last executing test programs:

34.62749179s ago: executing program 2 (id=91):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

34.268265679s ago: executing program 2 (id=96):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x48, 0x4, 0x0, 0x3}, {0x44, 0x94, 0x0, 0xb1}, {}, {0x6, 0x0, 0xd}]})

34.128326672s ago: executing program 2 (id=101):
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x800)

34.127705528s ago: executing program 0 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x9, 0x1, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

34.079910507s ago: executing program 2 (id=104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="06ff03076844268cb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

34.020449704s ago: executing program 0 (id=106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

34.019489088s ago: executing program 2 (id=108):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

33.949437737s ago: executing program 0 (id=109):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x13, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x2b, 0x0, 0x9}, 0x28)

33.878980884s ago: executing program 0 (id=112):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0xf5}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0)

33.056745667s ago: executing program 2 (id=114):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)

33.056414333s ago: executing program 0 (id=115):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001800010324bd7002fadbdf254e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

31.016381575s ago: executing program 0 (id=117):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x300, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)

7.636202539s ago: executing program 1 (id=118):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0xc, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x2}, {0x20}, {0x2, 0x0, 0xe}, {}, {0x5, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x3, 0x420008}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffdc7, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ae4e0493855aa4ec86ee446cbe4b108991234db0e4fd5080e8045047bdcfa71f2fd5ca08aa9159033525ad544e6f6e17e431a112cfdb86709d8d48e978feead29d38648b589e4ac3ecbc1b96643215a9852279fe1752b4595a793584041728a24b78821cd639ba74b09555dd0e7d37485bef70f2e26704c4c9262a059a5fdf08b25e92139f5b4c56f61e7019eeb7a8c196f27414cb90c582da2f3c0c783abaf8dcbc8475aa8d608ad19941eb656f272fc1a92490ff5a64bfa84a25a8ed3f801abb4c19972777f54cb412b98ea987902d89871dc95e874fc417bd87592556e52766d2a4388f0f"}]}, 0x10040005)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000))

5.86958646s ago: executing program 1 (id=119):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

5.120522424s ago: executing program 1 (id=120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x8}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x8000000)

5.120230072s ago: executing program 1 (id=121):
r0 = socket$kcm(0xa, 0x3, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4)

1.017185514s ago: executing program 1 (id=122):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe6f, &(0x7f0000000780)={&(0x7f0000000200)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xe50b}}, {0x0, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7fffffff}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffffe}}]}]}, 0x24}}, 0x2004c080)

1.01674686s ago: executing program 1 (id=123):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850)

210.004µs ago: executing program 32 (id=117):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x300, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)

0s ago: executing program 33 (id=114):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46909' (ED25519) to the list of known hosts.
syzkaller login: [   56.034403][ T5790] cgroup: Unknown subsys name 'net'
[   56.180221][ T5790] cgroup: Unknown subsys name 'cpuset'
[   56.184351][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.818276][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.841133][ T5822] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.064034][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.190332][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.190332][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.195598][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.198833][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.201448][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.204010][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.207652][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.210781][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.213466][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.213825][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.287039][ T5196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.297554][ T5196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.307873][ T5196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.312175][ T5196] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.315636][ T5196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.554283][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   70.580407][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   70.798042][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.801121][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.803614][ T5845] bridge_slave_0: entered allmulticast mode
[   70.806224][ T5845] bridge_slave_0: entered promiscuous mode
[   70.822682][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   70.836197][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.839047][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.841589][ T5845] bridge_slave_1: entered allmulticast mode
[   70.845183][ T5845] bridge_slave_1: entered promiscuous mode
[   70.875876][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.878670][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.881244][ T5844] bridge_slave_0: entered allmulticast mode
[   70.884612][ T5844] bridge_slave_0: entered promiscuous mode
[   70.918346][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.920938][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.922997][ T5844] bridge_slave_1: entered allmulticast mode
[   70.925608][ T5844] bridge_slave_1: entered promiscuous mode
[   70.941406][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.968926][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.974065][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.978958][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.009571][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.011811][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.014136][ T5852] bridge_slave_0: entered allmulticast mode
[   71.016751][ T5852] bridge_slave_0: entered promiscuous mode
[   71.020460][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.022719][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.024888][ T5852] bridge_slave_1: entered allmulticast mode
[   71.030494][ T5852] bridge_slave_1: entered promiscuous mode
[   71.051556][ T5845] team0: Port device team_slave_0 added
[   71.063973][ T5844] team0: Port device team_slave_0 added
[   71.073896][ T5845] team0: Port device team_slave_1 added
[   71.085171][ T5844] team0: Port device team_slave_1 added
[   71.096454][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.110931][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.112887][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.122200][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.129021][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.143125][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.145497][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.154235][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.167456][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.169775][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.176705][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.181589][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.183847][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.191866][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.219560][ T5852] team0: Port device team_slave_0 added
[   71.245704][ T5845] hsr_slave_0: entered promiscuous mode
[   71.248003][ T5845] hsr_slave_1: entered promiscuous mode
[   71.251971][ T5852] team0: Port device team_slave_1 added
[   71.302065][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.304546][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.313505][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.323380][ T5844] hsr_slave_0: entered promiscuous mode
[   71.327097][ T5844] hsr_slave_1: entered promiscuous mode
[   71.329674][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   71.331462][ T5844] Cannot create hsr debugfs directory
[   71.341382][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.343660][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.351542][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.475108][ T5852] hsr_slave_0: entered promiscuous mode
[   71.478816][ T5852] hsr_slave_1: entered promiscuous mode
[   71.480894][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   71.482543][ T5852] Cannot create hsr debugfs directory
[   71.630521][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.636870][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.661332][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.673260][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.705213][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.710157][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.722999][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.739020][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.771866][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.785237][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.796629][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.801945][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.879065][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.919544][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   71.928648][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.939675][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.942478][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.960049][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.962387][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.975727][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   71.995338][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.998079][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.006812][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.009055][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.034419][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.088415][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   72.109805][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.112070][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.130039][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.132234][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.190516][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.194015][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.260844][   T54] Bluetooth: hci0: command tx timeout
[   72.261085][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.271055][   T54] Bluetooth: hci1: command tx timeout
[   72.316517][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.337632][   T54] Bluetooth: hci2: command tx timeout
[   72.366828][ T5845] veth0_vlan: entered promiscuous mode
[   72.386476][ T5845] veth1_vlan: entered promiscuous mode
[   72.400170][ T5852] veth0_vlan: entered promiscuous mode
[   72.409369][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.425502][ T5852] veth1_vlan: entered promiscuous mode
[   72.445092][ T5845] veth0_macvtap: entered promiscuous mode
[   72.456984][ T5845] veth1_macvtap: entered promiscuous mode
[   72.486689][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.500747][ T5844] veth0_vlan: entered promiscuous mode
[   72.504266][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.519835][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.528738][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.535060][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.552194][ T5852] veth0_macvtap: entered promiscuous mode
[   72.556357][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.561960][ T5844] veth1_vlan: entered promiscuous mode
[   72.576106][ T5852] veth1_macvtap: entered promiscuous mode
[   72.613145][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.633126][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.662636][  T495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.665572][  T495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.668636][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.693833][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.705302][  T495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.708769][  T495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.711308][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.717248][ T5844] veth0_macvtap: entered promiscuous mode
[   72.720658][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.725641][ T5844] veth1_macvtap: entered promiscuous mode
[   72.801859][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.829912][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.855579][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.877716][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.886304][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.887965][  T495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.893557][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.905868][  T495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.993179][  T495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.000430][  T495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.066674][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.071401][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.119534][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.126743][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.562251][ T5951] netlink: 128 bytes leftover after parsing attributes in process `syz.0.25'.
[   74.330698][ T6017] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   74.339758][   T54] Bluetooth: hci1: command tx timeout
[   74.342284][   T54] Bluetooth: hci0: command tx timeout
[   74.423991][ T5196] Bluetooth: hci2: command tx timeout
[   74.441893][ T6021] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   74.444133][ T6021] team0: Device vxcan1 is up. Set it down before adding it as a team port
[   74.674315][ T6037] =======================================================
[   74.674315][ T6037] WARNING: The mand mount option has been deprecated and
[   74.674315][ T6037]          and is ignored by this kernel. Remove the mand
[   74.674315][ T6037]          option from the mount to silence this warning.
[   74.674315][ T6037] =======================================================
[   74.691093][ T6027] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   75.520610][ T6079] netlink: 'syz.2.64': attribute type 3 has an invalid length.
[   75.524087][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'.
[   75.527025][ T6079] netlink: 'syz.2.64': attribute type 6 has an invalid length.
[   75.531866][ T6079] netlink: 'syz.2.64': attribute type 9 has an invalid length.
[   75.534268][ T6079] netlink: 'syz.2.64': attribute type 10 has an invalid length.
[   75.536613][ T6079] netlink: 'syz.2.64': attribute type 11 has an invalid length.
[   75.541258][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'.
[   75.555609][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.417847][ T5196] Bluetooth: hci0: command tx timeout
[   76.417875][   T54] Bluetooth: hci1: command tx timeout
[   76.497592][   T54] Bluetooth: hci2: command tx timeout
[   76.573330][ T6111] delete_channel: no stack
[   76.611453][ T6121] netlink: 'syz.2.83': attribute type 14 has an invalid length.
[   76.613947][ T6121] netlink: 164 bytes leftover after parsing attributes in process `syz.2.83'.
[   76.651106][ T6123] netlink: 'syz.0.84': attribute type 21 has an invalid length.
[   76.653943][ T6123] netlink: 168 bytes leftover after parsing attributes in process `syz.0.84'.
[   76.711682][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[   76.881263][    C1] hrtimer: interrupt took 70812 ns
[   77.055649][ T6134] netlink: 'syz.0.87': attribute type 10 has an invalid length.
[   77.098955][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   77.101815][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   77.369863][ T6134] team0: Port device geneve1 added
[   77.423478][ T6139] netlink: 'syz.2.91': attribute type 13 has an invalid length.
[   78.497494][   T54] Bluetooth: hci1: command tx timeout
[   78.508022][   T54] Bluetooth: hci0: command tx timeout
[   78.587733][   T54] Bluetooth: hci2: command tx timeout
[   78.989772][ T6189] netlink: 2 bytes leftover after parsing attributes in process `syz.2.114'.
[   78.993011][ T6189] batadv_slave_1: entered promiscuous mode
[   78.996031][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.000336][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.006010][ T6189] bridge0: port 3(batadv_slave_1) entered blocking state
[   79.009282][ T6189] bridge0: port 3(batadv_slave_1) entered disabled state
[   79.012009][ T6189] batadv_slave_1: entered allmulticast mode
[   79.015197][ T6189] bridge0: port 3(batadv_slave_1) entered blocking state
[   79.018045][ T6189] bridge0: port 3(batadv_slave_1) entered forwarding state
[   79.399805][ T6200] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.119'.
[   83.199472][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'.
[   83.203631][ T6207] tc_dump_action: action bad kind
[   87.187162][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 7397666618 wd_nsec: 7397652128
[   87.232545][   T24] cfg80211: failed to load regulatory.db
[  138.422788][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  138.425171][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  148.710251][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 60988035538 wd_nsec: 60988040076
[  184.037185][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  184.039879][    C0] rcu: 	0-....: (9695 ticks this GP) idle=bf44/1/0x4000000000000000 softirq=13575/13576 fqs=5028
[  184.044414][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  184.046851][    C0] rcu: 	 number:  1203369         43            0
[  184.049244][    C0] rcu: 	cputime:    34820      17669           39   ==> 52500(ms)
[  184.052154][    C0] rcu: 	(t=10502 jiffies g=9405 q=3733 ncpus=2)
[  184.054472][    C0] CPU: 0 UID: 0 PID: 6189 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) 
[  184.054489][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.054497][    C0] RIP: 0010:kmem_cache_free+0x45/0x630
[  184.054521][    C0] Code: 05 f0 0b f8 10 48 89 44 24 20 4c 8b 35 9c 3a f6 0b 48 89 f7 e8 0c fc 53 ff 48 c1 e8 06 48 83 e0 c0 49 8d 0c 06 49 8b 44 06 08 <48> 89 c2 48 ff ca a8 01 48 0f 44 d1 0f b6 42 33 c1 e0 18 45 31 f6
[  184.054532][    C0] RSP: 0018:ffffc90000007b30 EFLAGS: 00000202
[  184.054546][    C0] RAX: ffffea00042a4f01 RBX: ffff888160417280 RCX: ffffea00042a4f40
[  184.054556][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  184.054564][    C0] RBP: 0000000000000180 R08: ffffffff9011b4b7 R09: 1ffffffff2023696
[  184.054573][    C0] R10: dffffc0000000000 R11: fffffbfff2023697 R12: ffff88810a93d880
[  184.054583][    C0] R13: 1ffff11021527b40 R14: ffffea0000000000 R15: dffffc0000000000
[  184.054593][    C0] FS:  00007f97cfe8e6c0(0000) GS:ffff88818de5a000(0000) knlGS:0000000000000000
[  184.054604][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.054613][    C0] CR2: 000000110c3072c0 CR3: 00000001139b0000 CR4: 00000000000006f0
[  184.054647][    C0] Call Trace:
[  184.054656][    C0]  <IRQ>
[  184.054667][    C0]  skb_release_data+0x6c3/0x940
[  184.054733][    C0]  __kfree_skb+0x5d/0x210
[  184.054750][    C0]  mac80211_hwsim_beacon_tx+0x3e8/0x870
[  184.054772][    C0]  __iterate_interfaces+0x2ab/0x590
[  184.054790][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  184.054806][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  184.054824][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  184.054850][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  184.054870][    C0]  mac80211_hwsim_beacon+0xbb/0x180
[  184.054891][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  184.054911][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  184.054943][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  184.054961][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  184.054985][    C0]  hrtimer_run_softirq+0x182/0x5a0
[  184.055010][    C0]  handle_softirqs+0x22a/0x870
[  184.055031][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  184.055054][    C0]  __irq_exit_rcu+0x5f/0x150
[  184.055071][    C0]  irq_exit_rcu+0x9/0x30
[  184.055088][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  184.055104][    C0]  </IRQ>
[  184.055108][    C0]  <TASK>
[  184.055115][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  184.055131][    C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0
[  184.055146][    C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 e3 e7 e3 f5 e8 4e 86 1d f6 fb bf 01 00 00 00 <e8> c3 a6 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 24 88 1d f6 bf 01
[  184.055157][    C0] RSP: 0018:ffffc90004117990 EFLAGS: 00000202
[  184.055168][    C0] RAX: 00000000000037e3 RBX: 0000000000000000 RCX: 0000000000000001
[  184.055177][    C0] RDX: 0000000000000007 RSI: ffffffff8def8e53 RDI: 0000000000000001
[  184.055185][    C0] RBP: 0000000000000000 R08: ffffffff9011b4b7 R09: 1ffffffff2023696
[  184.055193][    C0] R10: dffffc0000000000 R11: fffffbfff2023697 R12: 0000000000000000
[  184.055203][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  184.055224][    C0]  irqentry_exit+0x599/0x620
[  184.055240][    C0]  ? trace_irq_disable+0x3b/0x150
[  184.055265][    C0]  asm_common_interrupt+0x26/0x40
[  184.055278][    C0] RIP: 0010:lock_is_held_type+0x106/0x150
[  184.055294][    C0] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 04 d0 6d 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cb e2 02 00 cc 90 0f 0b 90 48 c7
[  184.055304][    C0] RSP: 0018:ffffc90004117ab0 EFLAGS: 00000206
[  184.055315][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046
[  184.055322][    C0] RDX: 0000000000000000 RSI: ffffffff8e169d5a RDI: ffffffff8c27ca00
[  184.055331][    C0] RBP: 00000000ffffffff R08: ffffc90004117c67 R09: 0000000000000000
[  184.055340][    C0] R10: ffffc90004117c40 R11: fffff52000822f8d R12: 0000000000000246
[  184.055350][    C0] R13: ffff888111ca8000 R14: ffffffff8e75e6a0 R15: 0000000000000001
[  184.055374][    C0]  __might_resched+0x86/0x4d0
[  184.055398][    C0]  __mutex_lock+0x119/0x1300
[  184.055419][    C0]  ? __se_sys_perf_event_open+0x1941/0x1d60
[  184.055438][    C0]  ? __se_sys_perf_event_open+0x19ad/0x1d60
[  184.055455][    C0]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  184.055473][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  184.055488][    C0]  ? __up_read+0x291/0x6b0
[  184.055502][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  184.055521][    C0]  ? __pfx___up_read+0x10/0x10
[  184.055542][    C0]  __se_sys_perf_event_open+0x19ad/0x1d60
[  184.055568][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  184.055595][    C0]  ? rcu_is_watching+0x15/0xb0
[  184.055619][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  184.055638][    C0]  do_syscall_64+0x14d/0xf80
[  184.055654][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.055672][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.055713][    C0] RIP: 0033:0x7f97cef9c799
[  184.055727][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.055738][    C0] RSP: 002b:00007f97cfe8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  184.055751][    C0] RAX: ffffffffffffffda RBX: 00007f97cf215fa0 RCX: 00007f97cef9c799
[  184.055762][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000012c0
[  184.055770][    C0] RBP: 00007f97cf032c99 R08: 0000000000000000 R09: 0000000000000000
[  184.055778][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  184.055787][    C0] R13: 00007f97cf216038 R14: 00007f97cf215fa0 R15: 00007ffc0a4e3738
[  184.055807][    C0]  </TASK>
[  185.258027][    C0] sched: DL replenish lagged too much
