last executing test programs:

2.110802316s ago: executing program 0 (id=67):
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0})
r2 = socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}}}}], 0x58}, 0x8000)
r4 = getpid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f00000008c0), 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r7 = socket$kcm(0x2c, 0x3, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20)
close(r7)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0xbb, &(0x7f0000000380)=[{&(0x7f0000000580)="91", 0x1}], 0x1}, 0x48800)
r11 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="2d58a6eb38", 0x5}], 0x1}, 0x4044)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000d00)=ANY=[@ANYBLOB="1854000009000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a00f4e7a8500000006000000850000001b00000018230000", @ANYRES32=r9, @ANYBLOB="000000000000000000000900000018e098100caa18ec851a00009586cedd172f9789e600e220608960eed99421f71f41539738ba19e4a0bc86f15c0200000000", @ANYRES32=r6, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000008520000005000000"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000740)=""/157, 0x41000, 0x12, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x8, 0x39}, 0x10, 0xbc8d, r11, 0x2, &(0x7f00000003c0)=[r9, r6, r9, r6], &(0x7f0000000400)=[{0x2, 0x3, 0xe, 0x2}, {0x5, 0x4, 0x1, 0xf}], 0x10, 0x81}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r12, 0x0, 0xbe, 0xe6, &(0x7f0000000a40)="ba5c9e52822f2eec327ab991501bc9c931148b6a290d410f24d2d09238adda820a2cfb3820ea092d49c93cbfd6f78a4b9bdd63ef6973c8ac351e31bc9a142187c867d3f708971d9372eca64510d1c44a3f21072c69400bc88dab2f422ea1071165660c693006f5dde05544bf99391690188c56ec39aef2104be08802ccdb0f908a92abece9b8d9c8f11a56955b3c550cfa936b4ea809b05c43ecf19d2db2fb5e43bf2f75d97479013b8fe70fc241ce6beb1159cbdf9b0baa36ad306b070e", &(0x7f0000000b00)=""/230, 0x8, 0x0, 0xc3, 0x79, &(0x7f0000000c00)="22c97280dc7ff0150c21ed5470b1725cf36353cfd4de3a6a1511642ea368d43ae1cb4c0bd284c38f1264a07cdae09a49533d2dd3be5ee680eb3346013542e31738f15ce7a721fd107885fd0e5408a134f689b96303c9846185039dcaaa762edd4d2d26b244fea873e4666fcad01146efb68695474ac3ef20f83aa4a9a9cdfddeacd069aba7ff9c4505dc8c7208e54d8ba1bd382ada40412d1e9b3d271da869184e58c14cbba716d59b396f59fd81df8850e8b8602a0272d7762cdd7a9305351dcbaa52", &(0x7f0000000680)="437d432f5cb33b872941dca4c0a7c2cda1bb567102a0399eb7d39de5f6bac79cf59b4df2119ca8b7bba23694d74f9af8ac7e358abe5535b3ebf637b7c5c7b0002adb6d8fc4ecc5f54c778ad7d28f32a8b1f512cf5fb41b83b259525d4dc8ec35af4e31bbb613dc9aaeb6d04b40a21de08198267cbaa38c86a7", 0x0, 0x0, 0x6}, 0x50)

2.109875788s ago: executing program 1 (id=69):
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0)
sendmsg$inet(r0, 0x0, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000e7e0bc5857681800010201040000000000000000000000090400019f0600074000030000443ace7d10fb101669e0675abefaabfa07ce9bfa13d05685d58483794c8e8521e1a669a96dfa056380db55fd5e562f6bb5c07eb41ed49ffd477b4aafd266ff5da00c8d7575dc3de48abcbb0287d5b46c1203e20ac3b1043040c6da056c67d8e9042dfe153fad23a33796df3b372f08288f8bc7dd00bd9b85a5fb93bdf4f9ee08"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x10, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x1726, 0x6, 0x0, 0x5, 0x2, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000002bef040000000000000000000000db8fb32cfe444fc7522d8caa0a5e0a91562f69a156c217c99cfcc2d4bf41f7edd107b5d4a623204e884ac1c0ff2bd44f6f2aed43e5bdc1b3558e9fed377b571166872afb0cbda123bf3ed742127481020d43b395bd0a4f15f7d669318d323a1c83c9c9c46c926eaee359c723a1d5aa29627f23bcc3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a9416a83a87bfee27a418cc30420cdefb3679b25f1ca67d5e857eb7423eb15167552c1cf65e16b37042da2e167c3a87ac3a4b2af9da28eac500ff4fd8645cec5186285c103ad09686f0f29a70e93f0b1388c7b2ed1d896c82886246ae1d2e6a95f", 0xf10e95325a38408c}, {&(0x7f0000000440)="2d90d174cabea3ff0e572f49fbee1b050b315fc39e4af947315e58fc1398adedc2e314387c087e1544d2a39975d4c2e37c0a481a86936465de9bccdb94177e7e85884aec886fdd956d2b31f9b1187caa85ee0c7dffb537baf6d46d2f1c6b48b4135d723d2a6efc751fda15452f39635d05b622003e64a40382f91d00f47f2a89b16155936c03d40e1e18340a4108483bf510f2a56a0d02938f5dea2f28adffd91ce55d4ce89bcebf1a98"}, {&(0x7f0000000300)="cb2983fa85ed43fc63e6a298b999c9c74b6ac1c32405ce13f024a9db81c6ba5807ec8e2d31d9898c8e88f5a2d0979306ef4f52410c5ec691a8d9498ea926003246986fbb080c109c33c6c91cf971edac20ffb56cb6641860e0075a6f2665ec0761449dfa25e4d682f20b47e75bd972d99c4f5be7b5f1bca6a8f16f4e932508672c38db4b393269233602f0"}], 0x0, 0x0, 0x0, 0x4a0f0000}, 0xc011)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x7fffffff, 0x0, 0x0, 0x10, 0x0, 0x20000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x10)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044943, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

1.40328555s ago: executing program 1 (id=71):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000c00)=""/213, 0xd5}, {&(0x7f0000003100)=""/4073, 0xfe9}, {&(0x7f00000007c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000a00)=""/208, 0x104}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xc}, 0x40010102)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

1.061094666s ago: executing program 0 (id=75):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x70}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000038d, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="28d1d1483e47fc0cb27184cccb4244d298f412e0441936b240873875c84346f33657a0d8aee415fcb6990d02bdfc3c7bbce519ae07efc68703472508901f5b93521b1f7f57038fa72d5f294f5809b16afd77a291c94be98b0f79b4650daba71b7633240ed8c42a81aae387cc44858137de6a6a7c84fa640829e7639ad5b78045194b8c4508da1cb43a41da00d877a91629fa321824f1474435708822f42ed0f2af5b943a966c", 0xa6}, {&(0x7f00000003c0)="dc8adf6eed6fcc148799b69fd812c300d22f1c249fda36d1409207f1317cb6777b5c46e21e10ae8cc9f84e215d746d205503baa139e2993e3ba38f61cfd0cc3717a73715d0fc374ab3033878500a71f261356427b1c139de8249ecdfd8dc6bc62ddd15bd112dc61c9bea5a8a4a316fea99e37ed4de51ee0ff3b83c4241cae2d1f2fb1e44a66b43f938df1abb41d753cfe1d3cfe1cf0a38481b3becf8eb6269221e0b81262e960fa2ab031256f1440929503d64ba1702c69f1c8a0a45d48255b1e4a398f531c7a754e51de88df5979f46e7f213e6b07e07073a1dcbd2a9cd", 0xde}, {&(0x7f0000000600)="c8f89a78be4fc89d1e66807908f0fab99dea98937068b36dcd70f5c82bf9cd885d8d5b6f2499f44cc8ef4ab860f8a22120d2454a124c4c14168e6a1e365b27b8ffa4fede711cdc8f8ce7f2bc01ed5a651a2aacc51b88d82067cbe32d53347c6b07b9ad02e1b5a3a6c79ecad1e32f918db655e195fa7f4a360e271ccfe15e66b9a05cc751728ef9a2a580aed725ecbc6b4e67e04e1a4a0c84616447531a644b79c534dd87b67db858986ca9186c28b71f706533e5fc3c59fd52b582072109a680505da698d129b41ef75195", 0xcb}, {&(0x7f00000007c0)="87d2b868d54fd4bee073f3415a52fef67bad1c09a7ffe99abab1fcce247c86c3ddea5a6cdb3b24fdfef4bdcccca3f14e3953e9b00f232b3bed20e925ba9931d09584d35818f50b116ae71d75690f2035502308f6f34afd6edf56fe96bcde533a7382ed6a38038a9bcd195aa0b3753a0adb2aee6457c781f1b6b7919a89ce2660438b52d45c7f248a6869d594c10f713c2f3566f3a255dc44820b398cbc2b7289a5048efce77ef5901038e15d0a0760c20c1b6c244250610e06e3ecaeff2f93e23095d5c4fca18744ce8baa96b12b8d9d6718b23186f0fda71305d282c1bbc1", 0xdf}], 0x4, &(0x7f0000000ac0)=[{0x110, 0x10f, 0x9, "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"}, {0x18, 0x109, 0xc27, "e16a4f75c49b80f9"}, {0x60, 0x103, 0x800, "677dfe84529ae7ebdfcd0b39adca80f6cb53517eb9ad4f5eaaa65bccc8c5954e2175bb2e15d2a6ef2161569209789e76a55226df97567c171577253d3c840f82d81b899392812fae9d42806aca63514310924e7aa26484fc8a25a809db495c6de521b0ae54c764a494f7a2972fc2f725f396ce46ed059790cc4e873885c0f10111f07984f51ec1fea9d33eb7cf8b87994ed4da7f4df84011bca915f93d080028b20aff649ce2592c38d345fc39652dff508ffec3134a84"}], 0x1e8}, 0x20000004)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x0, 0x4, 0xff}, 0x50) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000004c0)="6976e5b4d3e6fbe101078de1239f954235bcef5f5fe086fd7cdd04b92c", &(0x7f0000002980)=""/4096, &(0x7f00000008c0)="887c3fb54b6aac84812ec91c75a3d0354f51c4c557fde830e43becc6c3598d53b8c23c6127473ef0d093e1a85d95bd00c999922f013a211b113b205774ceab746da25571355154991ffa43197928f978333502ef0e9c24a41452bf09ef0d1e84df5f4dc7afef2f3adf8a4d34f323947e28b0f11e3f3dc648731e4ab6eaf918973b9ddf3487e3b8c5738149c95af7a5ff6753b468e6b6f6095affc8175310faec4be707e8a5cdba62e77e7684de18c1d1095b220b0748f4527641ae42b0dce20aca97d528d0051f0f26b5d166a96ba6a51b47787427e817fc534279c1dacada52b221b321ad9cfffcfeac31e5153c68fdf77263994b5d30", &(0x7f0000000500)="63b198d31f27", 0xd, r3, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c)

1.060904423s ago: executing program 2 (id=76):
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000e984100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

1.001011417s ago: executing program 0 (id=77):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pB    \x00'}, 0x20)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x1000, 0x80, 0x4, 0x2e}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000600850000001b0000e8b600faf34b2d0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x852c}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x620}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
mount$bpf(0x0, 0x0, 0xfffffffffffffffd, 0x1002008, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x40}}, 0x40000b0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x20004000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac000000000801010000000000000000000000000900010073797a30000000003400048008000140000000020800014000000003080003400000080008000140000000070800014000000000080001400000004d040002406006000006000240809b00001c000481080001400000000908000140ffff0001080001400001000000000000000000000900010073797a300000000005000300060000000500030006f9ffff050002"], 0xac}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040840)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x2, 0x2, 0x8, 0x6, 0x0, 0x4a, 0x0, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x2408, 0x8, 0xf9d, 0x9, 0x7f, 0x3, 0xc9e, 0x0, 0xf4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000b00100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000840103808001008008000340000000027401028035000100299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c620000002c0002800900020073797a3000000000080003400000000108000340000000040900020073797a3000"], 0x260}}, 0x4000050)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x1, 0x8, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f00000001c0)='syzkaller\x00', 0xe618, 0xd9, &(0x7f0000000400)=""/217, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, r0, r1], 0x0, 0x10, 0x7a}, 0x94)
r7 = openat$cgroup(r1, &(0x7f0000000640)='syz1\x00', 0x200002, 0x0)
r8 = gettid()
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r6, r7, 0xd, 0x0, @val=@iter={&(0x7f0000000740)=@task={r8, 0xffffffffffffffff, r1}, 0x10}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x1c, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x6c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, r1}, 0x94)

1.00009102s ago: executing program 2 (id=78):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x2}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x30, 0x2}]}, {0x0, [0x0, 0x30]}}, &(0x7f00000004c0)=""/205, 0x38, 0xcd, 0x1, 0xd86}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0xfffffffd, 0x7, 0x3000, r0, 0x5, '\x00', r1, r2, 0x3, 0x5, 0x2, 0xc}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0)

916.068484ms ago: executing program 0 (id=79):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x8, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x1)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000061125000000000009500000000000000425c407ec916187ef5d07a2ede7f5ae98246c29cb4727bc2161d4b01c204b821babff7a1015d4037c33231cd881be0f522ec9259e931c4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_MASTER={0x4}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x81)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000008b00000000000500000a28000000200a030080040003800900020073797a3000000000140000001100010000000000000000000300000a"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x15, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x20008000)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000680)=""/185, 0xb9}], 0x2}, 0x2122)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d0081", 0x7}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r7 = socket$kcm(0x10, 0x7, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0xfe33)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20050800)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r8, &(0x7f0000001640)={&(0x7f0000000200)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="29f5", 0x2}], 0x1, &(0x7f00000000c0)=[@init={0x18, 0x84, 0x0, {0xcfdd, 0xd, 0xde84, 0xdf82}}], 0x18, 0x8000}, 0x2800c051)

915.441922ms ago: executing program 2 (id=80):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xe, 0x439}, 0x2018, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x200440c1)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x1458}, 0x48800)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f0000000080)=r2, 0x12)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)

613.120815ms ago: executing program 2 (id=81):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0000000600000100000000000000000000001400000008000000000000000200000000000000000000001400000000000000000000000200000000000000000000001165747f6e00000000000000cfb94448ab5bd75de3ca92ae5d81010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000200070000108300000000960000206a"], 0xf}, 0x0)

612.543941ms ago: executing program 2 (id=82):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000914000214277000fbdbdf25080001000000000045ab21ab7a2a3c802a5b9126a600d99e2eade2d38ff9fa0f59fbc4cad5204d2f38fcd5b743786242ced1af064286708c"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40811) (async)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4) (async)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae4000000060a0b0400000000000000000200fffeb80004802800018007000100637400001c0002800800014000000002080002400000000205000300000000008c0001800c000100636f756e746572007c0002800c00014000000000000000020c00024000000000000000090c000140fffffffffffffbff0c00024000000000000000010c00024000000000000006920c00014000000000000000020c00024000000000000000010c00024000000000000000070c00014000000000000088770c00024000000000000000060900010073797a30000000000900020073797a32"], 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0xffffff91, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYRES32=r1], 0x38}}, 0x0)

543.054842ms ago: executing program 2 (id=83):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)}, 0xfffffffffffffec6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX=r4], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r6, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004)
socket$kcm(0x2, 0x2, 0x73)

492.318146ms ago: executing program 1 (id=84):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newsa={0x1dc, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x33}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x5, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0xea, 0x1, {{'sha256\x00'}, 0x510, "1cb8b5ecae449320da4ac5049a6f8146218a177df8b8fb99210988fafba6f98cac58881d5ffa7031cbe62388bb3aaa1463b2ced4b279f52a5493b0bebc8a16de6b4995e4077df8a09086436d866fac9c8ff53faeeb4d0011c14fdc6f9c13ae5d1b184c42a00c38bb700ddfa8903ceeef684d59e017abb96a0da25b15ab87ea9da45dfc3e2f4803773cc0430a0a1b3d69663be1f96968deb294731725ac67b97b1b8f"}}]}, 0x1dc}}, 0x0)

492.079117ms ago: executing program 1 (id=85):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
r2 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x109}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}}, 0x44000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001780050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000dfff00be0923651c13aa59d24d5909a83493b258ed482054316992", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff6, &(0x7f00000014c0)=""/4086}, 0x94)

402.735604ms ago: executing program 1 (id=86):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000002e80)="6dcc9d795f6ce4cb3efd2edf34682626d4135a69a187823965e762d75f00e3af1b93151f0a3b4c7087a8e6c98e237f6c726d68133283a801af8d42d14288954fc33849977c13eaf067e4b57bd925643bed724289c8037ee84ce431a176c55d3c1253c39660f1ed66af939581bed8665a76918345d1671b94cbb33a636eabe7660790183a3f8e9d743373a0019f14a6945fe43d91f64c32cb5563f7973da4ab98e458d0a7ef3bf568b7351a4cb8664ddfdcaa196e7afd4b4d56748a5aaa3b1ac0e4b03ec7a439042d71bc3036a23f6bafd2f096b7308996b4cbd5261b7596035662add2c60ab488e42db5d8c9b32408c6344b78b88cc446434e725cebe485630e692d50a1d1bffb10dddae1cd7ad37ffae8e98b9c518e413f14e5a4d5d2f0924d541f345cf2f03db359942785ac029fc3c2c546b92febf318652ce4ab2520307911dbc73774014b30169e61040299d5f396a5bb9325c3decfea48f70740f11f98394133d25fde46d86f393ccf50990441641187c78107e30d3413a6568ea55523071082aaed38fba3cd9bbd8bb59e8aea628ee763db652a63915410f8dc35e6ccd293688d3db48ee38839adef5e04677d08b0b76f2a0b358f42c3b952f5c563452ed7c94cebed81c0e455482f6bd5dbaef8e8eadb7103fcc56bc0b9848295bccd6db75605649911a7b727c8d7b7a22f96adee5fd276712b77b351282973ae8b5c76c6325e311b8dfbcf02784901347cc04cafe7bb865fb601a3fb5251f9f7477d362fad00d937b36aef55afe20d926a226a75d65583b4bcf49ddfc29297a86119a6175fcc2072a20da08e1a31e95c8655b875fff7a0595f011812a3b5a5b5ad42bf331f1bff0a8e1ccc19282c706618f4ac94aad459e218acbfd1119ccf344920d579319102ce786bb51bdd347a0d12c8916f23b42e9639aa30106c00144aee4e23ac256376c555924846cfe91d4070d43f141d3191bc9cdbc8b9db24b4bc4179d0cc4717601872e523d844782a5c20dad7b21d9ab406814c731fb9b7db523ce23e11222a6a0e7830380bc2589828291bb2aa494d529665670aafbe057c633a13ef7e954f0d6cdae3acce9ee18fc18e67069035ad5c7d68e46f5a5d22841cf460708a778bf58a8c28bed331f59065a7196ecce6dd8a70eb7e401671257910e9cdcf3c3be10a0b99eaaa75a876b69f6e96641ed0eb9166b5f07ffc79feb74c6af0820817d1b69c6a3ddbf9df1e8824b0952b4bd070a9414aa30170eefa1d02b46d14e1f19cc597957241e757bd9e6ff70be51b33607cf5e6dd9899c60255aa8724a358a797b67ac6504891146f9aea3e84f4de3f4b26559440da404e0fdb3dd9aa1573e67c0fd8940b1504892cbdb9fda58b5893c81f4425a7f9c92ed21d7f7f27ea5a5c0bd3afaa4ee831aa6e55653c9f702574fe8f94720a8448049e8e7ff5fcaf1b378701e17aeea1b89e1d0ae3e043c4a6edc05b43fc1ca6662093a6f307bc3fcfdc209ade3d4d39b889c8f75fcaec495b65e88ff24ff7e97758b48b4d3314d1c5d24b779b17a3a608ee28c7a8a797bb2f0fb25236834c3cd39e1b2541fce55d967d01061f6284f3f8457b32340db69f6ac49d306d9d0d382e4bd915d0a2e6c5d94baaa75dab3af8b153fc8d88241ee2ea377451818c33510479ee66ff889e2344e753d21e02866bb2cbb05edcff3f99a34f47f1157bde62ec46ba25472dfeb813f93f56b5716059026dbe76f331863ebf48405e288454dd26a1596006d9d21fbce9959697b0dbc3d6fea8e02f4710970d0e8aa10c5adb5f5532bfb943b45f4b9689ebc3e526bb51543121dfff533511cc4cc8439ebc42a87cdd52d94b5db10f0bbe4dd8cd281ff4ebde4aefc7cdde6f5c6a90271b2bb06cf36f641a344109fe6c85cff707228703abcff0dcb568e5be1a1224e1dd032253650e6a8b02bb9715517e1d1e2c192f1adab42eddb3a903769244d97e6f03d2de501aca9827957d4117f5b928bd955be16923dc3ebce910b3acb6d61a93dceb5069d6cc0d7755f45b1ecb417fea6c36a9f97a2f8ed596edbcf33078ba870f8283e5b182fdc9cc8248b17406e35b5257d8420bcfded5dd59498983a380a05873d148fd8ac12b6146672f5c0dd7f49ac63b34e43fc85812beee531d658a7c7548758ad854536753eb693ea5c404675da26d74c4ccaaf7c8a83e8be2b041572501fc9f630c5fb9a968a9f8495ca0d8a9d14731a89a0bd6f1e909a3d3de92fe7522e923befcc96feeb738cc673e40d16a13e11761c4ca57d3b22f726a14646a12a6d0074a5e6fd2b11700f6a214055bcba4daf182184d6c457f3e0211d9601a49c0953a6e5a21e470e8d353b2deb7bcbc3c8a681812296214ded9a60084ac77b57fd2391daf2971d0bbd585f72e71323782f43e929e74b50e11236ad01e770237a8094815a0718abaf3843af536971c0c027ac961e4b70a7f6cec0c4fa57480688b85231c209f80bba33295332b012cdb512424448b13e54943309ea3ad8f6327eccab4234a3f51f63503d5a7ef848d03e1fb403a363052a7ed8eb98596da8045bf8fb42eea14d7f580bb38cb3866b2b87f04695eda00913fe828f138a884252c87f7e88a09a1e5a911a6f338697642d938f8e8cb9e2b118085c54756084a9aadc96914d61b087eb71f49b95e2dfa8b2563fa01292a5dc308c2e44dbfe5b2c19d7320b7445b63ab1d558afd50eaa7893a3dac74845e22eec3df443de3d9f9e26c2930facd33466b6c124b5e76f88cceffb82ba229fa6492578fd6e8a9d80b74548ae702a91ea0304c2362a187ee4a91325282bd76f2531a8d3086c81474a59aeeeb539493f90c4c88c083e2c6776209db4af4a9ff5bdd89916f4fe96b4ebfdd182bbbfbf0510268d9a561fce02398fc9ad1e545e4b21fd63eb329334e6177940f87c7acc338fffcd5ef9f03bf68f22dd71e029a840cbff2303e093fdc4bd9bf2689c702f41f0561d7a61784fe109d1fec68bcdc285361b3a49764c359c3e6ec8a4ec2d03c1f067ffce9c36a0c5b6fa83d1a3d2ee08012d027f5aa2b6a9f851f8d21035e0e88e3062bb1ba2eaa60be5c92e4a5c9525032559427f95edce2e81dab23616a704ecd10a6fbabac7c24ab64f64e4092be988a1a1e9c85b573db629f75cfbf750099cd15aa588678fcae34d7182e7c691bf68ae6b08b26737be8099351c88cf11897d6c402618438a6cb3062d779546ca6bd5c202b6167846772ef1789ae83125829ccae4566f44717dc80f6600c6a4e9965061079fd0f321a5726cfa4a419fbe6563ddac9c3ed1e6ae67e8497895128917a437f68c2fbeea833e95bb85c411ebb248d7b9562d33d6add78b4104aad0b8d07044fa50745bb318e74c40bb71ddf2667a458e9a76d0cb3dd50eacd868ffd076c71ad6d8ba34901e7dcb567cdce6c18f4580851e32d7563d0523d9f918b61390e1923ee53a2f3d62f86eae48acd30d3f435db673a1a31c75225c256a40b2c089c604e966b4302b5c7be582d5f6217adc71742396755e4e36d66870270d1e8a05d5cd5d88ea6455eaf70d14b39e5c0c57fa1a83c3b89775e237243d1fd3c114f3a8699a3479e6712a0ae9d8b0873219fed29c93376c0de7cf441efd0b450ad0cbcbb243e1b4f9e202351d481470f136c3a955334db9f972165e8582127628fed3a70cb0b508b019210816d70ea1ee4229dc7cb40eca4c2650b3dc5a5ad06417999ad1feae54b3e8b29bb90dfcc469d5d8f6fdef4070425dfca8a0e95f1fd0192463de20b12dbbc6e2a726071953252350769479c0c8f63b2f415b3d36a675379d7e688475a2209c13d8f79c666937f803f70f0ca06d7a103734e7253a066f58335a7d973cbfd73f5ae3fb0101874484b0f1b5d385ad64f5e246ffc736b8d4298c0973e37e393c084688df3a905cee0708464888693bc50a51c0c03b6f1033810f7d436cf3599655a47401d673267ad601d4b2c954ff41b8cbe04a5ebcc9a32b92a074765b92c33b9de93b6bf902a5046dad2657cc4934c4d54fb6a02fdb12a09f72045de5b4f1a802af83a20ae187b27c4fe732c8f8832cdc37259e6c456c5a27fbef22da8700b355523c77328bf5e6b4647f286df2c631b0b201b9d4a1ae00263a0e9db04391f7d059a2fb3aeece358cf2107a6f93145a3ecaf09eac2bdc4cd7987d20998fa37979b4fcd101588237707527beb1b978de73af1a0c473722086858e15f80fc2093078385a2a70808d5d278d9181e1d8b05146980c369f167cb4bdbd89e8dba3d8373adad6c942d7a537f0c8e8216559f790d7a62c85346708ef8aa753db2986937f2c07f08d8421d62c46d33b70ea6761b87f0996c1725f7049c06be298d952a9e24b1732054ee347f9d16c41afba9d0fa0206695269178caaea3afabf42209f1fbbd2646a4e8be76a9ab9f5d8067d2ae3ef26eca385dc068b5ad5ea2bbcbf79bd37c60fe615ae6f5b2cb48f169ed86ecff7644f37bc3d5cc1b266a860ed57e4d866ddfa163ad5d861a98b7d5c57b9b5a84655dbc56153eda1dc99a2c5731fac35525591ff308a7e0619444c8beae5b6043d560f47b165701bc25263c61375a23b7a2cbd16c0a11d0b0f564821cfc34a1d4bb87ce4c277212d49b0a98a35c9e46dbc3a60aa169f24c841e055995773e56cc4cedae413195507d1d780f43446e1b3420506c9219b3e7475f7a7159b3ca8a06ce9f5a91f479a50bd41f46076e5e5d0ff72f1aaf36bbab80651da43d6f28b0ce51478a9e92917b07910fa425427a21782d140f9bf571e94e122b363eb173af0e08c1dd37a721cf6d7ee26f921acd2cf57f10d5fca00a208501daf4f2afe68359d7214ccbfb8da020ba13adab952040cb922d0483a5141ca6ed8ce74aa121cba181d7e29f14d8677d3bdd953014961c857da07e6b6f90659f1b3cc7bce064c887c87f40e449ce4a5f1f8772702fba90b6669cd41d3a75c3480417ac1c8e9a752ed8bd691b86ea133350de4086561cb2a66eea3a7d390acae2f5a3b091d4a242328bcd90cc5f2dc0c50bf00ff290afd6f11c1afec4c9540c57cf99632bdbd2555526c114e0053a396dd57572811bbdfa023e28c9ca1282d6cd9965a028df1fafa3a70366bac6b370693dee0680e14760eba82810cd7538c86bcf7a31097e3a0bf81e5a994402fd6074f565075fc544f2db15f94e61597e4d1540ba5259fa7b85acfe16d1485c1154e1f1e473cd4458c8ce700a279aae4387718dfbc36848a5c16131285395fc6fc2bf5699810a54931d89c8c87ccb5d8a82131d985efd03c2d40ef347d8db2bd74613fdbef892b37c3744e7c7e19bca3f8116a711f05ff71bba07fb5a1797f30790eab38a25819adb21e30d792016790d05aceb26a3bb22b1a017032b4150bb1428937d22fae28c98f8678caac09974408e550ad3aebe4df0f2ab521195141ccb11317e0cfa9a85fe89f820f72d1ef1d5ea2fd157926fb6bc91b5890d75f03c255771d83109fdc726fb734ab1a5cfac12378e6f97847ebe3714acd957694162c6b6e6e4dfbd7578996e2c488bedb3f8ea44c0ee67bfba2a504bc07a708b43dafe8a213587c1c1b7578a7cdb19c508030891bafe9521e2f6f5261916fba8ba2c2a4a1881312006e3691def7541c34806e6bed5eb8dd7327d03a1264aa5ff23ec2df800f58c2b78cb2fb8531ec84379e64c5c48eef2b0a77837d60e663392dd286b5f3b2955bc868038e64d34ffdebdac0fad7e769ad5c7a3657da3bbf01934efe08a40898156b8513e361db88296b0e121b343d044dedb47", &(0x7f00000000c0)=""/193, &(0x7f0000000240)="0a67be9faedc7c44dd78dea75947262fcf8adf1316492a298835fb2c62b58913b40905093b0e12dee98b686200a0c48aaffb07074d1589c3dea009588640db7e05fc6dd8427e7e89142d952831c6d71b32966f1e8680480b9848ceef94ed5c6bf2ed3257193661e8db7825538ae9443a9dc6b1cb2387d6b0a1e067fb318042d38cbb7371cea80515022a56e0cf4126", &(0x7f0000000300)="f4951a92b23a9f40ef623c490f85c646675ab33bf2ed9d7770dfb71f990659a2394239ba47e626f350dbb769f011a08a3b2d4e2c61bff400410647188dce4120afdced37ecbd052b429918758894db2d6ecf0417f8a5295ac0ef456c37bb76bf71f3a8d9e87f597b264d2a64915ec1882735b102c8d692587e980789c8685949e9d447c0cddc3bf932e5a2b35fbe22d61ac9c7a16facc36457de3adbd5a08cc10eb1f461b2cd019a2b80662ce11446c3239a846f106b4f769871e5310174f2458bc2e2162d3cd70520407a425bec37fea8a09c927ae29096d2c60f8c1b7b5dc8d8612971c8d09f9709dbdd975e3477c21d23", 0x6, r0, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

342.691376ms ago: executing program 1 (id=87):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe22, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100000000000b000000000000dbf50b31ff"], 0x48)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100720280050002000000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000"], 0x7c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="b4000000000101040000000000000000020000002400018014000180080001000000000008000200ac1e00010c0002800500010000000000580002801400018008000100e000000168000200640101011400018008000100e000000208000200e0000002d7fe01801400030000000000000000000000ffffac1e01011400040000000000000000000000ffff6401010008000740000000001c000680140004002001000000000000000000000000000104000380"], 0xb4}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054)
setsockopt$sock_attach_bpf(r2, 0x84, 0xb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)

2.267078ms ago: executing program 0 (id=88):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd8}, 0x94)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x8, 0x6d, 0x5, 0x0, 0x6, 0x10841, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc7d, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x800, 0x0, 0x5, 0x0, 0x5, 0x7, 0x5, 0x0, 0xde6e, 0x0, 0x1b8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0x3, 0x8}, {0x2, 0x0, 0xfffffffc, 0x8}], 0x10, 0xffffffff}, 0x94)
close(r3)
socket$kcm(0x2c, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x72, &(0x7f0000000000)=r6, 0xc)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0xfe, 0xe, 0x0, 0x0, 0x2, 0x42000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb3b, 0x4, @perf_config_ext={0x96}, 0x0, 0x2, 0x1000000, 0x9, 0x4, 0x8, 0x6, 0x0, 0x36, 0x0, 0x19be}, r0, 0x10, r1, 0x0)

0s ago: executing program 0 (id=89):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9e, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x46101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x140a, 0x429, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008040)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[], 0x38, 0x4048800}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r5, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000780)="1c0000005e007f029e0b18c9d25a27a69801976ab0a272a2a788bab6", 0x1c}], 0x1}, 0x840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)={0x3c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x1d, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}, @nested={0xc, 0x13, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid=0xee00}]}, @generic="b5"]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1, 0x18, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0x4, 0xe5, &(0x7f0000001080)=""/229, 0x41000, 0x2, '\x00', r7, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x4, 0xd, 0x5, 0x1}, 0x10, 0x0, r9, 0x5, &(0x7f00000013c0)=[r3], &(0x7f0000001400)=[{0x5, 0x2, 0xf, 0x9}, {0x2, 0x3, 0x5, 0x6}, {0x0, 0x2, 0xf, 0x6}, {0x2, 0x4, 0xb, 0x4}, {0x4, 0x1, 0x1, 0xa}], 0x10, 0xc5}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10)
openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43022' (ED25519) to the list of known hosts.
syzkaller login: [   48.319840][ T5775] cgroup: Unknown subsys name 'net'
[   48.463881][ T5775] cgroup: Unknown subsys name 'cpuset'
[   48.473659][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.264978][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.509627][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.513550][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.516956][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.517550][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.522121][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.523951][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.526349][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.529287][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.536059][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.539444][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.625472][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.628830][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.631912][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.635398][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.638602][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.826051][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.922487][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.007702][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.010564][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.013196][ T5847] bridge_slave_0: entered allmulticast mode
[   55.016560][ T5847] bridge_slave_0: entered promiscuous mode
[   55.021848][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.047163][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.050436][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.053564][ T5847] bridge_slave_1: entered allmulticast mode
[   55.056794][ T5847] bridge_slave_1: entered promiscuous mode
[   55.096665][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.116567][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.119916][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.122636][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.125004][ T5843] bridge_slave_0: entered allmulticast mode
[   55.127695][ T5843] bridge_slave_0: entered promiscuous mode
[   55.157400][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.160506][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.163347][ T5843] bridge_slave_1: entered allmulticast mode
[   55.166644][ T5843] bridge_slave_1: entered promiscuous mode
[   55.185608][ T5847] team0: Port device team_slave_0 added
[   55.207985][ T5847] team0: Port device team_slave_1 added
[   55.218075][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.249582][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.254342][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.257369][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.268251][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.275322][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.278388][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.289466][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.294428][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.297615][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.301179][ T5852] bridge_slave_0: entered allmulticast mode
[   55.305236][ T5852] bridge_slave_0: entered promiscuous mode
[   55.310311][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.313674][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.316827][ T5852] bridge_slave_1: entered allmulticast mode
[   55.321035][ T5852] bridge_slave_1: entered promiscuous mode
[   55.373268][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.378670][ T5843] team0: Port device team_slave_0 added
[   55.398234][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.421067][ T5843] team0: Port device team_slave_1 added
[   55.467630][ T5852] team0: Port device team_slave_0 added
[   55.473546][ T5847] hsr_slave_0: entered promiscuous mode
[   55.476264][ T5847] hsr_slave_1: entered promiscuous mode
[   55.511963][ T5852] team0: Port device team_slave_1 added
[   55.515555][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.518383][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.529181][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.534647][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.537432][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.548078][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.593922][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.596322][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.606005][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.636285][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.639190][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.649039][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.662422][ T5843] hsr_slave_0: entered promiscuous mode
[   55.665635][ T5843] hsr_slave_1: entered promiscuous mode
[   55.668583][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   55.671976][ T5843] Cannot create hsr debugfs directory
[   55.740578][ T5852] hsr_slave_0: entered promiscuous mode
[   55.743294][ T5852] hsr_slave_1: entered promiscuous mode
[   55.745867][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   55.748037][ T5852] Cannot create hsr debugfs directory
[   55.976175][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.994725][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.001887][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.008171][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.052464][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.065757][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.081792][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.087220][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.138242][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.143956][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.154406][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.160546][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.244191][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.277716][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.292660][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.310235][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.313336][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.323966][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.328803][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.342369][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.345455][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.350854][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.353990][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.366142][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.368627][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.382171][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.392026][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.395069][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.400211][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.403084][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.501139][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.599942][ T5849] Bluetooth: hci0: command tx timeout
[   56.601923][ T5849] Bluetooth: hci1: command tx timeout
[   56.619488][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.626247][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.663151][ T5843] veth0_vlan: entered promiscuous mode
[   56.672035][ T5843] veth1_vlan: entered promiscuous mode
[   56.679808][ T5240] Bluetooth: hci2: command tx timeout
[   56.691956][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.723444][ T5843] veth0_macvtap: entered promiscuous mode
[   56.731608][ T5843] veth1_macvtap: entered promiscuous mode
[   56.761496][ T5852] veth0_vlan: entered promiscuous mode
[   56.772444][ T5852] veth1_vlan: entered promiscuous mode
[   56.797345][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.801039][ T5852] veth0_macvtap: entered promiscuous mode
[   56.812664][ T5852] veth1_macvtap: entered promiscuous mode
[   56.816494][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.819816][ T5847] veth0_vlan: entered promiscuous mode
[   56.832208][ T5847] veth1_vlan: entered promiscuous mode
[   56.837938][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.842834][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.856238][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.859941][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.862958][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.868013][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.885042][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.895140][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.908764][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.912653][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.951042][ T5847] veth0_macvtap: entered promiscuous mode
[   56.973098][ T5847] veth1_macvtap: entered promiscuous mode
[   56.991822][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.994476][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.020227][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.025766][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.028399][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.038108][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.051648][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.054577][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.054793][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.057772][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.066415][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.070666][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.098654][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.104189][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.134255][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.150132][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.152760][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.187189][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.190749][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.201809][ T5915] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   57.225016][ T5915] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   57.245727][ T5917] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.254426][ T5915] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   57.257965][ T5915] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   57.785757][ T5944] netlink: 'syz.2.11': attribute type 1 has an invalid length.
[   57.791578][ T5944] netlink: 620 bytes leftover after parsing attributes in process `syz.2.11'.
[   57.870406][ T5948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.146965][    C1] hrtimer: interrupt took 249944 ns
[   58.427025][ T5966] pim6reg1: entered allmulticast mode
[   58.621262][ T5983] netlink: 'syz.1.22': attribute type 21 has an invalid length.
[   58.623828][ T5983] netlink: 14565 bytes leftover after parsing attributes in process `syz.1.22'.
[   58.679142][ T5240] Bluetooth: hci1: command tx timeout
[   58.681295][ T5240] Bluetooth: hci0: command tx timeout
[   58.759173][ T5849] Bluetooth: hci2: command tx timeout
[   58.866263][ T5992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25'.
[   58.934696][   T33] audit: type=1107 audit(1758070744.348:2): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6+^($g!6M\@I1mȨ'
[   59.026153][ T6018] netlink: 15407 bytes leftover after parsing attributes in process `syz.1.31'.
[   59.762063][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   60.759212][ T5240] Bluetooth: hci1: command tx timeout
[   60.762301][ T5849] Bluetooth: hci0: command tx timeout
[   60.839114][ T5849] Bluetooth: hci2: command tx timeout
[   63.404756][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1860195809 wd_nsec: 1860195857
[   63.959049][ T5849] Bluetooth: hci0: command tx timeout
[   63.960899][ T5849] Bluetooth: hci1: command tx timeout
[   63.962739][ T5849] Bluetooth: hci2: command tx timeout
[   64.438297][ T6092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'.
[   64.448369][ T6092] unsupported nlmsg_type 40
[   64.486685][ T6092] netlink: 72 bytes leftover after parsing attributes in process `syz.0.54'.
[   64.536036][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.846991][ T6117] netlink: 176 bytes leftover after parsing attributes in process `syz.2.61'.
[   64.853146][ T6117] netlink: 100 bytes leftover after parsing attributes in process `syz.2.61'.
[   64.908440][ T5240] Bluetooth: hci2: SCO packet for unknown connection handle 0
[   65.168351][ T6120] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.835260][ T6168] netlink: 'syz.0.77': attribute type 2 has an invalid length.
[   68.840011][ T6168] netlink: 268 bytes leftover after parsing attributes in process `syz.0.77'.
[   68.854753][ T6170] netlink: 188 bytes leftover after parsing attributes in process `syz.2.78'.
[   68.930196][ T6172] Zero length message leads to an empty skb
[   68.936310][ T6172] netlink: 830 bytes leftover after parsing attributes in process `syz.0.79'.
[   69.374938][ T6192] openvswitch: netlink: Missing valid actions attribute.
[   69.377802][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.524213][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'.
[   69.527650][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'.
[   69.532288][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   69.535682][ T6198] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   69.538186][ T6198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.178930][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  175.181299][    C1] rcu: 	0-...!: (0 ticks this GP) idle=c004/1/0x4000000000000000 softirq=16040/16040 fqs=0
[  175.186350][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=8277, q=392 ncpus=2)
[  175.189531][    C1] Sending NMI from CPU 1 to CPUs 0:
[  175.189594][    C0] NMI backtrace for cpu 0
[  175.189610][    C0] CPU: 0 UID: 0 PID: 6205 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) 
[  175.189619][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.189624][    C0] RIP: 0010:check_preemption_disabled+0x17/0x120
[  175.189640][    C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 be 3e 26 07 48 89 44 24 08 <65> 8b 05 c6 3e 26 07 65 8b 0d bb 3e 26 07 f7 c1 ff ff ff 7f 74 23
[  175.189646][    C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00000082
[  175.189653][    C0] RAX: d6031a7fd00c3b00 RBX: 0000000000000087 RCX: d6031a7fd00c3b00
[  175.189658][    C0] RDX: 0000000000010000 RSI: ffffffff8d9cdff6 RDI: ffffffff8be33e80
[  175.189662][    C0] RBP: ffffc90000007918 R08: 0000000000000003 R09: 0000000000000004
[  175.189667][    C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: dffffc0000000000
[  175.189671][    C0] R13: ffffffff81ada91e R14: ffff88804b027a98 R15: ffff88810e559cc0
[  175.189676][    C0] FS:  00007f450f99c6c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  175.189681][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.189685][    C0] CR2: 000000110c2e96f2 CR3: 0000000027eae000 CR4: 00000000000006f0
[  175.189711][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  175.189716][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  175.189720][    C0] Call Trace:
[  175.189726][    C0]  <IRQ>
[  175.189732][    C0]  lock_release+0xbc/0x3e0
[  175.189746][    C0]  _raw_spin_unlock_irqrestore+0x70/0x110
[  175.189754][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.189760][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.189766][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.189773][    C0]  hrtimer_try_to_cancel+0x3be/0x420
[  175.189782][    C0]  hrtimer_cancel+0x3b/0x50
[  175.189787][    C0]  cpu_clock_event_stop+0xd9/0x130
[  175.189798][    C0]  __perf_event_overflow+0x580/0xe40
[  175.189808][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  175.189815][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  175.189825][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  175.189835][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  175.189844][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  175.189856][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.189862][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.189869][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  175.189878][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  175.189886][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  175.189895][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  175.189903][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  175.189913][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  175.189922][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  175.189932][    C0]  </IRQ>
[  175.189934][    C0]  <TASK>
[  175.189936][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.189944][    C0] RIP: 0010:alloc_vmap_area+0x4ae/0x14a0
[  175.189955][    C0] Code: 68 75 09 e8 54 ff ac ff 31 db eb 2b e8 4b ff ac ff 49 8d 5f 28 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 78 a6 10 00 48 8b 1b 48 8b 44 24 40 4c 8d 78 f0
[  175.189960][    C0] RSP: 0018:ffffc900064ef700 EFLAGS: 00000246
[  175.189966][    C0] RAX: 1ffff11003e7b173 RBX: ffff88801f3d8b98 RCX: dffffc0000000000
[  175.189971][    C0] RDX: ffffc900039a2000 RSI: 00000000000000c4 RDI: 00000000000000c5
[  175.189975][    C0] RBP: ffffc900064ef838 R08: 0000000000000003 R09: 0000000000000004
[  175.189979][    C0] R10: dffffc0000000000 R11: fffff52000c9ded0 R12: 0000000000002000
[  175.189983][    C0] R13: 00001fffffffff01 R14: 0000000000002000 R15: ffff88801f3d8b70
[  175.189994][    C0]  ? __pfx_alloc_vmap_area+0x10/0x10
[  175.190002][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  175.190012][    C0]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  175.190023][    C0]  ? __get_vm_area_node+0x13f/0x300
[  175.190031][    C0]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  175.190041][    C0]  __get_vm_area_node+0x1f8/0x300
[  175.190050][    C0]  __vmalloc_node_range_noprof+0x301/0x12f0
[  175.190060][    C0]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  175.190069][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  175.190079][    C0]  ? futex_unqueue+0x22/0x240
[  175.190089][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  175.190132][    C0]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  175.190141][    C0]  __vmalloc_noprof+0xb1/0xf0
[  175.190151][    C0]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  175.190159][    C0]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  175.190169][    C0]  bpf_prog_alloc+0x3c/0x1a0
[  175.190182][    C0]  bpf_prog_load+0x735/0x1930
[  175.190193][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  175.190205][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  175.190213][    C0]  ? security_bpf+0x7e/0x300
[  175.190220][    C0]  __sys_bpf+0x528/0x870
[  175.190229][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  175.190239][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  175.190247][    C0]  ? rcu_is_watching+0x15/0xb0
[  175.190255][    C0]  __x64_sys_bpf+0x7c/0x90
[  175.190263][    C0]  do_syscall_64+0xfa/0x3b0
[  175.190272][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.190277][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.190284][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.190291][    C0] RIP: 0033:0x7f450eb8eba9
[  175.190299][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.190304][    C0] RSP: 002b:00007f450f99c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  175.190311][    C0] RAX: ffffffffffffffda RBX: 00007f450edd5fa0 RCX: 00007f450eb8eba9
[  175.190315][    C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  175.190319][    C0] RBP: 00007f450ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  175.190323][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.190326][    C0] R13: 00007f450edd6038 R14: 00007f450edd5fa0 R15: 00007ffd43ebf828
[  175.190337][    C0]  </TASK>
[  175.190570][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g8277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  175.412738][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=2801
[  175.415344][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g8277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  175.418984][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  175.422245][    C1] rcu: RCU grace-period kthread stack dump:
[  175.424371][    C1] task:rcu_preempt     state:I stack:26632 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  175.428421][    C1] Call Trace:
[  175.429567][    C1]  <TASK>
[  175.430607][    C1]  __schedule+0x1798/0x4cc0
[  175.432331][    C1]  ? __lock_acquire+0xab9/0xd20
[  175.433992][    C1]  ? __pfx___schedule+0x10/0x10
[  175.435813][    C1]  ? schedule+0x91/0x360
[  175.437573][    C1]  schedule+0x165/0x360
[  175.439066][    C1]  schedule_timeout+0x12b/0x270
[  175.440863][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  175.442766][    C1]  ? __pfx_process_timeout+0x10/0x10
[  175.444866][    C1]  ? prepare_to_swait_event+0x341/0x380
[  175.447160][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  175.449190][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  175.451234][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.453397][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  175.455265][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  175.457386][    C1]  ? finish_swait+0xcd/0x1f0
[  175.459324][    C1]  rcu_gp_kthread+0x99/0x390
[  175.461459][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  175.463679][    C1]  ? __kthread_parkme+0x7b/0x200
[  175.465728][    C1]  ? __kthread_parkme+0x1a1/0x200
[  175.467933][    C1]  kthread+0x711/0x8a0
[  175.469671][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  175.471832][    C1]  ? __pfx_kthread+0x10/0x10
[  175.473840][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.476090][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.478404][    C1]  ? __pfx_kthread+0x10/0x10
[  175.480420][    C1]  ret_from_fork+0x439/0x7d0
[  175.482432][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  175.484594][    C1]  ? __switch_to_asm+0x39/0x70
[  175.486616][    C1]  ? __switch_to_asm+0x33/0x70
[  175.488644][    C1]  ? __pfx_kthread+0x10/0x10
[  175.490530][    C1]  ret_from_fork_asm+0x1a/0x30
[  175.492648][    C1]  </TASK>

VM DIAGNOSIS:
01:01:00  Registers:
info registers vcpu 0

CPU#0
RAX=f3f3f300f1f1f1f1 RBX=0000000000000802 RCX=ffff88810e559cc0 RDX=0000000000010000
RSI=0000000000000802 RDI=ffff88804b027a98 RBP=ffffc90000007918 RSP=ffffc90000007880
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f00
R12=dffffc0000000000 R13=ffff88804b027b00 R14=ffff88804b027a80 R15=1ffff92000000f10
RIP=ffffffff8b7d0e77 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f450f99c6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2e96f2 CR3=0000000027eae000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f450eda7498 00007f450eda7470 XMM03=00007f450eda74a8 00007f450eda74a0
XMM04=00007f450f90d100 00007f450eda7460 XMM05=00007f450eda7478 00007f450eda74c0
XMM06=00007f450eda74b8 00007f450eda74b0 XMM07=00007f450eda74a8 00007f450eda74a0
XMM08=0000000000000000 00007f450ec12ee7 XMM09=0000000000000000 00007f450ec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e02b0
R8 =ffff8880216f8237 R9 =1ffff110042df046 R10=dffffc0000000000 R11=ffffffff854fc840
R12=dffffc0000000000 R13=ffffffff99b028f9 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fc8bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc8af18da8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000008000003b7 fffffff800000207 XMM03=0000001600000085 00000000000004b7
XMM04=9500000016000000 8500000000000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b05e70000000008 b700000000000000
XMM08=0000000000040014 01011eacffff0000 XMM09=0000000000000000 00007f5d7da12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
