last executing test programs:

6.855377102s ago: executing program 0 (id=1):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002b000b002000000000000000080000000800030004000100080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="00000000e9ffff469400000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x15, &(0x7f0000000340)=""/234}, 0x23)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000e060104000000000000000001007e19c5ed8205a3087a32000000000900020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20004881)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)

6.670440139s ago: executing program 32 (id=1):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002b000b002000000000000000080000000800030004000100080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="00000000e9ffff469400000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x15, &(0x7f0000000340)=""/234}, 0x23)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000e060104000000000000000001007e19c5ed8205a3087a32000000000900020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20004881)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)

6.526468706s ago: executing program 2 (id=3):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56330300000000000000d6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000a04009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00", 0x89}], 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r4)
openat$cgroup_type(r4, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$unix(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1}, 0x2100)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000240)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbff, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x4000050)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033a00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r4)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff18150000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703509c08000000b70400000000000085000000550000001801000020756c2502000000002020207b1af8ff00000000bfa100000000000007010000f8fffdfbb702000008000000b703000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

6.207140434s ago: executing program 33 (id=3):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56330300000000000000d6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000a04009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00", 0x89}], 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r4)
openat$cgroup_type(r4, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$unix(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1}, 0x2100)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000240)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbff, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x4000050)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033a00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r4)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff18150000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703509c08000000b70400000000000085000000550000001801000020756c2502000000002020207b1af8ff00000000bfa100000000000007010000f8fffdfbb702000008000000b703000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

1.100110857s ago: executing program 1 (id=25):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000e45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fadc00"/28], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20)
r3 = socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x1, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x44d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x0)
recvmsg$unix(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
r9 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c34e, 0x4, 0x0, 0x7, 0x1, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x6, <r10=>0x0}, 0x8)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r11, &(0x7f0000000000), 0x2a979d)
write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYBLOB="2b726c696d6974202b70696473203da79c7ef52df6253bb2d8742a4e5bed6ffc2b239c94d5da57d40b649724d5920d5418f7faf4a003f9578019bcb6463eb809c3e630bc8abc1ab22d6c2139c6b5c52f9d8ef4164b0ceb07ae80ca32a57ef86de5c9e134df757a93a4e7420d7983e0b948a40fb243bb78940ea0008cfe10d5e4102a1a82677a02b77f231f0bb34bb50ab930f7448db56c39dedb5cae18722e725bb10cb0c8aa753da17841117b300cf2f0509a85f19c3fb4f41e917c1c0625cd680c6b16fc2cbb8ca6d1589a661358a08364bc71e218fcaf9c1bae18fdcdef4847da0f4596e195789e21962c1b66207fae655e06988992137cf5696b9dc56d9d0b9349db41ede9de4f4fb12191a51fb81ef42aa18347b9183c0c6196f6af4955df02113b0b0cc05a1ebef9a06c0627051934af348a7616d3d739d9ddb5705e5a8065d4edb8f367bdfd9b92c9d0ddd5ed19d4b410e88d5bd7f5549bbacede4972ba98ee8c1a27dc9500cb8c603f1c8e1f4b16be7ba9e7860f1fd7c99bf365f053ab0e1cff7ec8f301b5f894e21495dce1bcd86e5d6290cf49f732"], 0xe)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r11, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r12)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@generic={0x3, 0x7, 0x1, 0x2, 0x3}, @generic={0x7, 0x5, 0x3, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1a2, 0xb0, &(0x7f0000000480)=""/176, 0x41000, 0xa, '\x00', 0x0, @sk_reuseport=0x28, r11, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r12, 0xa, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0x9, 0x6}, {0x5, 0x1, 0x9, 0x8}, {0x3, 0x3, 0x9, 0x4}, {0x2, 0x5, 0xe, 0x2}, {0x5, 0x2, 0x5, 0x1}, {0x1, 0x2, 0xf, 0xc}, {0x1, 0x4, 0x5, 0x1}, {0x1, 0x3, 0x3, 0xa}, {0x0, 0x1, 0x0, 0x4}, {0x3, 0x1, 0xd, 0xb}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x589b, 0x0, 0x0, 0x40f00, 0x59, '\x00', r7, @fallback=0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0x2, 0x2, 0x6}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r7, r6, 0x5, 0x2, 0x2}, 0x50)
write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0xfdef)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000800020000000000000018510010094d433322365bdab27900e2ffbc270100fcffffff950000000000000000e4ffffffffffffff00000000000000"], 0x0, 0xb, 0x0, 0x0, 0x1f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x112cf}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f00000000c0)="a8b3408615a33456521dd81ed3280f71ba28514e63b12badf5fc49427dd0b4e1123793119a6150476bf9bf", &(0x7f0000000100)=""/4, &(0x7f0000000140)="c3dcd52c5ae4717b598e2ae728491620f26dafbeaca2226fe8fbeff2b1040e88019cf30398605d9e7e7024bb3f1ac87145f721c6046490ef5f0448610c3d8cfeaa5f3b9e8fa80baa3c301510f635ab854f4cb7a6a2eb571dd3f5ce278a49fdecf5918dabce3556d485428d44bf2fb29b5d8136144c749efde66d9ac9d7a90c3873c81c6dad74514b22b6115a8da029bd4ab61563450ba1d6793ab69d0dfa22ef9ac501949457aedddeccc1c14303db100572e30e2fc4a1c3a50d2e62efefa385ea9c5709c9095d45f697d11299f1af9cd5f2c3ee2b713beeb7e63b5408dee7eb", &(0x7f0000000280)="554231764b4144c5b65e60c665399cdc2d9bcbb559394e2d5f4f1a3cb3a5cd402b468ec4f37309e3a2e9cbe2b87774a70bb27a60a53a533fda47d9449493fdb0a3be68ce812386a61b8446d0dea50481b53628344029e225458e14c472780ec6c61a696f8efa1d4e121987abcaa04aaeaf1276cb44ef993645d97d190c0e7770b37fdf3343edc0ff03de3bc4eb778f94a5bcac817ffca8f0085cb56b3671d8872977655d7f5961a7a24a98fe5468e6852f5da8db76cf2dafa07e5bf4442d3bda432e996a09ed96e0661f7a", 0x7, r0}, 0x38)
recvmsg$qrtr(r6, &(0x7f0000000780)={&(0x7f0000000540), 0xc, &(0x7f0000000680)=[{&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000840)=""/213, 0xd5}, {&(0x7f0000000600)=""/84, 0x54}], 0x3, &(0x7f0000002a00)=[{0x1010, 0x0, 0x0, ""/4096}, {0x70, 0x0, 0x0, ""/89}], 0x1080, 0x100}, 0x38, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4000}, 0x0)

992.511144ms ago: executing program 1 (id=26):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x2, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x591}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x167e, 0xc0, &(0x7f0000000400)=""/192, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x3, 0x5, 0x7fffffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r3], &(0x7f00000004c0)=[{0x4, 0x3, 0xa, 0xa}, {0x3, 0x2, 0x1, 0x8}, {0x3, 0x5, 0x10, 0x1}, {0x5, 0x4, 0x7, 0x3}, {0x0, 0x1, 0xe, 0x2}, {0x1, 0x5, 0x3, 0x6}], 0x10, 0xfffffff9}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r1, 0x0, 0x3}, 0x18)

828.05242ms ago: executing program 1 (id=27):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206140000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x40088)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0400000002030102000000000000000000000001"], 0x14}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c0500001009050029bd7000fcdbdf25070000066f0143800400fa80262ffb19eaf44b7195371181448b7a11dd6a5da9d0086e7a61cfb041ad51ee6c6e75ae53a34018669ac97f599e2f74c07140596aa665944cb0f4cb5d8ea715888fc47482de9a637bd3f941919950592697fda46d4901c365e6167172000c00d88c27b9959b4b18a9491a6e775f13b47083971d92e6396e03f883933d2f0fa0d389a070562cf04fb317248e782a5a149562c5bc56a6c8b33e7f08883ebfac731aba9438fa434214009d00fc0000000000000000000000000000009d2b9d14ebb94d60ba53908d43b7c4781929d5f8df10f6da8ab3014b544b7c17a1d0da43033d770b8500ddad5266c43133e2b5515d08001d00050000000c0016000100000000000000a44ae9f859c4c916839ad2ef637509e249131c9b45e282f8c912ade2640c71ee8e479c64889547795504b35a2d2950a741f2d8654a0975dbb51e7531bde337729f18efe2bedc1b3226c0ffe1044bf68b31d657dc9ff1bf02efe39f740800b700000000000014005300ff010000000000000000000000000001a7017680090043002c3a5c2c0000000004008c800400658004001f8018b35bfb17eaa2c705562872903fc83a57b926702937a357e01c90e1952ce6e8c2e0807efed81a51e9e7ecc9497082386ce5a77d40794d472969c732d5731d5602cf76fd45bca8f5db68068e8e8af17bc219b1b2480c91ca766b971b793728eb882ae44d4e425f01f66ae73bd16dd078957ec6425715b9d19bc55c0e969f10c9db7f8b7a058ec5a969e7c7f4f4b8b72b9200bf2939c5032f2e7943d4fc38f597c4c34a149f12a52ffc050ee3e6029bbc4d9ebb19f7bb4bd2541e3419b1004d0074fb9c9f22067538b2a9bc66a6bc00b90e39dc8d2da46e0657da0bea8d32e49d45e4d446220fe0adb764d7b40b5dbc026c3fc49e65f8f7d8d5034714a26d0631d2b521c8ad1621b76d906b7b43d530facffe75ae7274bba9247be6ae7f7fc20ce7838dd794f59c4c202aabe678094de87f0eaed580d061cba134a1d7b6ac7ef64e8d472cfbaf86f41f465cf727bd510aa52cc155051cee2a539192a823befddfab6a0ba0da8886bc0ef5fd38aa0000000c005200090000000000000067944d3876178dfc7f509802a023eb001e92ef4cb6464c12330aa6cd0c69245312601180d274493820d6340392ccbabb52e87523fc6026f18c9955de14318d246e2b07acd64c8cea7e5efe21a75e73a99e6bf1b38cebe491b82c1e6470f63b797f04f3dbe2291ec21f1f3f5b423fde64f9145e334780a5039d136de5c779e0abe97e0e4f687d18b18f40415c817210d241658b716aca5c538df5bf36f969f55ecf78ae4d47cd7a351920231b1aea66320f1fe6375c9e7d9f1d2ce84f38226723f6b95a0709bd02a6fb88f6c67096e74bb21f994e91d2e0837b7b764625cdab72af3804542aec2159865ed75fdfe424732c4087eaa7e5c6b46b0587321d3119b30e61f05908383c1e55243d4314df1e1b8bfab9d59e0d95d088d641b6ad6884df31d43c1757f4106c6a1bbefa9be2eda2eddfb6e6198c184c9e5581aef60cc20c29027118145b6cdadaf70b3520fb648d781feb3e8738e7ab8da222e13fedec8183a955031dbe771625377e8ee7dade7de66b60da38b6114a3699b0cb687d6861a7f44e064de95475b64fcf5ee3bbc3641ab8d396b5790f2b2f7778fe664480a4a6ea813263c68ed374e0eb025d4c932ba2c1572900d1d27fc11b3d6cdbe8a39c621c051523c0253b6a7bc664c08bd9bedecb5312a9ae34240097806aa0b45af22efa113cad536ac1e2bda6a689834557ed715cab4f35c028b6277f00"], 0x52c}, 0x1, 0x0, 0x0, 0x14}, 0x4000844)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="715918e5d658cd04d97c81f761887626206746b9a1553047bcc9ed8c9e36d65af60b9340be953d7565fc9cbd5ae8", 0x2e}], 0x6}, 0x20048004)
r5 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1}, 0x104)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x82, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x15, 0x5, 0x0)

330.46886ms ago: executing program 1 (id=28):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

121.597888ms ago: executing program 1 (id=29):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010200000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005000000000006000440000000000500010007000000050004"], 0x5c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010200000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005000000000006000440000000000500010007000000050004"], 0x5c}}, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1ee38f11b130865a223a8d0b165bc7c6fd9e40de2fb2686fa6a327d4dcd9d8a13bf8b6d87bab5a72470c4536452209d27006ceb551c7cafc41394738b34679e824ff6aa3cf53aebd4d3fdf61fe823214392a3f3c2bf482ec20d44f0732b6", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffdc5, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1ee38f11b130865a223a8d0b165bc7c6fd9e40de2fb2686fa6a327d4dcd9d8a13bf8b6d87bab5a72470c4536452209d27006ceb551c7cafc41394738b34679e824ff6aa3cf53aebd4d3fdf61fe823214392a3f3c2bf482ec20d44f0732b6", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffdc5, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="280000001014010026bd7000fedbdf2508000f08004f000500"/40], 0x28}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000840)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r6, 0x0, 0x0) (async)
write$cgroup_int(r6, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='#?\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@exit, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff}, @map_fd={0x18, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xd3}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x83c00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xf, 0x10001, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r4, r4, r4], &(0x7f0000000600)=[{0x5, 0x2, 0xf, 0x1}, {0x2, 0x2, 0x9, 0xc}, {0x4, 0x1, 0x8, 0x1}], 0x10, 0xffffff7f}, 0x94)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x7f, 0x4448, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a0c, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x4, 0x6, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x5, 0x0, 0xb}, r9, 0x3, 0xffffffffffffffff, 0x3)

735.321µs ago: executing program 1 (id=30):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010028bd7000fcfbdf25"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c004)
r3 = socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ec0)={r4, 0x0, &(0x7f0000000e40)=""/87}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0)

0s ago: executing program 3 (id=6):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
close(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x4, 0x2, 0x80, r5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18941cb0e73a05000000950080000000a5189d0000230000000000280bcd0f82d16d061e4de823f678bbeda53d6b3f7d28352573570ddb5b695f6a05f951f51d4d77d59820e776d749ed2f928277bb257694a41be1ab5cd12e2813bbdd5bc70d281d27eba49f503274f5ab80e9ba2d5ea76acd39ea018bc5a7995855370d870bd0c6b4e956a1ae48219faabf9c5b1531a36e0df342b3d44de7b900"/166], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="5808000000000000000000000000d5a5180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51338' (ED25519) to the list of known hosts.
syzkaller login: [   55.861354][ T5836] cgroup: Unknown subsys name 'net'
[   56.021504][ T5836] cgroup: Unknown subsys name 'cpuset'
[   56.031566][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.821020][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.265852][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.269977][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.273552][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.277171][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.280912][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.397435][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.402624][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.406364][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.410995][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.415094][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.432720][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.437188][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.442003][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.446403][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.455137][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.574039][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.684288][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.687036][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.690396][ T5851] bridge_slave_0: entered allmulticast mode
[   63.694209][ T5851] bridge_slave_0: entered promiscuous mode
[   63.700806][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.703583][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.706430][ T5851] bridge_slave_1: entered allmulticast mode
[   63.710520][ T5851] bridge_slave_1: entered promiscuous mode
[   63.788976][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.794414][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.854441][ T5851] team0: Port device team_slave_0 added
[   63.870239][ T5851] team0: Port device team_slave_1 added
[   63.889756][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   63.923143][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.925646][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.935814][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.946271][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.949664][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.962749][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.976375][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   64.109085][ T5851] hsr_slave_0: entered promiscuous mode
[   64.112163][ T5851] hsr_slave_1: entered promiscuous mode
[   64.121811][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.124670][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.127025][ T5856] bridge_slave_0: entered allmulticast mode
[   64.130562][ T5856] bridge_slave_0: entered promiscuous mode
[   64.134298][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.136748][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.139657][ T5856] bridge_slave_1: entered allmulticast mode
[   64.142575][ T5856] bridge_slave_1: entered promiscuous mode
[   64.224627][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.226830][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.230382][ T5860] bridge_slave_0: entered allmulticast mode
[   64.234176][ T5860] bridge_slave_0: entered promiscuous mode
[   64.241095][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.259125][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.262317][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.265220][ T5860] bridge_slave_1: entered allmulticast mode
[   64.268864][ T5860] bridge_slave_1: entered promiscuous mode
[   64.274097][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.352074][ T5856] team0: Port device team_slave_0 added
[   64.355936][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.366403][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.371792][ T5856] team0: Port device team_slave_1 added
[   64.417646][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.419848][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.428723][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.435136][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.437720][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.447277][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.453359][ T5860] team0: Port device team_slave_0 added
[   64.470917][ T5860] team0: Port device team_slave_1 added
[   64.506166][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.508371][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.516625][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.545636][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.547835][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.558529][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.600927][ T5856] hsr_slave_0: entered promiscuous mode
[   64.603670][ T5856] hsr_slave_1: entered promiscuous mode
[   64.606382][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   64.609938][ T5856] Cannot create hsr debugfs directory
[   64.639334][ T5860] hsr_slave_0: entered promiscuous mode
[   64.641845][ T5860] hsr_slave_1: entered promiscuous mode
[   64.644231][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   64.646337][ T5860] Cannot create hsr debugfs directory
[   64.757303][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.779177][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.803957][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.826945][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.930805][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.943335][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.963087][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.971673][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.033987][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.046714][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.061182][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.071919][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.125447][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.156690][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.180428][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.183047][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.192088][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.194296][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.226804][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.257787][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   65.274277][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.277009][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.292013][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.294302][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.311047][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.319197][ T5859] Bluetooth: hci0: command tx timeout
[   65.360242][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   65.383504][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.385875][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.401549][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.404393][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.480492][ T5859] Bluetooth: hci2: command tx timeout
[   65.480542][ T5235] Bluetooth: hci1: command tx timeout
[   65.521166][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.596467][ T5851] veth0_vlan: entered promiscuous mode
[   65.607637][ T5851] veth1_vlan: entered promiscuous mode
[   65.631982][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.663194][ T5851] veth0_macvtap: entered promiscuous mode
[   65.676835][ T5851] veth1_macvtap: entered promiscuous mode
[   65.706366][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.716725][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.727368][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.745938][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.750815][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.754848][ T5856] veth0_vlan: entered promiscuous mode
[   65.768876][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.771634][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.784472][ T5856] veth1_vlan: entered promiscuous mode
[   65.887298][ T5856] veth0_macvtap: entered promiscuous mode
[   65.892841][  T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.895981][  T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.904533][ T5860] veth0_vlan: entered promiscuous mode
[   65.915260][ T5856] veth1_macvtap: entered promiscuous mode
[   65.954725][ T5860] veth1_vlan: entered promiscuous mode
[   65.962225][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.969684][  T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.972386][  T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.984629][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.005303][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.011826][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.015331][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.022792][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.040852][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.093058][ T5860] veth0_macvtap: entered promiscuous mode
[   66.129013][ T5860] veth1_macvtap: entered promiscuous mode
[   66.175648][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.193067][  T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.196006][  T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.200246][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.254970][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.261363][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.269952][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.272531][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.285724][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.290175][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.124552][ T5923] netlink: 'syz.1.4': attribute type 10 has an invalid length.
[   67.130640][ T5923] geneve0: entered promiscuous mode
[   67.141585][ T5923] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   67.311781][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.399271][ T5235] Bluetooth: hci0: command tx timeout
[   67.537982][    C1] hrtimer: interrupt took 80350 ns
[   67.943501][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.967290][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.973410][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.977374][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.984190][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.025673][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.045440][ T5934] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.052785][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.071298][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.075339][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.213850][ T5938] netlink: 168636 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.221908][ T5938] netlink: zone id is out of range
[   68.228441][ T5938] netlink: get zone limit has 8 unknown bytes
[   68.258860][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.263449][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.268802][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.283053][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.287317][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.394863][ T5931] chnl_net:caif_netlink_parms(): no params data found
[   68.750538][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.753737][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.757090][ T5931] bridge_slave_0: entered allmulticast mode
[   68.762903][ T5931] bridge_slave_0: entered promiscuous mode
[   68.774569][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.777743][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.781404][ T5931] bridge_slave_1: entered allmulticast mode
[   68.785188][ T5931] bridge_slave_1: entered promiscuous mode
[   68.856807][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.913657][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.952104][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.984463][ T5931] team0: Port device team_slave_0 added
[   68.989721][ T5931] team0: Port device team_slave_1 added
[   69.026868][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.044278][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   69.068639][ T5961] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.116993][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.122030][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.131258][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.137811][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.143691][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.153618][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.254701][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.257482][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.260520][ T5941] bridge_slave_0: entered allmulticast mode
[   69.264712][ T5941] bridge_slave_0: entered promiscuous mode
[   69.275004][ T5931] hsr_slave_0: entered promiscuous mode
[   69.278535][ T5931] hsr_slave_1: entered promiscuous mode
[   69.281670][ T5931] debugfs: 'hsr0' already exists in 'hsr'
[   69.284116][ T5931] Cannot create hsr debugfs directory
[   69.314173][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.316878][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.331619][ T5941] bridge_slave_1: entered allmulticast mode
[   69.336261][ T5941] bridge_slave_1: entered promiscuous mode
[   69.471807][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.478847][ T5235] Bluetooth: hci0: command tx timeout
[   69.511292][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.536311][   T12] bridge_slave_1: left allmulticast mode
[   69.540667][   T12] bridge_slave_1: left promiscuous mode
[   69.543687][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.570679][   T12] bridge_slave_0: left allmulticast mode
[   69.572527][   T12] bridge_slave_0: left promiscuous mode
[   69.574697][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.024548][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.032035][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.037225][   T12] bond0 (unregistering): Released all slaves
[   70.039944][ T5235] Bluetooth: hci1: command tx timeout
[   70.082755][ T5941] team0: Port device team_slave_0 added
[   70.089097][ T5941] team0: Port device team_slave_1 added
[   70.154589][ T5987] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14'.
[   70.176701][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.179614][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.188945][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.254988][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.257343][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.267011][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.281380][ T5989] Zero length message leads to an empty skb
[   70.355950][ T5941] hsr_slave_0: entered promiscuous mode
[   70.361603][ T5235] Bluetooth: hci2: command tx timeout
[   70.391636][ T5941] hsr_slave_1: entered promiscuous mode
[   70.401684][ T5941] debugfs: 'hsr0' already exists in 'hsr'
[   70.403613][ T5941] Cannot create hsr debugfs directory
[   70.573324][ T5998] netlink: 'syz.1.16': attribute type 2 has an invalid length.
[   70.575623][   T12] hsr_slave_0: left promiscuous mode
[   70.577558][ T5998] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.16'.
[   70.582191][   T12] hsr_slave_1: left promiscuous mode
[   70.582236][ T5998] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   70.584272][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.591175][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.595199][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.597513][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.625072][   T12] veth1_macvtap: left promiscuous mode
[   70.627032][   T12] veth0_macvtap: left promiscuous mode
[   70.629256][   T12] veth1_vlan: left promiscuous mode
[   70.631188][   T12] veth0_vlan: left promiscuous mode
[   70.649322][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   70.952818][   T12] team0 (unregistering): Port device team_slave_1 removed
[   70.976930][   T12] team0 (unregistering): Port device team_slave_0 removed
[   71.164270][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.166838][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.294810][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.305947][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.338998][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.353096][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.434495][ T5941] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.457008][ T5941] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.472016][ T5941] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.500112][ T5941] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.558633][ T5235] Bluetooth: hci0: command tx timeout
[   71.570863][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.601979][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[   71.615883][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.618292][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.642526][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.644954][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.677178][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.756863][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.787878][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.801433][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   71.809709][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.812250][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.831258][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.834659][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.877558][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.961781][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.997851][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.084256][ T5931] veth0_vlan: entered promiscuous mode
[   72.118690][ T5235] Bluetooth: hci1: command tx timeout
[   72.131569][ T5931] veth1_vlan: entered promiscuous mode
[   72.155200][ T6046] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20'.
[   72.166023][   T12] bridge_slave_1: left allmulticast mode
[   72.170493][   T12] bridge_slave_1: left promiscuous mode
[   72.172497][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.176647][   T12] bridge_slave_0: left allmulticast mode
[   72.179238][   T12] bridge_slave_0: left promiscuous mode
[   72.181111][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.288515][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   72.294897][ T6048] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   72.438269][ T5235] Bluetooth: hci2: command tx timeout
[   72.627169][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.634835][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.640419][   T12] bond0 (unregistering): Released all slaves
[   72.674796][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.703393][ T5931] veth0_macvtap: entered promiscuous mode
[   72.729038][ T5931] veth1_macvtap: entered promiscuous mode
[   72.756497][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.781469][   T12] hsr_slave_0: left promiscuous mode
[   72.789631][   T12] hsr_slave_1: left promiscuous mode
[   72.795551][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.806668][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.811575][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.814446][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.839907][   T12] veth1_macvtap: left promiscuous mode
[   72.842340][   T12] veth0_macvtap: left promiscuous mode
[   72.844692][   T12] veth1_vlan: left promiscuous mode
[   72.846827][   T12] veth0_vlan: left promiscuous mode
[   73.056172][ T6070] __nla_validate_parse: 1 callbacks suppressed
[   73.056189][ T6070] netlink: 153108 bytes leftover after parsing attributes in process `syz.1.25'.
[   73.061811][ T6070] netlink: zone id is out of range
[   73.063500][ T6070] netlink: zone id is out of range
[   73.065067][ T6070] netlink: get zone limit has 8 unknown bytes
[   73.343235][   T12] team0 (unregistering): Port device team_slave_1 removed
[   73.380000][   T12] team0 (unregistering): Port device team_slave_0 removed
[   73.693370][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.748134][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.755918][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.764377][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.780525][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.836141][ T5235] Bluetooth: hci0: adv larger than maximum supported
[   73.836232][ T5235] Bluetooth: hci0: Unknown advertising packet type: 0x18
[   73.840950][ T5235] Bluetooth: hci0: Malformed LE Event: 0x0d
[   73.919799][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.922975][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.993943][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.005009][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.029227][ T6091] netlink: 188 bytes leftover after parsing attributes in process `syz.1.29'.
[   74.056104][ T5941] veth0_vlan: entered promiscuous mode
[   74.074894][ T5941] veth1_vlan: entered promiscuous mode
[   74.122397][ T5941] veth0_macvtap: entered promiscuous mode
[   74.130360][ T5941] veth1_macvtap: entered promiscuous mode
[   74.146997][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.158232][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.169179][ T6095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.30'.
[   74.175840][ T5871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.189737][ T5871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.194045][ T5871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.200878][ T5871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.217988][ T5235] Bluetooth: hci1: command tx timeout
[   74.361337][ T6102] 
[   74.362186][ T6102] =====================================
[   74.364040][ T6102] WARNING: bad unlock balance detected!
[   74.365860][ T6102] syzkaller #0 Not tainted
[   74.367398][ T6102] -------------------------------------
[   74.370162][ T6102] syz.1.31/6102 is trying to release lock (&sighand->siglock) at:
[   74.373949][ T6102] [<ffffffff8182daf3>] copy_process+0x2793/0x3c00
[   74.376593][ T6102] but there are no more locks to release!
[   74.378790][ T6102] 
[   74.378790][ T6102] other info that might help us debug this:
[   74.382356][ T6102] 1 lock held by syz.1.31/6102:
[   74.384350][ T6102]  #0: ffffffff8e171890 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x212a/0x3c00
[   74.388402][ T6102] 
[   74.388402][ T6102] stack backtrace:
[   74.390710][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) 
[   74.390728][ T6102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.390735][ T6102] Call Trace:
[   74.390742][ T6102]  <TASK>
[   74.390749][ T6102]  dump_stack_lvl+0x189/0x250
[   74.390767][ T6102]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.390780][ T6102]  ? __pfx__printk+0x10/0x10
[   74.390796][ T6102]  ? copy_process+0x2793/0x3c00
[   74.390808][ T6102]  print_unlock_imbalance_bug+0xdc/0xf0
[   74.390821][ T6102]  lock_release+0x269/0x3e0
[   74.390836][ T6102]  ? copy_process+0x2793/0x3c00
[   74.390850][ T6102]  _raw_spin_unlock+0x16/0x50
[   74.390880][ T6102]  copy_process+0x2793/0x3c00
[   74.390897][ T6102]  ? copy_process+0x97f/0x3c00
[   74.390911][ T6102]  ? __pfx_copy_process+0x10/0x10
[   74.390926][ T6102]  kernel_clone+0x21e/0x840
[   74.390941][ T6102]  ? __pfx_kernel_clone+0x10/0x10
[   74.390957][ T6102]  ? __lock_acquire+0xab9/0xd20
[   74.390976][ T6102]  __se_sys_clone3+0x256/0x2d0
[   74.390990][ T6102]  ? __might_fault+0xb0/0x130
[   74.391002][ T6102]  ? __pfx___se_sys_clone3+0x10/0x10
[   74.391021][ T6102]  ? _copy_to_user+0x8a/0xb0
[   74.391034][ T6102]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   74.391050][ T6102]  ? do_syscall_64+0xbe/0x3b0
[   74.391064][ T6102]  do_syscall_64+0xfa/0x3b0
[   74.391073][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.391085][ T6102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.391097][ T6102]  ? exc_page_fault+0x9f/0xf0
[   74.391111][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.391151][ T6102] RIP: 0033:0x7f9fb43c3489
[   74.391165][ T6102] Code: d7 08 00 48 8d 3d bc d7 08 00 e8 f2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[   74.391175][ T6102] RSP: 002b:00007ffd84799b28 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[   74.391187][ T6102] RAX: ffffffffffffffda RBX: 00007f9fb4345880 RCX: 00007f9fb43c3489
[   74.391194][ T6102] RDX: 00007f9fb4345880 RSI: 0000000000000058 RDI: 00007ffd84799b70
[   74.391202][ T6102] RBP: 00007f9fb52fa6c0 R08: 00007f9fb52fa6c0 R09: 00007ffd84799c57
[   74.391211][ T6102] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8
[   74.391217][ T6102] R13: 000000000000000b R14: 00007ffd84799b70 R15: 00007ffd84799c58
[   74.391231][ T6102]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   75.425273][ T5871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.602610][ T5871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.702343][ T5871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.753522][ T5871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.823539][ T5871] bridge_slave_1: left allmulticast mode
[   75.825906][ T5871] bridge_slave_1: left promiscuous mode
[   75.829179][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.833500][ T5871] bridge_slave_0: left allmulticast mode
[   75.835834][ T5871] bridge_slave_0: left promiscuous mode
[   75.838821][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.922885][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.926961][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.931215][ T5871] bond0 (unregistering): Released all slaves
[   76.108910][ T5871] hsr_slave_0: left promiscuous mode
[   76.111532][ T5871] hsr_slave_1: left promiscuous mode
[   76.114088][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.116994][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.122192][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.125115][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.131744][ T5871] veth1_macvtap: left promiscuous mode
[   76.134042][ T5871] veth0_macvtap: left promiscuous mode
[   76.136306][ T5871] veth1_vlan: left promiscuous mode
[   76.139162][ T5871] veth0_vlan: left promiscuous mode
[   76.291012][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   76.312676][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   76.701432][ T5871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.742659][ T5871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.782076][ T5871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.833494][ T5871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.905862][ T5871] bridge_slave_1: left allmulticast mode
[   76.911019][ T5871] bridge_slave_1: left promiscuous mode
[   76.913335][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.919350][ T5871] bridge_slave_0: left allmulticast mode
[   76.921588][ T5871] bridge_slave_0: left promiscuous mode
[   76.923977][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.024616][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.029012][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.033174][ T5871] bond0 (unregistering): Released all slaves
[   77.141292][ T5871] hsr_slave_0: left promiscuous mode
[   77.143984][ T5871] hsr_slave_1: left promiscuous mode
[   77.146469][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.149640][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.153315][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.156012][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.162226][ T5871] veth1_macvtap: left promiscuous mode
[   77.164082][ T5871] veth0_macvtap: left promiscuous mode
[   77.166171][ T5871] veth1_vlan: left promiscuous mode
[   77.168491][ T5871] veth0_vlan: left promiscuous mode
[   77.280224][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   77.294952][ T5871] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
17:54:47  Registers:
info registers vcpu 0

CPU#0
RAX=ad97778d6672c600 RBX=ffffffff81969a38 RCX=ad97778d6672c600 RDX=0000000000000001
RSI=ffffffff8be343e0 RDI=ffffffff81969a38 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b033b9b R9 =1ffff11009606773 R10=dffffc0000000000 R11=ffffed1009606774
R12=ffffffff8fa3b530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000118a3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fc5417a7478 00007fc5417a74c0
XMM06=00007fc5417a74b8 00007fc5417a74b0 XMM07=00007fc5417a74a8 00007fc5417a74a0
XMM08=0000000000000000 00007fc541612f0f XMM09=0000000000000000 00007fc541612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900036cf2d0
R8 =ffff888106e60237 R9 =1ffff11020dcc046 R10=dffffc0000000000 R11=ffffffff85504740
R12=dffffc0000000000 R13=ffffffff99b048c4 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff855047bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569eac500 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd84799c40 CR3=0000000109970000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
