last executing test programs:

1m32.944111722s ago: executing program 1 (id=388):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11cfa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x2, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x20044805)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9500000000040000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x6, 0x78bd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r2, r2, r2, r2], &(0x7f00000002c0)=[{0x0, 0x3, 0x10, 0x3}, {0x5, 0x3, 0x10, 0x4}, {0x2, 0x1, 0xf, 0x6}, {0x0, 0x5, 0x2, 0x2}, {0x1, 0x5, 0x10, 0xc}], 0x10, 0xdfb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='bcache_invalidate\x00', r6, 0x0, 0xf}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x18, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000608000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001008000640000000ec0800010073797a30"], 0x108}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x12, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRES64=r8, @ANYRES64=r8, @ANYRES32=r8, @ANYRES16=r8, @ANYRES32=0x0, @ANYRES64=r8, @ANYRES64=r0, @ANYRESDEC=r8], 0xa4}, 0x1, 0x1000000, 0x0, 0x5}, 0x24008010)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48)
close(r9)

1m32.649105622s ago: executing program 1 (id=391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05f00000000000007111b200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000400000004001b000700000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
sendmsg$sock(r1, &(0x7f0000000880)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x2}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000540)="4bbc23b4d8d92568487b5edcdd30fe236ef4b8b7db3e5f5e3f4f0a77e71187fe78f758ea18305e17c617f74b6065267b081d88a6267582bc98a6ef2b5b02e03439aa7438c1c51a2e5ab4dd174b7ef24ae78486c39abf1ec27df24c649a687f8c54839693f87dc495c2b3bc3696230b3cfad34f83d02948f8d106b13c6a0dbb3bc9bf5a1ba8f16994e62befb29a2873f983ca05", 0x93}, {&(0x7f0000000600)="c83278101bfe18861e5fa543b12723bfc050b0bf9b44d1e8b9cc68447b510fb3ec711e2d93b2a452cada64019c5c51d2826500fa17d7523ac1ebb5c64b52379d57c515de897211f1001a72e1c7d7a03e0e140c8cfd53e3e000476ec08a44097842d30c278d876362cfc61dc8570d64c5b445e425e8e5b725afe1eac52fca2e2b92d71337d51237f79907c6329f3d7907ca9c7045f57bb52bd8a5607739765b6e3092e8df9eedda97da85a90a0870b55a8127b904c98787d8eea9fe", 0xbb}, {&(0x7f0000000200)="c3be0b93b31ed9721bedfa67d248e9ae54a1fdce1d0944d26cae83bbaf817a582f1ab5d0237a4368ef730b", 0x2b}, {&(0x7f00000006c0)="81a9296ec0d11be2c94343934b398ea11cf3aa7c16167d2fe2464ada2e97f5eaae20c6e8f9e3ed4d78b80d0f76a3cdcc2d1630933423d4178734ad761d98608abdf04f3e4edc86b6601ed138303e7e52efb7888e5e44b8a301cf5466951565fbb0f1be70f6e9c61891073cc8a319f19700aafe94adc52cc713bb109adb44e479b14a9a30c0fd7b763523a00a86d5be07a0a8d18589817fd603e22002d728a4bacdfb1882a805d6994564734ee3acabf8bd211f4e42b7e146241c2296bef5c10cd8", 0xc1}, {&(0x7f00000007c0)="f796dfa772bc112f85acab5f29c558706bcc765ad03618d96b3a6522491504e826530e11fbb6a21911695c8b00c4edb4ff3c1d28812ce3f4adfcb2086b93898e317ce71ac6a3cd16ef1426b767a71fac2a58780b0d244524c885e402daddb9c5aa70cb5a462ec43d24161b7cad49e0e5aa76d63ab213208c9bca26635f2593f428f6d6904e1e58b8b2186cb00e8e1a973620e337f3ca2b8d74f9fdd96d97a9f223456fa8569bf7c85f19df6a07e2ad87a36ffae1", 0xb4}, {&(0x7f00000009c0)="5b28485da3bf2369bee55e84c70be5a4c966448960cac0fd86a1df2a0e29da756be5ebd65a63f27a54ea8a7b97ae561de1ed8deff00c05986f47bee35f0b57567368568e73d05e602e624f43de9907fc23dd2cb64b51e12b8b8703bd6c2fd61fe0f5a375026d8e8a0db650f25e3f875bc8ba560095ec774197bf3a8be32332ad3b20d79bfbc979cbb7506f8213a3", 0x8e}, {&(0x7f0000000a80)="9a0d74ec7fc601b9211a5b8607a13ba89b981e2f271d02a0d3e45c429295fc34cdc71a222e9d9bc4585e8fa4cd611bbea5f65e042a02eadeb3c7801b0c1fc2a4474b4ba1bc8f3f49c54c711af83d9263c2e1d9ed5937fdda695202ac7b375d76c6039a19cc1713bf08a07452eea076265f55038e8bcecaa66a91bd729a23b804fef5158abaefb79de1ba750cfcb95bc162c7ce465019ff4c6328958b2dfa13a6a9633dc612ec80d998a32e7c6603bcb2f653899fe1cb768f590ed674", 0xbc}, {&(0x7f00000002c0)="f98d5aed8e1ecef30ef48f16579aa9a1d868c2a66795ec12eb88037af390d0e1", 0x20}, {&(0x7f0000000b40)="aa15ab3e14148e3526f5415f8933f15f11cd9005fae99c95d3d148978090e8ccd0581de9c80e6e31b5a62fc6cc16b15c1a4c9ec77bf84f00c2ce4318d0c05547f848f5808d6e6d4a3e2d78ab6e686f33e963373286c218666f8a5a6f7a2d2801825fc917b6ea1bd1ef0147f0146fa0f953b734461e71c6ac6637bec6538178e899419579e42833e15d10d1c05b26fbab0675f786dcbe2fd4fbbb80b2de9a3c7bd1b0d76bb3751d40cb6f86bab054cf255975b0", 0xb3}, {&(0x7f0000000c00)="94b84ac32a54720edacf77ddd56ab1356c475f88555887879fa73daa5dbcdea31e084b84185ecb1ccbd6be91828f5219fe53efec1df6a34842eafdadb2878cd86c7856223c3e73081cf12270289373b4cab312a4cd063bc6918c0e0e072693fe9f0accd54b5e4077c0e04f1ed2297442a77ff5de299f0be8e67640a0b77d172b5db2104fad2be9aa4368a76b2ec95302fb0d6df1a462f9c564ca4965d7808e43be5fa87db5d47328bf6fc9d6db79c946fda44a93bc07ab9b05c3fd4bd994ce065a9de493379fadae7c14e5d27d36ff3f8c21336dd8f96fef1a9618c05e9819b7", 0xe0}], 0xa, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x1000}}], 0x30}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x77, 0x0, 0x0, 0x0, 0x2141, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x2, 0x0, 0x6, 0x9, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) (async)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x20004000)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0) (async)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x2, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xaa}, 0x828, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x2, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18)

1m31.771007128s ago: executing program 1 (id=394):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x94, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x4000800)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000ea30000000003000000000000b55000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000003000000000000000000000085000000b7000000df18fcffffffffff85200000010000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0xcf, &(0x7f00000006c0)=""/207, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x8, 0x0, 0x80010001}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x1, 0x2, 0x5, 0xa}, {0x5, 0x3, 0xf, 0x9}], 0x10, 0x1}, 0x94)
r5 = syz_clone(0x20842000, &(0x7f0000000980)="2ca6b95e7e0c872abaaeb85c8d53acb67253689e31377e3044155cfddf81cd0e39e75194268afc59cdbe2680b8fc5e1693099b71f8db670240b46263b5d43ea17987e30c3df784578fe713aae061b9a47a5533d96fefb0b683ebc97e91e78f517dd6681f5c14adad23f28e27ff3f67b09fd803fae226b2ee26dad7bc611826206ece74ce63e50d10e3e15cffb3f2a9b6e8244ffade5e2a8c08b8c63b7a81bbda622d20c465cec7edaae05dfee6058a6b1bde879ffea9a909af57b8c1b74ef2", 0xbf, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="68ba536dd6f0110c2924dbdfc5f5")
perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0xb5, 0x3, 0xa, 0x1, 0x0, 0x7, 0x20, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f00000008c0), 0x1}, 0x400, 0x3, 0x1600, 0x3, 0xf091, 0xfffffff7, 0x7, 0x0, 0x5b5}, r5, 0xb, 0xffffffffffffffff, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='thermal_power_allocator_pid\x00', r4, 0x0, 0x100}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1m30.511139946s ago: executing program 1 (id=397):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x20048890)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081)
r4 = socket$kcm(0x2, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x828, 0x0, 0x0, 0x0, 0x1000000000009, 0x800000, 0x0, 0x0, 0x80000000, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x2)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000001c0)=r7, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x41)
setsockopt$sock_attach_bpf(r2, 0x1, 0x43, &(0x7f0000000000), 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100440, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x2)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES8=r6, @ANYRESOCT=r5], 0x50)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000745d67f280fc77c0000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b73e0510000a00f9ff4508f0ff0900000000000000e9ffffffffffff9400000000170000000a00000000000000000000296bfdfdc04e07c97a880b6141d7b81638609b586d077c1bad99cb49e588e75a4cd12a8500c570eca642acf314f41bb6eee8f4cce5e5fee642c597da9d42c531667fcf8dc19bb5991781655028b2db0a9bd4e4751188ceef3f921fcdf3159d90e8e53bda174767a3ba4ba418795d98cbd0d7070d746c51b3a71df6df57957a0ff6"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

1m29.637491167s ago: executing program 1 (id=405):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x9, 0x2, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)='%ps    \x00'}, 0x20)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0xff6, &(0x7f0000001880)=""/4086, 0x0, 0x21, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)=r4, 0x120)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe}, 0x0, 0xca, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
perf_event_open(&(0x7f0000001380)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0xc28, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

1m29.40150247s ago: executing program 1 (id=406):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = getpid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid() (async)
getpid()
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40086)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000105) (async)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000105)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3) (async)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x10000}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000) (async)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38)
socket$kcm(0xa, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x14)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x20044045)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

1m29.29153601s ago: executing program 32 (id=406):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = getpid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid() (async)
getpid()
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40086)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000105) (async)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000105)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3) (async)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x10000}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000) (async)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38)
socket$kcm(0xa, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x14)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x20044045)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

1.849867963s ago: executing program 3 (id=1202):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) (async)
perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xec, 0x0, 0xff, 0x0, 0x0, 0x480000000000000b, 0x9549, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000000c0), 0x18}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x59f, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$kcm(0x11, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
close(r3) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffefff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0}, 0x50) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
syz_clone(0x9a06400, &(0x7f0000000200)="580dccc8f5d9b25df6c0d59c233a8056d2f78e5a5b37fb9ba7396055e24ccdc759190c116a88f8b701ac52ccbce7cf180afe5e684753b3e19a737ed48d43f71fd63c1cead0eef2ca744928f715fda4f49c7916c19c563f37e879790de2035059595c7d4527e6545ac41c3d92e418192a1213709da581216b19100737f4d85a68aa36765b72a55877c94549c84d27b6a2eb57c0471e79e57f444b28992be3edfb702dfca9eafe4e738eb5415bf653c5f135799dd23a6a989298b8f0dbc1b11b5b14022c04516a0b793c9e7de7c0fdcc0586d7cdc0886558372b986d549f521ba255f21a8950ee5ffe504edf9a7329c5bbb7", 0xf1, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000300)="4a8d0bc47f820a86f0ec85e1aeaa9a86860a59382129a138f8497b8946eb383521f021599d5b9583dc6793f79f07594604dcc90daf45b26f6c83cd20ee359a628b93ee9b6d2fdb0cd1234dd45ff0c04d9ef09df683270ddb2a358d686c15d0d06e9cef2d5d372f5001641109ce63d32835c42f40ab85cc6ccf5babb91509532ae3163071087d60abd6c6f7f363eeb451b81fbfc476800331af6b") (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x224, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
r5 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) (async, rerun: 64)
close(r5) (async, rerun: 64)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.848752245s ago: executing program 0 (id=1203):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x18}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000900000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, <r4=>0xffffffffffffffff}, 0x4) (async)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x29, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @printk={@lu}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000000400)='syzkaller\x00', 0xfffff768, 0xc7, &(0x7f0000000780)=""/199, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000008c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xd, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000940)=[r1, r1, r1, r1], &(0x7f0000000980)=[{0x4, 0x5, 0xb, 0xa}, {0x0, 0x4, 0xe, 0x9}, {0x5, 0x5, 0x6, 0x2}, {0x4, 0x5, 0xb, 0x8}], 0x10, 0x25}, 0x94) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x5, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r3}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20)

1.589954805s ago: executing program 3 (id=1205):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7400000002060500000000000000000005000001050004e20000000034000780080017400000000708000a40000000ff08000840000000d0080017407000000008001340000000de0800124000003c5a0c000780060005404e2400000d000300686173683a6e6574000000000500000003000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008094}, 0x4000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x10)

1.419192901s ago: executing program 3 (id=1207):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pS    \x00'}, 0x20)
r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x5, 0xa, 0x3, 0x1, 0x0, 0xfce, 0x20000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, @perf_config_ext={0x5, 0x7}, 0x1050a, 0x10, 0xfff, 0x8, 0x8, 0x7f, 0x0, 0x0, 0x5, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='\x00')
r3 = syz_clone(0x1b12600, &(0x7f0000000240)="e5a6d0f73c47b6ac65e8f11620fb3b53cfc5f0437043856a91461a1e468c46865aac9978312cc53d54be901983de76519c0fb2a5fba8b057b2b05df4ab68f69854bce17054aee75d49c9ef9e4a83b66741e37466a3f668fab643d5b8", 0x5c, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="48ded1c918fc27e60139f1c1b4e7a5e869454003072fd0546cc9eca569caf4793b")
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0xd, 0x8, 0x101, 0x70bd25, 0x25dfdbfb, {0x7}, [@generic="0ee9a5557365975570a3ab939ef6c11bf19a1f713c80439e21f9d730c1baa77a433854d273eb31e38fbc36661ce6db579b1ecc78e9239c9e09cf1c9b7798651c8f947dbb74cf96977531e4c2c7e1c15d48869f10afce4dc5e19f36e1060f3eb7d9b1962e0dd79f86e180892c8617e58f55f061d40cf975e32854a6250744f5e376d6990df0d5f72c1e83186ab76b057d4e203194b244c44ba12fe440cb16c36344746f140e649851890a0fd9de63915d90ca", @nested={0x14, 0x2, 0x0, 0x1, [@typed={0xa, 0xb, 0x0, 0x0, @str=',--)-\x00'}, @nested={0x4, 0x71}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
socketpair(0x2a, 0x5, 0x8, &(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xb, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x44}}, 0x10004040)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4081}, 0x800)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r4}, 0x8)
r9 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x6, 0x0, 0x3, 0xf6, 0x0, 0x7, 0x11101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe, 0x0, @perf_bp={&(0x7f0000000900), 0x7}, 0x11, 0x2, 0x9, 0x8, 0x7, 0x0, 0x96, 0x0, 0xe32, 0x0, 0x7e9}, r3, 0x5, r2, 0x1)
perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x6c, 0x4, 0x5, 0x5, 0x0, 0x6, 0x10000, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7ff, 0xffffffffffff8368}, 0x110, 0x2, 0xfffffff3, 0x7, 0x1, 0x8, 0x7, 0x0, 0x3, 0x0, 0x401}, 0x0, 0xd, r9, 0x9)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r1, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
sendmsg$nl_xfrm(r7, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@getpolicy={0x64, 0x15, 0x100, 0x70bd2c, 0x25dfdbfe, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4e21, 0x0, 0x4e24, 0x7, 0xa, 0x120, 0x0, 0xff, r10, 0xffffffffffffffff}, 0x6e6bbc, 0x2}, [@policy_type={0xa, 0x10, {0xd1a0ca4eba116c4b}}, @replay_thresh={0x8, 0xb, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0xc090)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000c00)='syzkaller\x00', 0x1, 0xad, &(0x7f0000000c40)=""/173, 0x40f00, 0x12, '\x00', 0x0, 0x1c, r8, 0x8, &(0x7f0000000d00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xe, 0xe242}, 0x10, 0x1c7c0, r8, 0x3, &(0x7f0000000d80)=[0xffffffffffffffff, r1, r8, r1, r8, r1, r8], &(0x7f0000000dc0)=[{0x0, 0x3, 0xf, 0xb}, {0x2, 0x1, 0x4, 0xb}, {0x5, 0x2, 0xc, 0x7}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r11, 0x0, 0xba, 0x5c, &(0x7f0000000ec0)="3086a07ab065c990b76f6e5a2a3842adb313870faffcb332104882272f13ff9f8e966f1cdeef2d539c5afacd64db0cd8503363a9719c01293c5fffc01a7dcb37f52c504485da31f58793461a22f114aa34d01dfcc104d92fe54bbfa92ee86dbf4e29e53bf90416ca95d004083a4605946e25006900d1010c331a34f36d5b0fe064f6aa99e14f807929b205b3e3af6f26c9691d9935a0debaf0125f7c73bceda4aa5e0e0f8e921df64a85dff0a8046ce4a25911dc43dfe773881e", &(0x7f0000000f80)=""/92, 0xfffffffd, 0x0, 0x7e, 0x7c, &(0x7f0000001000)="f3b92f7b8906a7f43941d2c10ada41ba59c76ce03c9e17247d3a7d76d0e4fa1d1465c838097abcdf7b4bc6aff5185dff356c091bdc109611105c02a71dca49667400f38a0602003b4e258afec55d148ba1c59946df74de7bde0fbb1d5d25b9afc019257888dfdbe84ea294fd96ec96e7e5772322d7c620fcf0c5d0c89fd9", &(0x7f0000001080)="98e53b402585f8d379156b71dafe63e74915e226104bf79b5f24be4110bd5670f187d9c484c6e1f060b6539bb24b6ce571fed9ba2c444ccc21ca533e24f90f34073eb375d36f21d1c5309e4fcf3106396d780abde4a446fe5ebc58687108845d2ca1e6531f59ee9ac9400e0b9f05eb0eeb4b1d4f446dc2ca5c1fb862", 0x8ee6cd6ffda52d9a, 0x0, 0x60}, 0x50)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000001180)='./file0\x00', 0x0, 0x4000, r5}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@map=r12, 0x22, 0x0, 0x1, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001240)=[0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r13=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@fallback=r6, r8, 0xe, 0x4, 0x0, @void, @value=r8, @void, @void, r13}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x6, &(0x7f00000013c0)=@raw=[@jmp={0x5, 0x1, 0x5, 0x4, 0x6, 0x1, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}], &(0x7f0000001400)='syzkaller\x00', 0x800, 0x94, &(0x7f0000001440)=""/148, 0x0, 0x12, '\x00', r10, 0x25, r8, 0x8, &(0x7f0000001500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0x10, 0x1, 0x572}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001580)=[r8, r8], 0x0, 0x10, 0x7f}, 0x94)
r15 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001680)=@o_path={&(0x7f0000001380)='./file0\x00', r14, 0x4000, r15}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
perf_event_open(&(0x7f00000016c0)={0x2, 0x80, 0x0, 0x47, 0x3, 0x40, 0x0, 0x3ea, 0x50028, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x54, 0x2, @perf_config_ext={0x0, 0x7}, 0x60, 0x1000, 0x8717, 0x9, 0x1, 0xffffffff, 0x3, 0x0, 0x7004, 0x0, 0xd}, 0x0, 0x9, r2, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f0000001740)='netfs_read\x00', r0, 0x0, 0x7e1}, 0x18)

1.417706336s ago: executing program 3 (id=1209):
perf_event_open(&(0x7f0000000180)={0x5, 0xffffffffffffff5d, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xa}, 0x0, 0x0, 0x69e, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000029c0)={0x24, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x15}, [@nested={0x10, 0x11d, 0x0, 0x1, [@typed={0xc, 0x10e, 0x0, 0x0, @u64}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000a14000828bd70000000000008c60ada041bb200150002000000080003000100000000000300010627da978de510abb6271156a272cd092008001556a513cafc3b549f43902a54dc46d3bd87243fac89969d3d52b8898d87ccdc754fb50efc273057b33818230314e8bf8ddc5ec6d917dc9a0ded014f9859ffffdd98a9ea8344b3e88b0a731548c577542782bbee37d5a88e17589be9db90185887913db504e525027a8f774e230100000000000000080ee5b2af75b462fa9bb755b1d73c17bf5ebe40e302cf9dc5a7354d760c42e2"], 0x48}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.343930528s ago: executing program 0 (id=1211):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000ffff8000000000000800009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="27011c00160014000000002f1eafbcf706e10500000089f7000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90187ce", 0x32}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0x10})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x8000)

481.096239ms ago: executing program 3 (id=1212):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x19}, 0x20) (async, rerun: 64)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async, rerun: 64)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x1, 0x3, 0x7}, 0x3, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) (async)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xee, '\x00', r4, r5, 0x4, 0x4, 0x3}, 0x50)

477.82043ms ago: executing program 0 (id=1213):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000000000000000efcca30e0000000005000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)

401.283616ms ago: executing program 2 (id=1214):
r0 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a01a4222be0d1ade722000a00fffd0900010073797a31000000003400048030000180080001006f7366002400028005000200060000000800014000000014050002000200000008000340000000010900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000000102030000000000000000000a0000013c0002800c00028001000000000000002c0001801400030020010000000000000000000000000002140004"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2042)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x1, 0x80, 0xda, 0x0, 0x7, 0x9, 0x0, 0x7e, 0x1055004, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x13002, 0x7, 0x0, 0x1, 0x4ae2, 0xe7, 0x8, 0x0, 0x800007, 0x0, 0x3})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e25, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000084}, 0x20000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x72, &(0x7f0000000000)=r6, 0xc)
setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3e, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000180)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

350.729894ms ago: executing program 3 (id=1215):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100000000e2f424b4f3ffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000070000000100"/28], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000f00)="14000000140081026681f782db44cf440aa1fd62", 0x14}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0xe, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x1, 0x8, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x8e, &(0x7f0000000380)=""/142, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x100, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x0, 0x5, 0x3, 0x7}, {0x4, 0x2, 0x0, 0x8}, {0x1, 0x2, 0x10, 0x1ce2bef6191daeb1}], 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r4=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000005c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x3, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f00000003c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0x6}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x3, 0x2, {0x4, 0x0, 0xe4ffffff}}, @TCA_DEF_PARMS={0x0, 0x2, {0x2, 0x5, 0x2, 0x600, 0x10}}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x7ff, 0x1, 0x2, 0x4, 0x10001}}, @TCA_DEF_PARMS={0x0, 0x2, {0x2980000, 0x7, 0x0, 0x70c, 0x5}}, @TCA_DEF_PARMS={0x0, 0x2, {0x800, 0x8, 0x8, 0xc, 0xfffffffd}}]}, {0x59}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x27, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x800}, @call={0x85, 0x0, 0x0, 0x68}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x3, 0x1000, &(0x7f0000001080)=""/4096, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, r6, 0x8, &(0x7f00000009c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0xd, 0x6, 0x6}, 0x10, 0x0, r3, 0x0, &(0x7f0000000a40)=[r8, r6, r4, r4, r1], 0x0, 0x10, 0x1}, 0x94)
r10 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x84, 0x72, &(0x7f0000000000)=r11, 0xc)
sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2, 0xd, 0xff, 0x3, 0x14, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x6, @private2, 0x7}, @in6={0xa, 0x4e24, 0x2, @private0, 0x5}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bbf, 0x7fffffff, {0x6, 0x2b, 0x23, 0x5, 0x0, 0xd5f, 0x0, @in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xa}}}]}, 0xa0}}, 0x24008080)

349.274111ms ago: executing program 2 (id=1216):
r0 = getpid()
syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/time\x00') (async)
r1 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1, 0x8, 0x3, 0x4, 0x0, 0x9, 0x80201, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e3, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x1000, 0x8, 0x8, 0x3, 0x7, 0x10000, 0xfffc, 0x0, 0x0, 0x0, 0x3}, r0, 0x5, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x80000000}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x4, 0x101}, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/30, 0x1e, <r3=>0x0, &(0x7f0000000500)=""/249, 0xf9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000300)="66f9c90000000000000000", 0x0, 0x8fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101}, 0x50) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1f, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000003000000000000006e68000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000037bb0ef45e4ec994180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000005d0c00001846000007000000000000e20e43867c40c0425d0000000000180000000e000000000000000900200018bcc1a3e60000000000000000000000186500001000000000000000ffff0000bf91000000000000b702000000b70000000000000095000000000000000100"], &(0x7f0000000340)='syzkaller\x00', 0x547a, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0xdbc5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x8310}, 0x0, 0xd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) (async, rerun: 32)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
perf_event_open(0x0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000031200084000000001140000001100010000000000000100000a6fbd07a681dd6bd64b74ef329404f5756fe204adbf60010000000000000039a716e2d585a65c5645f33c048dc93dfd90f136a39ba5c7488fb2f00cc479aae2dfc3674a3c6a356eb9ede2069e8123a32ce7f08c87bb0f1f9fec000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}}, 0x0) (async)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) (async)
syz_open_procfs$namespace(r8, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)

346.527299ms ago: executing program 0 (id=1217):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000027000000000000009500000000000000c822653fb0e51b6882b743d84d70d0f89957aeeecb11790af7fb6252dfc7470c85d61dad6121c5b8d2eb4625c221c9d47adffb31503cc936a21e8454b8"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000027000000000000009500000000000000c822653fb0e51b6882b743d84d70d0f89957aeeecb11790af7fb6252dfc7470c85d61dad6121c5b8d2eb4625c221c9d47adffb31503cc936a21e8454b8"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r1, 0x14, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1, 0x3, 0xd, 0x0], &(0x7f0000000240)=[0x1, 0x2, 0x0], 0xfffffffffffffffe, 0x4, 0x0, r2}}, 0x40)

250.807852ms ago: executing program 0 (id=1218):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000fe00000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$kcm(0x2, 0x2, 0x84)
sendmsg$inet(r1, 0x0, 0x8040) (async)
sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100001b1e1be5b5048827000900000001000000403ed97bb7650342059a4a81057612221052bb1f2e15a19f685ca166962f0e5c473838ceb941c7007a8987de32cca7aecc5ae9463ee66e41b84e2ef76cd0f6fb00"/98, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fc0f0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b0807020000f8ffffffb703000008000000b70400000100000000950000000000000090c3bd4b1f3045408d4b9350d295695ee74d5aa8c9630802e99a797906000000ef0ec02bfe7d5b46808468264e65bc6a665ef78c8fcc8b7ff41c99d1833076653b79b62e2cdfaf4000"/152], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000940), &(0x7f0000000980)='%pS    \x00'}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x53, 0x1, 0x0, 0x8, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x6}, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x4d31, 0xa0600, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x19558, 0x2, 0x0, 0x0, 0x8000000000000000, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0)

249.881828ms ago: executing program 2 (id=1219):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x29, 0x5, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
socket$kcm(0x10, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x10e, 0x2, 0x0, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, &(0x7f0000000040))
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, &(0x7f00000005c0))
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d61746368"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

151.101981ms ago: executing program 0 (id=1220):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b2266"], 0xfdef)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000040)=0x8000000000000000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x226140, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="5c00000013006bcc9e3be35c6e17aa71116b876c1d0000007ea60864160af36514001ac00c00020007000200050007c00364bc24eab556e845251e618294ff0051f60a84c90300000000000000d0001000000e4509c517cd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000de81041df2b99d240cea4ccbf401fe57895227bc749bfbbcd5ae3ecbbfc2b2cc3ed4e8104d5bcf5bac04a16b6ee1f0e4a3d46ff72c0d76b53b15d8391b9dbbec2aaf6495391ab810b1f0d5e081eddf1eb4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000080), &(0x7f00000000c0)=r10}, 0x20)

140.008607ms ago: executing program 2 (id=1221):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2681, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfe2, 0x1, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) (async)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x81580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
close(r6) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 32)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r8=>0x0}, 0x8)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, r7, 0x4, r7}, 0x10) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (async, rerun: 64)
socket$kcm(0x22, 0x2, 0x21) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000700007910080000000000c3000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

50.250397ms ago: executing program 2 (id=1222):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0)="d6fa9cbd72c8b90c1adf84e559b703c13736f3eda11cbfa5dfee0a71716aa98167aa8573f1db03896b8e19394bd70a05c9452026a01f5bfaa904d1d2eed21b7abb0d55f413fb80dbe1bece2cfc2d86bbe1ffcf8a0d56f20c62f1a0e0cf74c31c56e13766fe557d28cd9dee1987efeef9d562c4e46ddce6f6b12acef6511a936f", &(0x7f0000000140)=@buf="93ca71142a0d806d25f571fb94e7cb851da59164621a8f65a760a675d9f8ab601849f2910ded82fad8693a994e39a29ba4ad8bd9969af7f92b311d58fc211dd2442eb60202ad7a69fda476e92cf119837c7db2e965d50a3a6dd127e689ffc141dfafe1a0c8e2f2a6bd1be5ebed6c0f6443814446de4865b87bdbe94a92a0f9a5db8ae469ddd4bc07ee55f968fb3183726396c3fa6a3c432eaf2c1a8e26541f60c9679afc8c861327c9df13a98c259e6186432b4f871955bc3ec0d6d21098d46a4fff8ec6766d0103460e1b213106eada390cabeca07913e4bbfbd038bad01a80660de9"}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, <r2=>0x0}, 0x8) (async)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800), 0x4) (async)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xc766, 0x10}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x2, 0xde, &(0x7f0000000380)=""/222, 0x41100, 0x10, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4, 0x7, 0x1, 0x6}, 0x10, r2, r3, 0x6, &(0x7f0000000880)=[r4, r0], &(0x7f00000008c0)=[{0x3, 0x3, 0x4, 0x5}, {0x0, 0x5, 0xd}, {0x1, 0x1, 0xb, 0xf}, {0x0, 0x1, 0x10, 0x2}, {0x5, 0x3, 0x8}, {0x2, 0x4, 0x8, 0x9}]}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pB    \x00'}, 0x20)
close(r6) (async)
r7 = perf_event_open(&(0x7f0000000b00)={0x4, 0x80, 0x4, 0xd4, 0x6, 0xe1, 0x0, 0x3, 0x12, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000ac0), 0x1}, 0x4000, 0x7, 0x1, 0x7, 0x3d, 0x6, 0xda, 0x0, 0x7ff, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r7) (async)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000b80)=r5, 0x4) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@map=<r9=>r4, 0x1d, 0x1, 0x4, &(0x7f0000000bc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0]}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r10, &(0x7f0000001240)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000000d40)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x3}, 0x10, 0x7, 0xb0, 0x1, 0x1d, 'syz1\x00', "0a4049ba091fd26f3a39661da00dfffe3b41b1eba7178fd98c42c5f45d928266", "ef2f4be34d7017948b1c9380e7c1b4e8206d1e07dcc5f012b5cb02d251c9ffca", [{0x4, 0xfa, {0x1, 0x8}}, {0x7, 0x800, {0x0, 0x4}}, {0x5, 0x7, {0x0, 0xd}}, {0xad1, 0x31ba, {0x0, 0x7}}, {0xe, 0x5, {0x0, 0x1ff}}, {0x3, 0x0, {0x1, 0x8}}, {0x2815, 0x8, {0x1, 0x6}}, {0x4, 0xf, {0x3, 0x7f}}, {0x1000, 0x2, {0x3, 0xa40}}, {0x4, 0x4, {0x0, 0x2}}, {0x0, 0x35, {0x2, 0x8}}, {0x2, 0x3, {0x0, 0x2}}, {0x200, 0x7a84, {0x0, 0xe22}}, {0x1, 0x5, {0x3, 0x81}}, {0x3, 0xffff, {0x0, 0x5}}, {0x8, 0xb, {0x2, 0x9}}, {0x2, 0x4, {0x2, 0xa7}}, {0x4cab, 0xb, {0x1, 0x4}}, {0x1, 0x5, {0x1, 0xf0}}, {0x3, 0xe, {0x1, 0x5}}, {0x7f, 0xffff, {0x3}}, {0xe6, 0x7, {0x2, 0x4}}, {0x9, 0x7, {0x3, 0x1}}, {0x7, 0x9, {0x3, 0x200}}, {0x5, 0xfffe, {0x1, 0x1}}, {0x9, 0x5, {0x2, 0xd}}, {0x5, 0x7, {0x0, 0x7}}, {0x9, 0x6, {0x2, 0x8}}, {0x9, 0x1, {0x3, 0x400}}, {0x10, 0x5, {0x0, 0x2}}, {0x8, 0x1, {0x2, 0x3}}, {0x8, 0x7c, {0x1}}, {0xfffe, 0x7, {0x3, 0x5}}, {0xffff, 0xfffb, {0x1, 0x72b}}, {0xfff9, 0x0, {0x2, 0x4}}, {0x1000, 0x7ff}, {0x4, 0x0, {0x2, 0x7f}}, {0x5, 0x2, {0x2, 0x6}}, {0x7, 0x3f5, {0x2, 0x9}}, {0x5, 0x7, {0x1, 0x61}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x5, 0x4, 0x400, 0x7, 0x1e, 'syz1\x00', "22b4ee8759c3390cd9d6b8449f1f6deb72d1e1579753e8f3b2778e3c9163f6de", "74a248ece46af5b6f8bac298574e28ed7be6dbf5cc5bc4fef3475a47828628ec", [{0x7, 0x4, {0x3, 0x549b0490}}, {0x7, 0x4, {0x2, 0x9391}}, {0x9b, 0xd, {0x3}}, {0x1919, 0x9, {0x0, 0x6b5f}}, {0x2, 0xd, {0x2, 0x2}}, {0xff, 0x2915, {0x2, 0x8}}, {0x6, 0x9, {0x0, 0x6}}, {0x4, 0x3ff, {0x3, 0x5}}, {0x49b1, 0xe, {0x2}}, {0x8, 0x401, {0x3, 0x4}}, {0x1000, 0x4, {0x2, 0xff}}, {0x3, 0x4, {0x1, 0xb8f9}}, {0x41e6, 0x2}, {0xb, 0x8, {0x0, 0xffff}}, {0x5, 0xfffd, {0x2, 0x9}}, {0xe16, 0x200, {0x1, 0x3000000}}, {0x9, 0x2, {0x0, 0x73}}, {0x8, 0x4, {0x3, 0x762}}, {0x9, 0x0, {0x3, 0x4}}, {0x9, 0x2, {0x2}}, {0x4, 0x2, {0x3, 0x8001}}, {0x5a4, 0x81, {0x1, 0x5}}, {0x875, 0xf, {0x3, 0x6}}, {0x5, 0x4, {0x0, 0xaf0}}, {0x9, 0x1, {0x3, 0x1}}, {0x6, 0x5, {0x2, 0x8}}, {0x2, 0x7, {0x2, 0x7f}}, {0x9bb4, 0x9, {0x1, 0xc8c}}, {0x8001, 0x8, {0x3, 0xd}}, {0x6, 0x7, {0x2, 0xff}}, {0x4, 0x8, {0x3, 0x61}}, {0x8, 0x401, {0x1, 0x400}}, {0xd, 0x800, {0x1, 0x9}}, {0x0, 0x0, {0x2, 0x3}}, {0x6, 0x80b, {0x0, 0x5}}, {0xfffc, 0x81, {0x2, 0xf}}, {0xd801, 0x4, {0x3}}, {0xc, 0x5, {0x1, 0xcd38}}, {0xb5, 0xffff, {0x0, 0xc}}, {0x43f7, 0x2, {0x3, 0x5dc4}}]}}}]}, 0x4bc}}, 0x800) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x12, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0xb0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0xd, 0x7, 0xa, 0xffffffffffffffd0, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000001340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x25, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x8, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001400)=[r6, r0, r9, r9, r9], &(0x7f0000001440)=[{0x3, 0x2, 0xb, 0x9}, {0x5, 0x3, 0x4, 0x7}, {0x4, 0x4, 0x10, 0x9}, {0x4, 0x3, 0xa, 0x1}, {0x1, 0x2, 0xc, 0x5}, {0x1, 0x4, 0x5, 0x9}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r11, 0x0, 0xaa, 0x54, &(0x7f0000001580)="5b5ad0a2d48271852cd761df9184786c038eaf240a735b2c8296dc3b819faa9c5a54b7133c247e60a58155085912409798a3f33acfe82caab06f54b1e37d7f3d5e34abd1a2244edbdc43b727302c629ea5669963cd497a418cea1156f3ae2b2a370134412c386d5bcbaed2a8685602738629090e46d7791cfc87dcf39861bfa685ef1b52a1e7cb92fc0044d438c19d5fb8cefe1b475d7b8d946a936757b98d66e275013bba341f64dd35", &(0x7f0000001640)=""/84, 0x4, 0x0, 0x92, 0x4e, &(0x7f00000016c0)="84ed2b97480da24496aec032a30050f1a34b68d7ec18de329ef547c4542f12fba92935cbea7164ffbaedc6e4c339961e309ed22c3cf98fc859cef5a3537a0a847007c1b784f7e2c36d0257f36bd82214a5e9258574a2f8eeb109110766003dc73f635cf216f9b259ed48558f8eb131a5cc212591f5a3290cb844bd9331ba5b5134f19de193d2ec4f84a460041fdb236ed5b5", &(0x7f0000001780)="19a91829df25144dff7987e3f118875cd90aa616342b785795e655dbaf90d1fcc9358cd46695c0cd049909d3a1028db95cd522afd87414c8944d06af683314fa9dc315ff730a7c2db741e057982c", 0x0, 0x0, 0x55}, 0x50)
socket$kcm(0x29, 0x0, 0x0) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r4, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x150, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x460}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xbde85c6, 0xc1, 0x100, 0x7, 0x4e]}, @CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) (async)
recvmsg(r12, &(0x7f0000001cc0)={&(0x7f0000001b40)=@nl=@proc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/97, 0x61}], 0x1, &(0x7f0000001c80)=""/45, 0x2d}, 0x2000) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r5, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001d40)=[0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0], 0x0, 0xe9, &(0x7f0000001dc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000022c0)={r3, 0xe0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000002040)=[0x0, 0x0, 0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f00000020c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002100), &(0x7f0000002140), 0x8, 0x38, 0x8, 0x8, &(0x7f0000002180)}}, 0x10) (async)
ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0xd82) (async)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r13, &(0x7f0000003640)={&(0x7f0000002300)=@pppol2tpv3={0x18, 0x1, {0x0, <r14=>0xffffffffffffffff}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002380)=""/15, 0xf}, {&(0x7f00000023c0)=""/4, 0x4}, {&(0x7f0000002400)}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)}, {&(0x7f0000003480)=""/165, 0xa5}], 0x6, &(0x7f00000035c0)=""/75, 0x4b}, 0x40012040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003680)) (async)
sendmsg$nl_route_sched(r14, &(0x7f0000003840)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xc, 0xa}, {0x0, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

0s ago: executing program 2 (id=1223):
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0x1f, 0x4204, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20040810)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27413' (ED25519) to the list of known hosts.
syzkaller login: [   48.221001][ T5781] cgroup: Unknown subsys name 'net'
[   48.351200][ T5781] cgroup: Unknown subsys name 'cpuset'
[   48.356153][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.025989][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.358001][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.361469][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.364798][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.367986][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.371742][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.388711][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.395211][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.399263][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.404057][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.407177][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.411897][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.414798][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.445611][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.468546][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.473469][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.667503][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.836972][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.841044][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.844296][ T5847] bridge_slave_0: entered allmulticast mode
[   54.848419][ T5847] bridge_slave_0: entered promiscuous mode
[   54.856779][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.860097][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.863441][ T5847] bridge_slave_1: entered allmulticast mode
[   54.867504][ T5847] bridge_slave_1: entered promiscuous mode
[   54.872512][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.974286][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.997939][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.045482][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.049333][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.052552][ T5843] bridge_slave_0: entered allmulticast mode
[   55.056473][ T5843] bridge_slave_0: entered promiscuous mode
[   55.072818][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.086148][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.090482][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.093593][ T5843] bridge_slave_1: entered allmulticast mode
[   55.097427][ T5843] bridge_slave_1: entered promiscuous mode
[   55.103301][ T5847] team0: Port device team_slave_0 added
[   55.127766][ T5847] team0: Port device team_slave_1 added
[   55.184187][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.187243][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.199453][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.215210][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.222657][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.226714][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.238585][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.253536][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.326325][ T5843] team0: Port device team_slave_0 added
[   55.331530][ T5843] team0: Port device team_slave_1 added
[   55.346786][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.350808][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.354003][ T5851] bridge_slave_0: entered allmulticast mode
[   55.358002][ T5851] bridge_slave_0: entered promiscuous mode
[   55.401268][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.404564][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.407710][ T5851] bridge_slave_1: entered allmulticast mode
[   55.413805][ T5851] bridge_slave_1: entered promiscuous mode
[   55.417585][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.421160][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.430520][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.440476][ T5847] hsr_slave_0: entered promiscuous mode
[   55.443813][ T5847] hsr_slave_1: entered promiscuous mode
[   55.460930][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.464029][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.476588][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.516342][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.563216][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.630021][ T5843] hsr_slave_0: entered promiscuous mode
[   55.633396][ T5843] hsr_slave_1: entered promiscuous mode
[   55.636465][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   55.639933][ T5843] Cannot create hsr debugfs directory
[   55.651594][ T5851] team0: Port device team_slave_0 added
[   55.656438][ T5851] team0: Port device team_slave_1 added
[   55.760501][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.763751][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.777129][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.806810][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.811437][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.822592][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.945430][ T5851] hsr_slave_0: entered promiscuous mode
[   55.948856][ T5851] hsr_slave_1: entered promiscuous mode
[   55.952839][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   55.955519][ T5851] Cannot create hsr debugfs directory
[   56.044515][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.074986][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.082128][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.112478][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.212523][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.228037][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.250128][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.268934][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.306028][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.319383][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.326017][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.335198][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.398705][ T5236] Bluetooth: hci0: command tx timeout
[   56.451854][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.478328][ T5236] Bluetooth: hci1: command tx timeout
[   56.493726][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.522765][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.526030][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.545107][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.548617][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.556766][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.560308][ T5236] Bluetooth: hci2: command tx timeout
[   56.574845][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.610992][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.631669][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.634824][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.645317][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.663814][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.666972][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.687712][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.690954][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.722062][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.725324][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.893635][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.990901][ T5847] veth0_vlan: entered promiscuous mode
[   57.012002][ T5847] veth1_vlan: entered promiscuous mode
[   57.023805][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.052600][ T5847] veth0_macvtap: entered promiscuous mode
[   57.060499][ T5847] veth1_macvtap: entered promiscuous mode
[   57.072182][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.096647][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.113576][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.127531][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.132071][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.135791][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.142463][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.154010][ T5851] veth0_vlan: entered promiscuous mode
[   57.176837][ T5851] veth1_vlan: entered promiscuous mode
[   57.204105][ T5843] veth0_vlan: entered promiscuous mode
[   57.213984][ T5843] veth1_vlan: entered promiscuous mode
[   57.243617][ T5851] veth0_macvtap: entered promiscuous mode
[   57.256201][ T5851] veth1_macvtap: entered promiscuous mode
[   57.262643][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.270487][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.273593][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.289141][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.317843][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.322046][ T5843] veth0_macvtap: entered promiscuous mode
[   57.324186][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.325755][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.332469][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.336278][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.345402][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.355494][ T5843] veth1_macvtap: entered promiscuous mode
[   57.415912][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.442307][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.461056][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.462386][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.463640][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.485607][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.493901][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.505593][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.510602][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.553056][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.555765][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.606469][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.620230][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.660678][ T2444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.673149][ T2444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.701881][ T5923] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5'.
[   58.063613][ T5926] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   58.067015][ T5926] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.128107][    C1] hrtimer: interrupt took 36318 ns
[   58.291500][ T5929] Zero length message leads to an empty skb
[   58.475802][ T5932] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   58.478239][ T5236] Bluetooth: hci0: command tx timeout
[   58.480405][ T5932] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   58.553274][ T5236] Bluetooth: hci1: command tx timeout
[   58.656302][ T5236] Bluetooth: hci2: command tx timeout
[   60.558275][ T5236] Bluetooth: hci0: command tx timeout
[   60.639379][ T5236] Bluetooth: hci1: command tx timeout
[   60.708995][ T5236] Bluetooth: hci2: command tx timeout
[   61.378021][ T5945] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   61.388602][ T5945] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   61.400011][ T5945] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   61.403741][ T5945] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   61.649015][ T5961] netlink: 182 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.660935][ T5961] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[   61.832494][ T5971] netlink: 216 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.887139][ T5961] veth0_vlan: left promiscuous mode
[   61.957588][ T5961] veth0_vlan: entered promiscuous mode
[   62.002323][ T5961] team0: Device veth0_vlan failed to register rx_handler
[   62.747220][ T5236] Bluetooth: hci0: command tx timeout
[   62.749722][ T5236] Bluetooth: hci1: command tx timeout
[   62.795602][ T5848] Bluetooth: hci2: command tx timeout
[   64.416930][ T5961] syz.1.12 (5961) used greatest stack depth: 18160 bytes left
[   65.676462][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'.
[   65.777151][ T5998] netlink: 830 bytes leftover after parsing attributes in process `syz.1.22'.
[   65.787088][ T5997] netlink: 'syz.0.23': attribute type 29 has an invalid length.
[   65.848907][ T5999] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.584360][ T6018] lo speed is unknown, defaulting to 1000
[   66.594939][ T6018] lo speed is unknown, defaulting to 1000
[   66.616626][ T6018] lo speed is unknown, defaulting to 1000
[   66.656271][ T6018] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.811055][ T6018] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   67.022254][ T6018] lo speed is unknown, defaulting to 1000
[   67.063967][ T6018] lo speed is unknown, defaulting to 1000
[   67.076216][ T6018] lo speed is unknown, defaulting to 1000
[   67.187154][ T6024] Driver unsupported XDP return value 0 on prog  (id 76) dev N/A, expect packet loss!
[   67.775473][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.779708][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   67.914135][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'.
[   68.546593][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.550040][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.555177][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.560908][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.687066][ T6076] delete_channel: no stack
[   68.757072][ T6100] netlink: 17 bytes leftover after parsing attributes in process `syz.2.52'.
[   68.761811][ T6100] netlink: zone id is out of range
[   68.763674][ T6100] netlink: zone id is out of range
[   68.766703][ T6100] netlink: zone id is out of range
[   68.768955][ T6100] netlink: zone id is out of range
[   68.770878][ T6100] netlink: zone id is out of range
[   68.772669][ T6100] netlink: zone id is out of range
[   68.777359][ T6100] netlink: zone id is out of range
[   68.780016][ T6100] netlink: zone id is out of range
[   68.782097][ T6100] netlink: zone id is out of range
[   68.783946][ T6100] netlink: zone id is out of range
[   68.826264][ T6107] =======================================================
[   68.826264][ T6107] WARNING: The mand mount option has been deprecated and
[   68.826264][ T6107]          and is ignored by this kernel. Remove the mand
[   68.826264][ T6107]          option from the mount to silence this warning.
[   68.826264][ T6107] =======================================================
[   68.940881][ T6111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.55'.
[   70.699246][ T6176] netlink: 360 bytes leftover after parsing attributes in process `syz.2.75'.
[   70.949119][ T6180] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.76'.
[   71.197718][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.204140][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.625806][ T6193] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.81'.
[   71.760641][ T6201] netlink: 'syz.1.83': attribute type 46 has an invalid length.
[   71.766890][ T6201] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.83'.
[   71.803972][ T5848] Bluetooth: hci2: Malformed Event: 0x13
[   72.336583][ T6228] netlink: 14 bytes leftover after parsing attributes in process `syz.2.91'.
[   72.711355][ T6248] netlink: 'syz.1.98': attribute type 29 has an invalid length.
[   72.717151][ T6248] netlink: 'syz.1.98': attribute type 29 has an invalid length.
[   72.754602][ T6248] netlink: 'syz.1.98': attribute type 29 has an invalid length.
[   74.100047][ T6278] net_ratelimit: 76 callbacks suppressed
[   74.100061][ T6278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.717083][ T6312] netlink: 'syz.0.111': attribute type 13 has an invalid length.
[   74.720287][ T6312] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.111'.
[   74.735362][ T6312] netlink: 4412 bytes leftover after parsing attributes in process `syz.0.111'.
[   75.054236][ T6325] openvswitch: netlink: Unknown key attributes 1
[   75.237950][ T6338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.248043][ T6338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.119'.
[   75.720066][ T6354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'.
[   76.540661][ T6369] netlink: 'syz.0.130': attribute type 4 has an invalid length.
[   76.544144][ T6369] netlink: 17 bytes leftover after parsing attributes in process `syz.0.130'.
[   76.670694][ T6373] IPv6: Can't replace route, no match found
[   77.025889][ T6383] syz.2.135 uses obsolete (PF_INET,SOCK_PACKET)
[   77.146637][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   77.324763][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   77.459480][ T6389] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   77.765194][ T6403] netlink: 'syz.1.142': attribute type 6 has an invalid length.
[   77.768787][ T6403] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.142'.
[   77.776466][ T6403] netlink: 'syz.1.142': attribute type 10 has an invalid length.
[   77.781768][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.792851][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.811643][ T6403] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   78.075638][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   78.079103][ T6411] openvswitch: netlink: Unknown nsh attribute 0
[   78.081344][ T6411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.281067][ T6467] ip6gretap0: entered promiscuous mode
[   81.365985][ T6470] netlink: 68 bytes leftover after parsing attributes in process `syz.2.166'.
[   81.436793][  T791] cfg80211: failed to load regulatory.db
[   82.157380][ T6487] netlink: 'syz.0.171': attribute type 41 has an invalid length.
[   82.793029][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.175'.
[   82.805146][ T6499] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[   83.015007][ T5848] Bluetooth: hci1: ISO packet for unknown connection handle 1342
[   83.554027][ T6541] netlink: 'syz.0.186': attribute type 29 has an invalid length.
[   83.558462][ T6541] netlink: 'syz.0.186': attribute type 29 has an invalid length.
[   83.562374][ T6541] netlink: 'syz.0.186': attribute type 29 has an invalid length.
[   83.736563][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'.
[   83.875915][ T6557] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   83.884061][ T6557] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.191'.
[   83.946462][ T6561] netlink: 'syz.0.190': attribute type 10 has an invalid length.
[   84.633905][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.780630][ T6561] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.835323][ T6577] netlink: 'syz.1.195': attribute type 10 has an invalid length.
[   84.843347][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.853767][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.082149][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.086094][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.092590][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.096350][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.135956][ T6577] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   85.376260][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   85.577780][ T6599] netlink: 'syz.2.201': attribute type 21 has an invalid length.
[   85.583779][ T6599] netlink: 156 bytes leftover after parsing attributes in process `syz.2.201'.
[   85.587984][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'.
[   85.632679][ T6605] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.203'.
[   86.334207][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[   86.572607][ T6623] netlink: 'syz.1.209': attribute type 11 has an invalid length.
[   86.575836][ T6623] netlink: 148 bytes leftover after parsing attributes in process `syz.1.209'.
[   86.631353][ T6628] netlink: 168 bytes leftover after parsing attributes in process `syz.2.207'.
[   86.637230][ T6627] netlink: 'syz.0.210': attribute type 3 has an invalid length.
[   86.641004][ T6627] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.210'.
[   86.880558][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[   86.999256][ T6647] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   87.054311][ T6653] !: renamed from bond_slave_0 (while UP)
[   87.156246][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'.
[   87.166090][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'.
[   87.251287][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'.
[   87.258577][ T6654] batadv0: entered promiscuous mode
[   87.261702][ T6654] batadv0: entered allmulticast mode
[   87.396498][ T6654] bond0: (slave batadv0): Releasing backup interface
[   87.401826][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'.
[   87.530158][ T6654] bridge0: port 3(batadv0) entered blocking state
[   87.533734][ T6654] bridge0: port 3(batadv0) entered disabled state
[   87.562885][ T6660] sctp: [Deprecated]: syz.1.221 (pid 6660) Use of int in maxseg socket option.
[   87.562885][ T6660] Use struct sctp_assoc_value instead
[   87.568654][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   87.571936][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   87.834338][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'.
[   87.843850][ T6678] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.226'.
[   87.873550][ T6680] : entered promiscuous mode
[   88.862300][ T6697] validate_nla: 3 callbacks suppressed
[   88.862315][ T6697] netlink: 'syz.0.232': attribute type 8 has an invalid length.
[   88.867727][ T6697] netlink: 'syz.0.232': attribute type 6 has an invalid length.
[   89.395968][ T5848] Bluetooth: hci0: ISO packet for unknown connection handle 15
[   90.002925][ T6737] netlink: 'syz.1.245': attribute type 210 has an invalid length.
[   90.792378][ T6749] netlink: 'syz.2.249': attribute type 3 has an invalid length.
[   91.766488][ T6766] __nla_validate_parse: 5 callbacks suppressed
[   91.766503][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'.
[   91.775239][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'.
[   91.786032][ T6768] netlink: 104 bytes leftover after parsing attributes in process `syz.2.255'.
[   91.945976][ T6772] netlink: 'syz.0.253': attribute type 10 has an invalid length.
[   91.949525][ T6772] netlink: 55 bytes leftover after parsing attributes in process `syz.0.253'.
[   92.542154][ T6763] delete_channel: no stack
[   92.949677][ T6820] netlink: 'syz.0.267': attribute type 10 has an invalid length.
[   93.007873][ T6826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.011618][ T6826] IPv6: NLM_F_CREATE should be set when creating new route
[   93.015101][ T6826] IPv6: NLM_F_CREATE should be set when creating new route
[   93.564995][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'.
[   93.731210][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'.
[   94.034370][ T5848] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[   94.367098][ T6854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.277'.
[   94.382884][ T6854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.277'.
[   94.387597][ T6854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.277'.
[   94.394633][ T6852] delete_channel: no stack
[   94.511491][ T6859] option changes via remount are deprecated (pid=6855 comm=syz.1.278)
[   96.367824][ T6900] netlink: 204 bytes leftover after parsing attributes in process `syz.0.290'.
[   96.474194][ T6905] netlink: 'syz.0.291': attribute type 1 has an invalid length.
[   96.836494][ T6932] netlink: zone id is out of range
[   96.842713][ T6932] netlink: zone id is out of range
[   96.844690][ T6932] netlink: zone id is out of range
[   96.846666][ T6932] netlink: zone id is out of range
[   96.857191][ T6932] netlink: del zone limit has 4 unknown bytes
[   96.873469][ T6932] netlink: 16094 bytes leftover after parsing attributes in process `syz.0.300'.
[   96.892060][ T5848] Bluetooth: hci2: Malformed LE Event: 0x0d
[   97.426192][ T6965] netlink: 104 bytes leftover after parsing attributes in process `syz.0.308'.
[   98.259349][ T6963] veth1_macvtap: left promiscuous mode
[   98.266649][ T6963] macsec0: entered promiscuous mode
[   98.484722][ T6974] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   98.487691][ T6974] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.314'.
[   99.864979][ T7027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.328'.
[  100.296721][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'.
[  101.052764][ T7034] netlink: 'syz.0.330': attribute type 10 has an invalid length.
[  101.055816][ T7034] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.330'.
[  101.183010][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.333'.
[  101.195722][ T7043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.334'.
[  101.227659][ T7046] netlink: 'syz.1.335': attribute type 3 has an invalid length.
[  101.232567][ T7046] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.335'.
[  101.357981][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'.
[  101.406382][ T7046] netlink: 'syz.1.335': attribute type 2 has an invalid length.
[  102.300222][ T7057] __nla_validate_parse: 4 callbacks suppressed
[  102.300263][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'.
[  102.311738][ T7057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'.
[  102.321476][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'.
[  102.659892][ T7081] lo speed is unknown, defaulting to 1000
[  102.926614][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.348'.
[  103.916590][ T7103] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[  103.934673][ T7102] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[  104.039682][ T7107] lo speed is unknown, defaulting to 1000
[  105.343353][ T7152] netlink: 'syz.0.361': attribute type 21 has an invalid length.
[  105.346446][ T7152] netlink: 156 bytes leftover after parsing attributes in process `syz.0.361'.
[  106.266177][ T7201] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  106.272303][ T7201] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  106.277416][ T7201] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  106.378364][ T7202] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  107.156682][ T7215] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[  107.190389][ T7215] bond0: (slave bond_slave_0): Releasing backup interface
[  107.524704][ T7222] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  108.235719][ T7251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.390'.
[  108.245549][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[  108.352387][ T7255] netlink: 'syz.1.391': attribute type 21 has an invalid length.
[  108.356030][ T7255] netlink: 'syz.1.391': attribute type 20 has an invalid length.
[  110.146071][ T7272] delete_channel: no stack
[  112.170950][ T7309] netlink: 68 bytes leftover after parsing attributes in process `syz.0.408'.
[  112.206119][ T7309] netlink: 'syz.0.408': attribute type 10 has an invalid length.
[  112.211973][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.408'.
[  112.444390][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.450052][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.454385][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.462464][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.467684][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.570997][ T7322] lo speed is unknown, defaulting to 1000
[  112.763938][ T7322] chnl_net:caif_netlink_parms(): no params data found
[  112.865734][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.869165][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.872223][ T7322] bridge_slave_0: entered allmulticast mode
[  112.876293][ T7322] bridge_slave_0: entered promiscuous mode
[  112.881847][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.885088][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.889622][ T7322] bridge_slave_1: entered allmulticast mode
[  112.893846][ T7322] bridge_slave_1: entered promiscuous mode
[  112.933739][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.943176][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.983954][ T7322] team0: Port device team_slave_0 added
[  112.989994][ T7322] team0: Port device team_slave_1 added
[  113.042372][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.045390][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.057996][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.064493][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.067437][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.079140][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.132452][ T7322] hsr_slave_0: entered promiscuous mode
[  113.135795][ T7322] hsr_slave_1: entered promiscuous mode
[  113.139981][ T7322] debugfs: 'hsr0' already exists in 'hsr'
[  113.148423][ T7322] Cannot create hsr debugfs directory
[  113.433719][ T7322] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.497226][ T7322] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.564160][ T7322] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.605106][ T7322] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  113.682711][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.685869][ T7322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.689357][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.692641][ T7322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.699705][ T7367] netlink: 'syz.0.420': attribute type 12 has an invalid length.
[  113.703409][ T7367] netlink: 132 bytes leftover after parsing attributes in process `syz.0.420'.
[  113.771172][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.776742][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.839928][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.853555][ T7379] netlink: 'syz.2.422': attribute type 2 has an invalid length.
[  113.862261][ T7322] 8021q: adding VLAN 0 to HW filter on device team0
[  113.874514][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.876895][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.892502][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.895713][ T7183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.082320][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.156672][ T7322] veth0_vlan: entered promiscuous mode
[  114.171243][ T7322] veth1_vlan: entered promiscuous mode
[  114.248353][ T7322] veth0_macvtap: entered promiscuous mode
[  114.255775][ T7322] veth1_macvtap: entered promiscuous mode
[  114.271332][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.284261][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.299845][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.302958][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.306260][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.316530][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.399939][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.405186][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.430904][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.435657][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.559566][ T5848] Bluetooth: hci1: command tx timeout
[  114.657006][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'.
[  114.671457][ T7408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.428'.
[  114.792265][ T7415] netlink: 'syz.3.431': attribute type 21 has an invalid length.
[  116.480591][ T7473] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  116.483138][ T7473] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  116.543916][ T5848] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  116.549349][ T5848] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  116.689700][ T5848] Bluetooth: hci1: command tx timeout
[  116.793373][ T7476] openvswitch: netlink: IP tunnel dst address not specified
[  116.941009][ T7479] netlink: 2972 bytes leftover after parsing attributes in process `syz.0.446'.
[  116.996522][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'.
[  117.913298][ T7525] netlink: 136 bytes leftover after parsing attributes in process `syz.3.461'.
[  118.015715][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'.
[  118.301625][ T7541] netlink: 324 bytes leftover after parsing attributes in process `syz.3.465'.
[  118.320323][ T7540] netlink: 768 bytes leftover after parsing attributes in process `syz.3.465'.
[  118.324140][ T7540] netlink: 768 bytes leftover after parsing attributes in process `syz.3.465'.
[  118.709144][ T5236] Bluetooth: hci1: command tx timeout
[  118.967271][ T7547] netlink: 'syz.2.467': attribute type 5 has an invalid length.
[  118.978746][ T7547] netlink: 'syz.2.467': attribute type 7 has an invalid length.
[  119.567174][ T7553] netlink: 809 bytes leftover after parsing attributes in process `syz.0.468'.
[  119.588838][ T7553] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.468'.
[  119.799872][ T7547] : entered promiscuous mode
[  119.896036][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'.
[  119.971239][ T7569] netlink: 188 bytes leftover after parsing attributes in process `syz.2.473'.
[  120.137510][ T7580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.476'.
[  120.142414][ T7580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.476'.
[  120.157156][ T7572] syzkaller0: entered promiscuous mode
[  120.164769][ T7572] syzkaller0: entered allmulticast mode
[  120.799854][ T5236] Bluetooth: hci1: command tx timeout
[  121.901776][ T7581] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.475'.
[  121.980082][ T7595] sit0: entered promiscuous mode
[  121.982479][ T7595] sit0: entered allmulticast mode
[  122.797107][ T7614] bridge0: port 3(ip6gretap0) entered blocking state
[  122.818431][ T7614] bridge0: port 3(ip6gretap0) entered disabled state
[  122.821464][ T7614] ip6gretap0: entered allmulticast mode
[  122.825440][ T7614] ip6gretap0: entered promiscuous mode
[  122.828668][ T7614] bridge0: port 3(ip6gretap0) entered blocking state
[  122.831676][ T7614] bridge0: port 3(ip6gretap0) entered forwarding state
[  122.856924][ T7614] nft_compat: unsupported protocol 0
[  122.945199][ T7624] nft_compat: unsupported protocol 1
[  123.197844][ T7644] netlink: 140 bytes leftover after parsing attributes in process `syz.3.496'.
[  123.201283][ T7644] netlink: 6 bytes leftover after parsing attributes in process `syz.3.496'.
[  123.586038][ T7657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.499'.
[  124.437956][ T7668] netlink: 'syz.0.502': attribute type 28 has an invalid length.
[  124.445617][ T7668] netlink: 'syz.0.502': attribute type 3 has an invalid length.
[  124.757309][ T7692] __nla_validate_parse: 4 callbacks suppressed
[  124.757319][ T7692] netlink: 52 bytes leftover after parsing attributes in process `syz.3.510'.
[  124.964892][ T7714] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.515'.
[  125.620761][ T7730] lo speed is unknown, defaulting to 1000
[  126.162922][ T7749] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.526'.
[  126.682109][ T7763] IPv6: Can't replace route, no match found
[  127.279262][ T7773] netlink: 'syz.0.533': attribute type 29 has an invalid length.
[  127.369703][ T7780] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[  127.656351][ T7788] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.538'.
[  127.712627][ T7793] netlink: 'syz.0.539': attribute type 1 has an invalid length.
[  127.715862][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'.
[  127.720511][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.734992][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'.
[  127.816697][ T7803] netlink: 'syz.0.542': attribute type 21 has an invalid length.
[  127.820529][ T7803] netlink: 156 bytes leftover after parsing attributes in process `syz.0.542'.
[  127.825185][ T7801] netlink: 'syz.0.542': attribute type 21 has an invalid length.
[  127.829486][ T7801] IPv6: NLM_F_CREATE should be specified when creating new route
[  128.159380][ T7819] sctp: [Deprecated]: syz.0.546 (pid 7819) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.159380][ T7819] Use struct sctp_sack_info instead
[  128.195130][ T7820] IPv6: Can't replace route, no match found
[  128.695599][ T7837] ]X: renamed from veth0_vlan (while UP)
[  128.991728][ T7840] netlink: 'syz.3.552': attribute type 1 has an invalid length.
[  128.995147][ T7840] netlink: 'syz.3.552': attribute type 4 has an invalid length.
[  129.005217][ T7840] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.552'.
[  129.017390][ T7840] netlink: 'syz.3.552': attribute type 4 has an invalid length.
[  129.226501][ T7844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.553'.
[  129.230226][ T7844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.553'.
[  129.286102][ T7849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.287599][ T7842] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  129.458565][ T7857] bridge0: port 3(ip6gretap0) entered blocking state
[  129.461576][ T7857] bridge0: port 3(ip6gretap0) entered disabled state
[  129.464610][ T7857] ip6gretap0: entered allmulticast mode
[  129.481601][ T7857] ip6gretap0: entered promiscuous mode
[  129.485236][ T7857] bridge0: port 3(ip6gretap0) entered blocking state
[  129.488299][ T7857] bridge0: port 3(ip6gretap0) entered forwarding state
[  129.669918][ T7871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.682574][ T5236] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  129.892478][ T7875] __nla_validate_parse: 1 callbacks suppressed
[  129.892534][ T7875] netlink: 104 bytes leftover after parsing attributes in process `syz.3.561'.
[  129.904576][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'.
[  132.849220][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.852011][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.048481][ T7915] netlink: 'syz.3.570': attribute type 10 has an invalid length.
[  133.051999][ T7915] netlink: 55 bytes leftover after parsing attributes in process `syz.3.570'.
[  133.709687][ T7934] lo speed is unknown, defaulting to 1000
[  133.745535][ T7906] delete_channel: no stack
[  133.777990][ T7948] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  134.075704][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'.
[  134.196819][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  134.819313][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'.
[  134.882773][ T8007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  135.854723][ T8027] netlink: 'syz.3.600': attribute type 11 has an invalid length.
[  135.859703][ T8027] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.600'.
[  136.454737][ T8021] netlink: 'syz.0.599': attribute type 12 has an invalid length.
[  136.459217][ T8021] netlink: 132 bytes leftover after parsing attributes in process `syz.0.599'.
[  136.466067][ T8024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.564013][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'.
[  136.648705][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'.
[  136.653346][ T8034] netlink: 84 bytes leftover after parsing attributes in process `syz.2.602'.
[  136.856203][ T8039] syzkaller1: tun_chr_ioctl cmd 1074025677
[  136.863855][ T8039] syzkaller1: linktype set to 823
[  136.931393][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'.
[  136.934809][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'.
[  137.134772][ T8058] netlink: 'syz.0.611': attribute type 1 has an invalid length.
[  137.178032][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[  138.203079][ T8081] cgroup: fork rejected by pids controller in /syz2
[  138.407795][ T8117] netlink: 'syz.2.620': attribute type 10 has an invalid length.
[  138.417690][ T8117] lo: entered promiscuous mode
[  138.431976][ T8117] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  138.813779][ T8150] syzkaller0: tun_chr_ioctl cmd 1074025677
[  138.817899][ T8150] syzkaller0: linktype set to 801
[  138.911890][ T8154] netlink: 'syz.2.629': attribute type 10 has an invalid length.
[  138.914974][ T8154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'.
[  138.921233][ T8154] ipvlan1: entered promiscuous mode
[  138.923213][ T8154] ipvlan1: entered allmulticast mode
[  138.925630][ T8154] veth0_vlan: entered allmulticast mode
[  138.931212][ T8154] bridge0: port 4(ipvlan1) entered blocking state
[  138.933880][ T8154] bridge0: port 4(ipvlan1) entered disabled state
[  138.940209][ T8154] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  139.257608][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'.
[  139.586300][ T8183] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[  140.123805][ T8185] netlink: 'syz.3.639': attribute type 8 has an invalid length.
[  140.127214][ T8185] netlink: 'syz.3.639': attribute type 6 has an invalid length.
[  141.201574][ T8210] openvswitch: netlink: Flow actions attr not present in new flow.
[  144.412640][ T8238] __nla_validate_parse: 12 callbacks suppressed
[  144.412658][ T8238] netlink: 14 bytes leftover after parsing attributes in process `syz.3.655'.
[  144.587543][ T8242] netlink: 'syz.3.657': attribute type 10 has an invalid length.
[  144.595545][ T8246] lo speed is unknown, defaulting to 1000
[  144.601809][ T8242] netlink: 55 bytes leftover after parsing attributes in process `syz.3.657'.
[  144.728694][ T8255] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[  145.289262][ T8241] delete_channel: no stack
[  145.303004][ T8285] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  145.305860][ T8285] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  145.466972][ T8296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'.
[  145.489950][ T8296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'.
[  145.605458][ T8301] netlink: 136 bytes leftover after parsing attributes in process `syz.2.674'.
[  145.640996][ T8301] C: renamed from team_slave_0 (while UP)
[  145.644799][ T8301] netlink: 'syz.2.674': attribute type 3 has an invalid length.
[  145.647607][ T8301] netlink: 'syz.2.674': attribute type 1 has an invalid length.
[  145.651212][ T8301] netlink: 116 bytes leftover after parsing attributes in process `syz.2.674'.
[  145.655095][ T8301] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.885199][ T8306] netlink: 'syz.2.676': attribute type 11 has an invalid length.
[  145.888714][ T8306] netlink: 168 bytes leftover after parsing attributes in process `syz.2.676'.
[  145.897881][ T8306] mac80211_hwsim hwsim5 .3c: renamed from wlan1
[  146.335638][ T8329] netlink: 'syz.2.684': attribute type 3 has an invalid length.
[  146.356957][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'.
[  147.191730][ T8360] netlink: 'syz.3.693': attribute type 58 has an invalid length.
[  147.195147][ T8360] netlink: 144 bytes leftover after parsing attributes in process `syz.3.693'.
[  147.583465][ T8371] netlink: 'syz.2.697': attribute type 10 has an invalid length.
[  147.592504][ T8371] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  147.870443][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'.
[  148.195918][ T8382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.198988][ T8382] IPv6: NLM_F_CREATE should be set when creating new route
[  148.201559][ T8382] IPv6: NLM_F_CREATE should be set when creating new route
[  148.204162][ T8382] IPv6: NLM_F_CREATE should be set when creating new route
[  148.436950][ T8395] netlink: 'syz.2.704': attribute type 10 has an invalid length.
[  148.524883][ T8395] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  149.994469][ T8414] delete_channel: no stack
[  150.345491][ T8438] __nla_validate_parse: 2 callbacks suppressed
[  150.345506][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'.
[  150.464719][ T8442] tc_dump_action: action bad kind
[  150.625574][ T8452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.631810][  T792] lo speed is unknown, defaulting to 1000
[  151.750346][ T8470] netlink: 'syz.0.725': attribute type 21 has an invalid length.
[  151.753417][ T8470] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[  152.159838][ T8515] netlink: 'syz.3.735': attribute type 4 has an invalid length.
[  152.168233][ T8515] netlink: 168 bytes leftover after parsing attributes in process `syz.3.735'.
[  152.328021][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'.
[  153.071338][ T8544] netlink: 'syz.0.742': attribute type 2 has an invalid length.
[  153.074702][ T8544] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.742'.
[  153.082518][ T8544] nbd: must specify at least one socket
[  153.246178][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'.
[  153.364733][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.3.745'.
[  153.371734][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.3.745'.
[  153.412596][ T8562] netlink: 'syz.3.749': attribute type 10 has an invalid length.
[  153.416844][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.749'.
[  153.426750][ T8562] team0: entered promiscuous mode
[  153.429423][ T8562] team_slave_0: entered promiscuous mode
[  153.431779][ T8562] team_slave_1: entered promiscuous mode
[  153.434149][ T8562] team0: entered allmulticast mode
[  153.436115][ T8562] team_slave_0: entered allmulticast mode
[  153.439198][ T8562] team_slave_1: entered allmulticast mode
[  153.449458][ T8562] bridge0: port 4(team0) entered blocking state
[  153.451942][ T8562] bridge0: port 4(team0) entered disabled state
[  153.456840][ T8562] bridge0: port 4(team0) entered blocking state
[  153.459502][ T8562] bridge0: port 4(team0) entered forwarding state
[  153.571694][ T8578] netlink: 140 bytes leftover after parsing attributes in process `syz.3.753'.
[  153.575134][ T8578] netlink: 6 bytes leftover after parsing attributes in process `syz.3.753'.
[  153.583354][ T8578] netlink: 'syz.3.753': attribute type 13 has an invalid length.
[  153.586243][ T8578] netlink: 'syz.3.753': attribute type 58 has an invalid length.
[  153.800360][ T8583] IPv6: Can't replace route, no match found
[  153.906073][ T8596] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  154.064801][ T8604] IPv6: NLM_F_CREATE should be specified when creating new route
[  154.385429][ T8624] blkio.reset_stats is deprecated
[  154.845508][ T8640] netlink: 'syz.3.772': attribute type 39 has an invalid length.
[  155.469534][ T5236] Bluetooth: hci2: Malformed LE Event: 0x0d
[  155.532229][ T8657] netlink: 'syz.0.777': attribute type 29 has an invalid length.
[  155.537865][ T8657] netlink: 'syz.0.777': attribute type 29 has an invalid length.
[  155.566648][ T8657] __nla_validate_parse: 10 callbacks suppressed
[  155.566664][ T8657] netlink: 500 bytes leftover after parsing attributes in process `syz.0.777'.
[  155.895332][ T8672] netlink: 168 bytes leftover after parsing attributes in process `syz.0.781'.
[  158.815182][ T8708] validate_nla: 1 callbacks suppressed
[  158.815249][ T8708] netlink: 'syz.3.795': attribute type 10 has an invalid length.
[  158.823349][ T8708] netlink: 55 bytes leftover after parsing attributes in process `syz.3.795'.
[  159.040213][ T8705] delete_channel: no stack
[  159.157695][ T8717] netlink: 'syz.3.796': attribute type 1 has an invalid length.
[  159.160329][ T8717] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.796'.
[  160.163400][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'.
[  160.166780][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'.
[  160.173371][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'.
[  160.272355][ T8742] lo speed is unknown, defaulting to 1000
[  160.915649][ T8762] netlink: 14 bytes leftover after parsing attributes in process `syz.3.809'.
[  160.926683][ T8762] hsr_slave_0: left promiscuous mode
[  160.974053][ T8762] hsr_slave_1: left promiscuous mode
[  161.195714][ T8772] netlink: 'syz.2.812': attribute type 10 has an invalid length.
[  161.350174][ T8772] team0 (unregistering): Port device C removed
[  161.397897][ T8772] team0 (unregistering): Port device team_slave_1 removed
[  161.567549][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.815'.
[  161.582314][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.815'.
[  161.588323][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.815'.
[  161.606765][ T8785] netlink: 'syz.3.816': attribute type 1 has an invalid length.
[  161.737457][ T8793] netlink: 72 bytes leftover after parsing attributes in process `syz.2.818'.
[  161.741224][ T8793] netlink: 72 bytes leftover after parsing attributes in process `syz.2.818'.
[  163.656716][ T8824] netlink: 'syz.2.828': attribute type 29 has an invalid length.
[  163.670630][ T8824] netlink: 'syz.2.828': attribute type 29 has an invalid length.
[  163.674386][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  164.050505][ T8815] Set syz1 is full, maxelem 65536 reached
[  164.924610][ T5236] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  165.147807][ T8858] netlink: 'syz.3.838': attribute type 10 has an invalid length.
[  165.151095][ T8858] netlink: 55 bytes leftover after parsing attributes in process `syz.3.838'.
[  165.858561][ T8862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.840'.
[  166.226786][ T8873] netlink: 'syz.2.844': attribute type 6 has an invalid length.
[  166.295444][ T8880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.846'.
[  166.381283][ T8880] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.846'.
[  166.435895][ T8885] netlink: 92 bytes leftover after parsing attributes in process `syz.3.848'.
[  166.456181][ T8886] netlink: 'syz.2.847': attribute type 10 has an invalid length.
[  166.459101][ T8886] netlink: 55 bytes leftover after parsing attributes in process `syz.2.847'.
[  166.659880][ T8891] netlink: 'syz.3.850': attribute type 9 has an invalid length.
[  166.670312][ T8891] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.850'.
[  166.807253][ T8902] Set syz1 is full, maxelem 65536 reached
[  167.010605][ T8905] netlink: 'syz.3.854': attribute type 10 has an invalid length.
[  167.013943][ T8905] netlink: 55 bytes leftover after parsing attributes in process `syz.3.854'.
[  167.217231][ T8882] delete_channel: no stack
[  167.689214][ T8903] delete_channel: no stack
[  168.391784][ T8928] netlink: 'syz.3.861': attribute type 29 has an invalid length.
[  168.395719][ T8928] netlink: 'syz.3.861': attribute type 29 has an invalid length.
[  168.400162][ T8928] netlink: 'syz.3.861': attribute type 29 has an invalid length.
[  168.405892][ T8928] netlink: 'syz.3.861': attribute type 29 has an invalid length.
[  168.462403][ T8930] netlink: 'syz.0.862': attribute type 10 has an invalid length.
[  168.597000][ T8930] bond0: (slave bond_slave_0): Releasing backup interface
[  168.619156][ T8937] netlink: 202232 bytes leftover after parsing attributes in process `syz.0.862'.
[  168.622245][ T8937] netlink: zone id is out of range
[  168.809943][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'.
[  168.813454][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'.
[  169.872472][ T8969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.402143][ T8985] netlink: 92 bytes leftover after parsing attributes in process `syz.0.880'.
[  170.716730][ T8998] validate_nla: 7 callbacks suppressed
[  170.716785][ T8998] netlink: 'syz.0.884': attribute type 10 has an invalid length.
[  170.849434][ T9001] netlink: 'syz.3.886': attribute type 21 has an invalid length.
[  170.976404][ T9008] netlink: 'syz.3.889': attribute type 1 has an invalid length.
[  171.424841][ T8994] delete_channel: no stack
[  171.707009][ T9036] netlink: 'syz.3.899': attribute type 27 has an invalid length.
[  171.712538][ T9036] __nla_validate_parse: 6 callbacks suppressed
[  171.712553][ T9036] netlink: 164 bytes leftover after parsing attributes in process `syz.3.899'.
[  171.744188][ T9037] netlink: 'syz.3.899': attribute type 27 has an invalid length.
[  171.747485][ T9037] netlink: 164 bytes leftover after parsing attributes in process `syz.3.899'.
[  171.820775][ T9047] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.897'.
[  171.825525][ T9034] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.897'.
[  171.831227][ T9047] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.897'.
[  171.907465][ T9048] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.900'.
[  172.063144][ T9034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.897'.
[  172.066066][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  172.657601][ T9051] netlink: 'syz.3.902': attribute type 12 has an invalid length.
[  172.660523][ T9051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.902'.
[  172.666474][ T9051] netlink: 'syz.3.902': attribute type 2 has an invalid length.
[  172.746982][ T9061] netlink: 'syz.0.905': attribute type 10 has an invalid length.
[  172.751311][ T9061] netlink: 55 bytes leftover after parsing attributes in process `syz.0.905'.
[  173.486568][ T9058] delete_channel: no stack
[  173.755721][ T9112] netlink: 'syz.0.920': attribute type 1 has an invalid length.
[  174.122157][ T9140] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  174.979180][ T9157] netlink: set zone limit has 8 unknown bytes
[  175.035478][ T9159] netlink: 'syz.2.931': attribute type 21 has an invalid length.
[  176.536325][ T5236] Bluetooth: hci1: unexpected event 0x09 length: 151 > 3
[  176.866242][ T9207] __nla_validate_parse: 39 callbacks suppressed
[  176.866300][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'.
[  178.812906][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'.
[  178.841994][ T9244] netlink: 84 bytes leftover after parsing attributes in process `syz.2.959'.
[  178.981458][ T9248] validate_nla: 33 callbacks suppressed
[  178.981519][ T9248] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[  179.397616][ T9275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.969'.
[  179.402558][ T9275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'.
[  179.946315][ T9291] xt_HMARK: proto mask must be zero with L3 mode
[  180.055068][ T9295] netlink: 'syz.3.976': attribute type 29 has an invalid length.
[  180.058951][ T9295] netlink: 'syz.3.976': attribute type 29 has an invalid length.
[  180.062160][ T9295] netlink: 'syz.3.976': attribute type 29 has an invalid length.
[  180.153322][ T9298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'.
[  180.549601][ T9311] netlink: 'syz.0.982': attribute type 10 has an invalid length.
[  180.552660][ T9309] netlink: 'syz.3.979': attribute type 10 has an invalid length.
[  180.555560][ T9309] netlink: 55 bytes leftover after parsing attributes in process `syz.3.979'.
[  180.567089][ T9311] team0: Device veth1_macvtap failed to register rx_handler
[  180.599012][ T9313] netlink: 48 bytes leftover after parsing attributes in process `syz.0.983'.
[  180.777541][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'.
[  180.789608][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  180.794965][ T9326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.986'.
[  180.798455][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  181.047920][ T9345] netlink: 'syz.0.992': attribute type 3 has an invalid length.
[  181.065208][ T9345] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.183718][ T9352] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  181.214334][ T9303] delete_channel: no stack
[  182.276224][ T9387] netlink: 'syz.0.1008': attribute type 7 has an invalid length.
[  182.364066][ T9411] netlink: 'syz.2.1013': attribute type 7 has an invalid length.
[  182.475079][ T9415] __nla_validate_parse: 2 callbacks suppressed
[  182.475089][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'.
[  182.955966][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'.
[  183.006320][ T9447] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1022'.
[  183.681837][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.749424][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'.
[  184.689881][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.795126][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.893756][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.917872][ T9505] xt_HMARK: spi-set and port-set can't be combined
[  184.953748][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.989661][ T9513] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1043'.
[  184.994266][ T9513] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1043'.
[  185.090094][ T5875] bridge_slave_1: left allmulticast mode
[  185.094840][ T5875] bridge_slave_1: left promiscuous mode
[  185.098878][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.114430][ T5875] bridge_slave_0: left allmulticast mode
[  185.116495][ T5875] bridge_slave_0: left promiscuous mode
[  185.119992][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.297856][ T5875] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  185.403832][ T5875] bond0 (unregistering): (slave 1!): Releasing backup interface
[  185.410867][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.416563][ T5875] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  185.423632][ T5875] bond0 (unregistering): Released all slaves
[  185.437226][ T9526] sit0: entered promiscuous mode
[  185.439337][ T9526] sit0: entered allmulticast mode
[  185.442793][ T9525] sit0: left promiscuous mode
[  185.867451][ T5875] hsr_slave_0: left promiscuous mode
[  185.877575][ T5875] hsr_slave_1: left promiscuous mode
[  185.882546][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.890908][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.913778][ T5875] veth1_macvtap: left promiscuous mode
[  185.916081][ T5875] veth0_macvtap: left promiscuous mode
[  185.938333][ T5875] veth1_vlan: left promiscuous mode
[  185.957965][ T9564] validate_nla: 1 callbacks suppressed
[  185.957979][ T9564] netlink: 'syz.2.1055': attribute type 13 has an invalid length.
[  185.972215][ T9564] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1055'.
[  186.293531][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  186.328036][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  186.703870][ T9564] syz_tun: refused to change device tx_queue_len
[  186.740300][ T9579] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1058'.
[  186.921248][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'.
[  187.141510][ T9592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.198719][ T9598] TCP: TCP_TX_DELAY enabled
[  187.323924][ T9614] netlink: 'syz.3.1065': attribute type 29 has an invalid length.
[  187.327174][ T9614] netlink: 'syz.3.1065': attribute type 29 has an invalid length.
[  187.345093][ T9614] netlink: 'syz.3.1065': attribute type 29 has an invalid length.
[  187.357152][ T9614] netlink: 'syz.3.1065': attribute type 29 has an invalid length.
[  187.801287][ T5848] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  187.809634][ T9654] bridge0: port 4(ip6gretap0) entered blocking state
[  187.814168][ T9654] bridge0: port 4(ip6gretap0) entered disabled state
[  187.817331][ T9654] ip6gretap0: entered allmulticast mode
[  187.867148][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'.
[  187.896712][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'.
[  188.805500][ T9682] openvswitch: netlink: Message has 8 unknown bytes.
[  188.808514][ T9682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.955677][ T9698] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1080'.
[  188.997094][ T9703] syzkaller0: entered promiscuous mode
[  189.001257][ T9703] syzkaller0: entered allmulticast mode
[  189.197824][ T9703] lo speed is unknown, defaulting to 1000
[  189.206263][ T9716] netlink: 18316 bytes leftover after parsing attributes in process `syz.2.1083'.
[  189.214803][ T9713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1079'.
[  189.343755][ T9721] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  189.384847][ T9724] netlink: 'syz.2.1085': attribute type 1 has an invalid length.
[  189.789655][ T9752] netlink: 'syz.2.1093': attribute type 11 has an invalid length.
[  189.792677][ T9752] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1093'.
[  189.797122][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.830059][ T5848] Bluetooth: hci1: command tx timeout
[  190.274795][ T9758] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1096'.
[  190.336377][ T9760] nft_compat: unsupported protocol 0
[  191.090771][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  191.168233][ T9776] IPv6: ipvlan0: Disabled Multicast RS
[  191.386975][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1108'.
[  191.394338][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1108'.
[  191.520913][ T9806] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  191.963304][ T9821] netlink: 'syz.0.1116': attribute type 2 has an invalid length.
[  191.967812][ T9821] netlink: 'syz.0.1116': attribute type 9 has an invalid length.
[  192.401559][ T9833] netlink: 'syz.2.1119': attribute type 2 has an invalid length.
[  192.404884][ T9833] netlink: 'syz.2.1119': attribute type 9 has an invalid length.
[  192.646333][ T9816] netlink: 'syz.0.1116': attribute type 29 has an invalid length.
[  192.652343][ T9828] netlink: 'syz.2.1119': attribute type 29 has an invalid length.
[  192.671409][ T9830] netlink: 'syz.2.1119': attribute type 29 has an invalid length.
[  192.675655][ T9831] netlink: 'syz.2.1119': attribute type 29 has an invalid length.
[  192.682744][ T9832] netlink: 'syz.2.1119': attribute type 29 has an invalid length.
[  193.412438][ T9865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.074693][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.077140][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.096622][ T9880] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  194.175273][ T5848] Bluetooth: hci2: adv larger than maximum supported
[  194.245117][ T9892] netlink: 'syz.2.1137': attribute type 11 has an invalid length.
[  194.259828][ T9892] __nla_validate_parse: 6 callbacks suppressed
[  194.259841][ T9892] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1137'.
[  194.301383][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.503294][ T9897] netlink: del zone limit has 4 unknown bytes
[  194.537708][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1141'.
[  194.543343][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1141'.
[  194.550593][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1141'.
[  194.713592][ T5848] Bluetooth: hci1: ISO packet for unknown connection handle 255
[  195.142676][ T9924] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1145'.
[  195.463525][ T9940] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.470024][ T9940] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.296927][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1158'.
[  196.445608][ T9976] openvswitch: netlink: IP tunnel dst address not specified
[  196.594728][ T9981] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1163'.
[  196.599917][ T9981] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1163'.
[  196.726104][ T9988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1165'.
[  196.730799][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1165'.
[  196.844289][T10001] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  196.995886][T10012] netlink: 'syz.3.1172': attribute type 11 has an invalid length.
[  196.999571][T10012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.978932][T10097] xt_HMARK: spi-set and port-set can't be combined
[  198.981563][T10098] xt_HMARK: spi-set and port-set can't be combined
[  199.490360][T10131] lo speed is unknown, defaulting to 1000
[  199.632411][T10151] __nla_validate_parse: 2 callbacks suppressed
[  199.632421][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'.
[  199.645965][T10151] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1209'.
[  200.594403][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  200.599848][T10190] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1214'.
[  200.694175][T10192] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1215'.
[  200.781389][T10211] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1219'.
[  201.056616][T10235] ==================================================================
[  201.059279][T10235] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  201.061867][T10235] Read of size 1 at addr ffff88810da24c30 by task syz.2.1223/10235
[  201.065698][T10235] 
[  201.066511][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.2.1223 Not tainted syzkaller #0 PREEMPT(full) 
[  201.066521][T10235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.066525][T10235] Call Trace:
[  201.066530][T10235]  <TASK>
[  201.066534][T10235]  dump_stack_lvl+0x189/0x250
[  201.066546][T10235]  ? __virt_addr_valid+0x1c8/0x5c0
[  201.066558][T10235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.066565][T10235]  ? __virt_addr_valid+0x1c8/0x5c0
[  201.066574][T10235]  ? lock_release+0x4b/0x3e0
[  201.066586][T10235]  ? __virt_addr_valid+0x4a5/0x5c0
[  201.066596][T10235]  print_report+0xca/0x240
[  201.066603][T10235]  ? xfrm_state_find+0x2cf2/0x5400
[  201.066609][T10235]  kasan_report+0x118/0x150
[  201.066619][T10235]  ? xfrm_state_find+0x2cf2/0x5400
[  201.066627][T10235]  xfrm_state_find+0x2cf2/0x5400
[  201.066633][T10235]  ? trace_call_bpf+0xb7/0x850
[  201.066642][T10235]  ? validate_chain+0x897/0x2140
[  201.066652][T10235]  ? xfrm_state_find+0x1da/0x5400
[  201.066660][T10235]  ? __pfx_xfrm_state_find+0x10/0x10
[  201.066666][T10235]  ? perf_trace_lock+0xec/0x3b0
[  201.066674][T10235]  ? __pfx_perf_trace_lock+0x10/0x10
[  201.066683][T10235]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  201.066698][T10235]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  201.066706][T10235]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  201.066715][T10235]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  201.066723][T10235]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  201.066732][T10235]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  201.066748][T10235]  ? xfrm_expand_policies+0x41f/0x6a0
[  201.066757][T10235]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  201.066766][T10235]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  201.066775][T10235]  ? __asan_memset+0x22/0x50
[  201.066783][T10235]  xfrm_lookup_route+0x3c/0x1c0
[  201.066792][T10235]  ip_tunnel_xmit+0x96b/0x2390
[  201.066801][T10235]  ? ip_tunnel_xmit+0xb0/0x2390
[  201.066812][T10235]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  201.066818][T10235]  ? gre_build_header+0x31c/0xa40
[  201.066827][T10235]  ? __pfx_gre_build_header+0x10/0x10
[  201.066833][T10235]  ? skb_network_protocol+0x508/0x760
[  201.066840][T10235]  ? iptunnel_handle_offloads+0x2fd/0x630
[  201.066851][T10235]  ipgre_xmit+0x89e/0xc50
[  201.066860][T10235]  ? __pfx_ipgre_xmit+0x10/0x10
[  201.066869][T10235]  dev_hard_start_xmit+0x2d7/0x830
[  201.066880][T10235]  __dev_queue_xmit+0x1b8d/0x3b50
[  201.066887][T10235]  ? do_syscall_64+0xfa/0x3b0
[  201.066896][T10235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.066905][T10235]  ? __dev_queue_xmit+0x27b/0x3b50
[  201.066916][T10235]  ? __pfx___dev_queue_xmit+0x10/0x10
[  201.066925][T10235]  ? rcu_is_watching+0x15/0xb0
[  201.066933][T10235]  ? skb_release_data+0x2b6/0x7c0
[  201.066942][T10235]  ? pskb_expand_head+0xb00/0x1150
[  201.066950][T10235]  ? __bpf_redirect+0x56d/0xe40
[  201.066959][T10235]  __bpf_tx_skb+0x18e/0x260
[  201.066992][T10235]  bpf_clone_redirect+0x272/0x3d0
[  201.067004][T10235]  ? bpf_test_run+0x197/0x7b0
[  201.067014][T10235]  bpf_prog_81ed5507648eb997+0x5f/0x68
[  201.067023][T10235]  ? ktime_get+0x3e/0x1f0
[  201.067033][T10235]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  201.067041][T10235]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.067051][T10235]  ? ktime_get+0x3e/0x1f0
[  201.067058][T10235]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  201.067065][T10235]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  201.067076][T10235]  ? __local_bh_disable_ip+0xf1/0x190
[  201.067083][T10235]  ? __pfx___cant_migrate+0x10/0x10
[  201.067090][T10235]  ? ktime_get+0x1cb/0x1f0
[  201.067099][T10235]  bpf_test_run+0x318/0x7b0
[  201.067113][T10235]  ? __pfx_bpf_test_run+0x10/0x10
[  201.067130][T10235]  ? slab_build_skb+0x273/0x3e0
[  201.067147][T10235]  ? convert___skb_to_skb+0x3d/0x590
[  201.067157][T10235]  bpf_prog_test_run_skb+0xb30/0x1560
[  201.067171][T10235]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  201.067181][T10235]  bpf_prog_test_run+0x2c7/0x340
[  201.067193][T10235]  __sys_bpf+0x581/0x870
[  201.067202][T10235]  ? __pfx___sys_bpf+0x10/0x10
[  201.067215][T10235]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  201.067226][T10235]  ? rcu_is_watching+0x15/0xb0
[  201.067235][T10235]  __x64_sys_bpf+0x7c/0x90
[  201.067244][T10235]  do_syscall_64+0xfa/0x3b0
[  201.067254][T10235]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.067262][T10235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.067268][T10235]  ? exc_page_fault+0x9f/0xf0
[  201.067277][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.067284][T10235] RIP: 0033:0x7f61de98ebe9
[  201.067291][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.067297][T10235] RSP: 002b:00007f61df8ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  201.067306][T10235] RAX: ffffffffffffffda RBX: 00007f61debc6090 RCX: 00007f61de98ebe9
[  201.067311][T10235] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  201.067315][T10235] RBP: 00007f61dea11e19 R08: 0000000000000000 R09: 0000000000000000
[  201.067319][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.067323][T10235] R13: 00007f61debc6128 R14: 00007f61debc6090 R15: 00007fff47e0b8e8
[  201.067332][T10235]  </TASK>
[  201.067334][T10235] 
[  201.071415][T10221] -1: renamed from syzkaller0
[  201.073589][T10235] Allocated by task 6720:
[  201.073596][T10235]  kasan_save_track+0x3e/0x80
[  201.073608][T10235]  __kasan_slab_alloc+0x6c/0x80
[  201.073618][T10235]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  201.073627][T10235]  xfrm_state_alloc+0x24/0x2f0
[  201.073637][T10235]  __find_acq_core+0x8a7/0x1c00
[  201.073644][T10235]  xfrm_find_acq+0x78/0xa0
[  201.073650][T10235]  xfrm_alloc_userspi+0x6b3/0xc90
[  201.073658][T10235]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.073666][T10235]  netlink_rcv_skb+0x208/0x470
[  201.073675][T10235]  xfrm_netlink_rcv+0x79/0x90
[  201.073681][T10235]  netlink_unicast+0x82f/0x9e0
[  201.073689][T10235]  netlink_sendmsg+0x805/0xb30
[  201.073697][T10235]  __sock_sendmsg+0x21c/0x270
[  201.073705][T10235]  ____sys_sendmsg+0x505/0x830
[  201.268786][T10235]  ___sys_sendmsg+0x21f/0x2a0
[  201.270334][T10235]  __x64_sys_sendmsg+0x19b/0x260
[  201.271990][T10235]  do_syscall_64+0xfa/0x3b0
[  201.273492][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.275418][T10235] 
[  201.276198][T10235] Freed by task 47:
[  201.277506][T10235]  kasan_save_track+0x3e/0x80
[  201.279131][T10235]  kasan_save_free_info+0x46/0x50
[  201.280782][T10235]  __kasan_slab_free+0x5b/0x80
[  201.282404][T10235]  kmem_cache_free+0x18f/0x400
[  201.283932][T10235]  xfrm_state_gc_task+0x52d/0x6b0
[  201.285954][T10235]  process_scheduled_works+0xae1/0x17b0
[  201.287833][T10235]  worker_thread+0x8a0/0xda0
[  201.289323][T10235]  kthread+0x711/0x8a0
[  201.290637][T10235]  ret_from_fork+0x3fc/0x770
[  201.292142][T10235]  ret_from_fork_asm+0x1a/0x30
[  201.293702][T10235] 
[  201.294472][T10235] The buggy address belongs to the object at ffff88810da24900
[  201.294472][T10235]  which belongs to the cache xfrm_state of size 928
[  201.298768][T10235] The buggy address is located 816 bytes inside of
[  201.298768][T10235]  freed 928-byte region [ffff88810da24900, ffff88810da24ca0)
[  201.303253][T10235] 
[  201.304054][T10235] The buggy address belongs to the physical page:
[  201.306202][T10235] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810da26d00 pfn:0x10da24
[  201.309896][T10235] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  201.312591][T10235] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  201.315024][T10235] page_type: f5(slab)
[  201.316350][T10235] raw: 057ff00000000040 ffff88801abe6780 dead000000000122 0000000000000000
[  201.319172][T10235] raw: ffff88810da26d00 00000000800e000b 00000000f5000000 0000000000000000
[  201.321895][T10235] head: 057ff00000000040 ffff88801abe6780 dead000000000122 0000000000000000
[  201.324800][T10235] head: ffff88810da26d00 00000000800e000b 00000000f5000000 0000000000000000
[  201.327628][T10235] head: 057ff00000000002 ffffea0004368901 00000000ffffffff 00000000ffffffff
[  201.330384][T10235] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  201.333438][T10235] page dumped because: kasan: bad access detected
[  201.335512][T10235] page_owner tracks the page as allocated
[  201.337359][T10235] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6024, tgid 6023 (syz.0.31), ts 67134292494, free_ts 66231707308
[  201.343567][T10235]  post_alloc_hook+0x240/0x2a0
[  201.345140][T10235]  get_page_from_freelist+0x21e4/0x22c0
[  201.346914][T10235]  __alloc_frozen_pages_noprof+0x181/0x370
[  201.348912][T10235]  alloc_pages_mpol+0x232/0x4a0
[  201.350550][T10235]  allocate_slab+0x8a/0x370
[  201.352394][T10235]  ___slab_alloc+0xbeb/0x1410
[  201.354356][T10235]  kmem_cache_alloc_noprof+0x283/0x3c0
[  201.356576][T10235]  xfrm_state_alloc+0x24/0x2f0
[  201.358569][T10235]  pfkey_add+0x6e4/0x2e00
[  201.360256][T10235]  pfkey_sendmsg+0xbfe/0x1090
[  201.361820][T10235]  __sock_sendmsg+0x21c/0x270
[  201.363372][T10235]  ____sys_sendmsg+0x505/0x830
[  201.365213][T10235]  ___sys_sendmsg+0x21f/0x2a0
[  201.367127][T10235]  __x64_sys_sendmsg+0x19b/0x260
[  201.369101][T10235]  do_syscall_64+0xfa/0x3b0
[  201.371018][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.373547][T10235] page last free pid 5996 tgid 5989 stack trace:
[  201.376024][T10235]  __free_frozen_pages+0xbc4/0xd30
[  201.377662][T10235]  __slab_free+0x303/0x3c0
[  201.379444][T10235]  qlist_free_all+0x97/0x140
[  201.381133][T10235]  kasan_quarantine_reduce+0x148/0x160
[  201.383182][T10235]  __kasan_slab_alloc+0x22/0x80
[  201.384788][T10235]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  201.386536][T10235]  taskstats_exit+0x14a/0xa30
[  201.388460][T10235]  do_exit+0x630/0x2300
[  201.389792][T10235]  do_group_exit+0x21c/0x2d0
[  201.391309][T10235]  get_signal+0x1286/0x1340
[  201.392722][T10235]  arch_do_signal_or_restart+0x9a/0x750
[  201.394496][T10235]  exit_to_user_mode_loop+0x75/0x110
[  201.396177][T10235]  do_syscall_64+0x2bd/0x3b0
[  201.397647][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.399533][T10235] 
[  201.400314][T10235] Memory state around the buggy address:
[  201.402505][T10235]  ffff88810da24b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.405122][T10235]  ffff88810da24b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.407665][T10235] >ffff88810da24c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.410189][T10235]                                      ^
[  201.412117][T10235]  ffff88810da24c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  201.414837][T10235]  ffff88810da24d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  201.417454][T10235] ==================================================================
[  201.420561][T10235] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  201.423182][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.2.1223 Not tainted syzkaller #0 PREEMPT(full) 
[  201.427004][T10235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.431063][T10235] Call Trace:
[  201.432472][T10235]  <TASK>
[  201.433719][T10235]  dump_stack_lvl+0x99/0x250
[  201.435651][T10235]  ? __asan_memcpy+0x40/0x70
[  201.437620][T10235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.439744][T10235]  ? __pfx__printk+0x10/0x10
[  201.441619][T10235]  vpanic+0x281/0x750
[  201.443250][T10235]  ? __pfx_vpanic+0x10/0x10
[  201.445103][T10235]  ? irqentry_exit+0x74/0x90
[  201.446992][T10235]  panic+0xb9/0xc0
[  201.448537][T10235]  ? __pfx_panic+0x10/0x10
[  201.450396][T10235]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  201.452906][T10235]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.455344][T10235]  ? xfrm_state_find+0x2cf2/0x5400
[  201.457461][T10235]  check_panic_on_warn+0x89/0xb0
[  201.459481][T10235]  ? xfrm_state_find+0x2cf2/0x5400
[  201.461567][T10235]  end_report+0x78/0x160
[  201.463323][T10235]  kasan_report+0x129/0x150
[  201.465193][T10235]  ? xfrm_state_find+0x2cf2/0x5400
[  201.467265][T10235]  xfrm_state_find+0x2cf2/0x5400
[  201.469255][T10235]  ? trace_call_bpf+0xb7/0x850
[  201.471162][T10235]  ? validate_chain+0x897/0x2140
[  201.473146][T10235]  ? xfrm_state_find+0x1da/0x5400
[  201.475157][T10235]  ? __pfx_xfrm_state_find+0x10/0x10
[  201.477331][T10235]  ? perf_trace_lock+0xec/0x3b0
[  201.479278][T10235]  ? __pfx_perf_trace_lock+0x10/0x10
[  201.481435][T10235]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  201.483863][T10235]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  201.486275][T10235]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  201.488666][T10235]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  201.491433][T10235]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  201.494073][T10235]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  201.496693][T10235]  ? xfrm_expand_policies+0x41f/0x6a0
[  201.498895][T10235]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  201.501046][T10235]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  201.503368][T10235]  ? __asan_memset+0x22/0x50
[  201.505227][T10235]  xfrm_lookup_route+0x3c/0x1c0
[  201.507176][T10235]  ip_tunnel_xmit+0x96b/0x2390
[  201.509136][T10235]  ? ip_tunnel_xmit+0xb0/0x2390
[  201.511113][T10235]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  201.513177][T10235]  ? gre_build_header+0x31c/0xa40
[  201.515183][T10235]  ? __pfx_gre_build_header+0x10/0x10
[  201.517378][T10235]  ? skb_network_protocol+0x508/0x760
[  201.519589][T10235]  ? iptunnel_handle_offloads+0x2fd/0x630
[  201.521910][T10235]  ipgre_xmit+0x89e/0xc50
[  201.523709][T10235]  ? __pfx_ipgre_xmit+0x10/0x10
[  201.525687][T10235]  dev_hard_start_xmit+0x2d7/0x830
[  201.527759][T10235]  __dev_queue_xmit+0x1b8d/0x3b50
[  201.529790][T10235]  ? do_syscall_64+0xfa/0x3b0
[  201.531691][T10235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.534159][T10235]  ? __dev_queue_xmit+0x27b/0x3b50
[  201.536230][T10235]  ? __pfx___dev_queue_xmit+0x10/0x10
[  201.538378][T10235]  ? rcu_is_watching+0x15/0xb0
[  201.540423][T10235]  ? skb_release_data+0x2b6/0x7c0
[  201.542437][T10235]  ? pskb_expand_head+0xb00/0x1150
[  201.544592][T10235]  ? __bpf_redirect+0x56d/0xe40
[  201.546564][T10235]  __bpf_tx_skb+0x18e/0x260
[  201.548467][T10235]  bpf_clone_redirect+0x272/0x3d0
[  201.550487][T10235]  ? bpf_test_run+0x197/0x7b0
[  201.552391][T10235]  bpf_prog_81ed5507648eb997+0x5f/0x68
[  201.554707][T10235]  ? ktime_get+0x3e/0x1f0
[  201.556523][T10235]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  201.559087][T10235]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.561207][T10235]  ? ktime_get+0x3e/0x1f0
[  201.562937][T10235]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  201.565440][T10235]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  201.568094][T10235]  ? __local_bh_disable_ip+0xf1/0x190
[  201.570192][T10235]  ? __pfx___cant_migrate+0x10/0x10
[  201.572281][T10235]  ? ktime_get+0x1cb/0x1f0
[  201.574045][T10235]  bpf_test_run+0x318/0x7b0
[  201.575898][T10235]  ? __pfx_bpf_test_run+0x10/0x10
[  201.577955][T10235]  ? slab_build_skb+0x273/0x3e0
[  201.579991][T10235]  ? convert___skb_to_skb+0x3d/0x590
[  201.582138][T10235]  bpf_prog_test_run_skb+0xb30/0x1560
[  201.584278][T10235]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  201.586622][T10235]  bpf_prog_test_run+0x2c7/0x340
[  201.588621][T10235]  __sys_bpf+0x581/0x870
[  201.590373][T10235]  ? __pfx___sys_bpf+0x10/0x10
[  201.592348][T10235]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  201.594989][T10235]  ? rcu_is_watching+0x15/0xb0
[  201.596895][T10235]  __x64_sys_bpf+0x7c/0x90
[  201.598742][T10235]  do_syscall_64+0xfa/0x3b0
[  201.600606][T10235]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.602652][T10235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.605199][T10235]  ? exc_page_fault+0x9f/0xf0
[  201.607116][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.609528][T10235] RIP: 0033:0x7f61de98ebe9
[  201.611353][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.619246][T10235] RSP: 002b:00007f61df8ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  201.622590][T10235] RAX: ffffffffffffffda RBX: 00007f61debc6090 RCX: 00007f61de98ebe9
[  201.625754][T10235] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  201.628957][T10235] RBP: 00007f61dea11e19 R08: 0000000000000000 R09: 0000000000000000
[  201.632158][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.635311][T10235] R13: 00007f61debc6128 R14: 00007f61debc6090 R15: 00007fff47e0b8e8
[  201.638578][T10235]  </TASK>
[  201.640586][T10235] Kernel Offset: disabled
[  201.642324][T10235] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:45:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000003 RCX=0000000000000007 RDX=0000000000080000
RSI=0000000000000000 RDI=ffff888109f49cc0 RBP=0000000000000007 RSP=ffffc900028df450
R8 =0000000000000000 R9 =ffffffff81cb03c7 R10=ffffe8ff14661674 R11=fffff91fe28cc2d0
R12=0000000000020000 R13=0000000000000000 R14=ffff888109f4a7d8 R15=ffff888109f4a7b0
RIP=ffffffff819d62fc RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3c5986c6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd01eb4108 CR3=0000000027ef0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ffffffff 0000000100000000 XMM01=3030303030303030 3030303030303030
XMM02=0000000000000000 ffffffffffff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ff000000ff000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000122c RDI=000000000000122d RBP=00000000000003f8 RSP=ffffc900025ae1f0
R8 =ffff888108bb8237 R9 =1ffff11021177046 R10=dffffc0000000000 R11=ffffffff854f0870
R12=dffffc0000000000 R13=ffffffff99af9902 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f08ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61df8ab6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005619ca72c950 CR3=000000003a1e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f61deb97498 00007f61deb97470 XMM03=00007f61deb974a8 00007f61deb974a0
XMM04=00007f61df6fd100 00007f61deb97460 XMM05=00007f61deb97478 00007f61deb974c0
XMM06=00007f61deb974b8 00007f61deb974b0 XMM07=00007f61deb974a8 00007f61deb974a0
XMM08=0000000000000000 00007f61dea12ee7 XMM09=0000000000000000 00007f61dea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
