last executing test programs:

43.324471972s ago: executing program 0 (id=83):
r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18ed175560c37d4001b7c48801")
r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x4008240b, &(0x7f00000013c0))
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x3, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=[0x19, 0x7, 0x0, 0xc, 0x10001, 0xfffffffffffffffd, 0x1d0a, 0x5, 0x9, 0x6], &(0x7f00000000c0)=[0x3, 0x5, 0x100000001], 0x7fff, 0xa, 0x1, r0}}, 0x40)
socketpair(0xb, 0x80000, 0x0, &(0x7f0000000180))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18100000fbffffff0000000000000000ca5ccb4236000041850000001100000095"], &(0x7f0000000380)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x90}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000480)="4fba4a502bdf9b649f1943816c12", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
r6 = socket$kcm(0x23, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg(r8, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x350cf8d7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r11}, 0x10)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))

42.885746124s ago: executing program 0 (id=84):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
close(0x3)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000000240)=""/169, 0xa9}], 0x5, &(0x7f0000000400)=""/190, 0xbe}, 0x40)

42.702039325s ago: executing program 0 (id=88):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x5)
write$cgroup_subtree(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000240))
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000380)={0x0, 0x41, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0xc052, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$key(0xf, 0x3, 0x2)

42.516018022s ago: executing program 0 (id=90):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40400c0)
socketpair(0x1d, 0x800, 0xb, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x22, 0x2, 0x21)
r9 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044944, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r10 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000008"], 0x18}, 0x41)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB], 0x50)

41.285910566s ago: executing program 0 (id=96):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x37, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb1, '\x00', r2, r3, 0x2, 0x1, 0x3}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000010a0108000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008801)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]})
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0)

41.184942221s ago: executing program 0 (id=98):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000003ac0)=""/4110, 0x100e}, {&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/283, 0x11b}], 0x8}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00  \x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x54, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x104}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc001}, 0x24000010)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1411, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000)
write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33)
syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40))

26.133546327s ago: executing program 32 (id=98):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000003ac0)=""/4110, 0x100e}, {&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/283, 0x11b}], 0x8}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00  \x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x54, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x104}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc001}, 0x24000010)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1411, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000)
write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33)
syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40))

25.27572219s ago: executing program 3 (id=202):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)

24.920240755s ago: executing program 33 (id=202):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)

21.67504864s ago: executing program 4 (id=231):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d00", 0x6}], 0x1}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES16=r0], 0x4394)
perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x3) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1e, 0x6, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(0x3) (async)
recvmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x2140) (async, rerun: 32)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100000, 0x200000000, 0x0, 0x8, 0x3fe, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
socketpair(0x28, 0x1, 0x28, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc0200"/12, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff000000000000000000000000c4000500ffffffff000000000000000000000000000004d53c0000000a00000000000000000000000000000000000001053500000200ac00030000000100000009000000e0000001000000000000000000000000000004d43c0000000a00000000000000000000000000ffffe00000020435000002020600000000000100000000000000ffffffff000000000000000000000000000004d26c000000"], 0x1ec}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
recvmsg$can_raw(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1}, 0x10140) (async, rerun: 32)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffa0) (async)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'veth1_to_batadv\x00', @local}) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e0000000000cc011100fc010000000000000000000000000000ac1414aa0000000000000000000000000a010100000000d6e9550024bb3ebcda0c630000000000000000000000000001ff030000063500000a00020000000000000000000000000000000000000000000000000000000000000000000000ffffac1414aaac1e00010000000000000000000000003c040000ff34000002000a0000000000000000000000000000000000fe800000000000000000000000000020fe8000000000000000000000000000aa64010102000000000000000000000000330100000735000002000200"/247], 0x21c}}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f0000000840)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) (async)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0xd, 0x0, 0x0)

21.674272677s ago: executing program 4 (id=232):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)

21.395242162s ago: executing program 4 (id=233):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa080, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0)

21.064827125s ago: executing program 4 (id=235):
socket$kcm(0x2, 0x922000000001, 0x106) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) (rerun: 64)
socket$kcm(0xa, 0x3, 0x3a) (async)
perf_event_open(&(0x7f0000000580)={0xf52efabdf0fc84ff, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4000004d33, 0x884c8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xb, 0xffffffffffffffff, 0xa) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0xc0) (async, rerun: 32)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000081401"], 0x20}}, 0xc800) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)="140000003600fb50e35d3c4a0ed8985b0c088c00", 0x14}], 0x1}, 0x84) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb81371416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14e3ffff520401000000000000000500000a14000000f803010000000000000000000000000a0000"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
r10 = socket$kcm(0x2, 0x1, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r11=>0xffffffffffffffff})
recvmsg$unix(r11, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, r7}, 0x94)

20.825706726s ago: executing program 4 (id=238):
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000005000000000000020400000005000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001bca3acfa0f98d2040772d3464f2c0a627def68915d03bd171cb2bd237f1fedb3a5936a043ab843922f104a0a29905efc3bcae907865ecec2d89216586e2a3557b4bc3538a242c9fd3053e4db27defeb1d615e3ab2f7d6690392e8cc72e6972107470600000085a7e40314609485df48181430b136", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{0x0}], 0x1}, 0x40)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x94}}, 0x8000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x44, 0x8, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

19.075771376s ago: executing program 4 (id=245):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000000001010400e0cc0e99000000001a00000200001018000180140001"], 0x38}, 0x1, 0xbb1414ac}, 0x0)
write$cgroup_subtree(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) (async, rerun: 64)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x6159, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x4000}, {0x8, 0x0, 0x10, 0x100000400000000}, {}, 0x0, 0x3506, 0xa, 0x0, 0xfe, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x144}}, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x7)

19.015906455s ago: executing program 34 (id=245):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000000001010400e0cc0e99000000001a00000200001018000180140001"], 0x38}, 0x1, 0xbb1414ac}, 0x0)
write$cgroup_subtree(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) (async, rerun: 64)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x6159, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x4000}, {0x8, 0x0, 0x10, 0x100000400000000}, {}, 0x0, 0x3506, 0xa, 0x0, 0xfe, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x144}}, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x7)

3.284919828s ago: executing program 5 (id=296):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40400c0)
socketpair(0x1d, 0x800, 0xb, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r4 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044944, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa06a6, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB], 0x50)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)

1.89145067s ago: executing program 2 (id=304):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="040000000000000000000000000000d8d8000000", @ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000041000b05d25a806c8c6394f90324fc6010000200", 0x18}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x94) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x8, 0x40001}, 0x8000, 0x0, 0xffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0xa) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'virt_wifi0\x00', 0x1000})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r6) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)

1.792680333s ago: executing program 5 (id=305):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002000000006c00000002000000640101010000000000000000000000000000000004000000000000000200000008000000ff01000000000000000000000000000100000000330000000000000000000000000000000000ffff0a0101010135000005000000000000000900000000000000"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xd6, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x21084, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x1801480, 0x0, 0x0, 0x0, 0x0, 0x0)

1.51522402s ago: executing program 1 (id=307):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000880)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), 0x0}, 0x20)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2d, 'cpuacct'}]}, 0xd)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r8, <r9=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r9}, &(0x7f0000000780)=0x40000000, 0x0, 0x2}, 0x20)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40010040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff})
r11 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r11, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r12 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)
ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21)
r13 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000140), 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020803"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)

1.512467747s ago: executing program 5 (id=308):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8, 0x98, 0x0, 0x4, 0x30f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r4, 0x0, 0x9}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0xf)
sendmsg$nl_crypto(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="e80000001200"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r7 = socket$kcm(0x10, 0x2, 0x10)
close(r7)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8, 0x98, 0x0, 0x4, 0x30f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r4, 0x0, 0x9}, 0x18) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async)
close(r6) (async)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async)
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0xf) (async)
sendmsg$nl_crypto(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="e80000001200"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
close(r7) (async)

1.401919438s ago: executing program 2 (id=309):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000000001010400040000000000000200bbd6bfa92f6191d1f900002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000001800068008000200ac1414000c0003"], 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}, 0x20000801)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000011c0)="6f380fcfdec1", 0x6}], 0x1}, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="bd24f4fffcffffff8592f5f5b503000023a71000f0ff55a49ab60cc9f608273bffffd76502009b5eb4c57f111aa8e4372770fd35a08d6421d777cf221bd835477a040b87b95b21aa87919f3a5649e656c006843328cdd057de3737c6942afaad332e531af5782082"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x4, 0x69743a02, 0x6}, 0x10, 0x3014d, 0xffffffffffffffff, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x2, 0x0, 0x2}, {0x2, 0x5, 0xa, 0x3}, {0x3, 0x4, 0xc, 0x2}, {0x3, 0x1, 0x5, 0x1}, {0x2, 0x5, 0xa}, {0x400, 0x4, 0x5, 0x1}, {0x1, 0x4, 0x9, 0x7}, {0x4, 0x1, 0xa, 0x1}], 0x10, 0x1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001"], 0x140}}, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8881)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x101004}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x14, 0x100, 0x70bd28, 0x25dfdbfd, {0x22, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "2ab6ef3ccc81ca2e169617006e04de32497152b3ffb2ed58ac2163b3fba14b853cdcca405e5b7eb1b19b63dbe587ebd08e4d9cb0c8716305ec794163ef5918c9f8233aa63309fbaff43ad7bbc45a998cf7ea1673f4009036f1b86925907b75e89c1f26cea6e1c4f5061ea472b557044b75af875bf040f3d71b2cb45dd1e608ffdbab6cd9c6b375db66802c12f39149cd83c6503d631bdba5dfa2866a1c6ee714398a1a7527"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "3ace95a360c35dac088f99725e8e03"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20044014}, 0x2000)

1.314125681s ago: executing program 2 (id=310):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x80, 0x0, 0x0, 0x400, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa)

1.201225474s ago: executing program 1 (id=311):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4100, 0x0, 0x0, 0x5, 0x1, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000000000000010000f8ffffff44000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000010000000000f5"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4100, 0x0, 0x0, 0x5, 0x1, 0x9}, 0x0, 0xfffffffffffffffc, r0, 0x0) (async)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000000000000010000f8ffffff44000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000010000000000f5"], 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) (async)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) (async)

1.200704061s ago: executing program 5 (id=312):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x3}, 0x2122) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d0081", 0x7}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0xfe33)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) (async)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000b0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x10) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r6}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r9 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000380), 0x12) (async, rerun: 32)
syz_clone(0x8100000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)

1.025365635s ago: executing program 5 (id=313):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x46fa, 0x4, 0x98, 0x4, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000002c0)=@base={0x4, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000), 0xfdef)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5988e46c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pI4   \x00'}, 0x20)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @ldst={0x3, 0x2, 0x0, 0x5, 0xa, 0xfffffffffffffffe, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1fa, 0x0, 0x0, 0x0, 0xb3}, @ldst={0x2, 0x1, 0x6, 0x3, 0x8, 0x6, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000840)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x8, 0xffff, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[r7, r9, r10, 0x1, r11, r12, r2], &(0x7f0000000b40)=[{0x1, 0x4, 0x10}, {0x1, 0x4, 0xe, 0x1}, {0x3, 0x5, 0x1, 0x4}, {0x0, 0x2, 0x0, 0x8}], 0x10, 0x7fff}, 0x94)
r13 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_type(r13, &(0x7f0000000100), 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x60ff, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@l2={0x1f, 0x4, @none, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="8074cb6f702d7f3f1bdfe0c71bcfd42d068985aeb81b30ed69d0b226ebda31a6539b604601", 0x25}, {&(0x7f0000000340)="08113ae70471ac8eacbe34ff193ff2b07f585df78e5aec42bb8767528f4854e97d98e7369dbd655a151eafe155b6bd12e363c3755400d089b0b1a30e5db36d77575ca0b5f45728d994558d1bdb630330dd827087e263f993ae54a69efce50159b11c77a6b439effdc017b6fa9e79400672474c30d233a41cf9dba5b2d08e4074c72b0072ba38b9a590a6789dc6efc70e7c85c1790486d1c65fad9e42d464b23155dc1e7677e2a4a39502e0656f496d2c3d6eae60e869c7e8ac181b59dcf4da", 0xbf}, {&(0x7f0000000400)="81f2a4837ce1c1a87614675d93", 0xd}], 0x3, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x276b1899}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xa8}, 0x40811)

903.525157ms ago: executing program 1 (id=314):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2222, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f6e9, 0x0, @perf_bp={0x0, 0x8}, 0x4889, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000007e87dd06000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000650901000000000066000000ffffff80180100002020692500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

674.652231ms ago: executing program 2 (id=315):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x7, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0xfffffbff, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0x5)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x7}, 0x12120, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

564.133203ms ago: executing program 1 (id=316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000120}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x9c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1a3894db40c0a2c3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0xe, 0x2, 0xc, 0x2, 0x0, 0x4, 0x20808, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x428, 0x0, 0x0, 0x2, 0x6, 0xb77, 0x7, 0x0, 0xe0, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4800}, 0x22044014)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], <r3=>0x0, 0xc9, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@newpolicy={0xdc, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {{@in=@multicast1, @in=@loopback, 0x4e21, 0x4, 0x4e20, 0x9, 0xa, 0x80, 0x40, 0x5e, r2, r4}, {0x2, 0x80000000, 0x1ff, 0x6, 0x0, 0x200, 0x96, 0x6}, {0x3, 0x8, 0x76de}, 0x800, 0x6e6bb8, 0x0, 0x1, 0x3, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @srcaddr={0x14, 0xd, @in=@local}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x85)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x800, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000a80)={'wg2\x00', @broadcast})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={<r6=>0xffffffffffffffff})
close(r6)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000e000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4043)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80)=r3, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0xb, 0xd9f0, 0x3ff, 0x2000, 0x1, 0xbe9, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x7}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x14, &(0x7f0000000c40)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000d00)='GPL\x00', 0x3, 0x14, &(0x7f0000000d40)=""/20, 0x41000, 0x12, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000dc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0x1, 0x3acee5a, 0x23a0}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f40)=[r8, r9, 0xffffffffffffffff], &(0x7f0000000f80)=[{0x5, 0x1, 0x1, 0xa}, {0x2, 0x3, 0x1, 0x7}], 0x10, 0x2440}, 0x94)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz0\x00', 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f00000010c0)='cgroup.freeze\x00', 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=r3, 0x4)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r13, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x9900080}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x4004804)
sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x30559dea06a824a2}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xa8, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x400c025)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r12, &(0x7f00000014c0)={&(0x7f00000013c0), 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x58, 0x140b, 0x4, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
sendmsg$NFNL_MSG_COMPAT_GET(r13, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x12, 0x1, 'cgroup.freeze\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x4800)
perf_event_open$cgroup(&(0x7f0000001640)={0x5, 0x80, 0x6, 0x0, 0x8, 0xb, 0x0, 0x4da, 0x40222, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0xfbe6, 0xbb}, 0x10002, 0x7, 0x8, 0x5, 0x191, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, r12, 0x2, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000017c0)={@cgroup=r12, 0x1e, 0x0, 0x8, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], <r14=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)={@ifindex=r2, r10, 0x2f, 0x3f8c38cd5dae3a2e, 0x0, @void, @void, @value, @void, r14}, 0x20)

315.159117ms ago: executing program 1 (id=317):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000100)}, 0x11efa, 0x8, 0x98, 0x0, 0x4, 0x30f7cb41, 0xffff, 0x0, 0x6, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e00010c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000280050001000000000008000740000000001c00188008"], 0x90}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="cbe127c5a33cbf70fb8344e571", 0xd}], 0x1}, 0x8000)
sendmsg$inet6(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="e5f1fddfe1757597", 0x8}], 0x1}, 0x20000044)
r5 = socket$kcm(0x10, 0x2, 0x10)
close(r5)

244.00006ms ago: executing program 2 (id=318):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='.{$@{/\'&.(\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40045}, 0x8800)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f0000000100)="28085b4e4f3b42c8f56bb8e52ee8b9cfaf9bb6c0f9be14484219d0292b96ffd45931a6921cbadc4e10304fbb32e1eb7f2c5b30d0949697e12370fa21e1b828f5a6b97b3cd70a7afe73f085f631bebb2c8d7bb7278eb4", &(0x7f0000000180)=""/68}, 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='.{$@{/\'&.(\x00') (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40045}, 0x8800) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%pI4   \x00'}, 0x20) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f0000000100)="28085b4e4f3b42c8f56bb8e52ee8b9cfaf9bb6c0f9be14484219d0292b96ffd45931a6921cbadc4e10304fbb32e1eb7f2c5b30d0949697e12370fa21e1b828f5a6b97b3cd70a7afe73f085f631bebb2c8d7bb7278eb4", &(0x7f0000000180)=""/68}, 0x20) (async)

111.685193ms ago: executing program 1 (id=319):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40010160)
recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, 0x0}, 0x2103)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7)
socket$kcm(0x10, 0x3, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x5, 0x80, 0x41, 0x5, 0x6, 0xc, 0x0, 0x9da, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd8, 0x0, @perf_bp={0x0, 0x1}, 0x5740, 0xfffffffffffff15a, 0x4, 0x9, 0xc159, 0x9, 0xa, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="d823b1713c000000110001002cab7000fedbdf25dd8000000000000000000000000000bb000004d308003c0014000d00e000000200"/64], 0x3c}}, 0x40)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000640), 0x4)
socketpair$unix(0x1, 0x4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)

111.058434ms ago: executing program 5 (id=320):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40400c0)
socketpair(0x1d, 0x800, 0xb, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80044944, &(0x7f0000000200))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0xffff0002}, 0x80, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB], 0x50)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)

0s ago: executing program 2 (id=321):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
syz_clone(0x11001700, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180d000000000000000000000000000071105b000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
syz_clone(0x11001700, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180d000000000000000000000000000071105b000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44547' (ED25519) to the list of known hosts.
syzkaller login: [   48.986499][ T5807] cgroup: Unknown subsys name 'net'
[   49.068983][ T5807] cgroup: Unknown subsys name 'cpuset'
[   49.074604][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.702105][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.124488][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.127878][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.130585][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.145540][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.148926][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.159051][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.169838][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.172834][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.177096][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.181112][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.212572][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.215562][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.219012][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.222558][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.225909][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.406031][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.432334][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   55.539477][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.543256][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.547019][ T5819] bridge_slave_0: entered allmulticast mode
[   55.551026][ T5819] bridge_slave_0: entered promiscuous mode
[   55.562421][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.565799][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.569009][ T5819] bridge_slave_1: entered allmulticast mode
[   55.572917][ T5819] bridge_slave_1: entered promiscuous mode
[   55.601618][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.631853][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.636049][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.638533][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.640968][ T5823] bridge_slave_0: entered allmulticast mode
[   55.643872][ T5823] bridge_slave_0: entered promiscuous mode
[   55.647674][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.650039][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.652694][ T5823] bridge_slave_1: entered allmulticast mode
[   55.655904][ T5823] bridge_slave_1: entered promiscuous mode
[   55.668331][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.725635][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.735302][ T5819] team0: Port device team_slave_0 added
[   55.743151][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.757239][ T5819] team0: Port device team_slave_1 added
[   55.819975][ T5823] team0: Port device team_slave_0 added
[   55.823472][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.827053][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.838048][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.842260][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.845669][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.848752][ T5827] bridge_slave_0: entered allmulticast mode
[   55.852724][ T5827] bridge_slave_0: entered promiscuous mode
[   55.858726][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.861742][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.865738][ T5827] bridge_slave_1: entered allmulticast mode
[   55.869660][ T5827] bridge_slave_1: entered promiscuous mode
[   55.877193][ T5823] team0: Port device team_slave_1 added
[   55.880433][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.883495][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.894893][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.947074][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.950092][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.961489][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.991883][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.995039][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.005994][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.019059][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.053700][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.062917][ T5819] hsr_slave_0: entered promiscuous mode
[   56.067399][ T5819] hsr_slave_1: entered promiscuous mode
[   56.101152][ T5823] hsr_slave_0: entered promiscuous mode
[   56.104397][ T5823] hsr_slave_1: entered promiscuous mode
[   56.107755][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   56.110252][ T5823] Cannot create hsr debugfs directory
[   56.141295][ T5827] team0: Port device team_slave_0 added
[   56.177550][ T5827] team0: Port device team_slave_1 added
[   56.265960][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.268837][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.280891][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.293954][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.297033][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.308472][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.433381][ T5827] hsr_slave_0: entered promiscuous mode
[   56.437178][ T5827] hsr_slave_1: entered promiscuous mode
[   56.440435][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   56.442884][ T5827] Cannot create hsr debugfs directory
[   56.550729][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.578592][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.589878][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.597453][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.661815][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.675973][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.698582][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.707622][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.763830][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.769455][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.773938][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.780709][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.857513][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.890292][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   56.910168][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.916359][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.919520][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.932234][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.946736][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.949488][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.969364][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.990948][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   57.002586][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.005042][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.028234][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.031319][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.038852][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.041919][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.058364][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.061549][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.198720][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.218591][ T5822] Bluetooth: hci1: command tx timeout
[   57.221056][ T5822] Bluetooth: hci0: command tx timeout
[   57.261658][ T5823] veth0_vlan: entered promiscuous mode
[   57.282774][ T5823] veth1_vlan: entered promiscuous mode
[   57.291812][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.295101][   T55] Bluetooth: hci2: command tx timeout
[   57.299715][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.337703][ T5823] veth0_macvtap: entered promiscuous mode
[   57.354355][ T5823] veth1_macvtap: entered promiscuous mode
[   57.366853][ T5819] veth0_vlan: entered promiscuous mode
[   57.378761][ T5827] veth0_vlan: entered promiscuous mode
[   57.390049][ T5819] veth1_vlan: entered promiscuous mode
[   57.404559][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.417011][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.421310][ T5827] veth1_vlan: entered promiscuous mode
[   57.439544][ T5690] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.443343][ T5690] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.457907][ T5690] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.472219][ T5690] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.492791][ T5819] veth0_macvtap: entered promiscuous mode
[   57.520432][ T5819] veth1_macvtap: entered promiscuous mode
[   57.527257][ T5827] veth0_macvtap: entered promiscuous mode
[   57.557570][ T5827] veth1_macvtap: entered promiscuous mode
[   57.566608][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.583640][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.588833][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.593891][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.602890][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.609162][ T5690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.625102][ T5690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.633316][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.637813][ T5690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.650076][ T5690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.653013][ T5690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.655137][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.659259][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.670399][ T5690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.673221][ T5690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.683498][ T5690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.731699][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.737563][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.740545][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.787516][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.790739][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.818247][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.821077][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.849295][ T5884] : renamed from vlan0 (while UP)
[   57.867232][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.870279][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.174718][    C0] hrtimer: interrupt took 36473 ns
[   58.431349][ T5912] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   58.772995][ T5923] delete_channel: no stack
[   58.775300][ T5923] delete_channel: no stack
[   59.164100][ T5927] netlink: 'syz.1.11': attribute type 2 has an invalid length.
[   59.166890][ T5927] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   59.169588][ T5927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11'.
[   59.299665][   T55] Bluetooth: hci0: command tx timeout
[   59.301592][   T55] Bluetooth: hci1: command tx timeout
[   59.339131][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.361679][ T5934] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   59.376175][ T5822] Bluetooth: hci2: command tx timeout
[   59.802093][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13'.
[   59.891261][ T5931] syzkaller0: entered promiscuous mode
[   59.893662][ T5931] syzkaller0: entered allmulticast mode
[   60.628394][ T5949] netlink: 'syz.1.15': attribute type 29 has an invalid length.
[   60.734051][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.907791][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.911802][ T5958] openvswitch: netlink: nsh attr 512 is out of range max 3
[   60.915595][ T5958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.382379][ T5822] Bluetooth: hci1: command tx timeout
[   61.384464][ T5822] Bluetooth: hci0: command tx timeout
[   61.455816][ T5822] Bluetooth: hci2: command tx timeout
[   63.455667][   T55] Bluetooth: hci1: command tx timeout
[   63.458071][ T5822] Bluetooth: hci0: command tx timeout
[   63.530900][  T971] cfg80211: failed to load regulatory.db
[   63.535254][ T5822] Bluetooth: hci2: command tx timeout
[   63.731824][ T5982] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.21'.
[   63.738953][ T5982] netlink: 'syz.2.21': attribute type 10 has an invalid length.
[   63.742320][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21'.
[   63.753446][ T5982] ipvlan1: entered promiscuous mode
[   63.760913][ T5982] ipvlan1: entered allmulticast mode
[   63.771919][ T5982] veth0_vlan: entered allmulticast mode
[   63.788051][ T5982] bridge0: port 3(ipvlan1) entered blocking state
[   63.791215][ T5982] bridge0: port 3(ipvlan1) entered disabled state
[   63.805271][ T5982] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   63.853255][ T5986] syzkaller0: entered promiscuous mode
[   63.855915][ T5986] syzkaller0: entered allmulticast mode
[   63.931836][ T5989] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.24'.
[   63.957682][ T5989] netlink: 'syz.2.24': attribute type 4 has an invalid length.
[   64.053634][ T5992] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.173153][ T5998] netlink: 'syz.0.26': attribute type 10 has an invalid length.
[   64.176186][ T5998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'.
[   64.179811][ T5998] ipvlan1: entered promiscuous mode
[   64.181614][ T5998] ipvlan1: entered allmulticast mode
[   64.183596][ T5998] veth0_vlan: entered allmulticast mode
[   64.211413][ T5998] bridge0: port 3(ipvlan1) entered blocking state
[   64.214271][ T5998] bridge0: port 3(ipvlan1) entered disabled state
[   64.278790][ T5998] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   64.338538][ T6014] netlink: 152 bytes leftover after parsing attributes in process `syz.0.30'.
[   64.348099][ T6014] tc_dump_action: action bad kind
[   64.500008][ T6025] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.32'.
[   64.520285][ T6025] netlink: 'syz.0.32': attribute type 4 has an invalid length.
[   64.759727][ T6031] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.33'.
[   65.143574][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'.
[   65.166699][ T6045] netlink: 10 bytes leftover after parsing attributes in process `syz.0.36'.
[   65.206425][ T6051] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37'.
[   65.401820][ T5270] udevd[5270]: worker [5820] terminated by signal 33 (Unknown signal 33)
[   65.416178][ T5270] udevd[5270]: worker [5820] failed while handling '/devices/virtual/block/loop0'
[   65.682024][ T6060] cgroup: fork rejected by pids controller in /syz2
[   65.727438][ T6036] delete_channel: no stack
[   66.421528][ T6138] tun0: tun_chr_ioctl cmd 1074025675
[   66.423688][ T6138] tun0: persist enabled
[   66.464306][ T6138] tun0: tun_chr_ioctl cmd 1074025675
[   66.470207][ T6138] tun0: persist disabled
[   67.771202][ T6179] netlink: 'syz.2.56': attribute type 10 has an invalid length.
[   67.811112][ T6176] netlink: 'syz.2.56': attribute type 29 has an invalid length.
[   67.823579][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.836162][ T6179] team0: Port device bond0 added
[   70.212837][ T6215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.63'.
[   70.214624][ T6217] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   70.230779][ T6217] netlink: 'syz.0.64': attribute type 2 has an invalid length.
[   70.249590][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'.
[   70.978437][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.980615][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.184557][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   71.202331][ T6251] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   71.206754][ T6251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.112103][ T6270] delete_channel: no stack
[   72.466161][ T6283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.76'.
[   72.609930][ T6297] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.79'.
[   72.626711][ T6297] netlink: 'syz.0.79': attribute type 4 has an invalid length.
[   72.911777][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'.
[   72.921276][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'.
[   72.927890][ T6309] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   72.929771][ T6309] netlink: 'syz.0.83': attribute type 10 has an invalid length.
[   73.381655][ T6317] netlink: 'syz.2.85': attribute type 29 has an invalid length.
[   73.398274][ T6317] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   74.846141][ T6335] delete_channel: no stack
[   74.947795][ T6364] cgroup: fork rejected by pids controller in /syz0
[   75.113893][ T6371] netlink: 'syz.1.97': attribute type 29 has an invalid length.
[   75.117975][ T6371] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[   75.125453][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.128628][ T6371] team0: Port device bond0 added
[   75.272461][ T6374] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.291729][ T6374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.400779][ T6378] netlink: 68 bytes leftover after parsing attributes in process `syz.1.100'.
[   75.497132][ T6384] netlink: 'syz.1.101': attribute type 29 has an invalid length.
[   75.504203][ T6384] netlink: 'syz.1.101': attribute type 10 has an invalid length.
[   75.589283][ T6384] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.627083][ T6387] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   75.982260][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   75.986677][ T6408] openvswitch: netlink: nsh attr 512 is out of range max 3
[   75.993663][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.009528][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[   76.012597][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'.
[   76.298782][ T6421] Zero length message leads to an empty skb
[   76.629513][ T6424] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET)
[   76.738480][ T6427] netlink: 'syz.2.111': attribute type 39 has an invalid length.
[   76.938715][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   76.942047][ T6441] openvswitch: netlink: nsh attr 512 is out of range max 3
[   76.945254][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.287214][ T6448] netlink: 'syz.1.117': attribute type 10 has an invalid length.
[   77.289974][ T6448] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.117'.
[   77.864155][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   78.126374][ T6473] netlink: 'syz.1.123': attribute type 21 has an invalid length.
[   78.205449][ T6479] netlink: 'syz.2.124': attribute type 13 has an invalid length.
[   78.256183][ T6480] netlink: 64 bytes leftover after parsing attributes in process `syz.1.125'.
[   78.863639][ T6488] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.126'.
[   79.434543][ T6491] netlink: 68 bytes leftover after parsing attributes in process `syz.1.127'.
[   79.660287][ T6504] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   79.976105][ T6515] netlink: 'syz.2.133': attribute type 29 has an invalid length.
[   80.037997][ T6515] netlink: 'syz.2.133': attribute type 10 has an invalid length.
[   80.246619][ T6528] netlink: 'syz.2.134': attribute type 29 has an invalid length.
[   80.311351][ T6530] nbd: illegal input index -488837
[   80.845537][ T6548] __nla_validate_parse: 2 callbacks suppressed
[   80.845546][ T6548] netlink: 1408 bytes leftover after parsing attributes in process `syz.1.139'.
[   80.851433][ T6548] netlink: 592 bytes leftover after parsing attributes in process `syz.1.139'.
[   82.532256][ T6594] validate_nla: 5 callbacks suppressed
[   82.532267][ T6594] netlink: 'syz.2.150': attribute type 2 has an invalid length.
[   83.237857][ T6615] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.155'.
[   83.698612][ T6633] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.160'.
[   83.702988][ T6633] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.160'.
[   83.763998][ T6636] netlink: 13183 bytes leftover after parsing attributes in process `syz.2.161'.
[   83.808576][ T6638] netlink: 'syz.1.162': attribute type 10 has an invalid length.
[   83.811981][ T6638] netlink: 152 bytes leftover after parsing attributes in process `syz.1.162'.
[   84.160837][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[   84.164673][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'.
[   84.202062][ T6643] netlink: 10 bytes leftover after parsing attributes in process `syz.1.164'.
[   84.449377][ T6656] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   84.452639][ T6656] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   84.456737][ T6656] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   84.888180][ T6666] unsupported nla_type 48840
[   85.025500][ T6689] xt_l2tp: v2 sid > 0xffff: 131072
[   85.212684][ T6671] cgroup: fork rejected by pids controller in /syz1
[   85.356717][ T6717] netlink: 'syz.1.171': attribute type 39 has an invalid length.
[   85.425291][ T6723] delete_channel: no stack
[   85.426855][ T6723] delete_channel: no stack
[   86.454949][ T6765] netlink: 'syz.2.182': attribute type 39 has an invalid length.
[   86.507837][ T6772] netlink: 'syz.1.184': attribute type 9 has an invalid length.
[   86.511031][ T6772] __nla_validate_parse: 3 callbacks suppressed
[   86.511039][ T6772] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.184'.
[   86.764556][ T6795] netlink: 'syz.1.188': attribute type 39 has an invalid length.
[   86.768366][ T6795] veth0_macvtap: left promiscuous mode
[   87.108358][ T6804] ksmbd: Unknown IPC event: 1, ignore.
[   87.179546][ T6804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.191'.
[   87.182619][ T6804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.191'.
[   88.053347][ T6811] netlink: 'syz.1.193': attribute type 21 has an invalid length.
[   88.059322][ T6811] netlink: 128 bytes leftover after parsing attributes in process `syz.1.193'.
[   88.065609][ T6811] netlink: 'syz.1.193': attribute type 5 has an invalid length.
[   88.069246][ T6811] netlink: 'syz.1.193': attribute type 6 has an invalid length.
[   88.072404][ T6811] netlink: 3 bytes leftover after parsing attributes in process `syz.1.193'.
[   88.245482][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'.
[   88.248690][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'.
[   88.990125][ T6835] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.199'.
[   89.013228][ T6835] netlink: 'syz.1.199': attribute type 4 has an invalid length.
[   90.259058][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.262043][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.265742][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.268901][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.273098][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.384221][ T6848] chnl_net:caif_netlink_parms(): no params data found
[   90.462511][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.465804][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.468234][ T6848] bridge_slave_0: entered allmulticast mode
[   90.471115][ T6848] bridge_slave_0: entered promiscuous mode
[   90.475590][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.478356][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.481215][ T6848] bridge_slave_1: entered allmulticast mode
[   90.485858][ T6848] bridge_slave_1: entered promiscuous mode
[   90.560290][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.569554][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.633872][ T6848] team0: Port device team_slave_0 added
[   90.646185][ T6848] team0: Port device team_slave_1 added
[   90.714634][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.719784][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.732049][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.741517][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.744001][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.753301][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.994089][ T5880] bridge_slave_1: left allmulticast mode
[   91.004352][ T5880] bridge_slave_1: left promiscuous mode
[   91.025808][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.056969][ T5880] bridge_slave_0: left allmulticast mode
[   91.059165][ T5880] bridge_slave_0: left promiscuous mode
[   91.061173][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.371343][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.379275][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.384045][ T5880] bond0 (unregistering): Released all slaves
[   91.467309][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.470500][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.504026][ T5880] team0 (unregistering): Port device team_slave_1 removed
[   91.518640][ T5880] team0 (unregistering): Port device team_slave_0 removed
[   92.138301][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.142341][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.149503][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.153214][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.157313][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.399927][ T6897] netlink: 161020 bytes leftover after parsing attributes in process `syz.2.211'.
[   92.444142][ T6900] netlink: 'syz.1.212': attribute type 29 has an invalid length.
[   92.448832][ T6900] netlink: 'syz.1.212': attribute type 10 has an invalid length.
[   92.461820][ T6890] chnl_net:caif_netlink_parms(): no params data found
[   92.585666][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.588144][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.590486][ T6890] bridge_slave_0: entered allmulticast mode
[   92.593146][ T6890] bridge_slave_0: entered promiscuous mode
[   92.603979][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.607866][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.609175][ T6909] netlink: 'syz.2.213': attribute type 9 has an invalid length.
[   92.610894][ T6890] bridge_slave_1: entered allmulticast mode
[   92.617894][ T6890] bridge_slave_1: entered promiscuous mode
[   92.640349][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.658688][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.679186][ T6890] team0: Port device team_slave_0 added
[   92.682887][ T6890] team0: Port device team_slave_1 added
[   92.712137][ T6914] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   92.714135][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'.
[   92.723178][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.726057][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.729278][ T6914] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.215'.
[   92.734325][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.735425][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.743525][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.754084][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.789307][ T6890] hsr_slave_0: entered promiscuous mode
[   92.791672][ T6890] hsr_slave_1: entered promiscuous mode
[   92.793866][ T6890] debugfs: 'hsr0' already exists in 'hsr'
[   92.798830][ T6890] Cannot create hsr debugfs directory
[   92.899125][ T6890] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.907106][ T6890] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.912413][ T6890] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.918359][ T6890] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.934991][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.938033][ T6890] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.941687][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.943999][ T6890] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.994456][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.017784][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.026807][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.042910][ T6890] 8021q: adding VLAN 0 to HW filter on device team0
[   93.065257][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.067718][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.075586][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.078003][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.118726][ T6890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.144427][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.219'.
[   93.155552][ T6933] netlink: 'syz.2.219': attribute type 11 has an invalid length.
[   93.250130][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.511279][ T6890] veth0_vlan: entered promiscuous mode
[   93.517122][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'.
[   93.520339][ T6956] openvswitch: netlink: nsh attr 512 is out of range max 3
[   93.520746][ T6890] veth1_vlan: entered promiscuous mode
[   93.523121][ T6956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.559060][ T6890] veth0_macvtap: entered promiscuous mode
[   93.563313][ T6890] veth1_macvtap: entered promiscuous mode
[   93.574378][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.591125][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.602057][ T5690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.607043][ T5690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.612379][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.616680][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.672481][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.681287][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.700560][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.703186][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.796594][ T6968] netlink: 'syz.2.225': attribute type 6 has an invalid length.
[   93.799340][ T6968] netlink: 'syz.2.225': attribute type 3 has an invalid length.
[   93.802107][ T6968] netlink: 199728 bytes leftover after parsing attributes in process `syz.2.225'.
[   94.175595][   T55] Bluetooth: hci3: command tx timeout
[   94.202709][ T6989] netlink: 'syz.1.228': attribute type 27 has an invalid length.
[   94.206968][ T6989] netlink: 164 bytes leftover after parsing attributes in process `syz.1.228'.
[   96.188231][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   96.191199][ T7040] openvswitch: netlink: nsh attr 512 is out of range max 3
[   96.194033][ T7040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.020495][ T5690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.178470][ T5690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.269897][ T5690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.359913][ T5690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.394443][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   97.397851][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   97.401340][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   97.410597][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.418214][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.686530][ T5690] bridge_slave_1: left allmulticast mode
[   97.688768][ T5690] bridge_slave_1: left promiscuous mode
[   97.690831][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.697150][ T5690] bridge_slave_0: left allmulticast mode
[   97.699072][ T5690] bridge_slave_0: left promiscuous mode
[   97.701135][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.814168][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'.
[   97.826136][ T7079] openvswitch: netlink: nsh attr 512 is out of range max 3
[   97.829067][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.011429][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.017684][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.021605][ T5690] bond0 (unregistering): Released all slaves
[   98.182970][ T7085] netlink: 'syz.1.252': attribute type 29 has an invalid length.
[   98.243592][ T7085] netlink: 'syz.1.252': attribute type 10 has an invalid length.
[   98.249705][ T7063] chnl_net:caif_netlink_parms(): no params data found
[   98.433769][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'.
[   99.458920][ T5822] Bluetooth: hci3: command tx timeout
[  100.243034][ T5690] hsr_slave_0: left promiscuous mode
[  100.257009][ T5690] hsr_slave_1: left promiscuous mode
[  100.264976][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.267708][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.370891][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.374110][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.469620][ T5690] veth1_macvtap: left promiscuous mode
[  100.472125][ T5690] veth0_macvtap: left promiscuous mode
[  100.477249][ T5690] veth1_vlan: left promiscuous mode
[  100.479656][ T5690] veth0_vlan: left promiscuous mode
[  101.614079][ T5822] Bluetooth: hci3: command tx timeout
[  103.707726][ T5822] Bluetooth: hci3: command tx timeout
[  105.793970][ T5822] Bluetooth: hci3: command tx timeout
[  106.442273][ T5690] team0 (unregistering): Port device team_slave_1 removed
[  106.675226][ T5690] team0 (unregistering): Port device team_slave_0 removed
[  107.576936][ T7098] netlink: 'syz.1.254': attribute type 33 has an invalid length.
[  107.579602][ T7098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'.
[  107.596757][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.600939][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.604074][ T7063] bridge_slave_0: entered allmulticast mode
[  107.608086][ T7063] bridge_slave_0: entered promiscuous mode
[  107.612698][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.620836][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.623912][ T7063] bridge_slave_1: entered allmulticast mode
[  107.644003][ T7063] bridge_slave_1: entered promiscuous mode
[  107.819658][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.832660][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.964636][ T7063] team0: Port device team_slave_0 added
[  108.001434][ T7063] team0: Port device team_slave_1 added
[  108.041127][ T7104] netlink: 68 bytes leftover after parsing attributes in process `syz.2.257'.
[  108.116129][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.118577][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.144798][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.160945][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.177802][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.209825][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.267415][ T7063] hsr_slave_0: entered promiscuous mode
[  108.270724][ T7063] hsr_slave_1: entered promiscuous mode
[  108.272983][ T7063] debugfs: 'hsr0' already exists in 'hsr'
[  108.275608][ T7063] Cannot create hsr debugfs directory
[  108.439051][ T7063] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  108.449259][ T7063] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  108.459287][ T7063] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  108.470946][ T7063] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  108.610461][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.679710][ T7063] 8021q: adding VLAN 0 to HW filter on device team0
[  108.700139][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.702838][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.721604][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.724753][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.743196][ T7063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.793437][ T7137] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  108.851349][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.860419][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[  108.902287][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'.
[  108.905978][ T7152] openvswitch: netlink: nsh attr 512 is out of range max 3
[  108.908647][ T7152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.010177][ T7063] veth0_vlan: entered promiscuous mode
[  109.030230][ T7063] veth1_vlan: entered promiscuous mode
[  109.118654][ T7063] veth0_macvtap: entered promiscuous mode
[  109.123526][ T7063] veth1_macvtap: entered promiscuous mode
[  109.136136][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.143357][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.153665][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.158496][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.161696][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.172913][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.228294][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.230977][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.253296][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.257941][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.823553][ T7195] netlink: 'syz.2.273': attribute type 16 has an invalid length.
[  110.827578][ T7195] netlink: 156 bytes leftover after parsing attributes in process `syz.2.273'.
[  110.860099][ T7195] openvswitch: netlink: IP tunnel dst address not specified
[  110.940384][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'.
[  110.948641][ T7197] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  110.955123][ T7197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.247189][ T7205] netlink: 'syz.2.277': attribute type 29 has an invalid length.
[  111.251120][ T7205] netlink: 'syz.2.277': attribute type 10 has an invalid length.
[  111.450105][ T7227] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[  111.930434][ T7338] netlink: 132 bytes leftover after parsing attributes in process `syz.5.286'.
[  112.288631][ T7352] netlink: 'syz.1.290': attribute type 29 has an invalid length.
[  112.321194][ T7352] netlink: 'syz.1.290': attribute type 10 has an invalid length.
[  112.673412][ T7364] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[  112.684807][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[  112.693218][ T7360] : renamed from hsr0 (while UP)
[  112.745558][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[  112.827871][ T7374] sit0: entered allmulticast mode
[  112.867894][ T7374] can: request_module (can-proto-0) failed.
[  113.186659][ T7388] netlink: 'syz.2.300': attribute type 7 has an invalid length.
[  113.189199][ T7388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.300'.
[  113.208561][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'.
[  113.224068][ T7388] : entered promiscuous mode
[  113.227556][ T7388] netlink: 56 bytes leftover after parsing attributes in process `syz.2.300'.
[  113.230730][ T7388] netlink: 56 bytes leftover after parsing attributes in process `syz.2.300'.
[  113.234133][ T7388] netlink: 56 bytes leftover after parsing attributes in process `syz.2.300'.
[  113.259099][ T7384] netlink: 348 bytes leftover after parsing attributes in process `syz.5.296'.
[  113.458463][ T7392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  113.507591][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[  113.511470][ T7394] openvswitch: netlink: nsh attr 512 is out of range max 3
[  113.514402][ T7394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.557785][ T7396] netlink: 68 bytes leftover after parsing attributes in process `syz.1.303'.
[  113.803741][ T7379] delete_channel: no stack
[  114.832721][ T7422] openvswitch: netlink: nsh attr 512 is out of range max 3
[  114.836622][ T7422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.129224][ T7432] netlink: 'syz.1.311': attribute type 10 has an invalid length.
[  115.143319][ T7432] netlink: 'syz.1.311': attribute type 19 has an invalid length.
[  115.689877][ T7455] netlink: 'syz.1.316': attribute type 2 has an invalid length.
[  115.697056][ T7455] netlink: 'syz.1.316': attribute type 2 has an invalid length.
[  115.703232][ T7455] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[  115.710809][ T7455] netlink: 'syz.1.316': attribute type 2 has an invalid length.
[  115.716705][ T7455] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[  115.725003][ T7455] netlink: 'syz.1.316': attribute type 2 has an invalid length.
[  221.324715][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  221.327958][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7443/1:b..l
[  221.332572][    C1] rcu: 	(detected by 1, t=10504 jiffies, g=15541, q=327 ncpus=2)
[  221.335907][    C1] task:syz.1.311       state:R  running task     stack:19784 pid:7443  tgid:7443  ppid:5819   task_flags:0x400640 flags:0x00080001
[  221.342569][    C1] Call Trace:
[  221.344122][    C1]  <TASK>
[  221.345418][    C1]  __schedule+0x1798/0x4cc0
[  221.347475][    C1]  ? trace_call_bpf+0xc7/0xb50
[  221.349606][    C1]  ? trace_call_bpf+0x7af/0xb50
[  221.351749][    C1]  ? trace_call_bpf+0xc7/0xb50
[  221.353866][    C1]  ? trace_call_bpf+0xc7/0xb50
[  221.355995][    C1]  ? __pfx___schedule+0x10/0x10
[  221.358126][    C1]  ? trace_call_bpf+0xc7/0xb50
[  221.360202][    C1]  ? trace_call_bpf+0x7af/0xb50
[  221.362431][    C1]  ? mt_find+0x15c/0x5f0
[  221.364237][    C1]  ? mt_find+0x15c/0x5f0
[  221.366012][    C1]  preempt_schedule_notrace+0xd1/0x110
[  221.368256][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  221.370855][    C1]  ? mt_find+0x15c/0x5f0
[  221.372686][    C1]  preempt_schedule_notrace_thunk+0x16/0x30
[  221.375169][    C1]  ? 0xffffffffa0000890
[  221.376944][    C1]  lock_release+0x3ca/0x3e0
[  221.378900][    C1]  mt_find+0x3f5/0x5f0
[  221.380701][    C1]  ? mt_find+0x15c/0x5f0
[  221.382552][    C1]  ? __pfx_mt_find+0x10/0x10
[  221.384688][    C1]  find_vma+0xe7/0x160
[  221.386498][    C1]  ? __pfx_find_vma+0x10/0x10
[  221.388583][    C1]  __get_user_pages+0x3c6/0x2ce0
[  221.390728][    C1]  ? perf_trace_run_bpf_submit+0x100/0x170
[  221.393357][    C1]  get_dump_page+0x1ac/0x3f0
[  221.395344][    C1]  ? cgroup_freezing+0x20/0x350
[  221.397352][    C1]  ? __pfx_get_dump_page+0x10/0x10
[  221.399437][    C1]  ? cgroup_freezing+0x29a/0x350
[  221.401480][    C1]  ? freezing_slow_path+0x107/0x150
[  221.403742][    C1]  dump_user_range+0x1de/0xc90
[  221.405913][    C1]  ? __pfx_dump_user_range+0x10/0x10
[  221.408177][    C1]  ? elf_coredump_extra_notes_write+0x127/0x4b0
[  221.410856][    C1]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  221.413686][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  221.415802][    C1]  ? dump_emit+0xa6/0xe0
[  221.417606][    C1]  ? elf_core_dump+0x2ccb/0x3960
[  221.419769][    C1]  elf_core_dump+0x3364/0x3960
[  221.421904][    C1]  ? __pfx_elf_core_dump+0x10/0x10
[  221.424122][    C1]  ? kasan_save_track+0x4f/0x80
[  221.426169][    C1]  ? kasan_save_track+0x3e/0x80
[  221.428195][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  221.430167][    C1]  ? __kvmalloc_node_noprof+0x30d/0x5f0
[  221.432417][    C1]  ? coredump_write+0x340/0x1900
[  221.434511][    C1]  ? vfs_coredump+0x1daa/0x2a50
[  221.436560][    C1]  ? get_signal+0x1108/0x1340
[  221.438596][    C1]  ? arch_do_signal_or_restart+0xa0/0x790
[  221.441047][    C1]  ? irqentry_exit_to_user_mode+0x7e/0x110
[  221.443526][    C1]  ? exc_page_fault+0x9f/0xf0
[  221.445567][    C1]  ? asm_exc_page_fault+0x26/0x30
[  221.447923][    C1]  ? 0xffffffffff600000
[  221.449725][    C1]  ? up_write+0x1c4/0x420
[  221.451605][    C1]  coredump_write+0x1169/0x1900
[  221.453835][    C1]  ? __pfx_coredump_write+0x10/0x10
[  221.456156][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  221.458419][    C1]  ? unshare_files+0xfd/0x140
[  221.460458][    C1]  vfs_coredump+0x1daa/0x2a50
[  221.462658][    C1]  ? __pfx_vfs_coredump+0x10/0x10
[  221.464868][    C1]  ? perf_trace_lock_acquire+0xf5/0x410
[  221.467390][    C1]  ? perf_trace_lock_acquire+0xf5/0x410
[  221.469846][    C1]  ? perf_trace_lock_acquire+0xf5/0x410
[  221.472248][    C1]  ? perf_trace_lock+0xec/0x3b0
[  221.474389][    C1]  ? __pfx_perf_trace_lock+0x10/0x10
[  221.476724][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  221.479009][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  221.481319][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  221.483594][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  221.485926][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  221.488222][    C1]  ? kernel_text_address+0xa5/0xe0
[  221.490485][    C1]  ? __kernel_text_address+0xd/0x40
[  221.492784][    C1]  ? unwind_get_return_address+0x4d/0x90
[  221.495242][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  221.497950][    C1]  ? arch_stack_walk+0xfc/0x150
[  221.500136][    C1]  ? stack_trace_save+0x9c/0xe0
[  221.502260][    C1]  ? stack_depot_save_flags+0x40/0x860
[  221.504690][    C1]  ? kasan_save_track+0x4f/0x80
[  221.506812][    C1]  ? kasan_save_track+0x3e/0x80
[  221.508875][    C1]  ? kasan_save_free_info+0x46/0x50
[  221.511144][    C1]  ? __kasan_slab_free+0x5b/0x80
[  221.513293][    C1]  ? kmem_cache_free+0x18f/0x400
[  221.515461][    C1]  ? get_signal+0xa4b/0x1340
[  221.517454][    C1]  ? arch_do_signal_or_restart+0xa0/0x790
[  221.519922][    C1]  ? irqentry_exit_to_user_mode+0x7e/0x110
[  221.522451][    C1]  ? exc_page_fault+0x9f/0xf0
[  221.524542][    C1]  ? asm_exc_page_fault+0x26/0x30
[  221.526907][    C1]  ? get_signal+0x103d/0x1340
[  221.528963][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  221.531215][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.533505][    C1]  get_signal+0x1108/0x1340
[  221.535576][    C1]  arch_do_signal_or_restart+0xa0/0x790
[  221.538006][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  221.540660][    C1]  ? __bad_area_nosemaphore+0x3fb/0x780
[  221.543160][    C1]  ? local_irq_enable_exit_to_user+0x5/0x10
[  221.545745][    C1]  irqentry_exit_to_user_mode+0x7e/0x110
[  221.548202][    C1]  exc_page_fault+0x9f/0xf0
[  221.550187][    C1]  asm_exc_page_fault+0x26/0x30
[  221.552323][    C1] RIP: 0033:0x7f77b3b8ec31
[  221.554296][    C1] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217
[  221.556983][    C1] RAX: 0000000000000000 RBX: 00007f77b3dd6090 RCX: 00007f77b3b8ec29
[  221.560403][    C1] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400
[  221.563855][    C1] RBP: 00007f77b3c11e41 R08: 0000000000000000 R09: 0000000000000000
[  221.567299][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  221.570747][    C1] R13: 00007f77b3dd6128 R14: 00007f77b3dd6090 R15: 00007ffe95887908
[  221.574204][    C1]  </TASK>
[  221.575603][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g15541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  221.580891][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=5595
[  221.584240][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g15541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  221.589011][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  221.593230][    C1] rcu: RCU grace-period kthread stack dump:
[  221.595791][    C1] task:rcu_preempt     state:I stack:27256 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  221.600810][    C1] Call Trace:
[  221.602287][    C1]  <TASK>
[  221.603622][    C1]  __schedule+0x1798/0x4cc0
[  221.605696][    C1]  ? perf_trace_lock+0x2f8/0x3b0
[  221.607601][    C1]  ? __pfx___schedule+0x10/0x10
[  221.609257][    C1]  ? schedule+0x91/0x360
[  221.610713][    C1]  ? schedule+0x91/0x360
[  221.612402][    C1]  schedule+0x165/0x360
[  221.614151][    C1]  schedule_timeout+0x12b/0x270
[  221.616129][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  221.618322][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  221.620779][    C1]  ? __pfx_process_timeout+0x10/0x10
[  221.623010][    C1]  ? prepare_to_swait_event+0x341/0x380
[  221.625327][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  221.627345][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.629466][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  221.631909][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  221.634096][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  221.636230][    C1]  ? finish_swait+0xcd/0x1f0
[  221.638106][    C1]  rcu_gp_kthread+0x99/0x390
[  221.640012][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  221.642103][    C1]  ? __kthread_parkme+0x7b/0x200
[  221.644148][    C1]  ? __kthread_parkme+0x1a1/0x200
[  221.646242][    C1]  kthread+0x711/0x8a0
[  221.647942][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  221.650038][    C1]  ? __pfx_kthread+0x10/0x10
[  221.651949][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  221.654075][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.656180][    C1]  ? __pfx_kthread+0x10/0x10
[  221.658061][    C1]  ret_from_fork+0x439/0x7d0
[  221.659967][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  221.662080][    C1]  ? __switch_to_asm+0x39/0x70
[  221.664058][    C1]  ? __switch_to_asm+0x33/0x70
[  221.666014][    C1]  ? __pfx_kthread+0x10/0x10
[  221.667932][    C1]  ret_from_fork_asm+0x1a/0x30
[  221.669954][    C1]  </TASK>
[  221.671239][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  221.673817][    C1] Sending NMI from CPU 1 to CPUs 0:
[  221.675983][    C0] NMI backtrace for cpu 0
[  221.675998][    C0] CPU: 0 UID: 0 PID: 7469 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) 
[  221.676010][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.676016][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x20/0x90
[  221.676031][    C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 d0 4a 92 65 8b 0d 98 56 8c 10 81 e1 00 01 ff 00 74 11 <81> f9 00 01 00 00 75 5b 83 ba 7c 16 00 00 00 74 52 8b 8a 58 16 00
[  221.676039][    C0] RSP: 0018:ffffc90000007598 EFLAGS: 00000006
[  221.676050][    C0] RAX: ffffffff81c9df41 RBX: 0000000000000001 RCX: 0000000000010000
[  221.676057][    C0] RDX: ffff888020b9ba00 RSI: 0000000000000001 RDI: 0000000000000001
[  221.676063][    C0] RBP: ffffc900000076b8 R08: ffffc9000000764f R09: 0000000000000000
[  221.676069][    C0] R10: ffffc90000007640 R11: ffffffffa0000890 R12: 0000000000000001
[  221.676075][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888020b9be80
[  221.676082][    C0] FS:  00007f77b4aa56c0(0000) GS:ffff8880b8d73000(0000) knlGS:0000000000000000
[  221.676090][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  221.676096][    C0] CR2: 00007f77b4a83fc8 CR3: 0000000020d98000 CR4: 00000000000006f0
[  221.676130][    C0] DR0: 0000200000000740 DR1: 0000000000000000 DR2: 0000000000000000
[  221.676137][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  221.676143][    C0] Call Trace:
[  221.676152][    C0]  <IRQ>
[  221.676156][    C0]  trace_call_bpf+0x5c1/0xb50
[  221.676195][    C0]  ? trace_call_bpf+0xc7/0xb50
[  221.676207][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  221.676222][    C0]  ? trace_call_bpf+0xc7/0xb50
[  221.676234][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  221.676254][    C0]  perf_trace_run_bpf_submit+0x78/0x170
[  221.676279][    C0]  perf_trace_lock+0x2f8/0x3b0
[  221.676305][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  221.676325][    C0]  ? do_raw_spin_lock+0x121/0x290
[  221.676338][    C0]  ? hrtimer_try_to_cancel+0x3be/0x420
[  221.676346][    C0]  ? hrtimer_try_to_cancel+0x3be/0x420
[  221.676354][    C0]  lock_release+0x3b2/0x3e0
[  221.676368][    C0]  _raw_spin_unlock_irqrestore+0x70/0x110
[  221.676380][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.676390][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  221.676400][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.676414][    C0]  hrtimer_try_to_cancel+0x3be/0x420
[  221.676429][    C0]  hrtimer_cancel+0x3b/0x50
[  221.676436][    C0]  cpu_clock_event_stop+0xd9/0x130
[  221.676448][    C0]  __perf_event_overflow+0x580/0xe40
[  221.676466][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  221.676476][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  221.676482][    C0]  ? trace_call_bpf+0x7af/0xb50
[  221.676498][    C0]  perf_swevent_hrtimer+0x3b8/0x500
[  221.676512][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  221.676545][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  221.676555][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.676569][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  221.676578][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  221.676586][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  221.676610][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  221.676665][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  221.676699][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  221.676710][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  221.676722][    C0]  </IRQ>
[  221.676724][    C0]  <TASK>
[  221.676728][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.676736][    C0] RIP: 0010:do_syscall_64+0xc3/0x3b0
[  221.676743][    C0] Code: 00 48 8b 7d 08 48 89 7b 18 e8 09 5a 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 f9 1a 8f f6 90 90 e8 a2 1a 8f f6 fb 49 8b 57 08 <f6> c2 3f 74 0e 4c 89 f7 4c 89 ee e8 3d ef 71 f6 49 89 c4 90 90 41
[  221.676748][    C0] RSP: 0018:ffffc90007b27ef0 EFLAGS: 00000286
[  221.676753][    C0] RAX: e3919fbf1b737100 RBX: ffffc90007b27ef0 RCX: e3919fbf1b737100
[  221.676758][    C0] RDX: 0000000000000000 RSI: ffffffff8d53a1aa RDI: ffffffff8b9ec2e0
[  221.676761][    C0] RBP: ffffc90007b27f48 R08: ffffffff8f5cd537 R09: 1ffffffff1eb9aa6
[  221.676766][    C0] R10: dffffc0000000000 R11: fffffbfff1eb9aa7 R12: 00000000000000ca
[  221.676770][    C0] R13: 00000000000000ca R14: ffffc90007b27f58 R15: ffff888020b9ba00
[  221.676790][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.676796][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.676806][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.676812][    C0] RIP: 0033:0x7f77b3b8ec29
[  221.676820][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.676825][    C0] RSP: 002b:00007f77b4aa50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  221.676830][    C0] RAX: ffffffffffffffda RBX: 00007f77b3dd5fa8 RCX: 00007f77b3b8ec29
[  221.676835][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f77b3dd5fac
[  221.676838][    C0] RBP: 00007f77b3dd5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  221.676842][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.676845][    C0] R13: 00007f77b3dd6038 R14: 00007ffe95887820 R15: 00007ffe95887908
[  221.676863][    C0]  </TASK>

VM DIAGNOSIS:
16:08:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080010001 RBX=dffffc0000000000 RCX=0000000000010001 RDX=0000000000000000
RSI=0000000000000004 RDI=0000000000000001 RBP=ffffc90000007918 RSP=ffffc90000007868
R8 =ffff88804b227ac3 R9 =1ffff11009644f58 R10=dffffc0000000000 R11=ffffed1009644f59
R12=dffffc0000000000 R13=ffff88804b227b40 R14=ffff88804b227ac0 R15=1ffff92000000f10
RIP=ffffffff818eaf69 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f77b4aa56c0 ffffffff 00c00000
GS =0000 ffff8880b8d73000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f77b4a83fc8 CR3=0000000020d98000 CR4=000006f0
DR0=0000200000000740 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f77b3da7498 00007f77b3da7470 XMM03=00007f77b3da74a8 00007f77b3da74a0
XMM04=00007f77b490d100 00007f77b3da7460 XMM05=00007f77b3da7478 00007f77b3da74c0
XMM06=00007f77b3da74b8 00007f77b3da74b0 XMM07=00007f77b3da74a8 00007f77b3da74a0
XMM08=0000000000000000 00007f77b3c12f0f XMM09=0000000000000000 00007f77b3c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfb30
R8 =ffff888108828237 R9 =1ffff11021105046 R10=dffffc0000000000 R11=ffffffff850cc110
R12=dffffc0000000000 R13=ffffffff995a1922 R14=ffffffff99894000 R15=0000000000000000
RIP=ffffffff850cc18c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3e83c626c0 ffffffff 00c00000
GS =0000 ffff8881a4173000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000123cba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3e82fa7498 00007f3e82fa7470 XMM03=00007f3e82fa74a8 00007f3e82fa74a0
XMM04=00007f3e83b0d100 00007f3e82fa7460 XMM05=00007f3e82fa7478 00007f3e82fa74c0
XMM06=00007f3e82fa74b8 00007f3e82fa74b0 XMM07=00007f3e82fa74a8 00007f3e82fa74a0
XMM08=0000000000000000 00007f3e82e12f0f XMM09=0000000000000000 00007f3e82e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
