last executing test programs:

2m21.697765618s ago: executing program 1 (id=34):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040010)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

2m21.205763816s ago: executing program 2 (id=42):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2m21.19576798s ago: executing program 2 (id=44):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffad, &(0x7f0000000000)='/proc/sys\x00\x00\x01\x00\x00\x00\x00\x00\xff\xbe\xcc\x9a\x18e\xf44.\xd4j\a\x1e\x01\xab%nN\xd4\xa2'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)

2m21.142537773s ago: executing program 1 (id=46):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

2m21.131526906s ago: executing program 2 (id=47):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x10001}, {0x1, 0x3f3}]}]}, {0x0, [0x61, 0x61, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x1ff}, 0x28)

2m21.070109331s ago: executing program 0 (id=48):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m21.069783719s ago: executing program 1 (id=49):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x2ec0}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0)

2m20.998630086s ago: executing program 2 (id=50):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

2m20.998150326s ago: executing program 2 (id=51):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8044000)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

2m20.997167031s ago: executing program 1 (id=52):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000f67b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m20.915941735s ago: executing program 0 (id=53):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0)

2m20.913044488s ago: executing program 1 (id=54):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x2200871, 0x0)

2m20.908121576s ago: executing program 2 (id=55):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x403, 0xffffffffffffffff, 0xa)
socket(0x22, 0x4, 0x26)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r3, &(0x7f0000000240))
gettid()
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004240)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x58, 0xfd, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0xf, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0xb, r2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})

2m20.734785256s ago: executing program 0 (id=56):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)

2m20.731714562s ago: executing program 1 (id=57):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1, &(0x7f0000000380)=""/2, 0x2}, 0x20)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x104084}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xa, 0x3, 0xdb, 0x5, 0x0, 0x6619, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp, 0x200, 0x0, 0x800, 0x7, 0x800, 0x7, 0x800, 0x0, 0x0, 0x0, 0x5})
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000000100000081110800000000009500000000004a4f"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="850f6cd6f0f4bb1dcacc3ce563f043a83bb7e815e9320651fc3d6dc1ecf376ec5f46517fe453e7b6de9e1340d388ca8180606c7bc1aaf8c96e564dc067c33245fe90d982517742b91cf7", 0x4a}, {&(0x7f0000000280)}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="f07267cd4349ae5d575ff4f9df6c35042ae231c40cce61d254c75d4f8115aed538ab137f84b19aa11364d457aac76d012a36ba738fe421360892497dbb510e105ccd5502613c033389f056a41e3b5db23a1cfb5487ea857c20e0c45977", 0x5d}, {&(0x7f0000000440)="2f8e0a03902f0cef365774f57a12d306746231770f774da8f486ebf94efcad61c3b42d9849705b88efd86d9fbc69b48f55b1775c7412502d806b8fc4e86f8279acf4c0", 0x43}, {&(0x7f00000004c0)="747d612055f5380cbc538ecbbdfeaea1382830ba5a517ffd69fecc7431e93d3d1893db8f62d9e4ac3644381ba91f5a940814450fc07b899b6331d147297d293e078f2d6932ee3f421374575c51a799319352bcab84d0510766633273f221115c4d25d3858d64b96ad600eb892c70ed486fff283b668a0d3ce95bebf32cb6d479a451c710", 0x84}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="d0000000000000002d01000008000000c5fa6bfbc5db26f3a5756d61f9e5616dd6f36399e051024bccee38a7f40b862b132650ab6f82869a83c4505ed0df4b2d7e8193a36dcda7a229bea753b92c8ffb11507a67fcd5d3a00af85098ea0de5f065b1ee40350804c4c57de8585baadb46bd8cbc0eb9101e7798382c26d2729e8e42345b0bfc43bbb785f68f3b83a54979798c2d709e0979552075eb9fa40b87699c4686ed2b4f01cb9006691b138ec5f423a9a2c2938e9555eddde0b36fa36c82ad410e7d05fdeac01670ea7fe9000000000000002000000000000001000009000000a280b7b8963fa98d5ca4135e340000000000"], 0xf0}, 0x20004000)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4)
close(0x3)

2m20.657341828s ago: executing program 0 (id=58):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@polexpire={0xc0, 0x1b, 0x10, 0x70bd25, 0x25dfdbfd, {{{@in6=@remote, @in6=@private2, 0x4e20, 0x6, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x7, 0xa8c, 0x200, 0x3, 0x7, 0x3, 0x4, 0x136c}, {0xc8, 0x7, 0x5, 0xffffffffffffff58}, 0xcc, 0x6e6bbf, 0x2, 0x0, 0x3, 0x1}, 0x6}}, 0xc0}, 0x1, 0x0, 0x0, 0x4044851}, 0x20000011)

2m20.601429137s ago: executing program 0 (id=59):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20)

2m20.502612521s ago: executing program 0 (id=60):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000001100), 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7351}, 0x100c, 0x0, 0x0, 0x0, 0x20000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

2m5.443577893s ago: executing program 32 (id=57):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1, &(0x7f0000000380)=""/2, 0x2}, 0x20)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x104084}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xa, 0x3, 0xdb, 0x5, 0x0, 0x6619, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp, 0x200, 0x0, 0x800, 0x7, 0x800, 0x7, 0x800, 0x0, 0x0, 0x0, 0x5})
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000000100000081110800000000009500000000004a4f"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="850f6cd6f0f4bb1dcacc3ce563f043a83bb7e815e9320651fc3d6dc1ecf376ec5f46517fe453e7b6de9e1340d388ca8180606c7bc1aaf8c96e564dc067c33245fe90d982517742b91cf7", 0x4a}, {&(0x7f0000000280)}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="f07267cd4349ae5d575ff4f9df6c35042ae231c40cce61d254c75d4f8115aed538ab137f84b19aa11364d457aac76d012a36ba738fe421360892497dbb510e105ccd5502613c033389f056a41e3b5db23a1cfb5487ea857c20e0c45977", 0x5d}, {&(0x7f0000000440)="2f8e0a03902f0cef365774f57a12d306746231770f774da8f486ebf94efcad61c3b42d9849705b88efd86d9fbc69b48f55b1775c7412502d806b8fc4e86f8279acf4c0", 0x43}, {&(0x7f00000004c0)="747d612055f5380cbc538ecbbdfeaea1382830ba5a517ffd69fecc7431e93d3d1893db8f62d9e4ac3644381ba91f5a940814450fc07b899b6331d147297d293e078f2d6932ee3f421374575c51a799319352bcab84d0510766633273f221115c4d25d3858d64b96ad600eb892c70ed486fff283b668a0d3ce95bebf32cb6d479a451c710", 0x84}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="d0000000000000002d01000008000000c5fa6bfbc5db26f3a5756d61f9e5616dd6f36399e051024bccee38a7f40b862b132650ab6f82869a83c4505ed0df4b2d7e8193a36dcda7a229bea753b92c8ffb11507a67fcd5d3a00af85098ea0de5f065b1ee40350804c4c57de8585baadb46bd8cbc0eb9101e7798382c26d2729e8e42345b0bfc43bbb785f68f3b83a54979798c2d709e0979552075eb9fa40b87699c4686ed2b4f01cb9006691b138ec5f423a9a2c2938e9555eddde0b36fa36c82ad410e7d05fdeac01670ea7fe9000000000000002000000000000001000009000000a280b7b8963fa98d5ca4135e340000000000"], 0xf0}, 0x20004000)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4)
close(0x3)

2m1.639758901s ago: executing program 33 (id=55):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x403, 0xffffffffffffffff, 0xa)
socket(0x22, 0x4, 0x26)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r3, &(0x7f0000000240))
gettid()
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004240)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x58, 0xfd, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0xf, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0xb, r2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})

1m54.14268084s ago: executing program 34 (id=60):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000001100), 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7351}, 0x100c, 0x0, 0x0, 0x0, 0x20000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

40.044756729s ago: executing program 3 (id=542):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x90)

40.002698293s ago: executing program 3 (id=543):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000240)=0x1)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000be84b500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

39.091859635s ago: executing program 3 (id=557):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

39.091531291s ago: executing program 3 (id=558):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0)

38.989834792s ago: executing program 3 (id=559):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

38.989252223s ago: executing program 3 (id=560):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080)

22.848166298s ago: executing program 35 (id=560):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080)

4.839071159s ago: executing program 6 (id=796):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00', @random})
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x1, 0xff, 0x9, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x401, 0x8}, 0x2844, 0x1b1bc0cb, 0x7, 0x2, 0x80000001, 0x87, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

4.618165383s ago: executing program 6 (id=803):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400dfff07000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x8000000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x2, r0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0xd5f9}, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})

4.525825405s ago: executing program 5 (id=805):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8180, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x100800, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x8400)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x5}, 0x8)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x221020, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4800, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000060000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000"], 0x94}}, 0x20050800)
close(r2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="018d00"})

4.422277064s ago: executing program 5 (id=808):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x24008855)

4.329542564s ago: executing program 6 (id=809):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000040)

4.328958591s ago: executing program 5 (id=810):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000400900020073797a31000000000500010007000000100007800c00148008000d"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x11, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC=r1], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)

4.237710026s ago: executing program 6 (id=811):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711032000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000780)="1c0000005e007f029e0b18c9d25a27a69801976ab0a272a2a788bab6c95f79", 0x1f}], 0x1}, 0x840)
socket$kcm(0x2, 0x922000000001, 0x106)
r1 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000bdf1ccb33eb22bdfd7e7641e301c0000b949c48a543205ea2b44ea81db76124f00c2c6f8976675d2deb5cb562373308d8eb1ccf79b51"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ef, &(0x7f0000000000)={r2})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x5, 0x12)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}], 0x1}, 0x4000000)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x20, &(0x7f0000000180)={&(0x7f0000000300)=""/214, 0xd6, 0x0, &(0x7f0000000200)=""/187, 0xbb}}, 0x10)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x68, [@struct={0x7, 0x0, 0x0, 0x4, 0x0, 0x31b0}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x40401}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r5, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086ddeff913e613c26d42000000fbac141417e000031762079f4b4d2f87e5feca6aab845013f232050039", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
getpid()
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

955.475821ms ago: executing program 5 (id=812):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a8001604040001400300000003", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

936.873141ms ago: executing program 4 (id=813):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20)
close(0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

935.591713ms ago: executing program 4 (id=814):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x6a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

857.505233ms ago: executing program 4 (id=815):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[], 0x48)
socketpair(0xb, 0x4, 0x7, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbb}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)}, {0x0}], 0x2, &(0x7f0000000200)}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x48)

804.976749ms ago: executing program 6 (id=816):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xb, 0x0, 0x0)

738.844584ms ago: executing program 5 (id=817):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x4}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044004}, 0x0)

647.304314ms ago: executing program 5 (id=818):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000289c00000f000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x3}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='contention_end\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000880), 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
close(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

644.018521ms ago: executing program 4 (id=819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x5}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

641.896003ms ago: executing program 4 (id=820):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x512b, 0x5, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)

569.566042ms ago: executing program 6 (id=821):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x2001)

0s ago: executing program 4 (id=822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@allocspi={0x10c, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x10c}}, 0x4808)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8529' (ED25519) to the list of known hosts.
syzkaller login: [   57.396780][ T5828] cgroup: Unknown subsys name 'net'
[   57.501353][ T5828] cgroup: Unknown subsys name 'cpuset'
[   57.505912][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.803652][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.889586][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.496037][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.499956][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.508526][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.512647][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.515980][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.540634][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.544328][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.548068][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.552790][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.556410][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.594609][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.597668][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.602640][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.607663][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.610646][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.898060][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   70.028242][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   70.050627][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.053087][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.055412][ T5881] bridge_slave_0: entered allmulticast mode
[   70.069314][ T5881] bridge_slave_0: entered promiscuous mode
[   70.074906][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.077788][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.080616][ T5881] bridge_slave_1: entered allmulticast mode
[   70.083288][ T5881] bridge_slave_1: entered promiscuous mode
[   70.143016][ T5883] chnl_net:caif_netlink_parms(): no params data found
[   70.150772][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.169345][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.206783][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.210228][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.213039][ T5878] bridge_slave_0: entered allmulticast mode
[   70.216793][ T5878] bridge_slave_0: entered promiscuous mode
[   70.250759][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.253409][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.255810][ T5878] bridge_slave_1: entered allmulticast mode
[   70.259125][ T5878] bridge_slave_1: entered promiscuous mode
[   70.289137][ T5881] team0: Port device team_slave_0 added
[   70.304164][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.314059][ T5881] team0: Port device team_slave_1 added
[   70.323826][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.381990][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.384106][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.394073][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.400415][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.403006][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.412602][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.432273][ T5878] team0: Port device team_slave_0 added
[   70.434911][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.437723][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.441270][ T5883] bridge_slave_0: entered allmulticast mode
[   70.445048][ T5883] bridge_slave_0: entered promiscuous mode
[   70.459944][ T5878] team0: Port device team_slave_1 added
[   70.462545][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.465274][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.467998][ T5883] bridge_slave_1: entered allmulticast mode
[   70.472582][ T5883] bridge_slave_1: entered promiscuous mode
[   70.505194][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.533932][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.572911][ T5881] hsr_slave_0: entered promiscuous mode
[   70.575922][ T5881] hsr_slave_1: entered promiscuous mode
[   70.580376][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.582828][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.593688][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.610938][ T5883] team0: Port device team_slave_0 added
[   70.613937][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.616424][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.625473][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.634477][ T5883] team0: Port device team_slave_1 added
[   70.690778][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.692879][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.701855][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.727175][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.729950][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.739432][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.783087][ T5878] hsr_slave_0: entered promiscuous mode
[   70.785767][ T5878] hsr_slave_1: entered promiscuous mode
[   70.788288][ T5878] debugfs: 'hsr0' already exists in 'hsr'
[   70.793081][ T5878] Cannot create hsr debugfs directory
[   70.865301][ T5883] hsr_slave_0: entered promiscuous mode
[   70.867931][ T5883] hsr_slave_1: entered promiscuous mode
[   70.871542][ T5883] debugfs: 'hsr0' already exists in 'hsr'
[   70.873312][ T5883] Cannot create hsr debugfs directory
[   71.023226][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.058325][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.078693][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.085149][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.122978][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.125030][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.205330][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.214872][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.223029][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.230174][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.322858][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.330106][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.337368][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.352036][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.421436][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.453250][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.471845][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   71.487264][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.489829][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.503500][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   71.511602][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.514385][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.532223][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.534997][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.551543][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.554173][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.599116][ T5236] Bluetooth: hci1: command tx timeout
[   71.599761][   T55] Bluetooth: hci0: command tx timeout
[   71.612802][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.640538][ T5883] 8021q: adding VLAN 0 to HW filter on device team0
[   71.660816][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.663448][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.679876][   T55] Bluetooth: hci2: command tx timeout
[   71.694837][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.697512][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.873561][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.931158][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.969987][ T5881] veth0_vlan: entered promiscuous mode
[   71.977754][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.995606][ T5881] veth1_vlan: entered promiscuous mode
[   72.024652][ T5878] veth0_vlan: entered promiscuous mode
[   72.064605][ T5883] veth0_vlan: entered promiscuous mode
[   72.067224][ T5881] veth0_macvtap: entered promiscuous mode
[   72.077645][ T5878] veth1_vlan: entered promiscuous mode
[   72.094839][ T5883] veth1_vlan: entered promiscuous mode
[   72.100617][ T5881] veth1_macvtap: entered promiscuous mode
[   72.141177][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.155970][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.163106][ T5878] veth0_macvtap: entered promiscuous mode
[   72.177845][ T5883] veth0_macvtap: entered promiscuous mode
[   72.203174][ T5883] veth1_macvtap: entered promiscuous mode
[   72.207979][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.212420][ T5878] veth1_macvtap: entered promiscuous mode
[   72.218018][ T5742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.222590][ T5742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.232623][ T5742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.249378][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.265125][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.283348][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.293357][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.320596][ T5742] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.324054][ T5742] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.327451][ T5742] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.352226][ T5742] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.355646][ T5742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.381974][ T5742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.392934][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.396047][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.404172][ T5742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.419410][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.473888][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.492138][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.530646][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.533833][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.567769][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.578914][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.599667][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.602650][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.639199][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.643353][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.937018][ T5966] netlink: 'syz.2.29': attribute type 6 has an invalid length.
[   72.942250][ T5966] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.29'.
[   73.192923][ T5976] netlink: 'syz.1.34': attribute type 10 has an invalid length.
[   73.316823][ T5976] team0: Device ipvlan1 failed to register rx_handler
[   73.524002][ T5976] syz.1.34 (5976) used greatest stack depth: 18488 bytes left
[   73.681294][   T55] Bluetooth: hci1: command tx timeout
[   73.683037][   T55] Bluetooth: hci0: command tx timeout
[   73.692661][ T6007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.759872][ T5236] Bluetooth: hci2: command tx timeout
[   73.845218][ T6015] netlink: 7 bytes leftover after parsing attributes in process `syz.0.53'.
[   73.866202][ T6015] netlink: 7 bytes leftover after parsing attributes in process `syz.0.53'.
[   73.893007][ T6019] =======================================================
[   73.893007][ T6019] WARNING: The mand mount option has been deprecated and
[   73.893007][ T6019]          and is ignored by this kernel. Remove the mand
[   73.893007][ T6019]          option from the mount to silence this warning.
[   73.893007][ T6019] =======================================================
[   74.392891][ T6028] Zero length message leads to an empty skb
[   74.458408][    C0] hrtimer: interrupt took 71691 ns
[   75.758554][ T5236] Bluetooth: hci0: command tx timeout
[   75.838477][ T5236] Bluetooth: hci2: command tx timeout
[   77.839126][ T5236] Bluetooth: hci0: command tx timeout
[   77.919915][ T5236] Bluetooth: hci2: command tx timeout
[   82.177579][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 7119054325 wd_nsec: 7119054783
[   84.438405][    C0] sched: DL replenish lagged too much
[   89.740351][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.745003][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.748644][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.752633][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.756266][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.924314][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.928347][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.932619][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.936881][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.943886][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.177655][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.181352][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.184279][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.187439][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.191864][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.838550][ T5236] Bluetooth: hci1: command tx timeout
[   91.999581][ T5236] Bluetooth: hci3: command tx timeout
[   92.238557][ T5236] Bluetooth: hci4: command tx timeout
[   93.918733][ T5236] Bluetooth: hci1: command tx timeout
[   94.078777][ T5236] Bluetooth: hci3: command tx timeout
[   94.318725][ T5236] Bluetooth: hci4: command tx timeout
[   95.998741][ T5236] Bluetooth: hci1: command tx timeout
[   96.159564][ T5236] Bluetooth: hci3: command tx timeout
[   96.398706][ T5236] Bluetooth: hci4: command tx timeout
[   98.080564][ T5236] Bluetooth: hci1: command tx timeout
[   98.238715][ T5236] Bluetooth: hci3: command tx timeout
[   98.478711][ T5236] Bluetooth: hci4: command tx timeout
[  120.490146][ T3479] cfg80211: failed to load regulatory.db
[  120.712521][ T5888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.795405][ T5888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.874585][ T5888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.956076][ T5888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.219089][ T6035] chnl_net:caif_netlink_parms(): no params data found
[  121.246145][ T6042] chnl_net:caif_netlink_parms(): no params data found
[  121.331226][ T5888] bridge_slave_1: left allmulticast mode
[  121.333489][ T5888] bridge_slave_1: left promiscuous mode
[  121.336449][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.345899][ T5888] bridge_slave_0: left allmulticast mode
[  121.348051][ T5888] bridge_slave_0: left promiscuous mode
[  121.353513][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.607507][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.613871][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.618992][ T5888] bond0 (unregistering): Released all slaves
[  121.669236][ T6040] chnl_net:caif_netlink_parms(): no params data found
[  121.807574][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.819434][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.822481][ T6035] bridge_slave_0: entered allmulticast mode
[  121.826429][ T6035] bridge_slave_0: entered promiscuous mode
[  121.836056][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.839914][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.847926][ T6035] bridge_slave_1: entered allmulticast mode
[  121.852667][ T6035] bridge_slave_1: entered promiscuous mode
[  122.004765][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.024276][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.033325][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.036365][ T6042] bridge_slave_0: entered allmulticast mode
[  122.041685][ T6042] bridge_slave_0: entered promiscuous mode
[  122.087839][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.107545][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.113115][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.116362][ T6042] bridge_slave_1: entered allmulticast mode
[  122.125105][ T6042] bridge_slave_1: entered promiscuous mode
[  122.158254][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.164539][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.167493][ T6040] bridge_slave_0: entered allmulticast mode
[  122.172044][ T6040] bridge_slave_0: entered promiscuous mode
[  122.196450][ T5888] hsr_slave_0: left promiscuous mode
[  122.199668][ T5888] hsr_slave_1: left promiscuous mode
[  122.202496][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.205447][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.210324][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.213304][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.228443][ T5888] veth1_macvtap: left promiscuous mode
[  122.230962][ T5888] veth0_macvtap: left promiscuous mode
[  122.233855][ T5888] veth1_vlan: left promiscuous mode
[  122.236104][ T5888] veth0_vlan: left promiscuous mode
[  122.628937][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  122.657352][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  122.981817][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.985605][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.988290][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.991330][ T6040] bridge_slave_1: entered allmulticast mode
[  122.995189][ T6040] bridge_slave_1: entered promiscuous mode
[  123.034685][ T6035] team0: Port device team_slave_0 added
[  123.045156][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.076719][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.083305][ T6035] team0: Port device team_slave_1 added
[  123.089993][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.183068][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.185755][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.203860][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.228137][ T6040] team0: Port device team_slave_0 added
[  123.233022][ T6042] team0: Port device team_slave_0 added
[  123.237766][ T6040] team0: Port device team_slave_1 added
[  123.243485][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.246123][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.256058][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.266305][ T6042] team0: Port device team_slave_1 added
[  123.316706][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.320157][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.331749][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.351880][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.354668][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.365825][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.398828][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.401509][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.413442][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.418887][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.421654][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.431907][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.449473][ T6035] hsr_slave_0: entered promiscuous mode
[  123.453264][ T6035] hsr_slave_1: entered promiscuous mode
[  123.510923][ T6040] hsr_slave_0: entered promiscuous mode
[  123.513254][ T6040] hsr_slave_1: entered promiscuous mode
[  123.515368][ T6040] debugfs: 'hsr0' already exists in 'hsr'
[  123.517094][ T6040] Cannot create hsr debugfs directory
[  123.574695][ T6042] hsr_slave_0: entered promiscuous mode
[  123.577848][ T6042] hsr_slave_1: entered promiscuous mode
[  123.583046][ T6042] debugfs: 'hsr0' already exists in 'hsr'
[  123.585184][ T6042] Cannot create hsr debugfs directory
[  123.702867][ T5888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.829374][ T5888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.903748][ T5888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.969232][ T5888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.011992][ T6035] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  124.019295][ T6035] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  124.027652][ T6035] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  124.042601][ T6035] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  124.217581][ T6042] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.286818][ T5888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.296266][ T6042] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.320609][ T6042] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.359477][ T5888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.366971][ T6042] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  124.428004][ T6040] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  124.436604][ T6040] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  124.467303][ T5888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.477601][ T6040] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  124.487899][ T6040] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  124.557659][ T5888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.602293][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.656478][ T6035] 8021q: adding VLAN 0 to HW filter on device team0
[  124.679255][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.682192][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.733546][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.736573][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.849642][ T5888] bridge_slave_1: left allmulticast mode
[  124.851859][ T5888] bridge_slave_1: left promiscuous mode
[  124.854109][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.862661][ T5888] bridge_slave_0: left allmulticast mode
[  124.864833][ T5888] bridge_slave_0: left promiscuous mode
[  124.867079][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.877094][ T5888] bridge_slave_1: left allmulticast mode
[  124.883511][ T5888] bridge_slave_1: left promiscuous mode
[  124.885805][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.894209][ T5888] bridge_slave_0: left allmulticast mode
[  124.896396][ T5888] bridge_slave_0: left promiscuous mode
[  124.899933][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.210853][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.216176][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.223734][ T5888] bond0 (unregistering): Released all slaves
[  125.475916][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.481859][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.486469][ T5888] bond0 (unregistering): Released all slaves
[  125.531211][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.576744][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.604396][ T6042] 8021q: adding VLAN 0 to HW filter on device team0
[  125.657592][ T6040] 8021q: adding VLAN 0 to HW filter on device team0
[  125.667888][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.671502][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.764467][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.767444][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.777941][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.780940][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.825691][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.828544][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.966741][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.123680][ T6040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.205989][ T5888] hsr_slave_0: left promiscuous mode
[  126.211281][ T5888] hsr_slave_1: left promiscuous mode
[  126.213428][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.216493][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.220087][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.222378][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.227892][ T5888] hsr_slave_0: left promiscuous mode
[  126.233472][ T5888] hsr_slave_1: left promiscuous mode
[  126.235625][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.237865][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.241071][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.243436][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.261460][ T5888] veth1_macvtap: left promiscuous mode
[  126.263111][ T5888] veth0_macvtap: left promiscuous mode
[  126.264873][ T5888] veth1_vlan: left promiscuous mode
[  126.266456][ T5888] veth0_vlan: left promiscuous mode
[  126.269710][ T5888] veth1_macvtap: left promiscuous mode
[  126.271435][ T5888] veth0_macvtap: left promiscuous mode
[  126.273366][ T5888] veth1_vlan: left promiscuous mode
[  126.275569][ T5888] veth0_vlan: left promiscuous mode
[  126.621998][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  126.651905][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  127.045280][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  127.069501][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  127.315771][ T6035] veth0_vlan: entered promiscuous mode
[  127.346708][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.372518][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.376480][ T6035] veth1_vlan: entered promiscuous mode
[  127.453331][ T6035] veth0_macvtap: entered promiscuous mode
[  127.480719][ T6035] veth1_macvtap: entered promiscuous mode
[  127.546705][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.620900][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.645083][ T5904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.719402][ T5904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.723533][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.727469][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.864101][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.867253][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.939919][ T6042] veth0_vlan: entered promiscuous mode
[  127.957145][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.961802][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.965441][ T6042] veth1_vlan: entered promiscuous mode
[  127.978095][ T6040] veth0_vlan: entered promiscuous mode
[  127.988755][ T6040] veth1_vlan: entered promiscuous mode
[  128.031058][ T6042] veth0_macvtap: entered promiscuous mode
[  128.051300][ T6042] veth1_macvtap: entered promiscuous mode
[  128.069486][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.084551][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.089561][ T6040] veth0_macvtap: entered promiscuous mode
[  128.096741][ T5888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.103964][ T5888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.107117][ T5888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.116558][ T6040] veth1_macvtap: entered promiscuous mode
[  128.129824][ T5888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.169417][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.193247][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.274373][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.274795][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.277658][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.289229][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.535451][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.543801][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.653408][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.665282][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.720721][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.725575][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.815065][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.833539][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.244533][ T6193] syzkaller0: entered promiscuous mode
[  129.246631][ T6193] syzkaller0: entered allmulticast mode
[  129.592569][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'.
[  129.637193][ T6210] netlink: 'syz.4.73': attribute type 6 has an invalid length.
[  129.642236][ T6210] netlink: 164 bytes leftover after parsing attributes in process `syz.4.73'.
[  130.054246][ T6225] netlink: 'syz.5.77': attribute type 5 has an invalid length.
[  130.624668][ T6244] netlink: 'syz.5.82': attribute type 29 has an invalid length.
[  130.676917][ T6244] netlink: 'syz.5.82': attribute type 29 has an invalid length.
[  131.659899][ T6248] syzkaller0: entered promiscuous mode
[  131.662347][ T6248] syzkaller0: entered allmulticast mode
[  131.667963][ T6251] warning: `syz.3.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  132.565287][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.569321][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.925179][ T6266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.86'.
[  133.505555][ T6309] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.102'.
[  133.845866][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.110'.
[  133.861760][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.110'.
[  134.091436][ T6346] netlink: 'syz.5.116': attribute type 21 has an invalid length.
[  134.827183][ T6379] Driver unsupported XDP return value 0 on prog  (id 37) dev N/A, expect packet loss!
[  135.770318][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.957755][ T6394] netlink: 'syz.3.135': attribute type 3 has an invalid length.
[  135.975690][ T6394] netlink: 186932 bytes leftover after parsing attributes in process `syz.3.135'.
[  136.545230][ T6418] netlink: 'syz.3.140': attribute type 8 has an invalid length.
[  136.553668][ T6418] netlink: 'syz.3.140': attribute type 6 has an invalid length.
[  136.564324][ T6418] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.140'.
[  136.818652][ T5236] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  136.823504][ T6429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.144'.
[  137.015527][ T6442] netlink: 'syz.5.148': attribute type 3 has an invalid length.
[  137.020969][ T6442] netlink: 32 bytes leftover after parsing attributes in process `syz.5.148'.
[  137.767843][ T6490] netlink: 56 bytes leftover after parsing attributes in process `syz.4.164'.
[  138.822361][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.183'.
[  138.825205][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.183'.
[  139.134357][ T6573] netlink: 'syz.3.191': attribute type 10 has an invalid length.
[  139.892804][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'.
[  140.253691][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[  140.354980][ T6629] netlink: 'syz.5.207': attribute type 2 has an invalid length.
[  140.359583][ T6629] netlink: 'syz.5.207': attribute type 1 has an invalid length.
[  140.362099][ T6629] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.207'.
[  140.505143][ T6632] netlink: 'syz.3.208': attribute type 3 has an invalid length.
[  140.528700][ T6632] netlink: 'syz.3.208': attribute type 1 has an invalid length.
[  143.829479][ T6699] netlink: 'syz.4.223': attribute type 29 has an invalid length.
[  143.836483][ T6699] netlink: 'syz.4.223': attribute type 29 has an invalid length.
[  143.841395][ T6699] netlink: 'syz.4.223': attribute type 29 has an invalid length.
[  144.895582][ T6728] __nla_validate_parse: 1 callbacks suppressed
[  144.895594][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'.
[  145.059119][   T33] audit: type=1107 audit(1757443464.738:2): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  145.127858][ T5590] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  145.134130][ T6741] netlink: 'syz.3.240': attribute type 3 has an invalid length.
[  145.137874][ T6741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.240'.
[  145.288833][ T6746] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  145.493504][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'.
[  145.694872][ T6768] netlink: 'syz.5.250': attribute type 21 has an invalid length.
[  145.697800][ T6768] netlink: 128 bytes leftover after parsing attributes in process `syz.5.250'.
[  146.323361][ T6768] netlink: 'syz.5.250': attribute type 3 has an invalid length.
[  146.326021][ T6768] netlink: 3 bytes leftover after parsing attributes in process `syz.5.250'.
[  147.525113][ T6837] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  147.577677][ T6843] netlink: 156 bytes leftover after parsing attributes in process `syz.4.272'.
[  147.626710][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'.
[  147.637470][ T6849] netlink: 132 bytes leftover after parsing attributes in process `syz.4.273'.
[  147.777606][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'.
[  147.781950][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'.
[  147.823064][ T6858] netlink: 'syz.4.275': attribute type 10 has an invalid length.
[  148.011085][ T6868] netlink: 'syz.4.280': attribute type 1 has an invalid length.
[  148.982681][ T5236] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  149.563704][ T6924] netlink: 'syz.5.301': attribute type 13 has an invalid length.
[  149.572065][ T6924] netlink: 'syz.5.301': attribute type 17 has an invalid length.
[  149.995688][ T6924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.313289][ T6941] __nla_validate_parse: 1 callbacks suppressed
[  150.313301][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.304'.
[  152.004997][ T7038] netlink: 'syz.3.331': attribute type 10 has an invalid length.
[  152.019244][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'.
[  152.025720][ T7044] netlink: 80 bytes leftover after parsing attributes in process `syz.4.333'.
[  152.030609][ T7038] batadv0: entered promiscuous mode
[  152.032950][ T7038] batadv0: entered allmulticast mode
[  152.099557][ T7038] bridge0: port 3(batadv0) entered blocking state
[  152.103641][ T7038] bridge0: port 3(batadv0) entered disabled state
[  152.271507][ T7038] bridge0: port 3(batadv0) entered blocking state
[  152.274298][ T7038] bridge0: port 3(batadv0) entered forwarding state
[  152.333143][ T5888] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  152.337132][ T5888] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  152.631797][ T7072] bpf: Bad value for 'mode'
[  153.033605][ T7104] netlink: 'syz.5.346': attribute type 10 has an invalid length.
[  153.048036][ T7104] macvlan0: entered allmulticast mode
[  153.110827][ T7104] veth1_vlan: entered allmulticast mode
[  153.134019][ T7104] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  153.398516][ T7122] netlink: 56 bytes leftover after parsing attributes in process `syz.4.353'.
[  154.401940][ T7149] netlink: 'syz.5.356': attribute type 21 has an invalid length.
[  154.404444][ T7149] netlink: 128 bytes leftover after parsing attributes in process `syz.5.356'.
[  154.407603][ T7149] netlink: 'syz.5.356': attribute type 4 has an invalid length.
[  154.420060][ T7149] netlink: 'syz.5.356': attribute type 3 has an invalid length.
[  154.423142][ T7149] netlink: 3 bytes leftover after parsing attributes in process `syz.5.356'.
[  154.970703][ T7199] delete_channel: no stack
[  154.972403][ T7199] delete_channel: no stack
[  155.136806][ T7209] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.375'.
[  155.165965][ T7211] netlink: 830 bytes leftover after parsing attributes in process `syz.3.376'.
[  156.328084][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'.
[  156.823905][ T7258] netlink: 'syz.5.389': attribute type 3 has an invalid length.
[  156.826444][ T7258] netlink: 'syz.5.389': attribute type 1 has an invalid length.
[  156.833041][ T7258] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.389'.
[  156.866778][ T7263] netlink: 'syz.3.391': attribute type 5 has an invalid length.
[  157.435811][ T7282] netlink: 'syz.3.400': attribute type 46 has an invalid length.
[  157.632452][ T7284] netlink: 144 bytes leftover after parsing attributes in process `syz.3.402'.
[  157.840806][ T7290] netlink: 'syz.3.405': attribute type 3 has an invalid length.
[  157.848503][ T7290] netlink: 'syz.3.405': attribute type 16 has an invalid length.
[  157.851519][ T7290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.405'.
[  159.236379][ T7235] Set syz1 is full, maxelem 65536 reached
[  159.456804][ T7310] netlink: 'syz.3.413': attribute type 10 has an invalid length.
[  159.460037][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.413'.
[  159.464224][ T7310] batman_adv: batadv0: Adding interface: vlan1
[  159.466735][ T7310] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.477281][ T7310] batman_adv: batadv0: Interface activated: vlan1
[  159.849816][ T7314] netlink: 495 bytes leftover after parsing attributes in process `syz.3.414'.
[  160.230705][ T7327] netlink: 'syz.4.419': attribute type 2 has an invalid length.
[  160.233798][ T7327] netlink: 119 bytes leftover after parsing attributes in process `syz.4.419'.
[  160.836305][ T7331] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.865090][ T7331] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.434700][ T7338] netlink: 56429 bytes leftover after parsing attributes in process `syz.3.422'.
[  161.483884][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.992638][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'.
[  161.995711][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'.
[  162.023972][ T7358] netlink: 'syz.3.431': attribute type 21 has an invalid length.
[  162.026942][ T7358] netlink: 'syz.3.431': attribute type 20 has an invalid length.
[  162.323543][ T7368] netlink: 809 bytes leftover after parsing attributes in process `syz.4.436'.
[  162.326151][ T7368] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.436'.
[  162.330398][ T7368] netlink: 809 bytes leftover after parsing attributes in process `syz.4.436'.
[  162.564598][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'.
[  162.729918][ T7374] netlink: 17 bytes leftover after parsing attributes in process `syz.4.439'.
[  162.734359][ T7374] netlink: zone id is out of range
[  162.736759][ T7374] netlink: zone id is out of range
[  162.748685][ T7374] netlink: zone id is out of range
[  162.751358][ T7374] netlink: zone id is out of range
[  162.753517][ T7374] netlink: zone id is out of range
[  162.755831][ T7374] netlink: zone id is out of range
[  162.758045][ T7374] netlink: zone id is out of range
[  162.780261][ T7374] netlink: zone id is out of range
[  162.847880][ T7383] netlink: 'syz.5.442': attribute type 2 has an invalid length.
[  162.994035][ T7374] syz.4.439 (7374) used obsolete PPPIOCDETACH ioctl
[  165.275241][ T7401] sit0: entered allmulticast mode
[  165.301486][ T7401] sit0: entered promiscuous mode
[  165.887753][ T7426] netlink: 'syz.5.456': attribute type 10 has an invalid length.
[  165.965508][ T7426] bond0: (slave bond_slave_0): Releasing backup interface
[  166.176538][ T7436] netlink: 'syz.5.463': attribute type 4 has an invalid length.
[  166.179911][ T7436] netlink: 'syz.5.463': attribute type 16 has an invalid length.
[  166.183470][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.5.463'.
[  166.354463][ T7442] netlink: 'syz.5.465': attribute type 21 has an invalid length.
[  166.370029][ T7442] netlink: 132 bytes leftover after parsing attributes in process `syz.5.465'.
[  166.396709][ T7442] netlink: 'syz.5.465': attribute type 1 has an invalid length.
[  166.616014][ T7450] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  166.629468][ T7450] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  166.663705][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'.
[  166.912367][ T7460] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.473'.
[  166.918447][ T7460] net_ratelimit: 77 callbacks suppressed
[  166.918459][ T7460] netlink: zone id is out of range
[  166.925697][ T7460] netlink: zone id is out of range
[  166.931353][ T7460] netlink: get zone limit has 8 unknown bytes
[  167.439920][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'.
[  167.852968][ T7489] netlink: 'syz.4.486': attribute type 10 has an invalid length.
[  170.564076][ T7531] syzkaller0: entered promiscuous mode
[  170.566124][ T7531] syzkaller0: entered allmulticast mode
[  170.768801][ T7535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.501'.
[  171.197055][ T7546] netlink: 124 bytes leftover after parsing attributes in process `syz.3.506'.
[  171.656003][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'.
[  171.881504][ T7581] syzkaller0: entered promiscuous mode
[  171.883770][ T7581] syzkaller0: entered allmulticast mode
[  172.033079][ T7588] netlink: 'syz.3.525': attribute type 2 has an invalid length.
[  172.036434][ T7588] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.525'.
[  172.040341][ T7588] nbd: must specify an index to disconnect
[  173.272734][ T7599] netlink: 196 bytes leftover after parsing attributes in process `syz.3.529'.
[  173.982568][ T7593] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  173.993463][ T7593] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  174.123860][ T7609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.386785][ T7624] netlink: 'syz.5.540': attribute type 10 has an invalid length.
[  174.601145][ T7624] veth0_vlan: left promiscuous mode
[  174.647463][ T7624] veth0_vlan: entered promiscuous mode
[  174.835485][ T7624] team0: Device veth0_vlan failed to register rx_handler
[  175.257790][ T7624] syz.5.540 (7624) used greatest stack depth: 17656 bytes left
[  175.654612][ T7667] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.558'.
[  176.515449][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'.
[  176.834558][ T7687] bridge0: port 3(ip6gretap0) entered blocking state
[  176.837070][ T7687] bridge0: port 3(ip6gretap0) entered disabled state
[  176.841836][ T7687] ip6gretap0: entered allmulticast mode
[  176.844998][ T7687] ip6gretap0: entered promiscuous mode
[  176.847221][ T7687] bridge0: port 3(ip6gretap0) entered blocking state
[  176.849695][ T7687] bridge0: port 3(ip6gretap0) entered forwarding state
[  177.050820][ T7693] netlink: 'syz.5.570': attribute type 27 has an invalid length.
[  177.203555][ T7707] : renamed from bond_slave_0
[  177.445019][ T7723] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.585'.
[  177.813888][ T7737] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  177.818065][ T7737] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  179.109744][ T7753] netlink: 68 bytes leftover after parsing attributes in process `syz.5.599'.
[  179.372626][ T7751] syzkaller0: entered promiscuous mode
[  179.375292][ T7751] syzkaller0: entered allmulticast mode
[  179.431701][ T7758] netlink: 'syz.5.601': attribute type 21 has an invalid length.
[  181.206990][ T7763] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.603'.
[  182.267179][ T7795] netlink: 'syz.5.617': attribute type 9 has an invalid length.
[  182.273583][ T7795] netlink: 211924 bytes leftover after parsing attributes in process `syz.5.617'.
[  182.531395][ T7806] netlink: 'syz.5.622': attribute type 1 has an invalid length.
[  186.730304][ T7831] netlink: 'syz.4.626': attribute type 2 has an invalid length.
[  186.871902][ T7838] Set syz1 is full, maxelem 65536 reached
[  186.975927][ T7848] netlink: 'syz.5.634': attribute type 21 has an invalid length.
[  187.173319][ T7852] netlink: 'syz.5.635': attribute type 10 has an invalid length.
[  187.430869][ T7860] netlink: 'syz.4.638': attribute type 4 has an invalid length.
[  187.434248][ T7860] netlink: 152 bytes leftover after parsing attributes in process `syz.4.638'.
[  188.213977][ T7860] netlink: 6 bytes leftover after parsing attributes in process `syz.4.638'.
[  188.223952][ T7860] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  188.611032][ T7877] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  192.230715][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'.
[  192.309385][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.314479][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.317859][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.325131][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.328200][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.531392][ T7913] chnl_net:caif_netlink_parms(): no params data found
[  193.191506][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.194518][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.197446][ T7913] bridge_slave_0: entered allmulticast mode
[  193.221555][ T7913] bridge_slave_0: entered promiscuous mode
[  193.236628][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.248802][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.251897][ T7913] bridge_slave_1: entered allmulticast mode
[  193.255823][ T7913] bridge_slave_1: entered promiscuous mode
[  193.371932][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.412483][ T5888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.422605][ T7934] tap0: tun_chr_ioctl cmd 1074025678
[  193.424431][ T7934] tap0: group set to 0
[  193.428194][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.485268][ T7913] team0: Port device team_slave_0 added
[  193.539961][ T5888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.556387][ T7913] team0: Port device team_slave_1 added
[  193.670381][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.673170][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.707538][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.732698][ T5888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.757871][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.765728][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.777338][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.825491][ T5888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.906651][ T7913] hsr_slave_0: entered promiscuous mode
[  193.913335][ T7913] hsr_slave_1: entered promiscuous mode
[  193.915903][ T7913] debugfs: 'hsr0' already exists in 'hsr'
[  193.917721][ T7913] Cannot create hsr debugfs directory
[  194.003376][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.005954][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.037425][ T7953] netlink: 264 bytes leftover after parsing attributes in process `syz.4.673'.
[  194.042377][ T7953] netlink: 56 bytes leftover after parsing attributes in process `syz.4.673'.
[  194.211360][ T7961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.675'.
[  194.257242][ T7957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.675'.
[  194.274652][ T7961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.675'.
[  194.333910][ T5888] bridge0: port 3(batadv0) entered disabled state
[  194.353313][   T33] audit: type=1107 audit(1757443514.038:3): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  194.390046][ T5888] bridge_slave_1: left allmulticast mode
[  194.392227][ T5888] bridge_slave_1: left promiscuous mode
[  194.394682][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.429413][   T55] Bluetooth: hci0: command tx timeout
[  194.445282][ T5888] bridge_slave_0: left allmulticast mode
[  194.447735][ T5888] bridge_slave_0: left promiscuous mode
[  194.458067][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.940070][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.944707][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.948810][ T5888] bond0 (unregistering): Released all slaves
[  194.993997][ T7913] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  195.005793][ T7913] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  195.021127][ T7913] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  195.036258][ T7913] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  195.324934][ T5888] hsr_slave_0: left promiscuous mode
[  195.331858][ T5888] hsr_slave_1: left promiscuous mode
[  195.334598][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.337426][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.353585][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.361103][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.367780][ T5888] batman_adv: batadv0: Interface deactivated: vlan1
[  195.370592][ T5888] batman_adv: batadv0: Removing interface: vlan1
[  195.370834][ T7998] netlink: 208192 bytes leftover after parsing attributes in process `syz.4.685'.
[  195.379165][ T7998] netlink: 'syz.4.685': attribute type 1 has an invalid length.
[  195.386890][ T7998] netlink: 'syz.4.685': attribute type 2 has an invalid length.
[  195.394846][ T5888] veth1_macvtap: left promiscuous mode
[  195.397014][ T5888] veth0_macvtap: left promiscuous mode
[  195.403331][ T5888] veth1_vlan: left promiscuous mode
[  195.405365][ T5888] veth0_vlan: left promiscuous mode
[  195.954008][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  195.981524][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  196.354126][ T8006] netlink: 132 bytes leftover after parsing attributes in process `syz.5.688'.
[  196.361919][ T8002] C: renamed from team_slave_0 (while UP)
[  196.370136][ T8002] netlink: 164 bytes leftover after parsing attributes in process `syz.4.686'.
[  196.387354][ T8010] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  196.403155][ T8007] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  196.479083][   T55] Bluetooth: hci0: command tx timeout
[  196.492314][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.539035][ T7913] 8021q: adding VLAN 0 to HW filter on device team0
[  196.551263][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.554052][ T3906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.570767][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.573794][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.203287][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.583204][ T7913] veth0_vlan: entered promiscuous mode
[  197.601188][ T7913] veth1_vlan: entered promiscuous mode
[  197.650776][ T7913] veth0_macvtap: entered promiscuous mode
[  197.661914][ T7913] veth1_macvtap: entered promiscuous mode
[  197.702539][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.735536][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.765140][ T8060] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.791045][ T5742] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.797005][ T8060] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.811589][ T5888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.814444][ T5888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.820837][ T5888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.981685][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.989580][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.033913][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.038152][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.165110][ T8067] netlink: 'syz.6.657': attribute type 3 has an invalid length.
[  198.172984][ T8067] netlink: 132 bytes leftover after parsing attributes in process `syz.6.657'.
[  198.559224][   T55] Bluetooth: hci0: command tx timeout
[  198.668821][ T8078] netlink: 'syz.5.702': attribute type 27 has an invalid length.
[  198.677562][ T8078] netlink: 164 bytes leftover after parsing attributes in process `syz.5.702'.
[  200.638633][   T55] Bluetooth: hci0: command tx timeout
[  201.785259][ T8133] syz.6.712 uses obsolete (PF_INET,SOCK_PACKET)
[  202.952558][ T8169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.980968][ T8165] sctp: [Deprecated]: syz.4.724 (pid 8165) Use of int in maxseg socket option.
[  202.980968][ T8165] Use struct sctp_assoc_value instead
[  202.986111][ T8169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.687983][ T8174] netlink: 'syz.5.725': attribute type 21 has an invalid length.
[  203.693551][ T8174] netlink: 128 bytes leftover after parsing attributes in process `syz.5.725'.
[  203.923181][ T8185] syzkaller0: entered promiscuous mode
[  203.924904][ T8185] syzkaller0: entered allmulticast mode
[  203.934912][ T8186] netlink: 'syz.5.728': attribute type 21 has an invalid length.
[  203.937483][ T8186] netlink: 100 bytes leftover after parsing attributes in process `syz.5.728'.
[  204.148022][   T55] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  205.831940][   T55] Bluetooth: hci0: unknown advertising packet type: 0x0c
[  206.916957][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.757'.
[  207.147470][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'.
[  207.184829][ T8271] IPv6: sit1: Disabled Multicast RS
[  208.373908][ T8302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.564238][ T8314] netlink: 'syz.5.778': attribute type 21 has an invalid length.
[  209.292117][ T8334] netlink: 'syz.4.788': attribute type 1 has an invalid length.
[  209.294964][ T8334] netlink: 'syz.4.788': attribute type 4 has an invalid length.
[  209.297438][ T8334] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.788'.
[  209.365844][ T8338] netlink: 104 bytes leftover after parsing attributes in process `syz.4.789'.
[  209.423016][ T8341] netlink: 104 bytes leftover after parsing attributes in process `syz.6.790'.
[  209.503957][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.793'.
[  209.902376][ T8355] netlink: 188 bytes leftover after parsing attributes in process `syz.5.795'.
[  209.904952][ T8358] syzkaller0: entered promiscuous mode
[  209.908132][ T8358] syzkaller0: entered allmulticast mode
[  210.236814][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.805'.
[  210.481444][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.575804][ T8403] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.811'.
[  214.738283][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'.
[  214.743583][ T8469] ==================================================================
[  214.746067][ T8469] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  214.748386][ T8469] Read of size 4 at addr ffff88810cc6ce44 by task syz.4.822/8469
[  214.752350][ T8469] 
[  214.753145][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.4.822 Not tainted syzkaller #0 PREEMPT(full) 
[  214.753157][ T8469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.753163][ T8469] Call Trace:
[  214.753168][ T8469]  <TASK>
[  214.753186][ T8469]  dump_stack_lvl+0x189/0x250
[  214.753203][ T8469]  ? __kasan_check_byte+0x12/0x40
[  214.753217][ T8469]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.753228][ T8469]  ? lock_release+0x4b/0x3e0
[  214.753242][ T8469]  ? __virt_addr_valid+0x4a5/0x5c0
[  214.753254][ T8469]  print_report+0xca/0x240
[  214.753262][ T8469]  ? xfrm_alloc_spi+0x570/0xf30
[  214.753271][ T8469]  kasan_report+0x118/0x150
[  214.753282][ T8469]  ? xfrm_alloc_spi+0x570/0xf30
[  214.753292][ T8469]  xfrm_alloc_spi+0x570/0xf30
[  214.753301][ T8469]  ? xfrm_alloc_spi+0x2a0/0xf30
[  214.753312][ T8469]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  214.753321][ T8469]  ? xfrm_find_acq+0x87/0xa0
[  214.753331][ T8469]  xfrm_alloc_userspi+0x70b/0xc90
[  214.753343][ T8469]  ? apparmor_capable+0x137/0x1b0
[  214.753352][ T8469]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  214.753362][ T8469]  ? __nla_parse+0x40/0x60
[  214.753374][ T8469]  xfrm_user_rcv_msg+0x7a3/0xab0
[  214.753384][ T8469]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  214.753421][ T8469]  ? __pfx___mutex_trylock_common+0x10/0x10
[  214.753432][ T8469]  ? rcu_is_watching+0x15/0xb0
[  214.753440][ T8469]  ? trace_contention_end+0x39/0x120
[  214.753449][ T8469]  ? __mutex_lock+0x335/0x1360
[  214.753463][ T8469]  netlink_rcv_skb+0x208/0x470
[  214.753475][ T8469]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  214.753483][ T8469]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.753496][ T8469]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.753506][ T8469]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.753517][ T8469]  xfrm_netlink_rcv+0x79/0x90
[  214.753528][ T8469]  netlink_unicast+0x82f/0x9e0
[  214.753545][ T8469]  ? __pfx_netlink_unicast+0x10/0x10
[  214.753560][ T8469]  ? netlink_sendmsg+0x642/0xb30
[  214.753579][ T8469]  ? skb_put+0x11b/0x210
[  214.753592][ T8469]  netlink_sendmsg+0x805/0xb30
[  214.753606][ T8469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.753617][ T8469]  ? aa_sock_msg_perm+0xf1/0x1d0
[  214.753626][ T8469]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.753641][ T8469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.753661][ T8469]  __sock_sendmsg+0x21c/0x270
[  214.753674][ T8469]  ____sys_sendmsg+0x505/0x830
[  214.753686][ T8469]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.753702][ T8469]  ? import_iovec+0x74/0xa0
[  214.753718][ T8469]  ___sys_sendmsg+0x21f/0x2a0
[  214.753732][ T8469]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.753754][ T8469]  ? __fget_files+0x2a/0x420
[  214.753767][ T8469]  ? __fget_files+0x3a0/0x420
[  214.753781][ T8469]  __x64_sys_sendmsg+0x19b/0x260
[  214.753795][ T8469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.753813][ T8469]  ? rcu_is_watching+0x15/0xb0
[  214.753837][ T8469]  ? do_syscall_64+0xbe/0x3b0
[  214.753858][ T8469]  do_syscall_64+0xfa/0x3b0
[  214.753878][ T8469]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.753897][ T8469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.753910][ T8469]  ? exc_page_fault+0x9f/0xf0
[  214.753929][ T8469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.753943][ T8469] RIP: 0033:0x7f89a478ebe9
[  214.753957][ T8469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.753970][ T8469] RSP: 002b:00007f89a56e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.753986][ T8469] RAX: ffffffffffffffda RBX: 00007f89a49c5fa0 RCX: 00007f89a478ebe9
[  214.753998][ T8469] RDX: 0000000000004808 RSI: 0000200000001580 RDI: 0000000000000003
[  214.754007][ T8469] RBP: 00007f89a4811e19 R08: 0000000000000000 R09: 0000000000000000
[  214.754016][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.754024][ T8469] R13: 00007f89a49c6038 R14: 00007f89a49c5fa0 R15: 00007ffe255c5078
[  214.754039][ T8469]  </TASK>
[  214.754045][ T8469] 
[  214.881841][ T8469] Allocated by task 8007:
[  214.883191][ T8469]  kasan_save_track+0x3e/0x80
[  214.884731][ T8469]  __kasan_slab_alloc+0x6c/0x80
[  214.886307][ T8469]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  214.888008][ T8469]  xfrm_state_alloc+0x24/0x2f0
[  214.889505][ T8469]  xfrm_add_sa+0x17d1/0x4070
[  214.890939][ T8469]  xfrm_user_rcv_msg+0x7a3/0xab0
[  214.892467][ T8469]  netlink_rcv_skb+0x208/0x470
[  214.893963][ T8469]  xfrm_netlink_rcv+0x79/0x90
[  214.895438][ T8469]  netlink_unicast+0x82f/0x9e0
[  214.896950][ T8469]  netlink_sendmsg+0x805/0xb30
[  214.898440][ T8469]  __sock_sendmsg+0x21c/0x270
[  214.899942][ T8469]  ____sys_sendmsg+0x505/0x830
[  214.901467][ T8469]  ___sys_sendmsg+0x21f/0x2a0
[  214.903284][ T8469]  __x64_sys_sendmsg+0x19b/0x260
[  214.904907][ T8469]  do_syscall_64+0xfa/0x3b0
[  214.906402][ T8469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.908328][ T8469] 
[  214.909108][ T8469] Freed by task 3479:
[  214.910406][ T8469]  kasan_save_track+0x3e/0x80
[  214.912214][ T8469]  kasan_save_free_info+0x46/0x50
[  214.914147][ T8469]  __kasan_slab_free+0x5b/0x80
[  214.915718][ T8469]  kmem_cache_free+0x18f/0x400
[  214.917283][ T8469]  xfrm_state_gc_task+0x52d/0x6b0
[  214.918877][ T8469]  process_scheduled_works+0xae1/0x17b0
[  214.920601][ T8469]  worker_thread+0x8a0/0xda0
[  214.922034][ T8469]  kthread+0x711/0x8a0
[  214.923353][ T8469]  ret_from_fork+0x3fc/0x770
[  214.925165][ T8469]  ret_from_fork_asm+0x1a/0x30
[  214.926950][ T8469] 
[  214.927715][ T8469] The buggy address belongs to the object at ffff88810cc6cd80
[  214.927715][ T8469]  which belongs to the cache xfrm_state of size 928
[  214.931894][ T8469] The buggy address is located 196 bytes inside of
[  214.931894][ T8469]  freed 928-byte region [ffff88810cc6cd80, ffff88810cc6d120)
[  214.936029][ T8469] 
[  214.936813][ T8469] The buggy address belongs to the physical page:
[  214.938816][ T8469] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810cc6c900 pfn:0x10cc6c
[  214.941939][ T8469] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  214.944624][ T8469] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  214.947089][ T8469] page_type: f5(slab)
[  214.948347][ T8469] raw: 057ff00000000040 ffff8881053f4280 dead000000000122 0000000000000000
[  214.951459][ T8469] raw: ffff88810cc6c900 00000000800e000c 00000000f5000000 0000000000000000
[  214.954779][ T8469] head: 057ff00000000040 ffff8881053f4280 dead000000000122 0000000000000000
[  214.957941][ T8469] head: ffff88810cc6c900 00000000800e000c 00000000f5000000 0000000000000000
[  214.961123][ T8469] head: 057ff00000000002 ffffea0004331b01 00000000ffffffff 00000000ffffffff
[  214.964478][ T8469] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  214.967353][ T8469] page dumped because: kasan: bad access detected
[  214.969522][ T8469] page_owner tracks the page as allocated
[  214.971337][ T8469] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6439, tgid 6438 (syz.4.147), ts 136972986177, free_ts 136676326156
[  214.977389][ T8469]  post_alloc_hook+0x240/0x2a0
[  214.979318][ T8469]  get_page_from_freelist+0x21e4/0x22c0
[  214.981511][ T8469]  __alloc_frozen_pages_noprof+0x181/0x370
[  214.983584][ T8469]  alloc_pages_mpol+0x232/0x4a0
[  214.985136][ T8469]  allocate_slab+0x8a/0x370
[  214.986635][ T8469]  ___slab_alloc+0xbeb/0x1410
[  214.988088][ T8469]  kmem_cache_alloc_noprof+0x283/0x3c0
[  214.989776][ T8469]  xfrm_state_alloc+0x24/0x2f0
[  214.991256][ T8469]  xfrm_add_sa+0x17d1/0x4070
[  214.992682][ T8469]  xfrm_user_rcv_msg+0x7a3/0xab0
[  214.994228][ T8469]  netlink_rcv_skb+0x208/0x470
[  214.995767][ T8469]  xfrm_netlink_rcv+0x79/0x90
[  214.997259][ T8469]  netlink_unicast+0x82f/0x9e0
[  214.998743][ T8469]  netlink_sendmsg+0x805/0xb30
[  215.000232][ T8469]  __sock_sendmsg+0x21c/0x270
[  215.001736][ T8469]  ____sys_sendmsg+0x505/0x830
[  215.003243][ T8469] page last free pid 5590 tgid 5590 stack trace:
[  215.005316][ T8469]  __free_frozen_pages+0xbc4/0xd30
[  215.007020][ T8469]  free_large_kmalloc+0x13a/0x1f0
[  215.008618][ T8469]  skb_release_data+0x62d/0x7c0
[  215.010066][ T8469]  consume_skb+0x9e/0xf0
[  215.011364][ T8469]  __unix_dgram_recvmsg+0x9f9/0xd60
[  215.012967][ T8469]  sock_recvmsg+0x22c/0x270
[  215.014391][ T8469]  sock_read_iter+0x231/0x2f0
[  215.015854][ T8469]  do_iter_readv_writev+0x61c/0x8b0
[  215.017493][ T8469]  vfs_readv+0x253/0x850
[  215.018831][ T8469]  do_readv+0x14d/0x2d0
[  215.020164][ T8469]  do_syscall_64+0xfa/0x3b0
[  215.021617][ T8469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.023449][ T8469] 
[  215.024257][ T8469] Memory state around the buggy address:
[  215.026210][ T8469]  ffff88810cc6cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  215.029284][ T8469]  ffff88810cc6cd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.032540][ T8469] >ffff88810cc6ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.035243][ T8469]                                            ^
[  215.037221][ T8469]  ffff88810cc6ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.040350][ T8469]  ffff88810cc6cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.042971][ T8469] ==================================================================
[  215.045651][ T8469] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  215.047886][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.4.822 Not tainted syzkaller #0 PREEMPT(full) 
[  215.050727][ T8469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.053821][ T8469] Call Trace:
[  215.054880][ T8469]  <TASK>
[  215.055873][ T8469]  dump_stack_lvl+0x99/0x250
[  215.057384][ T8469]  ? __asan_memcpy+0x40/0x70
[  215.058806][ T8469]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.060388][ T8469]  ? __pfx__printk+0x10/0x10
[  215.061826][ T8469]  vpanic+0x281/0x750
[  215.063031][ T8469]  ? __pfx_vpanic+0x10/0x10
[  215.064465][ T8469]  ? irqentry_exit+0x74/0x90
[  215.065888][ T8469]  panic+0xb9/0xc0
[  215.067161][ T8469]  ? __pfx_panic+0x10/0x10
[  215.068699][ T8469]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  215.070716][ T8469]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  215.072803][ T8469]  ? xfrm_alloc_spi+0x570/0xf30
[  215.074323][ T8469]  check_panic_on_warn+0x89/0xb0
[  215.075857][ T8469]  ? xfrm_alloc_spi+0x570/0xf30
[  215.077405][ T8469]  end_report+0x78/0x160
[  215.078716][ T8469]  kasan_report+0x129/0x150
[  215.080121][ T8469]  ? xfrm_alloc_spi+0x570/0xf30
[  215.081632][ T8469]  xfrm_alloc_spi+0x570/0xf30
[  215.083099][ T8469]  ? xfrm_alloc_spi+0x2a0/0xf30
[  215.084632][ T8469]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  215.086259][ T8469]  ? xfrm_find_acq+0x87/0xa0
[  215.087707][ T8469]  xfrm_alloc_userspi+0x70b/0xc90
[  215.089264][ T8469]  ? apparmor_capable+0x137/0x1b0
[  215.090822][ T8469]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  215.092520][ T8469]  ? __nla_parse+0x40/0x60
[  215.093921][ T8469]  xfrm_user_rcv_msg+0x7a3/0xab0
[  215.095466][ T8469]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  215.097204][ T8469]  ? __pfx___mutex_trylock_common+0x10/0x10
[  215.099044][ T8469]  ? rcu_is_watching+0x15/0xb0
[  215.100535][ T8469]  ? trace_contention_end+0x39/0x120
[  215.102120][ T8469]  ? __mutex_lock+0x335/0x1360
[  215.103635][ T8469]  netlink_rcv_skb+0x208/0x470
[  215.105147][ T8469]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  215.106908][ T8469]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  215.108571][ T8469]  ? netlink_deliver_tap+0x2e/0x1b0
[  215.110182][ T8469]  ? netlink_deliver_tap+0x2e/0x1b0
[  215.111783][ T8469]  xfrm_netlink_rcv+0x79/0x90
[  215.113237][ T8469]  netlink_unicast+0x82f/0x9e0
[  215.115066][ T8469]  ? __pfx_netlink_unicast+0x10/0x10
[  215.117053][ T8469]  ? netlink_sendmsg+0x642/0xb30
[  215.118634][ T8469]  ? skb_put+0x11b/0x210
[  215.119987][ T8469]  netlink_sendmsg+0x805/0xb30
[  215.121623][ T8469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.123431][ T8469]  ? aa_sock_msg_perm+0xf1/0x1d0
[  215.125028][ T8469]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  215.126695][ T8469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.128348][ T8469]  __sock_sendmsg+0x21c/0x270
[  215.129843][ T8469]  ____sys_sendmsg+0x505/0x830
[  215.131387][ T8469]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.133035][ T8469]  ? import_iovec+0x74/0xa0
[  215.134470][ T8469]  ___sys_sendmsg+0x21f/0x2a0
[  215.135953][ T8469]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.137687][ T8469]  ? __fget_files+0x2a/0x420
[  215.139308][ T8469]  ? __fget_files+0x3a0/0x420
[  215.141185][ T8469]  __x64_sys_sendmsg+0x19b/0x260
[  215.143186][ T8469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  215.145409][ T8469]  ? rcu_is_watching+0x15/0xb0
[  215.147164][ T8469]  ? do_syscall_64+0xbe/0x3b0
[  215.148672][ T8469]  do_syscall_64+0xfa/0x3b0
[  215.150161][ T8469]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.151823][ T8469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.153702][ T8469]  ? exc_page_fault+0x9f/0xf0
[  215.155238][ T8469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.157262][ T8469] RIP: 0033:0x7f89a478ebe9
[  215.158924][ T8469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.165084][ T8469] RSP: 002b:00007f89a56e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.168404][ T8469] RAX: ffffffffffffffda RBX: 00007f89a49c5fa0 RCX: 00007f89a478ebe9
[  215.171549][ T8469] RDX: 0000000000004808 RSI: 0000200000001580 RDI: 0000000000000003
[  215.174667][ T8469] RBP: 00007f89a4811e19 R08: 0000000000000000 R09: 0000000000000000
[  215.177793][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.180926][ T8469] R13: 00007f89a49c6038 R14: 00007f89a49c5fa0 R15: 00007ffe255c5078
[  215.184073][ T8469]  </TASK>
[  215.185947][ T8469] Kernel Offset: disabled
[  215.187704][ T8469] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:45:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001577 RDI=0000000000001578 RBP=00000000000003f8 RSP=ffffc90002bee9f0
R8 =ffff8881071e0237 R9 =1ffff11020e3c046 R10=dffffc0000000000 R11=ffffffff854efb30
R12=dffffc0000000000 R13=ffffffff99af98f6 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efbac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f89a56e06c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=0000000041bb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0200000000000000 0000000000000120
XMM02=00007f89a4997498 ffffffff81688a1f XMM03=00007f89a49974a8 00007f89a49974a0
XMM04=00007f89a54fd100 00007f89a4997460 XMM05=00007f89a4997478 00007f89a49974c0
XMM06=00007f89a49974b8 00007f89a49974b0 XMM07=00007f89a49974a8 00007f89a49974a0
XMM08=0000000000000000 00007f89a4812ee7 XMM09=0000000000000000 00007f89a4812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=00000000ffffffff RCX=ffff888022731cc0 RDX=0000000000000000
RSI=ffffffff8d9ca653 RDI=ffffffff8be33300 RBP=00000000ffffffff RSP=ffffc9000310f330
R8 =ffffc9000310f5e7 R9 =0000000000000000 R10=ffffc9000310f5c0 R11=fffff52000621ebd
R12=0000000000000246 R13=ffff888022731cc0 R14=ffffffff8e139f00 R15=0000000000000000
RIP=ffffffff8b796156 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f18e593b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110e22fff6 CR3=000000003769e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
