last executing test programs:

4.645253063s ago: executing program 2 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e00000000001708c7d296000004000000aa7ed63200e9f500", @ANYRES32, @ANYBLOB="fddfffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a97, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="7ea3203f3bd911e9a4305b7cb42525a9ce64b7084f7e58ce770042000000", @ANYRES64=r0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0xe01234a410659ac4, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
r8 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x585}, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10)
close(r8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r13 = socket(0x23, 0x6, 0x7f)
sendmsg$SOCK_DESTROY(r13, &(0x7f0000000840)={&(0x7f0000000100), 0xc, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="040100001500000128bd7000fddbdf251ffb5d0001006484465f424d83aa72bb943573d92624a5b8a5ea8ca3e7568ed760ac88daf50bdd13733c98f1ae30657c0b5833cae215c483788d3f889a22b894c96924048df24eeed7a90ab03d93e21be5d2db6e92951e15157adf7cbc70580000008d000100ef9b13330a69bb968691cdb0f006505016cf0bb1ca9a25ef8e887050204d6c0d8846975270723f1324ae13ee046617ee4568dd4f07b2518afa56b73f99554892a7b8685e48590a197c12e6aab28fcc674c8a2b29e1dccb3b724a95be2f31c34f8c9f247713a28a6e7ad0f38aafc1c5a25066d0eeb2d550ab9d5a7d0a4ff4c52ffe00"/260], 0x104}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000150004002bbd7000fbdbdf257f000001000000000000000000000000640101010000000000000000000000004e2180004e2200080a00800089000000", @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="b46b6e000000000010000a002cbd700026bd700002000000810002006372797074642873616c736132302d61736d29000000004000000000000000000000000000000000000000000080000000000000000000000000000000000000c8010000143c0ef59fe5e7a1f27b0402773adc84d8d6b0907e23282ef6b1b9918024ba0533f3e8f64285061b66304c5fd31705608329b3faf9e7191b1d000000"], 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

4.471864677s ago: executing program 1 (id=89):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000120001002bbd7000ffdbdf250aa500fd40010000000000fcff000000000000000600000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="ffffffff"], 0x4c}}, 0x10)

4.470769268s ago: executing program 1 (id=90):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000880)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x80, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)

4.411231058s ago: executing program 2 (id=91):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca20000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x3}, {0x8, 0x7}]}]}}, 0x0, 0x5a, 0x0, 0x1, 0x80000000, 0x10000}, 0x28) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x8, 0x3, 0x1, 0x10001, 0x4162c, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0x1}, 0x4) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x2000) (async)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x12)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, [@tail_call]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x40, &(0x7f0000001040)=""/64, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001480)=[{0x2, 0x1, 0x2, 0xa}, {0x1, 0x4, 0xc, 0x6}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x2, 0x3}, {0x3, 0x3, 0x5, 0x4}, {0x5, 0x3, 0x4, 0x7}, {0x3, 0x4, 0x8, 0x6}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400c60008000000a19992c380000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000240)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.332459104s ago: executing program 2 (id=92):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid\x00') (async)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)
socketpair(0x27, 0x0, 0x2e3, &(0x7f0000000100))
r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x28, 0x5, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r3, 0x28, 0x6, 0x0, 0x44) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071106d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

4.262132759s ago: executing program 1 (id=93):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/4, 0x0, 0x4, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x140d, 0x7977ae5950a6c6bb, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffefff, r0, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r8}, 0x18)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x800})

4.091155297s ago: executing program 2 (id=96):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x80, '\x00', r2, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) (async)
sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/106, 0x6a}], 0x1}, 0x0) (async)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/106, 0x6a}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000097420018000000000200000000000000000000001c0000000000000000000000ef080000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004084) (async)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004084)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632000fc000c2f00db5b686158bbcfe8875a060305000023000000000000000000000000ac1414aa3a2008"], 0xfdef) (async)
write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632000fc000c2f00db5b686158bbcfe8875a060305000023000000000000000000000000ac1414aa3a2008"], 0xfdef)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r9, 0x58, &(0x7f0000000600)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r9, 0x58, &(0x7f0000000600)}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8905, 0x0)
syz_open_procfs$namespace(r7, &(0x7f00000005c0)='ns/time_for_children\x00')
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x0)

4.090704272s ago: executing program 1 (id=97):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000c14df25"], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000900)="ffff"}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x81)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x9c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x88, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x17, 0x1, {{0xaf, 0x1, 0x6, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4c}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0x28}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)

4.012155747s ago: executing program 1 (id=98):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000001850000007500000095"], 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5312, 0x0, r3, 0x5bf, '\x00', 0x0, r0, 0x4, 0x3, 0x5}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000680), 0x8, 0x89, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x4, [@ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @struct={0x5, 0x7, 0x0, 0x4, 0x1, 0x40, [{0x10, 0x4, 0x80000000}, {0x9, 0x0, 0x2}, {0x1, 0x2, 0x1}, {0x9, 0x0, 0x9}, {0xf, 0x5, 0x7}, {0xf, 0x3, 0x5824}, {0x10, 0x5, 0x5}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0x8, 0x2}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000002480)=""/4096, 0xa4, 0x1000, 0x0, 0x7, 0x10000, @value=r3}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x35, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000a00)=""/4096, 0x1f00, 0x76, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000980)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x4, 0x1, 0xc9, 0x44e4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r3, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000001b40)=[{0x5, 0x1, 0x5, 0x6}], 0x10, 0x6}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8)

4.010903251s ago: executing program 2 (id=99):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000f8ffffe7ffffff3a0000724d62000b4aec0000008520"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1)
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000006c0)=@del={0xf0, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, {{'ctr(des3_ede)\x00'}, '\x00', '\x00', 0x0, 0x2400}, [{0x8, 0x1, 0x1000}, {0x8, 0x1, 0x3}]}, 0xf0}}, 0x40408c4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_clone(0xa8c0ad00, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

3.751765894s ago: executing program 1 (id=100):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x8}, 0x828, 0x0, 0x5, 0x1, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0))
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f00000005c0), &(0x7f0000000940)=r1}, 0x20)
close(r2)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005a00", @ANYRES64], 0xfe33)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e000000264011e0000000000420ca98790639ac0100100000d0000004404000100000000"], 0x38}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x28, 0x5, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000140)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x28, 0x6, 0x0, 0x44)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000100000000e2020000007a080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40503c2b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.538800807s ago: executing program 32 (id=100):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x8}, 0x828, 0x0, 0x5, 0x1, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0))
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f00000005c0), &(0x7f0000000940)=r1}, 0x20)
close(r2)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005a00", @ANYRES64], 0xfe33)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e000000264011e0000000000420ca98790639ac0100100000d0000004404000100000000"], 0x38}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x28, 0x5, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000140)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x28, 0x6, 0x0, 0x44)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000100000000e2020000007a080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40503c2b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.491540961s ago: executing program 2 (id=102):
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000600040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3.491219218s ago: executing program 33 (id=102):
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000600040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.55136024s ago: executing program 0 (id=106):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1, 0x0, 0x4000000}, 0x18) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x0, <r3=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) (async)
close(r2)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x0, 0x1, 0x4, 0x4, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc}], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x7b, &(0x7f0000000700)=""/123, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x7, 0x5, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6], 0x0, 0x10, 0x400}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r7, 0x0, 0x4000}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x58, 0x10, 0x1, 0x70bd26, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffff}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x5d, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4}}, {0xc, 0x1b, [0x0, 0x0, 0x81, 0x800]}}]}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x20000000000000ef, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000bc0), 0x1e}, 0x1, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)

1.370090856s ago: executing program 0 (id=108):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000000c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94)

1.368243354s ago: executing program 0 (id=109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x11, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000016000701fefffffffbdbdf25047c000004000180"], 0x18}}, 0x4010)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0)

1.259338315s ago: executing program 0 (id=110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYBLOB="03a1a35654bd24f8c99722bde1898d8dff94accff6d522b474eb10236abfbcc8c95ee8a9d19371a30f4e68cce2ae54edd920a0d2ac5c6cdee678aab476291aa0229d58eeb47aca757bb01b9c51bd630810779185117f3cdb8ddb1885a45f0a26404415c9725af2424f9f517fd06c006c3879b2287343ba59030b1d6f2420ead7a0fc77e82baa7accb3e4e09fc77a5255120b636f43b4cb84013cbb9d91f0b0e446eb96b072d3094441ec26601c1cf562d8968013adb2d72079d4551ba787624947c4a4a4942c37", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x38)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="180000003e000b05d25a806c8c6f94f90224fc60100005000a0002", 0x1b}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r2}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183b3c2ed3c234c9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r9, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0xfff, 0xffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r2], &(0x7f0000000bc0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x80, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x15, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000c40)=@newtaction={0x1588, 0x30, 0x400, 0x0, 0xfffffffd, {}, [{0x1574, 0x1, [@m_bpf={0x110, 0x18, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x3, 0x7, 0x8, 0x5}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x9, 0x4, 0x31, 0x7}, {0x3, 0xbf, 0xc0, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x8c, 0x6, "cbbfb3db118aa4bed3b03aa3d7a2364963ad978b107d450ab2516e10ba95fa739d0d2cc703e04470face7dae1b9575809b39864115097883fa143a37fec714d0781a1da66ad101ff9ef5384d77a4248ddd98787821968f6a79190e7e10c61392b187e655d8b28d057febbb5d89b13d28b674f2640ac325def2c632f027c72aa348f011d6c3e4c7c8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x94, 0x10, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1c}]}, {0x61, 0x6, "25eb1e1f5012d09fc2ba3daebf4bda0b82ade93d643cd2156a219fe0ab0b561d6daab6e94233f81d27f7e28c82d026121f10d0f839d7617783bb84050ee178cc59729be529378b0915b6654cde1445079dd2824cc1423b6d4393eaa1b9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x208, 0xe, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc13, 0x1, 0xffffffffffffffff, 0x1000, 0x5}, @empty, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x10f, 0x5, 0x4, 0x9}, @local, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x2, 0x5, 0x9}, @private=0xa010102, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xffffffff, 0x0, 0x10, 0x5}, @local, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8f0, 0x4, 0x10000000, 0x4, 0x9}, @local, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6a49, 0x1, 0x6, 0x7, 0x6}, @loopback, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc7, 0x8, 0x3, 0x6, 0x8}, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, 0xff000000}}]}, {0xc7, 0x6, "2698c087eedd4211fe254b89fb9c5ead2214fd731b6a676d7ef564d59ffff0090adb0f45c6873a66f6b6f58ca469dc325f4bd75b600a46dbaf88c549674127fcde15962cc18a91e6fc874f905d27484013cea500422e6c12ae573d6a736eb28410b595488a2b0807899182fda2e80d2f21985078050b6b5629e0349a9b45ea7e8152d39518f1ac76b3f072a246fe9821f55837dd4101e86d2d873a6008caeb8ce5a65e8f8ba55e53057fd37dd4cd9615e990253699be2a4472ee6191eb986f46f68bcc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x10b8, 0xf, 0x0, 0x0, {{0x8}, {0x106c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0xe, 0x19, 0x4, 0xb}, {0x5, 0x0, 0xa5}, {0xfffa, 0x0, 0xa, 0x4}, {0x2, 0x4, 0x0, 0x10000}, {0x200, 0x3, 0x4, 0x7}, {0x280, 0x2e, 0x9, 0x4}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x9, 0x1, 0xc}, {0x8f, 0x4, 0x4, 0x6}]}, @TCA_ACT_BPF_NAME={0x1003, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0x26, 0x6, "be15adcdda02dbaf1bdccb79b336e0d47d5453e7c71aa3e07fed8fa347672dc96f2a"}, {0xc}, {0xc, 0x8, {0xb0db3b16ac41f6b5, 0x1}}}}, @m_tunnel_key={0x78, 0x10, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e27}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x14, 0x6, "f6e005cd5cc2476a6dcdfffeb774bb07"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x94, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x400, 0x2, 0x5, 0xceb}}, @TCA_DEF_DATA={0x8, 0x3, '+:$\x00'}]}, {0x47, 0x6, "4e5f0271abb55628c11f2a47a0e3b785c35c9f92996f5046500ed6a5ed6894c23b5b05599534dafd28d1bc95b1b8ca1013c63c0592723c5d8b2cb5259e66cb975cea1e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1588}}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x2, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x0, 0xd, 0x4, 0xf, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x5, 0xa, 0x9, 0x8}], &(0x7f0000000500)='syzkaller\x00', 0x8, 0xb9, &(0x7f0000000540)=""/185, 0x0, 0x39, '\x00', r5, @fallback=0x1f, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xa, 0x4}, 0x10, r9, r12, 0x2, &(0x7f0000000780)=[r3, r0, r3], &(0x7f0000000880)=[{0x4, 0x2, 0x10, 0x7}, {0x0, 0x1, 0xd, 0x3}], 0x10, 0x5}, 0x94)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r13, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004900)

1.142053848s ago: executing program 0 (id=111):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f7a4ccb8e6b6577dd1d7feb0100180000000000000040000000400000000c0000000400000001000004010000000a00000003000000060000000000000000000001050000002000000000000000000000030000000002000000020000000000000000615096716ccf5c723e34757e7c6561c716299ad51e5b6d67d7056da2e75ffc04a1b70374be629927c636defa608ec87a4a4b6376d70a01081d06a4dd395adb97908c73626c90cd61ca2513af15c3aa95e8ce04ee1d07ad3a0bfc5341fefc8eb8"], 0x0, 0x64}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002000)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x4402, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pK    \x00'}, 0x20)
close(0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r6)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000040)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x894b, &(0x7f0000000200)={r7})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=112):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0x409, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x28, 0x6, 0x0, 0x44)
r6 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800), ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0], &(0x7f0000001880), 0x0, 0x49, &(0x7f00000018c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000001980)}}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001c80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b00)={0x13c, 0x12, 0x0, 0x70bd29, 0x25dfdbfb, {0x26, 0x2, 0x17, 0x1, {0x4e22, 0x4e24, [0x7, 0x7, 0x6, 0x200], [0x7f, 0x3, 0x80, 0x5], r9, [0xc05, 0xfff]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "3d0564e3cadfae80172db371dfec507f20442444c20154ac8b4a079ac593a02cc09cc2ada81326868ed007d84343cb0b74e233df83a497c9b91ad69a6d30e667fde29ade9c760fbdb4674229da8cb5eb6f4ecd8a2818db3c37864be14a7796c683bb6bee02096616321b59948e16c0739ab67694a68e41caf3b6eaee497e44c221e7807737c492a19e9fa2ac3db73627d398728159c236ab3663c913bc5587f8bd8546e16f169b265d1805fcd2bdaf89e2fc1cae03d70301eb7b1272fdb8402209c2accb4990ed5cb1cdeddc4df72dbf14df027d2be71c2dd456b5dcadca8df829beb450d687ab3102d2a3b4"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000011)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x3, 0x4}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000140)="aea1d399df6372aebbef361c11f5cac05459", 0x12}, {&(0x7f0000000180)="760dc2e1680e71f43130a2b3fe174ab64238338d783d8814e761cb0a5783a57f41f3636b08f4351eacdebd3e2e5f3edccbb7bd109bb3e356ebd62000c2d0045b845ee4263aa811ae5998b91bad8ce3ce2c4ec70120b3466bf185e6422ee16bdea0bd71dd7eed857fddd721f469c4fd541e962ace63e6", 0x76}, {&(0x7f00000002c0)="5f31a228a394c906c9a7fc0d67028aac3e64fc7670cac6c91bdd60ae728c5c2c40cd598c0608d130b226fecd9e14c283adcfc42039c4d5bec5ad3a3b5b77868f823d77bf7efef5e87a1458a1ffed00afc5e2851b49954b97f579c17f9ae7ce342fb9e68567fa9d10e183331e299fd71efd2017c830e2c7aa08ec5ada59ec403748bc14b05680ad87851dcf9c3f05a2067a816075a325471ca92f4a2ea54dce71157d410d1063397502c3ac5dfe4ba5dd7a73877926ead78b6ad7a5c7277c08b0177a3eb6ed51d711a94d0c72ca234fab597fc4a15d6dab7329ce1c56e80fbb75a193a6", 0xe3}, {&(0x7f00000003c0)="d96a927d44e500cbb8d847aaa0a0202e272f63c29925770fd0b2d41df2970f67529181a7dfaeb0cabedaf49fd23b0770092de5132aad17037ccd7a75ee482ae92eb3c9484d96b5d2a5aff7d2482cd853b97719c73db34786596ed722e0631d3687689302b0e7e4db097f5a", 0x6b}, {0x0}, {&(0x7f0000000440)="6e7ba19ef20fab07766a51524d617a511799b5b75a7764d4eff6389b146f01a42c82a20318035e985e4e7532d3afd4ab60bd7fd52f408217380653d2833c9b91a7a91141ca5eb8456a34fb8e6424faa6f4bbfbbcdd15accc681d997b82517d86da93e17e953a3313816683208581d3491099c6c874143346076dc3c51c1150cdb44ac0653d438edc19196badd96e9ad4e3b8360b372ac7dd41eb175491bd3ba7ae129d20f6816d", 0xa7}, {&(0x7f0000000200)="a451012346a06f1b93ceca8d5b95bbaf6f124c52d5eb320a4e", 0x19}, {&(0x7f0000000500)="9106b695faf462a23f62f568110b4dd3bec55d158695237b2cf8157d7aca6800dd21c42b9639012998b7f376e9f6462a38c7643190cc8ca56171541e9361659604d4bf69b1fdb0c8957cad37239dab5a1136b3b4cf4dc9bd2b401a32761665cc03c1002fc491281a78d3d5dea8a1d1b718201c0b1e3a530c73aa6a256bba118ab809a7bb44cb91023b907921bd69e2c94cb8f5", 0x93}, {&(0x7f00000005c0)="aaaeb9463dea35bd3c78fc7a0097d77f01ea4b1b96bc17149cbfd90b327f879be9b5649af4198621a2ce00747d4f29d8767291fd5539678f017c4831e2949acb227c93e1f08ce7803adc78964e56685862a221751cb0d6497df4cd13f22d8c2bca280e1e2bdaf23996f10a6446d329adc93aa3adfddc575b030eb6e0b10f14bf95", 0x81}], 0xa, &(0x7f0000000680)}, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7148' (ED25519) to the list of known hosts.
syzkaller login: [   49.072075][ T5776] cgroup: Unknown subsys name 'net'
[   49.142755][ T5776] cgroup: Unknown subsys name 'cpuset'
[   49.148321][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.261531][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.164358][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.168360][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.172724][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.176653][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.180078][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.203522][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.208281][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.211706][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.215129][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.219076][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.289700][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.293292][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.297083][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.300887][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.304386][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.531800][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   56.671228][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.691108][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.693979][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.696552][ T5844] bridge_slave_0: entered allmulticast mode
[   56.699425][ T5844] bridge_slave_0: entered promiscuous mode
[   56.707860][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   56.731845][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.734661][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.738246][ T5844] bridge_slave_1: entered allmulticast mode
[   56.742336][ T5844] bridge_slave_1: entered promiscuous mode
[   56.798322][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.828972][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.863831][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.866277][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.868485][ T5848] bridge_slave_0: entered allmulticast mode
[   56.871214][ T5848] bridge_slave_0: entered promiscuous mode
[   56.892319][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.895836][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.898634][ T5848] bridge_slave_1: entered allmulticast mode
[   56.901922][ T5848] bridge_slave_1: entered promiscuous mode
[   56.927149][ T5844] team0: Port device team_slave_0 added
[   56.948947][ T5844] team0: Port device team_slave_1 added
[   56.951474][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.954123][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.958067][ T5854] bridge_slave_0: entered allmulticast mode
[   56.960940][ T5854] bridge_slave_0: entered promiscuous mode
[   56.964087][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.966676][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.969222][ T5854] bridge_slave_1: entered allmulticast mode
[   56.971931][ T5854] bridge_slave_1: entered promiscuous mode
[   56.976504][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.013050][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.029638][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.034336][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.038009][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.040132][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.049135][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.081370][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.083756][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.091977][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.107740][ T5848] team0: Port device team_slave_0 added
[   57.110637][ T5854] team0: Port device team_slave_0 added
[   57.119093][ T5848] team0: Port device team_slave_1 added
[   57.122371][ T5854] team0: Port device team_slave_1 added
[   57.180777][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.182969][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.191657][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.199028][ T5844] hsr_slave_0: entered promiscuous mode
[   57.202079][ T5844] hsr_slave_1: entered promiscuous mode
[   57.204893][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.207718][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.218423][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.223466][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.227099][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.237390][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.242984][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.245855][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.256026][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.334444][ T5848] hsr_slave_0: entered promiscuous mode
[   57.338257][ T5848] hsr_slave_1: entered promiscuous mode
[   57.341228][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.343753][ T5848] Cannot create hsr debugfs directory
[   57.409885][ T5854] hsr_slave_0: entered promiscuous mode
[   57.412733][ T5854] hsr_slave_1: entered promiscuous mode
[   57.415198][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   57.418235][ T5854] Cannot create hsr debugfs directory
[   57.735838][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.748810][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.756868][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.770599][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.817292][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.824946][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.847726][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.852682][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.893339][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.900763][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.916109][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.926773][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.019534][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.067253][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.073075][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.090047][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.092500][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.103047][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.105301][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.122900][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   58.144426][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.153172][  T744] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.156086][  T744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.166467][  T744] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.168798][  T744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.196746][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   58.226726][ T5238] Bluetooth: hci0: command tx timeout
[   58.231905][  T744] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.234369][  T744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.245179][  T744] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.248133][  T744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.305808][ T5238] Bluetooth: hci1: command tx timeout
[   58.385526][ T5238] Bluetooth: hci2: command tx timeout
[   58.400688][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.420580][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.448814][ T5848] veth0_vlan: entered promiscuous mode
[   58.464179][ T5848] veth1_vlan: entered promiscuous mode
[   58.508173][ T5848] veth0_macvtap: entered promiscuous mode
[   58.513970][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.520086][ T5848] veth1_macvtap: entered promiscuous mode
[   58.527520][ T5844] veth0_vlan: entered promiscuous mode
[   58.538984][ T5844] veth1_vlan: entered promiscuous mode
[   58.552997][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.573990][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.589340][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.613410][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.618054][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.624632][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.643071][ T5844] veth0_macvtap: entered promiscuous mode
[   58.650299][ T5844] veth1_macvtap: entered promiscuous mode
[   58.676372][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.714413][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.724001][ T5854] veth0_vlan: entered promiscuous mode
[   58.724050][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.733916][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.739717][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.744162][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.758528][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.780711][ T5854] veth1_vlan: entered promiscuous mode
[   58.783133][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.833693][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.844590][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.875190][ T5854] veth0_macvtap: entered promiscuous mode
[   58.884781][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.896062][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.903386][ T5854] veth1_macvtap: entered promiscuous mode
[   58.918262][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.940748][  T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.943206][  T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.952220][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.979665][ T5914] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.984277][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.000322][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.007968][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.011361][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.014700][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.098403][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.100877][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.104270][    C0] hrtimer: interrupt took 51791 ns
[   59.142511][  T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.145174][  T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.152142][ T5919] netlink: 'syz.1.2': attribute type 39 has an invalid length.
[   59.275163][ T5922] netlink: 'syz.0.1': attribute type 6 has an invalid length.
[   59.304184][ T5924] netlink: 'syz.2.4': attribute type 10 has an invalid length.
[   59.945233][ T5927] netlink: 'syz.2.5': attribute type 13 has an invalid length.
[   59.948960][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   60.090152][ T5929] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   60.112198][ T5931] netlink: 'syz.0.6': attribute type 39 has an invalid length.
[   60.306389][ T5238] Bluetooth: hci0: command tx timeout
[   60.386058][ T5238] Bluetooth: hci1: command tx timeout
[   60.465670][ T5238] Bluetooth: hci2: command tx timeout
[   60.605843][ T5943] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   60.609235][ T5943] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.11'.
[   60.750904][ T5949] Zero length message leads to an empty skb
[   61.402878][ T5956] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   61.418870][ T5956] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   61.476026][ T5957] netlink: 'syz.0.14': attribute type 39 has an invalid length.
[   61.793432][ T5973] netlink: 'syz.1.20': attribute type 13 has an invalid length.
[   61.799707][ T5973] netlink: 'syz.1.20': attribute type 17 has an invalid length.
[   61.875095][ T5977] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.21'.
[   61.899489][ T5978] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.21'.
[   61.903331][ T5978] openvswitch: netlink: Message has 6 unknown bytes.
[   61.919464][ T5977] openvswitch: netlink: Message has 6 unknown bytes.
[   61.960132][ T5973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.969360][ T5983] netlink: 62779 bytes leftover after parsing attributes in process `syz.0.22'.
[   62.104600][ T5993] Illegal XDP return value 4294967274 on prog  (id 18) dev N/A, expect packet loss!
[   62.131532][ T5989] netlink: 'syz.0.23': attribute type 13 has an invalid length.
[   62.224613][ T6000] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.27'.
[   62.230045][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.391777][ T5238] Bluetooth: hci0: command tx timeout
[   62.466975][ T5238] Bluetooth: hci1: command tx timeout
[   62.546257][ T5238] Bluetooth: hci2: command tx timeout
[   63.161474][ T5989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.184855][ T6003] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.26'.
[   63.418177][ T6012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.730385][ T6042] veth0_macvtap: left promiscuous mode
[   64.142247][ T6054] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.41'.
[   64.161965][ T6054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'.
[   64.192422][ T6054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'.
[   64.201559][ T6054] validate_nla: 5 callbacks suppressed
[   64.201584][ T6054] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   64.215135][ T6054] 8021q: adding VLAN 0 to HW filter on device team0
[   64.221633][ T6054] bond0: (slave team0): Enslaving as an active interface with an up link
[   64.465855][ T5238] Bluetooth: hci0: command tx timeout
[   64.546980][ T5238] Bluetooth: hci1: command tx timeout
[   64.625935][ T5238] Bluetooth: hci2: command tx timeout
[   65.421356][ T6087] IPv6: Can't replace route, no match found
[   65.648699][ T6104] netlink: 'syz.1.57': attribute type 21 has an invalid length.
[   65.652010][ T6104] __nla_validate_parse: 1 callbacks suppressed
[   65.652023][ T6104] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.57'.
[   65.911910][ T6108] netlink: 'syz.2.59': attribute type 13 has an invalid length.
[   65.915245][ T6108] netlink: 'syz.2.59': attribute type 17 has an invalid length.
[   66.071421][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.61'.
[   66.091411][ T6118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.61'.
[   66.095887][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.61'.
[   66.307270][ T6129] netlink: 'syz.2.63': attribute type 13 has an invalid length.
[   66.541731][ T6134] netlink: 'syz.0.66': attribute type 29 has an invalid length.
[   66.544782][ T6134] netlink: 'syz.0.66': attribute type 29 has an invalid length.
[   66.556928][ T6134] netlink: 'syz.0.66': attribute type 21 has an invalid length.
[   66.964710][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[   66.992210][ T6165] netlink: 'syz.0.77': attribute type 39 has an invalid length.
[   67.533331][ T6181] netlink: 'syz.1.82': attribute type 39 has an invalid length.
[   67.762183][ T6202] netlink: 116 bytes leftover after parsing attributes in process `syz.1.90'.
[   68.091990][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.97'.
[   68.100248][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   68.103742][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'.
[   68.110005][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   68.419105][ T5874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.510679][ T5874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.623784][ T5874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.693213][ T5874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.815710][ T5874] bridge_slave_1: left allmulticast mode
[   68.818190][ T5874] bridge_slave_1: left promiscuous mode
[   68.826561][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.838480][ T5874] bridge_slave_0: left allmulticast mode
[   68.841122][ T5874] bridge_slave_0: left promiscuous mode
[   68.843617][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.902198][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.909743][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.913381][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.918720][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.924552][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.007529][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.014269][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.021630][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.030389][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.034279][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.153115][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.160155][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.164542][ T5874] bond0 (unregistering): (slave team0): Releasing backup interface
[   69.169499][ T5874] bond0 (unregistering): Released all slaves
[   69.308420][ T6244] validate_nla: 5 callbacks suppressed
[   69.308442][ T6244] netlink: 'syz.0.103': attribute type 19 has an invalid length.
[   69.544612][ T6238] chnl_net:caif_netlink_parms(): no params data found
[   69.554840][ T6250] netlink: 'syz.0.104': attribute type 13 has an invalid length.
[   69.565214][ T6250] netlink: 'syz.0.104': attribute type 17 has an invalid length.
[   69.573225][ T6240] chnl_net:caif_netlink_parms(): no params data found
[   69.598682][ T5874] hsr_slave_0: left promiscuous mode
[   69.601641][ T5874] hsr_slave_1: left promiscuous mode
[   69.604448][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.608650][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.614081][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.618822][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.634916][ T5874] veth1_macvtap: left promiscuous mode
[   69.638351][ T5874] veth1_vlan: left promiscuous mode
[   69.640806][ T5874] veth0_vlan: left promiscuous mode
[   69.949060][ T5874] team0 (unregistering): Port device team_slave_1 removed
[   69.968384][ T5874] team0 (unregistering): Port device team_slave_0 removed
[   70.180433][ T6250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.314345][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.318311][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.330140][ T6258] bridge0: entered allmulticast mode
[   70.354406][ T6258] bridge_slave_1: left allmulticast mode
[   70.359590][ T6258] bridge_slave_1: left promiscuous mode
[   70.362387][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.371424][ T6258] bridge_slave_0: left allmulticast mode
[   70.373942][ T6258] bridge_slave_0: left promiscuous mode
[   70.378452][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.437146][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.439878][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.442612][ T6238] bridge_slave_0: entered allmulticast mode
[   70.446636][ T6238] bridge_slave_0: entered promiscuous mode
[   70.451934][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.454619][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.458316][ T6238] bridge_slave_1: entered allmulticast mode
[   70.461940][ T6238] bridge_slave_1: entered promiscuous mode
[   70.504640][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.524144][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.527081][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.529817][ T6240] bridge_slave_0: entered allmulticast mode
[   70.533239][ T6240] bridge_slave_0: entered promiscuous mode
[   70.539414][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.547381][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.549731][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.552000][ T6240] bridge_slave_1: entered allmulticast mode
[   70.554958][ T6240] bridge_slave_1: entered promiscuous mode
[   70.616958][ T6238] team0: Port device team_slave_0 added
[   70.621353][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.627748][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.642338][ T6266] netlink: 'syz.0.106': attribute type 13 has an invalid length.
[   70.650506][ T6238] team0: Port device team_slave_1 added
[   70.690361][ T6240] team0: Port device team_slave_0 added
[   70.694851][ T6240] team0: Port device team_slave_1 added
[   70.742583][ T5874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.751776][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.754540][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.765285][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.784514][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.795124][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.808717][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.814729][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.819665][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.832191][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.852007][ T5874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.859086][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.861667][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.870094][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.921633][ T6240] hsr_slave_0: entered promiscuous mode
[   70.923873][ T6240] hsr_slave_1: entered promiscuous mode
[   70.931994][ T6276] __nla_validate_parse: 5 callbacks suppressed
[   70.932008][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'.
[   70.942749][ T5874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.956435][ T6238] hsr_slave_0: entered promiscuous mode
[   70.959222][ T6238] hsr_slave_1: entered promiscuous mode
[   70.961649][ T6238] debugfs: 'hsr0' already exists in 'hsr'
[   70.963680][ T6238] Cannot create hsr debugfs directory
[   71.019210][ T5874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.028107][   T55] Bluetooth: hci0: command tx timeout
[   71.179824][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.182052][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.186399][   T55] Bluetooth: hci1: command tx timeout
[   71.447404][ T5874] bridge_slave_1: left allmulticast mode
[   71.449603][ T5874] bridge_slave_1: left promiscuous mode
[   71.451952][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.469078][ T5874] bridge_slave_0: left allmulticast mode
[   71.471189][ T5874] bridge_slave_0: left promiscuous mode
[   71.473440][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.829895][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.834816][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.839764][ T5874] bond0 (unregistering): Released all slaves
[   71.847592][ T6240] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.855841][ T6240] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.861242][ T6240] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.867545][ T6240] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.969817][ T6238] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.979445][ T6238] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.992171][ T6238] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.016928][ T6238] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.091696][ T5874] hsr_slave_0: left promiscuous mode
[   72.093800][ T5874] hsr_slave_1: left promiscuous mode
[   72.096442][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.098755][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.101339][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.103647][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.119281][ T5874] veth1_macvtap: left promiscuous mode
[   72.121075][ T5874] veth0_macvtap: left promiscuous mode
[   72.122912][ T5874] veth1_vlan: left promiscuous mode
[   72.124702][ T5874] veth0_vlan: left promiscuous mode
[   72.272340][ T6299] netlink: 'syz.0.112': attribute type 39 has an invalid length.
[   72.553088][ T5874] team0 (unregistering): Port device team_slave_1 removed
[   72.584996][ T5874] team0 (unregistering): Port device team_slave_0 removed
[   72.823480][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.874466][ T6240] 8021q: adding VLAN 0 to HW filter on device team0
[   72.892212][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.895266][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.913574][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.916637][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.993743][ T5874] ------------[ cut here ]------------
[   72.995887][ T5874] WARNING: CPU: 1 PID: 5874 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[   72.999038][ T5874] Modules linked in:
[   73.001264][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[   73.005007][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.009059][ T5874] Workqueue: netns cleanup_net
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   73.011154][ T5874] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[   73.014375][ T5874] Code: 75 9d df f7 4b 83 3c 2c 00 75 19 e8 99 28 7c f7 49 81 fd f8 07 00 00 74 1d e8 8b 28 7c f7 49 83 c5 08 eb c9 e8 80 28 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   73.022122][ T5874] RSP: 0018:ffffc900034df8b0 EFLAGS: 00010293
[   73.026060][ T5874] RAX: ffffffff8a4383d0 RBX: ffff88801c7c8000 RCX: ffff88801f591cc0
[   73.029000][ T5874] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff88801c7c8448
[   73.032606][ T5874] RBP: ffffc900034df9b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[   73.035098][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffff88801c7c8000
[   73.038656][ T5874] R13: 0000000000000448 R14: ffff8880276d8000 R15: dffffc0000000000
[   73.041781][ T5874] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[   73.045247][ T5874] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   73.047947][ T5874] CR2: 000000110c3ae9f5 CR3: 0000000026bde000 CR4: 00000000000006f0
[   73.051111][ T5874] Call Trace:
[   73.052470][ T5874]  <TASK>
[   73.054436][ T5874]  ops_undo_list+0x49a/0x990
[   73.056383][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[   73.058336][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[   73.060266][ T5874]  cleanup_net+0x4c5/0x800
[   73.062065][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[   73.063977][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.066126][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[   73.068297][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[   73.070280][ T5874]  process_scheduled_works+0xae1/0x17b0
[   73.073426][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.075736][ T5874]  worker_thread+0x8a0/0xda0
[   73.077326][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.079662][ T5874]  ? __kthread_parkme+0x7b/0x200
[   73.081583][ T5874]  kthread+0x711/0x8a0
[   73.083030][ T5874]  ? __pfx_worker_thread+0x10/0x10
[   73.084803][ T5874]  ? __pfx_kthread+0x10/0x10
[   73.086655][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.088772][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.090573][ T5874]  ? __pfx_kthread+0x10/0x10
[   73.091980][ T5874]  ret_from_fork+0x3fc/0x770
[   73.093374][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[   73.094983][ T5874]  ? __switch_to_asm+0x39/0x70
[   73.096604][ T5874]  ? __switch_to_asm+0x33/0x70
[   73.098087][ T5874]  ? __pfx_kthread+0x10/0x10
[   73.099556][ T5874]  ret_from_fork_asm+0x1a/0x30
[   73.101198][ T5874]  </TASK>
[   73.102443][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   73.105079][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[   73.108162][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.112220][ T5874] Workqueue: netns cleanup_net
[   73.113958][ T5874] Call Trace:
[   73.115072][ T5874]  <TASK>
[   73.116018][ T5874]  dump_stack_lvl+0x99/0x250
[   73.117446][ T5874]  ? __asan_memcpy+0x40/0x70
[   73.119148][ T5874]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.120764][ T5874]  ? __pfx__printk+0x10/0x10
[   73.122282][ T5874]  vpanic+0x281/0x750
[   73.123627][ T5874]  ? __pfx__printk+0x10/0x10
[   73.125379][ T5874]  ? __pfx_vpanic+0x10/0x10
[   73.127225][ T5874]  ? is_bpf_text_address+0x292/0x2b0
[   73.129023][ T5874]  panic+0xb9/0xc0
[   73.130194][ T5874]  ? __pfx_panic+0x10/0x10
[   73.131652][ T5874]  __warn+0x31b/0x4b0
[   73.133266][ T5874]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   73.134997][ T5874]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   73.136651][ T5874]  report_bug+0x2be/0x4f0
[   73.137988][ T5874]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   73.139644][ T5874]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   73.141281][ T5874]  ? xfrm6_tunnel_net_exit+0x83/0x100
[   73.143281][ T5874]  handle_bug+0x84/0x160
[   73.144928][ T5874]  exc_invalid_op+0x1a/0x50
[   73.146657][ T5874]  asm_exc_invalid_op+0x1a/0x20
[   73.148597][ T5874] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[   73.150892][ T5874] Code: 75 9d df f7 4b 83 3c 2c 00 75 19 e8 99 28 7c f7 49 81 fd f8 07 00 00 74 1d e8 8b 28 7c f7 49 83 c5 08 eb c9 e8 80 28 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   73.158172][ T5874] RSP: 0018:ffffc900034df8b0 EFLAGS: 00010293
[   73.160504][ T5874] RAX: ffffffff8a4383d0 RBX: ffff88801c7c8000 RCX: ffff88801f591cc0
[   73.163602][ T5874] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff88801c7c8448
[   73.166657][ T5874] RBP: ffffc900034df9b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[   73.169748][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffff88801c7c8000
[   73.172716][ T5874] R13: 0000000000000448 R14: ffff8880276d8000 R15: dffffc0000000000
[   73.175775][ T5874]  ? xfrm6_tunnel_net_exit+0x80/0x100
[   73.177894][ T5874]  ops_undo_list+0x49a/0x990
[   73.179738][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[   73.181762][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[   73.183782][ T5874]  cleanup_net+0x4c5/0x800
[   73.185505][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[   73.187394][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.189471][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[   73.191732][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[   73.193960][ T5874]  process_scheduled_works+0xae1/0x17b0
[   73.196168][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.198594][ T5874]  worker_thread+0x8a0/0xda0
[   73.200464][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.202950][ T5874]  ? __kthread_parkme+0x7b/0x200
[   73.204863][ T5874]  kthread+0x711/0x8a0
[   73.206507][ T5874]  ? __pfx_worker_thread+0x10/0x10
[   73.208586][ T5874]  ? __pfx_kthread+0x10/0x10
[   73.210427][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.212508][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.214617][ T5874]  ? __pfx_kthread+0x10/0x10
[   73.216449][ T5874]  ret_from_fork+0x3fc/0x770
[   73.218290][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[   73.220335][ T5874]  ? __switch_to_asm+0x39/0x70
[   73.222264][ T5874]  ? __switch_to_asm+0x33/0x70
[   73.224181][ T5874]  ? __pfx_kthread+0x10/0x10
[   73.226048][ T5874]  ret_from_fork_asm+0x1a/0x30
[   73.227988][ T5874]  </TASK>
[   73.229918][ T5874] Kernel Offset: disabled
[   73.231679][ T5874] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:04:58  Registers:
info registers vcpu 0

CPU#0
RAX=8240c63081adcb00 RBX=ffffffff819683a8 RCX=8240c63081adcb00 RDX=0000000000000001
RSI=ffffffff8d9b6a0a RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c389f74 CR3=0000000020442000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000100000001 0000003100000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 000000ff00000000 XMM05=0000000000000000 00007f77b3212e53
XMM06=0000000000000000 00007f77b3212e4d XMM07=0000000000000000 00007f77b3212e61
XMM08=0000000000000000 00007f77b3212ee7 XMM09=0000000000000000 00007f77b3212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900034df050
R8 =ffff888106fb8237 R9 =1ffff11020df7046 R10=dffffc0000000000 R11=ffffffff854efa70
R12=dffffc0000000000 R13=ffffffff99af98e3 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3ae9f5 CR3=0000000026bde000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000ff00000000 00ff0000000000ff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000ff0000000000 XMM05=0000000000000000 00007efcd6012e53
XMM06=0000000000000000 00007efcd6012e4d XMM07=0000000000000000 00007efcd6012e61
XMM08=0000000000000000 00007efcd6012ee7 XMM09=0000000000000000 00007efcd6012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
