloc+0x24/0x2f0
[  164.591038][ T8380]  __find_acq_core+0x8a7/0x1c00
[  164.592570][ T8380]  xfrm_find_acq+0x78/0xa0
[  164.593961][ T8380]  xfrm_alloc_userspi+0x6b3/0xc90
[  164.595659][ T8380]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.597367][ T8380]  netlink_rcv_skb+0x208/0x470
[  164.598846][ T8380]  xfrm_netlink_rcv+0x79/0x90
[  164.600343][ T8380]  netlink_unicast+0x82f/0x9e0
[  164.601868][ T8380]  netlink_sendmsg+0x805/0xb30
[  164.603579][ T8380]  __sock_sendmsg+0x21c/0x270
[  164.605450][ T8380]  ____sys_sendmsg+0x505/0x830
[  164.607040][ T8380]  ___sys_sendmsg+0x21f/0x2a0
[  164.608508][ T8380]  __x64_sys_sendmsg+0x19b/0x260
[  164.610138][ T8380]  do_syscall_64+0xfa/0x3b0
[  164.611546][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.613595][ T8380] 
[  164.614424][ T8380] Freed by task 5900:
[  164.615664][ T8380]  kasan_save_track+0x3e/0x80
[  164.617485][ T8380]  kasan_save_free_info+0x46/0x50
[  164.619080][ T8380]  __kasan_slab_free+0x5b/0x80
[  164.620820][ T8380]  kmem_cache_free+0x18f/0x400
[  164.622395][ T8380]  xfrm_state_gc_task+0x52d/0x6b0
[  164.624156][ T8380]  process_scheduled_works+0xae1/0x17b0
[  164.625961][ T8380]  worker_thread+0x8a0/0xda0
[  164.627624][ T8380]  kthread+0x711/0x8a0
[  164.629046][ T8380]  ret_from_fork+0x439/0x7d0
[  164.630549][ T8380]  ret_from_fork_asm+0x1a/0x30
[  164.631994][ T8380] 
[  164.632737][ T8380] The buggy address belongs to the object at ffff888125679200
[  164.632737][ T8380]  which belongs to the cache xfrm_state of size 928
[  164.636868][ T8380] The buggy address is located 816 bytes inside of
[  164.636868][ T8380]  freed 928-byte region [ffff888125679200, ffff8881256795a0)
[  164.640895][ T8380] 
[  164.641676][ T8380] The buggy address belongs to the physical page:
[  164.644025][ T8380] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888125678480 pfn:0x125678
[  164.647476][ T8380] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  164.650397][ T8380] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  164.652974][ T8380] page_type: f5(slab)
[  164.654521][ T8380] raw: 057ff00000000040 ffff88801af44640 dead000000000122 0000000000000000
[  164.657392][ T8380] raw: ffff888125678480 00000000800e000d 00000000f5000000 0000000000000000
[  164.660172][ T8380] head: 057ff00000000040 ffff88801af44640 dead000000000122 0000000000000000
[  164.663029][ T8380] head: ffff888125678480 00000000800e000d 00000000f5000000 0000000000000000
[  164.666140][ T8380] head: 057ff00000000002 ffffea0004959e01 00000000ffffffff 00000000ffffffff
[  164.669315][ T8380] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  164.672453][ T8380] page dumped because: kasan: bad access detected
[  164.674773][ T8380] page_owner tracks the page as allocated
[  164.676891][ T8380] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6111, tgid 6109 (syz.0.59), ts 79920424352, free_ts 79683023253
[  164.683624][ T8380]  post_alloc_hook+0x240/0x2a0
[  164.685389][ T8380]  get_page_from_freelist+0x21e4/0x22c0
[  164.687496][ T8380]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.689529][ T8380]  alloc_pages_mpol+0x232/0x4a0
[  164.691401][ T8380]  allocate_slab+0x8a/0x370
[  164.693050][ T8380]  ___slab_alloc+0xbeb/0x1420
[  164.694637][ T8380]  kmem_cache_alloc_noprof+0x283/0x3c0
[  164.696580][ T8380]  xfrm_state_alloc+0x24/0x2f0
[  164.698269][ T8380]  __find_acq_core+0x8a7/0x1c00
[  164.699902][ T8380]  xfrm_find_acq+0x78/0xa0
[  164.701622][ T8380]  pfkey_getspi+0x65d/0xee0
[  164.703244][ T8380]  pfkey_sendmsg+0xbfe/0x1090
[  164.704773][ T8380]  __sock_sendmsg+0x21c/0x270
[  164.706502][ T8380]  ____sys_sendmsg+0x505/0x830
[  164.708337][ T8380]  ___sys_sendmsg+0x21f/0x2a0
[  164.710189][ T8380]  __x64_sys_sendmsg+0x19b/0x260
[  164.712126][ T8380] page last free pid 6106 tgid 6105 stack trace:
[  164.714504][ T8380]  __free_frozen_pages+0xbc4/0xd30
[  164.716572][ T8380]  __slab_free+0x303/0x3c0
[  164.718339][ T8380]  qlist_free_all+0x97/0x140
[  164.720172][ T8380]  kasan_quarantine_reduce+0x148/0x160
[  164.722363][ T8380]  __kasan_krealloc+0x1f/0x140
[  164.724173][ T8380]  krealloc_noprof+0x1b8/0x340
[  164.725748][ T8380]  copy_array+0x63/0xf0
[  164.727143][ T8380]  copy_verifier_state+0xaf/0xf10
[  164.728786][ T8380]  do_check+0x9a32/0xe520
[  164.730156][ T8380]  do_check_common+0x1949/0x24f0
[  164.731811][ T8380]  bpf_check+0x1746a/0x1d2c0
[  164.733486][ T8380]  bpf_prog_load+0x1318/0x1930
[  164.735219][ T8380]  __sys_bpf+0x528/0x870
[  164.736893][ T8380]  __x64_sys_bpf+0x7c/0x90
[  164.738581][ T8380]  do_syscall_64+0xfa/0x3b0
[  164.740325][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.742249][ T8380] 
[  164.743035][ T8380] Memory state around the buggy address:
[  164.744789][ T8380]  ffff888125679400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.747448][ T8380]  ffff888125679480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.750455][ T8380] >ffff888125679500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.753519][ T8380]                                      ^
[  164.755659][ T8380]  ffff888125679580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  164.758728][ T8380]  ffff888125679600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.761819][ T8380] ==================================================================
[  164.765116][ T8380] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.767873][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.1.674 Not tainted syzkaller #0 PREEMPT(full) 
[  164.771394][ T8380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.774970][ T8380] Call Trace:
[  164.776328][ T8380]  <TASK>
[  164.777488][ T8380]  dump_stack_lvl+0x99/0x250
[  164.779362][ T8380]  ? __asan_memcpy+0x40/0x70
[  164.781153][ T8380]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.783171][ T8380]  ? __pfx__printk+0x10/0x10
[  164.785049][ T8380]  vpanic+0x281/0x750
[  164.786606][ T8380]  ? __pfx_vpanic+0x10/0x10
[  164.788388][ T8380]  ? irqentry_exit+0x74/0x90
[  164.790214][ T8380]  panic+0xb9/0xc0
[  164.791741][ T8380]  ? __pfx_panic+0x10/0x10
[  164.793487][ T8380]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  164.795778][ T8380]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.798096][ T8380]  ? xfrm_state_find+0x2cf2/0x5400
[  164.800116][ T8380]  check_panic_on_warn+0x89/0xb0
[  164.802041][ T8380]  ? xfrm_state_find+0x2cf2/0x5400
[  164.804035][ T8380]  end_report+0x78/0x160
[  164.805764][ T8380]  kasan_report+0x129/0x150
[  164.807561][ T8380]  ? xfrm_state_find+0x2cf2/0x5400
[  164.809575][ T8380]  xfrm_state_find+0x2cf2/0x5400
[  164.811592][ T8380]  ? perf_trace_preemptirq_template+0x280/0x340
[  164.814130][ T8380]  ? xfrm_state_find+0x1da/0x5400
[  164.816167][ T8380]  ? __pfx_xfrm_state_find+0x10/0x10
[  164.818204][ T8380]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  164.820633][ T8380]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  164.822952][ T8380]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  164.825557][ T8380]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  164.827829][ T8380]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  164.830189][ T8380]  ? xfrm_expand_policies+0x41f/0x6a0
[  164.832315][ T8380]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  164.834454][ T8380]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  164.836762][ T8380]  ? __asan_memset+0x22/0x50
[  164.838612][ T8380]  xfrm_lookup_route+0x3c/0x1c0
[  164.840547][ T8380]  ip_tunnel_xmit+0x96b/0x2390
[  164.842436][ T8380]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  164.844473][ T8380]  ? gre_build_header+0x31c/0xa40
[  164.846398][ T8380]  ? __pfx_gre_build_header+0x10/0x10
[  164.848463][ T8380]  ? iptunnel_handle_offloads+0x2fd/0x630
[  164.850701][ T8380]  ipgre_xmit+0x89e/0xc50
[  164.852423][ T8380]  ? __pfx_ipgre_xmit+0x10/0x10
[  164.854319][ T8380]  dev_hard_start_xmit+0x2d7/0x830
[  164.856357][ T8380]  __dev_queue_xmit+0x1b8d/0x3b50
[  164.858354][ T8380]  ? do_syscall_64+0xfa/0x3b0
[  164.860204][ T8380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.862550][ T8380]  ? __dev_queue_xmit+0x27b/0x3b50
[  164.864557][ T8380]  ? __pfx___dev_queue_xmit+0x10/0x10
[  164.866623][ T8380]  ? rcu_is_watching+0x15/0xb0
[  164.868447][ T8380]  ? pskb_expand_head+0xae0/0x1150
[  164.870441][ T8380]  ? __bpf_redirect+0x56d/0xe40
[  164.872348][ T8380]  __bpf_tx_skb+0x18e/0x260
[  164.874097][ T8380]  bpf_clone_redirect+0x272/0x3d0
[  164.876062][ T8380]  ? bpf_test_run+0x197/0x7b0
[  164.877910][ T8380]  bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68
[  164.880051][ T8380]  ? perf_prepare_sample+0x20/0x2390
[  164.882125][ T8380]  ? preempt_schedule+0xae/0xc0
[  164.884019][ T8380]  ? bpf_test_run+0x197/0x7b0
[  164.885918][ T8380]  ? preempt_schedule_common+0x83/0xd0
[  164.888142][ T8380]  ? preempt_schedule+0xae/0xc0
[  164.890083][ T8380]  ? __pfx_preempt_schedule+0x10/0x10
[  164.892181][ T8380]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  164.894565][ T8380]  ? preempt_schedule_thunk+0x16/0x30
[  164.896688][ T8380]  ? __local_bh_disable_ip+0xf1/0x190
[  164.898795][ T8380]  ? __pfx___cant_migrate+0x10/0x10
[  164.900832][ T8380]  ? __local_bh_enable_ip+0x13e/0x1c0
[  164.902881][ T8380]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  164.905115][ T8380]  ? bpf_test_timer_continue+0x136/0x350
[  164.907288][ T8380]  bpf_test_run+0x318/0x7b0
[  164.909090][ T8380]  ? __pfx_bpf_test_run+0x10/0x10
[  164.911049][ T8380]  ? bpf_prog_test_run_skb+0x6ac/0x1560
[  164.913200][ T8380]  ? convert___skb_to_skb+0x3d/0x590
[  164.915256][ T8380]  bpf_prog_test_run_skb+0xb30/0x1560
[  164.917372][ T8380]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  164.919667][ T8380]  bpf_prog_test_run+0x2c7/0x340
[  164.921642][ T8380]  __sys_bpf+0x581/0x870
[  164.923359][ T8380]  ? __pfx___sys_bpf+0x10/0x10
[  164.925277][ T8380]  __x64_sys_bpf+0x7c/0x90
[  164.927074][ T8380]  do_syscall_64+0xfa/0x3b0
[  164.928839][ T8380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.931250][ T8380]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.933612][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.935959][ T8380] RIP: 0033:0x7f4785f8eba9
[  164.937736][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.945179][ T8380] RSP: 002b:00007f4786e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  164.948381][ T8380] RAX: ffffffffffffffda RBX: 00007f47861d5fa0 RCX: 00007f4785f8eba9
[  164.951436][ T8380] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  164.954450][ T8380] RBP: 00007f4786011e19 R08: 0000000000000000 R09: 0000000000000000
[  164.957523][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.960595][ T8380] R13: 00007f47861d6038 R14: 00007f47861d5fa0 R15: 00007ffc7a2405e8
[  164.963660][ T8380]  </TASK>
[  164.965582][ T8380] Kernel Offset: disabled
[  164.967289][ T8380] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:04:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000005b630 RDI=000000000005b631 RBP=00000000000003f8 RSP=ffffc900083561f0
R8 =ffff888107e28237 R9 =1ffff11020fc5046 R10=dffffc0000000000 R11=ffffffff85500300
R12=dffffc0000000000 R13=ffffffff99b03900 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550037c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4786e776c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2cb892 CR3=0000000122f62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000005 000003a000000002
XMM02=00007f21345a7498 00007f21345a7470 XMM03=00007f21345a74a8 00007f21345a74a0
XMM04=00007f213510d100 00007f21345a7460 XMM05=00007f21345a7478 00007f21345a74c0
XMM06=00007f21345a74b8 00007f21345a74b0 XMM07=00007f21345a74a8 00007f21345a74a0
XMM08=0000000000000000 00007f2134412ee7 XMM09=0000000000000000 00007f2134412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=9b68e89ea43a0100 RBX=ffffffff81969548 RCX=9b68e89ea43a0100 RDX=0000000000000001
RSI=ffffffff8d9ba3cb RDI=ffffffff8be33e00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a830 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7af3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055694ba1b000 CR3=0000000022214000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=0000080806060168 cc01a01000258004 XMM03=01718c01c810000f ffffffffffff0401
XMM04=0000000000000000 0000000000000000 XMM05=00005555794c3eb7 00005555794c2730
XMM06=0000000000000000 0000000000000000 XMM07=01718c01c810000f ffffffffffff0401
XMM08=0000080806060168 cc01a01000258004 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
