last executing test programs:

7.493014305s ago: executing program 2 (id=98):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001e80)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x2)

7.28177995s ago: executing program 4 (id=101):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0xfffc}]}, 0x94)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000870000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

7.229743092s ago: executing program 2 (id=103):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)

6.956346822s ago: executing program 2 (id=106):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0x9, 0x0, 0x2, 0x4, 0x0, 0x5, 0x80, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3a, 0x2a}, 0x8, 0x7, 0x2, 0x0, 0xf, 0x1, 0xa9a, 0x0, 0x6, 0x0, 0x1ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1470c, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x1f, 0x0, 0xc}, 0x28)

6.852159966s ago: executing program 4 (id=107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702001ff8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94)

6.851168296s ago: executing program 0 (id=108):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80}, 0x10000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x20, 0xc5}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.376889822s ago: executing program 0 (id=111):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x97}}}, 0x62, 0x0, 0x0, 0x0, 0x5c8}, 0x2000f765)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x21, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.375164259s ago: executing program 4 (id=113):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x3}, 0x29, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a0000000500010006000000140007"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1404, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x80)

6.030966398s ago: executing program 2 (id=115):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f00fe805e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8941, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r6}, 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

5.924271101s ago: executing program 3 (id=116):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x240008c0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/185, 0xb9}, 0x40000040)
socket$nl_generic(0x10, 0x3, 0x10)

5.800034288s ago: executing program 3 (id=118):
r0 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe76188a61d36c46a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x8001}, 0x10800, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000150000003d3600000200000000000000", @ANYRES32, @ANYBLOB="0000001e00000000000000000000400000062f0f00130000001072d5cf532380a8d4e6764ab1d0481fc877685305609994f6b9bebb33e76caf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x1c, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf29000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25)
socket$kcm(0x2, 0x922000000003, 0x106)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a060000000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003400000000204000280140000001000010000000000000000000084000a"], 0xdc}}, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e00000000d70000000200"/20, @ANYRES32, @ANYBLOB="810300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000400"/28], 0x50)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], &(0x7f0000000500)=""/74, 0x37, 0x4a, 0x1, 0xfff}, 0x28)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r7, @ANYBLOB="000000009503000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000711029000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xfffffda1, &(0x7f0000000080)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000101ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4008010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d040000000000000000000004000000000400000000000008030000000000000061", @ANYRES32=r7, @ANYRES8], 0x0, 0x52, 0x0, 0x0, 0x8001}, 0x28)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0xc}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, r3, 0x0)

5.447845301s ago: executing program 4 (id=119):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b25, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r5], 0xfe33)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000080ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f100b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.412615588s ago: executing program 0 (id=120):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000002400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x8, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0x60, 0x61, 0x0, 0x5f, 0x0, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x1, 0xfffffffe, 0x0, @void, @value=0x4000000}, 0x28)

5.347098577s ago: executing program 2 (id=121):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d35010000000000950000000000000069166b0000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="4c9bc5376b22498d87e43aad998bc9e06a919b75a5961112c82908d5b9d2241e5997e7582aa760525176d638b52a3b8d2d582be3344647d5d21810603172887708857dc880a24bb357eb15ed0cb30d9bb9c8d52d8c82afa3ac22b2452d4f894031cfb85dcf44356861d02a8998e8444c44388a78586b87101320b41aaa136a3485e9abfc1e9a52ae65feb4947f7d30983d54c6ee")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45)
recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x40000040)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0xa)
socket$inet6(0xa, 0xa, 0xb2f)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)

5.291580073s ago: executing program 3 (id=123):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) (async)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x5, 0xd, 0x7, 0x0, 0x7, 0x7a5d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x576b, 0x6, 0x8, 0xc6, 0x4, 0x3, 0x0, 0xffffffb9, 0x0, 0x8}, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5069}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000) (async)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
socket$kcm(0x10, 0x2, 0x10)

5.291043881s ago: executing program 0 (id=124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000f38500000083000000bf090000000000005509010000000000950000000000000018110000ced72146c8c207d775f7010df3107c5a180ffb8c946a97753d90191dc09c54e0686e19bd594dd2676f08ac1eabec9d09cfeeb325b5697bfc925bd776a23d8f23602dfd038a57cec9b932357bbed243670f0446a4beb7a381161c4d081eb8ad880b8a7e132411287a0df858", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fd0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/4120, 0x1018}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r4}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @exit]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x1d, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x4, 0x8, 0x7, 0x2, 0x7}, @ldst={0x3, 0x2, 0x1, 0x8, 0xa, 0x80, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x10000000, 0xad, &(0x7f0000000840)=""/173, 0x40f00, 0x4a, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r6, 0x25, 0x6, @val=@netfilter={0x0, 0x1, 0xf23}}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x3, 0x5, 0xba, 0xd, 0x0, 0x7, 0x12000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1c, 0x0, @perf_bp={0x0, 0xa}, 0x108210, 0x2, 0x6, 0x7, 0x26, 0x48, 0x200, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20)

4.866426746s ago: executing program 3 (id=126):
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000003500009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

4.464126137s ago: executing program 4 (id=127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001e80)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x2)

4.449603116s ago: executing program 4 (id=128):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4\x04\x00+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x811e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x4110, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
close(r3)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x94)
r5 = syz_clone(0x100000, &(0x7f0000000400)="f3d24150740db98f426b5c39633e5719f9e42dcc7b1600d565371b5a3742a20038ca7be64813bbf0fb74b8b0e1c5fe62830a992563c3cd170a9b7c04619194f4463dad434f7c9d2656b75e7fd668d27f0addcb630c07971ef00a090a0ec18b0fa897a257e2cb0e115a2607cd09c7108dee6186db366e48f7d8a0ce7fd15542ffa7954aba90fc39", 0x87, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000300)="d2bad85493ccc6832bcc0998632103c8a1cd16d14a4dca3892337bf68670f404b20e46ee9f5280b1a3f9b3fde57ce90036ffb60e92a57c599c9dc5dea29f631e5fb6eed63a52b7bce7069bd1c53cc4b92f61f49d26e451df859da54245fd1812332bc39febb941ad0dd065a820d00405e66ab66de7")
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x3, 0x7, 0x8, 0x80, 0x0, 0x263e4075, 0x328c0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x6d19, 0x8}, 0x100000, 0xf488, 0x3, 0x3, 0x3, 0x8000, 0xccb8, 0x0, 0xff, 0x0, 0x6}, r5, 0x6, 0xffffffffffffffff, 0x1)

4.339906385s ago: executing program 3 (id=130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x84, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800812014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec687ab9", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.266973879s ago: executing program 0 (id=131):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)

4.1921149s ago: executing program 2 (id=132):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f00fe805e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8941, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r6}, 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

3.995958456s ago: executing program 3 (id=133):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x41, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="c8f86040b572c406953614", 0xb}, {&(0x7f0000000340)="58c8", 0x2}], 0x2}, 0x801)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1ff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000)
r7 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8e065a047c791b62}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xa9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008801)
recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002002)
recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2)

1.051558045s ago: executing program 0 (id=135):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f00fe805e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8941, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r7}, 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

679.119668ms ago: executing program 1 (id=138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x2)

587.811091ms ago: executing program 1 (id=139):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x80)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000000c, 0x42002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x2020, 0xc8, 0x2, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
fstat(0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="480000001000010000000000000000000000000a"], 0x48}}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632000fc04082f00db5b686158bbcfe8875a060305000023000000000000000000000000ac1414aa3a2008"], 0xfdef)

372.202468ms ago: executing program 1 (id=140):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000100001027bf00000005"], 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c6394f90324fc602f000000", 0x18}], 0x1}, 0x0)

301.49953ms ago: executing program 1 (id=141):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020030f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94)

212.315282ms ago: executing program 1 (id=142):
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000035000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

0s ago: executing program 1 (id=143):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0xfffffffffffffe71, &(0x7f0000000100), 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xb}, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async)
ioctl$TUNSETOWNER(r0, 0x400454cc, r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts.
[   87.239272][ T5850] cgroup: Unknown subsys name 'net'
[   87.410706][ T5850] cgroup: Unknown subsys name 'cpuset'
[   87.419882][ T5850] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.280487][ T5850] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.003280][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.011798][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.036691][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.067960][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.077060][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.080019][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.085985][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.094746][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.107036][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.115534][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.123724][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.133012][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.134145][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.147992][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.167353][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.169655][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.181961][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.186808][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.192442][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.207757][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.216437][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.226025][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.229907][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.243553][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.251563][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.038846][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   93.145441][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   93.173806][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   93.264509][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   93.395903][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   93.414264][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.422475][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.433102][ T5865] bridge_slave_0: entered allmulticast mode
[   93.441996][ T5865] bridge_slave_0: entered promiscuous mode
[   93.453656][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.461093][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.469774][ T5865] bridge_slave_1: entered allmulticast mode
[   93.477312][ T5865] bridge_slave_1: entered promiscuous mode
[   93.596995][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.643274][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.752783][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.760227][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.768200][ T5860] bridge_slave_0: entered allmulticast mode
[   93.775528][ T5860] bridge_slave_0: entered promiscuous mode
[   93.783146][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.791185][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.798613][ T5864] bridge_slave_0: entered allmulticast mode
[   93.806045][ T5864] bridge_slave_0: entered promiscuous mode
[   93.846807][ T5865] team0: Port device team_slave_0 added
[   93.867802][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.875265][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.883630][ T5860] bridge_slave_1: entered allmulticast mode
[   93.893159][ T5860] bridge_slave_1: entered promiscuous mode
[   93.916446][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.923950][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.934220][ T5864] bridge_slave_1: entered allmulticast mode
[   93.942225][ T5864] bridge_slave_1: entered promiscuous mode
[   93.949093][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.956823][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.964082][ T5873] bridge_slave_0: entered allmulticast mode
[   93.971782][ T5873] bridge_slave_0: entered promiscuous mode
[   93.981308][ T5865] team0: Port device team_slave_1 added
[   94.002810][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.010437][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.018019][ T5872] bridge_slave_0: entered allmulticast mode
[   94.025508][ T5872] bridge_slave_0: entered promiscuous mode
[   94.034508][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.041876][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.049229][ T5872] bridge_slave_1: entered allmulticast mode
[   94.056940][ T5872] bridge_slave_1: entered promiscuous mode
[   94.113694][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.121315][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.130660][ T5873] bridge_slave_1: entered allmulticast mode
[   94.138649][ T5873] bridge_slave_1: entered promiscuous mode
[   94.181219][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.189963][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.216766][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.245365][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.257172][ T5869] Bluetooth: hci2: command tx timeout
[   94.263105][ T5880] Bluetooth: hci3: command tx timeout
[   94.263129][ T5878] Bluetooth: hci0: command tx timeout
[   94.263226][   T52] Bluetooth: hci1: command tx timeout
[   94.300356][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.307698][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.334513][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.345356][   T52] Bluetooth: hci4: command tx timeout
[   94.367958][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.381663][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.393572][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.405703][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.420874][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.433900][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.473594][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.600041][ T5873] team0: Port device team_slave_0 added
[   94.610489][ T5872] team0: Port device team_slave_0 added
[   94.618883][ T5860] team0: Port device team_slave_0 added
[   94.644270][ T5865] hsr_slave_0: entered promiscuous mode
[   94.651237][ T5865] hsr_slave_1: entered promiscuous mode
[   94.661730][ T5873] team0: Port device team_slave_1 added
[   94.683957][ T5872] team0: Port device team_slave_1 added
[   94.704805][ T5860] team0: Port device team_slave_1 added
[   94.712622][ T5864] team0: Port device team_slave_0 added
[   94.721867][ T5864] team0: Port device team_slave_1 added
[   94.809096][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.816107][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.842340][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.855856][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.863012][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.889489][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.901768][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.909005][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.934983][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.975050][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.982389][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.008453][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.028083][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.035214][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.062399][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.083320][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.090505][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.116847][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.129695][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.137072][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.163172][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.228876][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.235875][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.263937][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.457177][ T5873] hsr_slave_0: entered promiscuous mode
[   95.463685][ T5873] hsr_slave_1: entered promiscuous mode
[   95.470624][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   95.477394][ T5873] Cannot create hsr debugfs directory
[   95.489740][ T5860] hsr_slave_0: entered promiscuous mode
[   95.496682][ T5860] hsr_slave_1: entered promiscuous mode
[   95.503087][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   95.509282][ T5860] Cannot create hsr debugfs directory
[   95.529474][ T5864] hsr_slave_0: entered promiscuous mode
[   95.535967][ T5864] hsr_slave_1: entered promiscuous mode
[   95.542543][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[   95.548679][ T5864] Cannot create hsr debugfs directory
[   95.560144][ T5872] hsr_slave_0: entered promiscuous mode
[   95.566840][ T5872] hsr_slave_1: entered promiscuous mode
[   95.573046][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   95.579014][ T5872] Cannot create hsr debugfs directory
[   96.064560][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.129265][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.141483][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.174046][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.297684][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.316003][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.330312][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.339943][ T5869] Bluetooth: hci1: command tx timeout
[   96.345404][ T5869] Bluetooth: hci2: command tx timeout
[   96.351049][ T5880] Bluetooth: hci3: command tx timeout
[   96.352304][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.356789][   T52] Bluetooth: hci0: command tx timeout
[   96.417877][   T52] Bluetooth: hci4: command tx timeout
[   96.458449][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.484005][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.530076][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.547922][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.569863][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.660212][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   96.672553][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.699774][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.710951][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.762128][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.775317][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.782691][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.859271][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.866551][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.887790][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.898780][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.914778][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.941507][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.979223][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.045857][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   97.092905][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.100111][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.139995][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.147244][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.183056][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.258749][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   97.326621][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.355528][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.362720][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.386072][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.393360][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.476086][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   97.529753][ T3176] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.537059][ T3176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.554517][ T1218] cfg80211: failed to load regulatory.db
[   97.584005][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.624674][ T3176] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.631881][ T3176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.712015][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   97.730363][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.793051][ T3176] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.800384][ T3176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.828999][ T3176] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.836423][ T3176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.972902][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.074390][ T5865] veth0_vlan: entered promiscuous mode
[   98.149772][ T5865] veth1_vlan: entered promiscuous mode
[   98.262137][ T5872] veth0_vlan: entered promiscuous mode
[   98.347186][ T5872] veth1_vlan: entered promiscuous mode
[   98.354891][ T5865] veth0_macvtap: entered promiscuous mode
[   98.413030][ T5865] veth1_macvtap: entered promiscuous mode
[   98.419109][   T52] Bluetooth: hci2: command tx timeout
[   98.420777][ T5869] Bluetooth: hci1: command tx timeout
[   98.427200][ T5880] Bluetooth: hci3: command tx timeout
[   98.435552][   T52] Bluetooth: hci0: command tx timeout
[   98.501798][   T52] Bluetooth: hci4: command tx timeout
[   98.520955][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.532345][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.545764][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.564376][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.620001][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.629782][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.656084][ T5872] veth0_macvtap: entered promiscuous mode
[   98.672250][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.682292][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.700880][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.710598][ T5872] veth1_macvtap: entered promiscuous mode
[   98.823073][ T5860] veth0_vlan: entered promiscuous mode
[   98.858560][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.871524][ T5860] veth1_vlan: entered promiscuous mode
[   98.888701][ T5873] veth0_vlan: entered promiscuous mode
[   98.947060][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.975627][ T5873] veth1_vlan: entered promiscuous mode
[   98.994236][ T2986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.012173][ T2986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.023155][ T2986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.041575][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.066729][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.082179][ T2986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.132038][ T5873] veth0_macvtap: entered promiscuous mode
[   99.183064][ T5860] veth0_macvtap: entered promiscuous mode
[   99.194949][ T5873] veth1_macvtap: entered promiscuous mode
[   99.246733][ T5860] veth1_macvtap: entered promiscuous mode
[   99.247026][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.274373][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.290584][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.332440][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.366406][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.401554][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.426765][ T3176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.434646][ T3176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.452290][ T2986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.463038][ T2986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.522744][ T5864] veth0_vlan: entered promiscuous mode
[   99.530690][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.542835][ T3176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.560909][ T3176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.592521][ T5864] veth1_vlan: entered promiscuous mode
[   99.632002][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.634603][ T2986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.654581][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.703882][ T2986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.716383][ T2986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.773669][ T2986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.798146][ T5985] netlink: 'syz.3.4': attribute type 19 has an invalid length.
[   99.806042][ T5985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'.
[   99.981582][ T5864] veth0_macvtap: entered promiscuous mode
[  100.064268][    C0] hrtimer: interrupt took 187651 ns
[  100.138948][ T3176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.205310][ T3176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.219225][ T5864] veth1_macvtap: entered promiscuous mode
[  100.290849][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.396992][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.420787][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.433005][ T5991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6'.
[  100.496428][   T52] Bluetooth: hci1: command tx timeout
[  100.511639][   T52] Bluetooth: hci0: command tx timeout
[  100.517791][ T5880] Bluetooth: hci3: command tx timeout
[  100.519116][ T5869] Bluetooth: hci2: command tx timeout
[  100.541537][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.554868][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.558930][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.571718][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.580837][ T5869] Bluetooth: hci4: command tx timeout
[  100.597927][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.612990][ T2986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.661344][ T2986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.716288][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7'.
[  100.725756][ T2986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.739008][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7'.
[  100.740509][ T2986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.057803][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.088751][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.300109][ T6002] delete_channel: no stack
[  101.335418][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'.
[  101.373804][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.403987][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.420043][ T6000] delete_channel: no stack
[  101.463941][ T5999] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[  102.093869][ T6016] netlink: 'syz.1.11': attribute type 13 has an invalid length.
[  102.129717][ T6016] netlink: 'syz.1.11': attribute type 17 has an invalid length.
[  102.174860][ T6013] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11'.
[  102.245839][ T6018] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12'.
[  102.305201][ T6018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12'.
[  102.481074][ T6026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14'.
[  103.256911][ T6016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.000647][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.091077][ T6027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.665745][ T6050] netlink: 'syz.3.18': attribute type 39 has an invalid length.
[  105.074891][ T6058] netlink: 'syz.0.20': attribute type 3 has an invalid length.
[  105.085683][ T6058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20'.
[  107.131849][ T6058] Zero length message leads to an empty skb
[  107.454127][ T5981] sched: DL replenish lagged too much
[  107.725067][ T6060] netlink: 'syz.2.19': attribute type 12 has an invalid length.
[  107.738380][ T6060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19'.
[  108.768677][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24'.
[  108.907634][ T6080] netlink: 14 bytes leftover after parsing attributes in process `syz.0.26'.
[  108.945783][ T6079] FAULT_INJECTION: forcing a failure.
[  108.945783][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  108.997447][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.4.27 Not tainted syzkaller #0 PREEMPT(full) 
[  108.997476][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  108.997495][ T6079] Call Trace:
[  108.997507][ T6079]  <TASK>
[  108.997517][ T6079]  dump_stack_lvl+0x189/0x250
[  108.997556][ T6079]  ? __pfx____ratelimit+0x10/0x10
[  108.997608][ T6079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.997638][ T6079]  ? __pfx__printk+0x10/0x10
[  108.997673][ T6079]  ? __might_fault+0xb0/0x130
[  108.997737][ T6079]  should_fail_ex+0x414/0x560
[  108.997783][ T6079]  _copy_from_user+0x2d/0xb0
[  108.997811][ T6079]  generic_map_update_batch+0x572/0x7f0
[  108.997873][ T6079]  ? __pfx_generic_map_update_batch+0x10/0x10
[  108.997899][ T6079]  ? __fget_files+0x2a/0x420
[  108.997952][ T6079]  ? __pfx_generic_map_update_batch+0x10/0x10
[  108.997976][ T6079]  bpf_map_do_batch+0x36c/0x5f0
[  108.998026][ T6079]  __sys_bpf+0x6af/0x870
[  108.998065][ T6079]  ? __pfx___sys_bpf+0x10/0x10
[  108.998135][ T6079]  ? ksys_write+0x22a/0x250
[  108.998175][ T6079]  ? __pfx_ksys_write+0x10/0x10
[  108.998199][ T6079]  ? rcu_is_watching+0x15/0xb0
[  108.998245][ T6079]  __x64_sys_bpf+0x7c/0x90
[  108.998276][ T6079]  do_syscall_64+0xfa/0x3b0
[  108.998304][ T6079]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.998335][ T6079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.998355][ T6079]  ? clear_bhb_loop+0x60/0xb0
[  108.998383][ T6079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.998401][ T6079] RIP: 0033:0x7fcb5458eba9
[  108.998443][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.998460][ T6079] RSP: 002b:00007fcb55405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  108.998485][ T6079] RAX: ffffffffffffffda RBX: 00007fcb547d5fa0 RCX: 00007fcb5458eba9
[  108.998499][ T6079] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  108.998512][ T6079] RBP: 00007fcb55405090 R08: 0000000000000000 R09: 0000000000000000
[  108.998524][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  108.998536][ T6079] R13: 00007fcb547d6038 R14: 00007fcb547d5fa0 R15: 00007ffe67be7228
[  108.998606][ T6079]  </TASK>
[  109.532153][ T6089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.30'.
[  109.914281][ T6093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.041515][ T6097] netlink: 14 bytes leftover after parsing attributes in process `syz.1.32'.
[  110.301088][ T6101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33'.
[  110.356797][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33'.
[  110.402359][ T6110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33'.
[  110.542744][ T6116] FAULT_INJECTION: forcing a failure.
[  110.542744][ T6116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.593356][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) 
[  110.593385][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  110.593396][ T6116] Call Trace:
[  110.593405][ T6116]  <TASK>
[  110.593414][ T6116]  dump_stack_lvl+0x189/0x250
[  110.593444][ T6116]  ? __pfx____ratelimit+0x10/0x10
[  110.593472][ T6116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.593505][ T6116]  ? __pfx__printk+0x10/0x10
[  110.593533][ T6116]  ? __might_fault+0xb0/0x130
[  110.593582][ T6116]  should_fail_ex+0x414/0x560
[  110.593614][ T6116]  _copy_from_user+0x2d/0xb0
[  110.593638][ T6116]  generic_map_update_batch+0x572/0x7f0
[  110.593674][ T6116]  ? __pfx_generic_map_update_batch+0x10/0x10
[  110.593696][ T6116]  ? __fget_files+0x2a/0x420
[  110.593732][ T6116]  ? __pfx_generic_map_update_batch+0x10/0x10
[  110.593754][ T6116]  bpf_map_do_batch+0x36c/0x5f0
[  110.593789][ T6116]  __sys_bpf+0x6af/0x870
[  110.593817][ T6116]  ? __pfx___sys_bpf+0x10/0x10
[  110.593859][ T6116]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  110.593887][ T6116]  ? __pfx_ksys_write+0x10/0x10
[  110.593911][ T6116]  ? rcu_is_watching+0x15/0xb0
[  110.593939][ T6116]  __x64_sys_bpf+0x7c/0x90
[  110.593963][ T6116]  do_syscall_64+0xfa/0x3b0
[  110.593991][ T6116]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.594016][ T6116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.594036][ T6116]  ? clear_bhb_loop+0x60/0xb0
[  110.594060][ T6116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.594079][ T6116] RIP: 0033:0x7f368778eba9
[  110.594103][ T6116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.594119][ T6116] RSP: 002b:00007f36886b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  110.594140][ T6116] RAX: ffffffffffffffda RBX: 00007f36879d5fa0 RCX: 00007f368778eba9
[  110.594155][ T6116] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  110.594167][ T6116] RBP: 00007f36886b4090 R08: 0000000000000000 R09: 0000000000000000
[  110.594179][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  110.594197][ T6116] R13: 00007f36879d6038 R14: 00007f36879d5fa0 R15: 00007ffce63c1e88
[  110.594228][ T6116]  </TASK>
[  110.999455][ T6125] openvswitch: netlink: IP tunnel dst address not specified
[  113.875113][ T6133] netlink: 14 bytes leftover after parsing attributes in process `syz.4.45'.
[  114.146123][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'.
[  114.173927][ T6147] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  118.466027][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'.
[  118.643095][ T6181] netlink: 14 bytes leftover after parsing attributes in process `syz.2.63'.
[  118.815378][ T6183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.835992][ T6188] netlink: 'syz.0.67': attribute type 2 has an invalid length.
[  119.249550][ T6187] syzkaller0: entered promiscuous mode
[  119.296901][ T6187] syzkaller0: entered allmulticast mode
[  119.965329][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'.
[  120.031095][ T6203] netlink: 277 bytes leftover after parsing attributes in process `syz.2.70'.
[  120.314703][ T6212] FAULT_INJECTION: forcing a failure.
[  120.314703][ T6212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.334316][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) 
[  120.334346][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  120.334359][ T6212] Call Trace:
[  120.334368][ T6212]  <TASK>
[  120.334378][ T6212]  dump_stack_lvl+0x189/0x250
[  120.334411][ T6212]  ? __pfx____ratelimit+0x10/0x10
[  120.334440][ T6212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.334466][ T6212]  ? __pfx__printk+0x10/0x10
[  120.334497][ T6212]  ? __might_fault+0xb0/0x130
[  120.334540][ T6212]  should_fail_ex+0x414/0x560
[  120.334573][ T6212]  _copy_from_user+0x2d/0xb0
[  120.334599][ T6212]  generic_map_update_batch+0x51b/0x7f0
[  120.334637][ T6212]  ? __pfx_generic_map_update_batch+0x10/0x10
[  120.334669][ T6212]  ? __fget_files+0x2a/0x420
[  120.334709][ T6212]  ? __pfx_generic_map_update_batch+0x10/0x10
[  120.334731][ T6212]  bpf_map_do_batch+0x36c/0x5f0
[  120.334768][ T6212]  __sys_bpf+0x6af/0x870
[  120.334798][ T6212]  ? __pfx___sys_bpf+0x10/0x10
[  120.334845][ T6212]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  120.334875][ T6212]  ? __pfx_ksys_write+0x10/0x10
[  120.334900][ T6212]  ? rcu_is_watching+0x15/0xb0
[  120.334929][ T6212]  __x64_sys_bpf+0x7c/0x90
[  120.334955][ T6212]  do_syscall_64+0xfa/0x3b0
[  120.334983][ T6212]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.335011][ T6212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.335031][ T6212]  ? clear_bhb_loop+0x60/0xb0
[  120.335058][ T6212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.335078][ T6212] RIP: 0033:0x7fb7cd78eba9
[  120.335097][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.335114][ T6212] RSP: 002b:00007fb7ce6f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  120.335136][ T6212] RAX: ffffffffffffffda RBX: 00007fb7cd9d5fa0 RCX: 00007fb7cd78eba9
[  120.335151][ T6212] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  120.335163][ T6212] RBP: 00007fb7ce6f0090 R08: 0000000000000000 R09: 0000000000000000
[  120.335180][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.335193][ T6212] R13: 00007fb7cd9d6038 R14: 00007fb7cd9d5fa0 R15: 00007ffc4c294db8
[  120.335227][ T6212]  </TASK>
[  120.925446][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'.
[  121.065088][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'.
[  121.079141][ T6227] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  121.215976][ T6231] netlink: 14 bytes leftover after parsing attributes in process `syz.0.80'.
[  124.376891][ T6249] FAULT_INJECTION: forcing a failure.
[  124.376891][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.390283][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(full) 
[  124.390307][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  124.390318][ T6249] Call Trace:
[  124.390328][ T6249]  <TASK>
[  124.390337][ T6249]  dump_stack_lvl+0x189/0x250
[  124.390367][ T6249]  ? __pfx____ratelimit+0x10/0x10
[  124.390396][ T6249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.390420][ T6249]  ? __pfx__printk+0x10/0x10
[  124.390449][ T6249]  ? __might_fault+0xb0/0x130
[  124.390505][ T6249]  should_fail_ex+0x414/0x560
[  124.390545][ T6249]  _copy_from_user+0x2d/0xb0
[  124.390570][ T6249]  generic_map_update_batch+0x572/0x7f0
[  124.390625][ T6249]  ? __pfx_generic_map_update_batch+0x10/0x10
[  124.390647][ T6249]  ? __fget_files+0x2a/0x420
[  124.390693][ T6249]  ? __pfx_generic_map_update_batch+0x10/0x10
[  124.390713][ T6249]  bpf_map_do_batch+0x36c/0x5f0
[  124.390756][ T6249]  __sys_bpf+0x6af/0x870
[  124.390788][ T6249]  ? __pfx___sys_bpf+0x10/0x10
[  124.390855][ T6249]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  124.390884][ T6249]  ? __pfx_ksys_write+0x10/0x10
[  124.390905][ T6249]  ? rcu_is_watching+0x15/0xb0
[  124.390944][ T6249]  __x64_sys_bpf+0x7c/0x90
[  124.390971][ T6249]  do_syscall_64+0xfa/0x3b0
[  124.390997][ T6249]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.391022][ T6249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.391040][ T6249]  ? clear_bhb_loop+0x60/0xb0
[  124.391070][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.391087][ T6249] RIP: 0033:0x7fb7cd78eba9
[  124.391107][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.391132][ T6249] RSP: 002b:00007fb7ce6f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.391151][ T6249] RAX: ffffffffffffffda RBX: 00007fb7cd9d5fa0 RCX: 00007fb7cd78eba9
[  124.391163][ T6249] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  124.391174][ T6249] RBP: 00007fb7ce6f0090 R08: 0000000000000000 R09: 0000000000000000
[  124.391184][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.391193][ T6249] R13: 00007fb7cd9d6038 R14: 00007fb7cd9d5fa0 R15: 00007ffc4c294db8
[  124.391248][ T6249]  </TASK>
[  124.722967][ T6251] netlink: 'syz.3.84': attribute type 3 has an invalid length.
[  125.650674][ T6259] netlink: 'syz.2.85': attribute type 21 has an invalid length.
[  125.684912][ T6259] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.714549][ T6259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.722042][ T6259] IPv6: NLM_F_CREATE should be set when creating new route
[  125.729444][ T6259] IPv6: NLM_F_CREATE should be set when creating new route
[  125.736744][ T6259] IPv6: NLM_F_CREATE should be set when creating new route
[  125.867594][ T6259] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[  125.913896][ T6259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'.
[  125.944165][ T6259] dummy0: entered promiscuous mode
[  125.952815][ T6259] bridge0: port 3(dummy0) entered blocking state
[  125.962693][ T6259] bridge0: port 3(dummy0) entered disabled state
[  125.976121][ T6259] dummy0: entered allmulticast mode
[  126.004692][ T6259] bridge0: port 3(dummy0) entered blocking state
[  126.011528][ T6259] bridge0: port 3(dummy0) entered forwarding state
[  126.218590][ T6279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.92'.
[  126.322563][ T6283] netlink: 16375 bytes leftover after parsing attributes in process `syz.4.93'.
[  126.513677][ T6283] netlink: 'syz.4.93': attribute type 10 has an invalid length.
[  126.715304][ T6290] netlink: 14 bytes leftover after parsing attributes in process `syz.3.97'.
[  126.720929][ T6283] team0: Port device dummy0 added
[  126.876774][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[  127.485091][ T6316] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[  127.561671][ T6325] netlink: 'syz.3.109': attribute type 1 has an invalid length.
[  127.849999][ T6328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.110'.
[  127.970142][ T6316] bond0: (slave bond_slave_0): Releasing backup interface
[  128.243543][ T6339] netlink: 14 bytes leftover after parsing attributes in process `syz.2.115'.
[  129.564548][ T6361] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[  129.586465][ T6379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.126'.
[  129.624873][ T6372] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[  129.886426][ T6387] netlink: 14 bytes leftover after parsing attributes in process `syz.4.128'.
[  129.890074][ T6392] netlink: 64 bytes leftover after parsing attributes in process `syz.3.130'.
[  130.050621][ T6389] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  133.203522][ T6418] __nla_validate_parse: 1 callbacks suppressed
[  133.203545][ T6418] netlink: 14 bytes leftover after parsing attributes in process `syz.0.135'.
[  133.719025][ T6428] netlink: 52 bytes leftover after parsing attributes in process `syz.1.139'.
[  133.734631][ T6428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  134.060317][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'.
[  134.644847][    C0] ==================================================================
[  134.652989][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  134.661075][    C0] Write of size 8 at addr ffff888057310470 by task kworker/u8:2/35
[  134.669025][    C0] 
[  134.671390][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  134.671421][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  134.671432][    C0] Workqueue: events_unbound toggle_allocation_gate
[  134.671458][    C0] Call Trace:
[  134.671465][    C0]  <IRQ>
[  134.671472][    C0]  dump_stack_lvl+0x189/0x250
[  134.671493][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  134.671519][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.671541][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  134.671566][    C0]  ? lock_release+0x4b/0x3e0
[  134.671599][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  134.671627][    C0]  print_report+0xca/0x240
[  134.671647][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  134.671668][    C0]  kasan_report+0x118/0x150
[  134.671690][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  134.671735][    C0]  __xfrm_state_delete+0x696/0xca0
[  134.671763][    C0]  __xfrm_state_delete+0x87b/0xca0
[  134.671794][    C0]  xfrm_timer_handler+0x18f/0xa00
[  134.671816][    C0]  ? __hrtimer_run_queues+0x408/0xc60
[  134.671835][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  134.671856][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  134.671875][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.671896][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.671915][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.671937][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  134.671959][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  134.671981][    C0]  __hrtimer_run_queues+0x529/0xc60
[  134.672005][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  134.672018][    C0]  ? read_tsc+0x9/0x20
[  134.672041][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  134.672060][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  134.672077][    C0]  handle_softirqs+0x283/0x870
[  134.672094][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  134.672111][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  134.672128][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  134.672149][    C0]  __irq_exit_rcu+0xca/0x1f0
[  134.672163][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  134.672182][    C0]  irq_exit_rcu+0x9/0x30
[  134.672195][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  134.672215][    C0]  </IRQ>
[  134.672220][    C0]  <TASK>
[  134.672225][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  134.672242][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  134.672259][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 62 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5e 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5e
[  134.672271][    C0] RSP: 0018:ffffc90000ab7660 EFLAGS: 00000293
[  134.672284][    C0] RAX: ffffffff81b44e0b RBX: 1ffff110170e7f61 RCX: ffff888020ee9e00
[  134.672296][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  134.672304][    C0] RBP: ffffc90000ab77e0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  134.672315][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8880b873fb08
[  134.672345][    C0] R13: dffffc0000000000 R14: ffff8880b863b1c0 R15: 0000000000000001
[  134.672359][    C0]  ? smp_call_function_many_cond+0xd4b/0x12d0
[  134.672382][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  134.672407][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  134.672422][    C0]  ? perf_event_text_poke+0x13d/0x190
[  134.672437][    C0]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  134.672460][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  134.672473][    C0]  ? rcu_is_watching+0x15/0xb0
[  134.672487][    C0]  ? trace_contention_end+0x39/0x120
[  134.672507][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  134.672527][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  134.672544][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[  134.672572][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  134.672596][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  134.672626][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  134.672650][    C0]  static_key_disable_cpuslocked+0xc5/0x1b0
[  134.672675][    C0]  static_key_disable+0x1a/0x20
[  134.672698][    C0]  toggle_allocation_gate+0x1a1/0x240
[  134.672720][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  134.672742][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  134.672760][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  134.672774][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  134.672789][    C0]  process_scheduled_works+0xae1/0x17b0
[  134.672818][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  134.672841][    C0]  worker_thread+0x8a0/0xda0
[  134.672869][    C0]  kthread+0x711/0x8a0
[  134.672890][    C0]  ? __pfx_worker_thread+0x10/0x10
[  134.672904][    C0]  ? __pfx_kthread+0x10/0x10
[  134.672923][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.672941][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.672959][    C0]  ? __pfx_kthread+0x10/0x10
[  134.672978][    C0]  ret_from_fork+0x3f9/0x770
[  134.672994][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  134.673012][    C0]  ? __switch_to_asm+0x39/0x70
[  134.673031][    C0]  ? __switch_to_asm+0x33/0x70
[  134.673051][    C0]  ? __pfx_kthread+0x10/0x10
[  134.673069][    C0]  ret_from_fork_asm+0x1a/0x30
[  134.673098][    C0]  </TASK>
[  134.673103][    C0] 
[  135.161903][    C0] Allocated by task 5983:
[  135.166232][    C0]  kasan_save_track+0x3e/0x80
[  135.170951][    C0]  __kasan_slab_alloc+0x6c/0x80
[  135.175825][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  135.181317][    C0]  xfrm_state_alloc+0x24/0x2f0
[  135.186103][    C0]  __find_acq_core+0x8a7/0x1c00
[  135.190979][    C0]  xfrm_find_acq+0x78/0xa0
[  135.195427][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  135.200470][    C0]  xfrm_user_rcv_msg+0x7a0/0xab0
[  135.205415][    C0]  netlink_rcv_skb+0x208/0x470
[  135.210200][    C0]  xfrm_netlink_rcv+0x79/0x90
[  135.214883][    C0]  netlink_unicast+0x82c/0x9e0
[  135.219690][    C0]  netlink_sendmsg+0x805/0xb30
[  135.224494][    C0]  __sock_sendmsg+0x21c/0x270
[  135.229230][    C0]  ____sys_sendmsg+0x505/0x830
[  135.234008][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  135.238720][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  135.243665][    C0]  do_syscall_64+0xfa/0x3b0
[  135.248189][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.254105][    C0] 
[  135.256445][    C0] Freed by task 5976:
[  135.260428][    C0]  kasan_save_track+0x3e/0x80
[  135.265122][    C0]  kasan_save_free_info+0x46/0x50
[  135.270177][    C0]  __kasan_slab_free+0x5b/0x80
[  135.274966][    C0]  kmem_cache_free+0x18f/0x400
[  135.279743][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  135.284791][    C0]  process_scheduled_works+0xae1/0x17b0
[  135.290342][    C0]  worker_thread+0x8a0/0xda0
[  135.294936][    C0]  kthread+0x711/0x8a0
[  135.299045][    C0]  ret_from_fork+0x3f9/0x770
[  135.303656][    C0]  ret_from_fork_asm+0x1a/0x30
[  135.308444][    C0] 
[  135.310782][    C0] The buggy address belongs to the object at ffff888057310440
[  135.310782][    C0]  which belongs to the cache xfrm_state of size 928
[  135.324760][    C0] The buggy address is located 48 bytes inside of
[  135.324760][    C0]  freed 928-byte region [ffff888057310440, ffff8880573107e0)
[  135.338487][    C0] 
[  135.340819][    C0] The buggy address belongs to the physical page:
[  135.347252][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057311980 pfn:0x57310
[  135.357333][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  135.365838][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  135.373399][    C0] page_type: f5(slab)
[  135.377388][    C0] raw: 00fff00000000040 ffff888142aa0780 dead000000000122 0000000000000000
[  135.385980][    C0] raw: ffff888057311980 00000000800f000e 00000000f5000000 0000000000000000
[  135.394582][    C0] head: 00fff00000000040 ffff888142aa0780 dead000000000122 0000000000000000
[  135.403267][    C0] head: ffff888057311980 00000000800f000e 00000000f5000000 0000000000000000
[  135.411963][    C0] head: 00fff00000000002 ffffea00015cc401 00000000ffffffff 00000000ffffffff
[  135.420642][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  135.429337][    C0] page dumped because: kasan: bad access detected
[  135.435766][    C0] page_owner tracks the page as allocated
[  135.441478][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5983, tgid 5982 (syz.3.4), ts 99575633199, free_ts 99530888472
[  135.460331][    C0]  post_alloc_hook+0x240/0x2a0
[  135.465203][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  135.470751][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  135.476563][    C0]  alloc_pages_mpol+0x232/0x4a0
[  135.481422][    C0]  allocate_slab+0x8a/0x370
[  135.485934][    C0]  ___slab_alloc+0xbeb/0x1410
[  135.490627][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  135.496095][    C0]  xfrm_state_alloc+0x24/0x2f0
[  135.500871][    C0]  __find_acq_core+0x8a7/0x1c00
[  135.505813][    C0]  xfrm_find_acq+0x78/0xa0
[  135.510237][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  135.515269][    C0]  xfrm_user_rcv_msg+0x7a0/0xab0
[  135.520212][    C0]  netlink_rcv_skb+0x208/0x470
[  135.524995][    C0]  xfrm_netlink_rcv+0x79/0x90
[  135.529709][    C0]  netlink_unicast+0x82c/0x9e0
[  135.534478][    C0]  netlink_sendmsg+0x805/0xb30
[  135.539251][    C0] page last free pid 5982 tgid 5982 stack trace:
[  135.545576][    C0]  __free_frozen_pages+0xbc4/0xd30
[  135.550755][    C0]  stack_depot_save_flags+0x436/0x860
[  135.556137][    C0]  kasan_save_track+0x4f/0x80
[  135.560834][    C0]  __kasan_kmalloc+0x93/0xb0
[  135.565467][    C0]  __kmalloc_node_noprof+0x276/0x4e0
[  135.570762][    C0]  alloc_slab_obj_exts+0x39/0xa0
[  135.575723][    C0]  __memcg_slab_post_alloc_hook+0x31e/0x7f0
[  135.581709][    C0]  kmem_cache_alloc_noprof+0x2bf/0x3c0
[  135.587174][    C0]  alloc_buffer_head+0x2a/0x270
[  135.592036][    C0]  folio_alloc_buffers+0x32d/0x640
[  135.597238][    C0]  create_empty_buffers+0x3a/0x530
[  135.602361][    C0]  __block_write_begin_int+0x3b1/0x1900
[  135.607914][    C0]  block_page_mkwrite+0x34f/0x4d0
[  135.612986][    C0]  ext4_page_mkwrite+0xc87/0x1190
[  135.618010][    C0]  do_page_mkwrite+0x14d/0x310
[  135.622776][    C0]  __handle_mm_fault+0x1916/0x5440
[  135.627909][    C0] 
[  135.630231][    C0] Memory state around the buggy address:
[  135.635854][    C0]  ffff888057310300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.644361][    C0]  ffff888057310380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  135.652510][    C0] >ffff888057310400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  135.660573][    C0]                                                              ^
[  135.668286][    C0]  ffff888057310480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.676352][    C0]  ffff888057310500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.684410][    C0] ==================================================================
[  135.692682][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  135.699910][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  135.709247][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  135.719340][    C0] Workqueue: events_unbound toggle_allocation_gate
[  135.725899][    C0] Call Trace:
[  135.729203][    C0]  <IRQ>
[  135.732109][    C0]  dump_stack_lvl+0x99/0x250
[  135.736747][    C0]  ? __asan_memcpy+0x40/0x70
[  135.741378][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.746663][    C0]  ? __pfx__printk+0x10/0x10
[  135.751308][    C0]  vpanic+0x281/0x750
[  135.755328][    C0]  ? __pfx_vpanic+0x10/0x10
[  135.759867][    C0]  ? irqentry_exit+0x74/0x90
[  135.764504][    C0]  panic+0xb9/0xc0
[  135.768255][    C0]  ? __pfx_panic+0x10/0x10
[  135.772710][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  135.778622][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.784554][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  135.789875][    C0]  check_panic_on_warn+0x89/0xb0
[  135.794826][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  135.800125][    C0]  end_report+0x78/0x160
[  135.804386][    C0]  kasan_report+0x129/0x150
[  135.808996][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  135.814304][    C0]  __xfrm_state_delete+0x696/0xca0
[  135.819454][    C0]  __xfrm_state_delete+0x87b/0xca0
[  135.824598][    C0]  xfrm_timer_handler+0x18f/0xa00
[  135.829761][    C0]  ? __hrtimer_run_queues+0x408/0xc60
[  135.835156][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  135.840742][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  135.846792][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.852018][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.857946][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  135.864290][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  135.869860][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  135.875446][    C0]  __hrtimer_run_queues+0x529/0xc60
[  135.880667][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  135.886478][    C0]  ? read_tsc+0x9/0x20
[  135.890569][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  135.896422][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  135.901575][    C0]  handle_softirqs+0x283/0x870
[  135.906361][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  135.911197][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  135.916499][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  135.921734][    C0]  __irq_exit_rcu+0xca/0x1f0
[  135.926475][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  135.931716][    C0]  irq_exit_rcu+0x9/0x30
[  135.935978][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  135.941656][    C0]  </IRQ>
[  135.944614][    C0]  <TASK>
[  135.947560][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.953555][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  135.960250][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 62 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5e 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5e
[  135.979886][    C0] RSP: 0018:ffffc90000ab7660 EFLAGS: 00000293
[  135.986018][    C0] RAX: ffffffff81b44e0b RBX: 1ffff110170e7f61 RCX: ffff888020ee9e00
[  135.994002][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  136.002018][    C0] RBP: ffffc90000ab77e0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  136.010014][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8880b873fb08
[  136.018114][    C0] R13: dffffc0000000000 R14: ffff8880b863b1c0 R15: 0000000000000001
[  136.026109][    C0]  ? smp_call_function_many_cond+0xd4b/0x12d0
[  136.032237][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  136.037297][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  136.043656][    C0]  ? perf_event_text_poke+0x13d/0x190
[  136.049139][    C0]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  136.055324][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  136.061068][    C0]  ? rcu_is_watching+0x15/0xb0
[  136.065854][    C0]  ? trace_contention_end+0x39/0x120
[  136.071233][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  136.076329][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  136.081500][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[  136.087368][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  136.093639][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  136.099939][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  136.105967][    C0]  static_key_disable_cpuslocked+0xc5/0x1b0
[  136.111893][    C0]  static_key_disable+0x1a/0x20
[  136.116764][    C0]  toggle_allocation_gate+0x1a1/0x240
[  136.122207][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  136.128148][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  136.133880][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  136.139605][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  136.145335][    C0]  process_scheduled_works+0xae1/0x17b0
[  136.150907][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.156908][    C0]  worker_thread+0x8a0/0xda0
[  136.161538][    C0]  kthread+0x711/0x8a0
[  136.165648][    C0]  ? __pfx_worker_thread+0x10/0x10
[  136.170777][    C0]  ? __pfx_kthread+0x10/0x10
[  136.175382][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.180611][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.185831][    C0]  ? __pfx_kthread+0x10/0x10
[  136.190467][    C0]  ret_from_fork+0x3f9/0x770
[  136.195089][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  136.200346][    C0]  ? __switch_to_asm+0x39/0x70
[  136.205208][    C0]  ? __switch_to_asm+0x33/0x70
[  136.209996][    C0]  ? __pfx_kthread+0x10/0x10
[  136.214627][    C0]  ret_from_fork_asm+0x1a/0x30
[  136.219421][    C0]  </TASK>
[  136.222794][    C0] Kernel Offset: disabled
[  136.227132][    C0] Rebooting in 86400 seconds..