last executing test programs:

6.043519064s ago: executing program 1 (id=357):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

5.914568738s ago: executing program 1 (id=360):
socket$kcm(0x2a, 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="c7606fe27e0023b6eafcdda5fb13", 0x0, 0x9, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000440)="4ee8afccbab32d2ad063e30803b23a74a5c4a18782bb6ffff2c6cdfe477310f5dcb7e61819eb053d1853a986da8a867c1f287760447e3ba4"}, 0x50)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x20)
r8 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x2, 0x2b, 0x0, 0x100, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x471c}, 0x100000, 0x8, 0x8, 0x4, 0x7ff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x5, r1, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
socket$kcm(0x2d, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0xf, 0x2, 0x5, 0x5, 0x0, 0x1, 0xef880acc6e84ba32, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xff, 0x9}, 0x10050, 0x8000000000000001, 0x0, 0x3, 0x7eb, 0x5, 0xfa27, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0xa, r2, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x8000000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x106)

5.909735919s ago: executing program 2 (id=361):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x5}, 0x41, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000003400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xad94, 0xe}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x200, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2a32, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000c8, 0xfffffffc, 0x1, 0x8000000000000, 0x40002ab5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x200000000000004b, &(0x7f0000000880)=ANY=[], 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xb, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x420c0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000401296a1180002000700000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)

5.494339172s ago: executing program 2 (id=362):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tcp_probe\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0xff61}], 0x1}, 0x0)
sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='\a', 0x1}], 0x1}, 0x241)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9)

4.595170242s ago: executing program 2 (id=365):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x6, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc00000000000600000000000000950000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, 0x0, 0x20040000)
r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x5)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)=0x12800)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x20008040)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x22, 0xa, 0x401, &(0x7f0000000140))
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80086601, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000a9e5f2cf56"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$inet(r6, 0x0, 0x20044818)
sendmsg$sock(r6, 0x0, 0x40011)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.014764924s ago: executing program 0 (id=367):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0xd2, 0x80000000, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, 0x0, 0x41, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffffb, 0x0, 0x8c}, {0x0, 0x8, 0x0, 0x2}}}, 0xb8}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3.934029321s ago: executing program 1 (id=368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x78}}, 0x80c4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)=ANY=[@ANYBLOB='n'])
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300eaff040000000c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000020000181200", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f0000000900), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="186100000100000000000000040000001800000009000000000000000900000085000000d000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800006000000007020000f8ffffffb70300645182764f00080000000000000000008500000082000000852000c40b00000000000000000000009f5064615ce594dd5f139bcffc9a6fe1a53a320873c57c074c40f390acfb9ec5d8d192ee64a0354980e391f585c57018da1adaff8530e7464a1319ef6239b5cbd139e812463758f6019e11b3e5bcdb2f2ef8bcca52ec0179cccc31ccedeb2b14f5ffe8559fc245bbf9b686aa571d9f8a1f1796240d0afa23ccc272467451d61334fa75c61cd07b4ac6c039c758fffe8a38f72c785a"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, &(0x7f0000000480), 0x41100, 0x62, '\x00', r7, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0xd, 0x0, 0x800}, 0x10, 0x75, r6, 0x8, 0x0, &(0x7f0000000b40)=[{0x2, 0x1, 0x5, 0x1}, {0x2, 0x1, 0x0, 0x7}, {0x2, 0x3, 0x0, 0x2}, {0x5, 0x4, 0x1, 0x9}, {0x3, 0x2, 0xf, 0x4}, {0x5, 0x2, 0x5, 0x7}, {0x4, 0x4, 0x5, 0x7}, {0x0, 0x1, 0xf, 0x8}], 0x10, 0x80}, 0x94)
sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=@canfd={{0x4, 0x1, 0x1}, 0x38, 0x1, 0x0, 0x0, "292695ad947bc93633521658acb419d2449691a243550b05b1d67bcb7ccb7f89909acfd028e184fd7fa3eedc54627e749855f475adf0a91bfff0f2bf99abe062"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x81)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.714719265s ago: executing program 2 (id=369):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x8, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'erspan0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(r1)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0xff02, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x7e, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b", 0x0, 0xfe, 0x60000000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xffffffff, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.043730408s ago: executing program 1 (id=370):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000003ac0)=""/4110, 0x100e}, {&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/283, 0x11b}], 0x8}, 0x20)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
fstat(r0, &(0x7f00000002c0))
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xe6bd)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94)

2.816488521s ago: executing program 0 (id=371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000001a40)=""/4110, 0x100e}, {&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/283, 0x11b}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000000140)=""/140, 0x8c}], 0xa}, 0x20)
write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33)
recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3}, 0x10002)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010401"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5b0a, 0x2}, 0x0, 0x2, 0xffffdffe, 0x4, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x4fe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000009c8345e614ee660a20000000000a03000000000000000000030000000900010073797a30000000004c000000030a0300000000000000000003000000b874dd0c0900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000000b00070066696c746572000014000000110001000000000000"], 0x94}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000af9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

2.451693009s ago: executing program 0 (id=372):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000000000000000048010000180090001006d617371000000000100010073797a300000000009000200737b7a320000000014000000110001000000000000000000f500000a814195e37610bf41d8792e5c2e42a6e7a130dea3a3acc8b904b8b87daacb903b8f83d7f088c1c908600284b3122fa5b72f6d853cb456d05005f707b05b07e642404566226dc43e65802f22302951e05c77170935ac738dc26d1a07985d6dfc0701890607fc71812367d30e44c0f311d8d81b4662b2759ac53da9d2093335ce487a711bdba0314ba2fdc83a696a"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a60000000060a0b040000000000001f000200000034000480300001800a0001006d6174636800000020003180080009000000000009000100647363700000000006000300ebae00000900010073797a30000000000940020073797a3200000000140000001100200000000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1f000}], 0x20}, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)

2.210374511s ago: executing program 2 (id=373):
socket$kcm(0x11, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000010401080000000000000000015f0007080004400000800105000100010000000a0002000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x4)
socket$nl_crypto(0x10, 0x3, 0x15)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x40000000, 0x0, 0x3, 0x10401, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001700000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x80, 0x4}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x8084)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.133709563s ago: executing program 0 (id=374):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x57, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x79, 0x0, &(0x7f0000000080)=""/121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.983401255s ago: executing program 1 (id=375):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r0, 0x0, 0x200000}, 0x18) (async)
r1 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x4) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], <r3=>0x0, 0xc7, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)

1.874192492s ago: executing program 0 (id=376):
socket$kcm(0x1e, 0x4, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)={0x284, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x25c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1f0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1e0, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x84, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_FROM_DATA={0x148, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "2ec77321706f3b82668068cc237d2021bba386c0493c7dd168dad0bc61bf614fc5a26ed097b1c5dbc8fb969de544933eea5da42d5972ee086982b4e572ec07557095311fd583edf974393c2f1d2140df6b78"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "37b13085b37806f3baaf7f136f3665417f56552ce1e7a5b4db32f21275d2bfe202793cdbb2a50829779092609e49ed6bfc15ce163cf7b4d68bdf91357c78ee9c9daa74381bb6c2dedd0a2cb6fa9de5f9134d9b003c23"}, @NFTA_DATA_VALUE={0x7e, 0x1, "247d6f20871d7d94bf987fa7ef2bd8767e572b880616320d5168b62e613a967388bbb9636a5e71462ca468bb89f28e06e13cbea4bb4f0fc7669ac486e2fb7d406e7fd5116cfcf2002183685313822372efb623dd122b93d75cab753b55b66a56b583826ac5762284c0c1eaad60bca2b1865801cdd8d708cf8fb6"}]}]}}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20048884}, 0x8000)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)="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", 0x578}], 0x1}, 0x810)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, 0x0, 0xe)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="4234d4", 0x3}], 0x1}, 0x4048859)

944.112931ms ago: executing program 1 (id=377):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
perf_event_open(0x0, 0x0, 0xd, r1, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r2, 0x0, 0x1ff)
syz_clone(0x41001000, &(0x7f0000000000)="6b6284075a925de0ed7486111d6362d5e667be259a2e0f95047c19a5", 0x1c, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="011a0c778ea8d887fcb12ebec4d177062b3f0db164f9e6850aeb2a5cc16d238e2cceca372c33f88071844e6a95b4321d7cdf30e0")
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xacc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000500), &(0x7f0000000580)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa4}}, 0x4048010)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)={0x1, 0x9, [@multicast, @empty, @local, @local, @broadcast, @local, @remote, @local, @random="51e7732fcbf8"]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)

53.818445ms ago: executing program 0 (id=378):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x7)
close(0x3)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async)
close(r1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) (async)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040) (async)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x7) (async)
close(0x3) (async)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000000) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)

0s ago: executing program 2 (id=379):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1) (async)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) (async)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
close(0x3) (async)
close(0x3)
socket$kcm(0x2, 0x2, 0x0) (async)
r3 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00')
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffe, 0xffffffff}, 0x7402, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

syzkaller login: [   86.790396][   T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:27794' (ED25519) to the list of known hosts.
[  312.584375][ T5864] cgroup: Unknown subsys name 'net'
[  312.752924][ T5864] cgroup: Unknown subsys name 'cpuset'
[  312.760126][ T5864] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  315.216941][ T5864] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  317.200193][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.202263][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  320.859854][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.864011][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.867600][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  320.872310][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  320.877788][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.882748][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.886089][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  320.926706][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.932614][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.942462][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.945351][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.950558][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.954076][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.957746][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.962917][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.284653][ T5876] chnl_net:caif_netlink_parms(): no params data found
[  321.319056][ T5880] chnl_net:caif_netlink_parms(): no params data found
[  321.450826][ T5872] chnl_net:caif_netlink_parms(): no params data found
[  321.508653][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.511654][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.515070][ T5876] bridge_slave_0: entered allmulticast mode
[  321.520699][ T5876] bridge_slave_0: entered promiscuous mode
[  321.533152][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.535716][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.538634][ T5880] bridge_slave_0: entered allmulticast mode
[  321.541952][ T5880] bridge_slave_0: entered promiscuous mode
[  321.545719][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.549988][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.552501][ T5880] bridge_slave_1: entered allmulticast mode
[  321.555908][ T5880] bridge_slave_1: entered promiscuous mode
[  321.559189][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.562067][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.564997][ T5876] bridge_slave_1: entered allmulticast mode
[  321.569050][ T5876] bridge_slave_1: entered promiscuous mode
[  321.645746][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.656577][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.662533][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.667824][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.732748][ T5880] team0: Port device team_slave_0 added
[  321.736404][ T5876] team0: Port device team_slave_0 added
[  321.741069][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.744009][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.747843][ T5872] bridge_slave_0: entered allmulticast mode
[  321.752560][ T5872] bridge_slave_0: entered promiscuous mode
[  321.757828][ T5876] team0: Port device team_slave_1 added
[  321.762153][ T5880] team0: Port device team_slave_1 added
[  321.764963][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.767869][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.771308][ T5872] bridge_slave_1: entered allmulticast mode
[  321.775054][ T5872] bridge_slave_1: entered promiscuous mode
[  321.854143][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.860161][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.863988][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.866452][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.875655][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.880936][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.883524][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.892668][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.917635][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.920796][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.929139][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.933911][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.936757][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.948479][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.953941][ T5872] team0: Port device team_slave_0 added
[  321.967546][ T5872] team0: Port device team_slave_1 added
[  322.022165][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.024758][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.034482][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.056679][ T5876] hsr_slave_0: entered promiscuous mode
[  322.060274][ T5876] hsr_slave_1: entered promiscuous mode
[  322.063624][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.066081][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.075327][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.084117][ T5880] hsr_slave_0: entered promiscuous mode
[  322.087394][ T5880] hsr_slave_1: entered promiscuous mode
[  322.090702][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[  322.093100][ T5880] Cannot create hsr debugfs directory
[  322.210527][ T5872] hsr_slave_0: entered promiscuous mode
[  322.214378][ T5872] hsr_slave_1: entered promiscuous mode
[  322.217037][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[  322.219948][ T5872] Cannot create hsr debugfs directory
[  322.527420][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  322.550391][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  322.563094][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  322.576166][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  322.613436][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  322.634497][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  322.652146][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  322.670975][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  322.697904][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  322.710052][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  322.716615][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  322.725753][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  322.850811][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.866597][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.890880][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[  322.903241][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[  322.916378][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.918781][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.928908][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.931889][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.936975][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.939910][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.954417][ T5878] Bluetooth: hci0: command tx timeout
[  322.970730][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.973670][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.996505][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.028431][ T5878] Bluetooth: hci2: command tx timeout
[  323.038857][ T5878] Bluetooth: hci1: command tx timeout
[  323.057995][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[  323.090036][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.092962][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.114746][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.117739][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.302147][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.322975][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.405020][ T5876] veth0_vlan: entered promiscuous mode
[  323.417028][ T5880] veth0_vlan: entered promiscuous mode
[  323.425285][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.436275][ T5876] veth1_vlan: entered promiscuous mode
[  323.461768][ T5880] veth1_vlan: entered promiscuous mode
[  323.506769][ T5876] veth0_macvtap: entered promiscuous mode
[  323.533041][ T5876] veth1_macvtap: entered promiscuous mode
[  323.539897][ T5872] veth0_vlan: entered promiscuous mode
[  323.544539][ T5880] veth0_macvtap: entered promiscuous mode
[  323.556260][ T5880] veth1_macvtap: entered promiscuous mode
[  323.562711][ T5872] veth1_vlan: entered promiscuous mode
[  323.574474][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.594321][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.614887][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.623381][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.634789][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.638583][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.642029][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.648933][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.656502][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.669121][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.687565][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.692518][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.741309][ T5872] veth0_macvtap: entered promiscuous mode
[  323.774622][ T5872] veth1_macvtap: entered promiscuous mode
[  323.820187][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.823451][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.869733][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.873145][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.875066][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.900670][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.902611][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.909888][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.936900][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.941233][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.941628][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.944586][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.976064][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.981003][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.024986][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  324.106590][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.113262][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.187885][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.193133][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.286513][ T5952] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[  324.290098][ T5952] netlink: 'syz.2.3': attribute type 3 has an invalid length.
[  324.292767][ T5952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'.
[  324.798073][    C0] hrtimer: interrupt took 44860 ns
[  325.007206][ T5983] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[  325.032149][ T5878] Bluetooth: hci0: command tx timeout
[  325.111507][   T54] Bluetooth: hci2: command tx timeout
[  325.113649][ T5878] Bluetooth: hci1: command tx timeout
[  325.652337][ T6020] Zero length message leads to an empty skb
[  325.694884][ T6008] : renamed from gre0 (while UP)
[  326.849135][ T6053] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21'.
[  326.853117][ T6053] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21'.
[  326.997764][ T6051] : renamed from gre0 (while UP)
[  327.121273][ T5878] Bluetooth: hci0: command tx timeout
[  327.188624][   T54] Bluetooth: hci2: command tx timeout
[  327.190842][ T5878] Bluetooth: hci1: command tx timeout
[  327.226345][ T6053] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21'.
[  327.238856][ T6059] syzkaller1: tun_chr_ioctl cmd 1074025677
[  327.240968][ T6059] syzkaller1: linktype set to 780
[  327.243571][ T6050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19'.
[  327.256733][ T6060] netlink: 'syz.1.19': attribute type 32 has an invalid length.
[  327.260136][ T6060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'.
[  327.263901][ T6061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19'.
[  327.401441][ T6070] netlink: 'syz.0.22': attribute type 4 has an invalid length.
[  327.409896][ T6070] netlink: 'syz.0.22': attribute type 10 has an invalid length.
[  327.413932][ T6070] vlan0: entered allmulticast mode
[  327.419878][ T6070] veth0_vlan: entered allmulticast mode
[  327.501898][ T6070] team0: Port device vlan0 added
[  327.826384][ T6077] netlink: 'syz.2.25': attribute type 10 has an invalid length.
[  327.835336][ T6077] netlink: 55 bytes leftover after parsing attributes in process `syz.2.25'.
[  328.664954][ T6082] pimreg: tun_chr_ioctl cmd 1074025678
[  328.686082][ T6082] pimreg: tun_chr_ioctl cmd 1074025677
[  328.689118][ T6082] pimreg: linktype set to 778
[  328.784328][ T6091] xt_HMARK: spi-set and port-set can't be combined
[  328.810216][ T6091] netlink: 'syz.2.28': attribute type 10 has an invalid length.
[  328.813944][ T6091] netlink: 55 bytes leftover after parsing attributes in process `syz.2.28'.
[  328.867263][ T6091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'.
[  329.191163][ T5878] Bluetooth: hci0: command tx timeout
[  329.270226][ T5878] Bluetooth: hci1: command tx timeout
[  329.272130][ T5878] Bluetooth: hci2: command tx timeout
[  329.998916][ T6152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.332351][ T6158] netlink: 'syz.1.48': attribute type 2 has an invalid length.
[  331.336437][ T6158] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[  331.342087][ T6158] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.48'.
[  331.346526][ T6158] nbd: couldn't find a device at index 16
[  331.513819][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[  331.542920][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'.
[  331.726984][ T6181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.54'.
[  332.107049][ T6185] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  332.765471][ T6210] tap0: tun_chr_ioctl cmd 2147767507
[  333.175317][ T6223] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.66'.
[  333.344776][ T6230] syzkaller1: tun_chr_ioctl cmd 1074025677
[  333.347433][ T6230] syzkaller1: linktype set to 780
[  333.381060][ T6225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'.
[  333.401080][ T6225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'.
[  333.700834][ T6239] warning: `syz.1.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  334.242525][ T6255] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  334.637056][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[  336.584783][ T6291] tap0: tun_chr_ioctl cmd 2147767507
[  336.840729][ T6297] syzkaller1: tun_chr_ioctl cmd 1074025677
[  336.843419][ T6297] syzkaller1: linktype set to 780
[  337.037545][ T6293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.88'.
[  337.243338][ T6296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.88'.
[  338.255416][ T6319] syzkaller1: tun_chr_ioctl cmd 1074025677
[  338.257981][ T6319] syzkaller1: linktype set to 780
[  338.274318][ T6323] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'.
[  338.298372][ T6327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'.
[  338.568692][ T6344] netlink: 'syz.1.99': attribute type 2 has an invalid length.
[  338.572448][ T6344] netlink: 164 bytes leftover after parsing attributes in process `syz.1.99'.
[  341.711977][ T6377] IPv6: Can't replace route, no match found
[  342.029945][ T6386] netlink: 'syz.1.107': attribute type 3 has an invalid length.
[  342.490010][ T6401] netlink: 'syz.2.110': attribute type 41 has an invalid length.
[  342.493644][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'.
[  342.667375][ T6412] delete_channel: no stack
[  342.677807][ T6412] delete_channel: no stack
[  343.737918][ T6431] netlink: 180 bytes leftover after parsing attributes in process `syz.0.116'.
[  343.780521][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'.
[  343.844161][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.119'.
[  343.852612][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.119'.
[  343.858335][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.119'.
[  345.196031][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'.
[  345.575807][ T6484] netlink: 763 bytes leftover after parsing attributes in process `syz.0.130'.
[  345.949976][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.134'.
[  346.509518][ T6535] netlink: 'syz.2.143': attribute type 10 has an invalid length.
[  346.587410][ T6535] geneve0: entered promiscuous mode
[  346.622714][ T6535] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  346.927269][ T6552] netlink: 'syz.2.146': attribute type 29 has an invalid length.
[  347.285005][ T6557] netlink: 'syz.0.148': attribute type 10 has an invalid length.
[  347.478499][ T6557] geneve0: entered promiscuous mode
[  347.501189][ T6557] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  348.515199][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.152'.
[  349.422848][ T6607] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[  349.812271][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'.
[  349.852835][ T6621] netlink: 'syz.0.167': attribute type 3 has an invalid length.
[  349.856365][ T6621] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.167'.
[  350.363603][ T6626] netlink: 'syz.1.169': attribute type 9 has an invalid length.
[  350.458502][ T6627] netlink: 180 bytes leftover after parsing attributes in process `syz.1.169'.
[  352.454439][ T6666] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[  352.475360][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'.
[  353.367865][ T6698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.188'.
[  353.379290][ T6699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.188'.
[  354.443398][ T6744] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.201'.
[  354.986119][ T6770] netlink: 104 bytes leftover after parsing attributes in process `syz.2.208'.
[  355.478436][ T6780] netlink: 'syz.2.211': attribute type 10 has an invalid length.
[  355.874660][ T6793] netlink: 'syz.2.212': attribute type 21 has an invalid length.
[  355.878018][ T6793] netlink: 'syz.2.212': attribute type 5 has an invalid length.
[  355.885517][ T6796] can: request_module (can-proto-0) failed.
[  355.895134][ T6796] Driver unsupported XDP return value 0 on prog  (id 279) dev N/A, expect packet loss!
[  356.961565][ T6833] netlink: 495 bytes leftover after parsing attributes in process `syz.1.223'.
[  357.286960][ T6837] syzkaller1: tun_chr_ioctl cmd 1074025677
[  357.306318][ T6837] syzkaller1: linktype set to 780
[  357.357829][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'.
[  357.375283][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'.
[  357.821560][ T6864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.231'.
[  357.867282][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[  357.867286][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[  358.257467][ T6885] netlink: 'syz.0.236': attribute type 49 has an invalid length.
[  359.400219][ T6899] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  359.510396][ T6899] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  360.202217][ T6923] netlink: 56 bytes leftover after parsing attributes in process `syz.1.244'.
[  360.771975][ T6938] lo speed is unknown, defaulting to 1000
[  360.799073][ T6938] lo speed is unknown, defaulting to 1000
[  360.825166][ T6938] lo speed is unknown, defaulting to 1000
[  360.874849][ T6942] netlink: 'syz.2.250': attribute type 33 has an invalid length.
[  360.891766][ T6942] netlink: 152 bytes leftover after parsing attributes in process `syz.2.250'.
[  361.158963][ T6938] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  361.391655][ T6938] lo speed is unknown, defaulting to 1000
[  361.410324][ T6938] lo speed is unknown, defaulting to 1000
[  361.426493][ T6938] lo speed is unknown, defaulting to 1000
[  361.433929][ T6938] lo speed is unknown, defaulting to 1000
[  361.437288][ T6938] lo speed is unknown, defaulting to 1000
[  361.600905][ T6938] lo speed is unknown, defaulting to 1000
[  362.475201][ T6963] lo speed is unknown, defaulting to 1000
[  362.664447][ T6983] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  362.671540][ T6983] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  362.835841][ T6987] lo speed is unknown, defaulting to 1000
[  363.014009][ T6991] netlink: 'syz.1.262': attribute type 11 has an invalid length.
[  363.016937][ T6991] netlink: 168 bytes leftover after parsing attributes in process `syz.1.262'.
[  363.079840][ T6987] netlink: 208252 bytes leftover after parsing attributes in process `syz.0.263'.
[  363.083576][ T6987] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[  363.145222][ T6987] netlink: 'syz.0.263': attribute type 2 has an invalid length.
[  363.148789][ T6987] netlink: 'syz.0.263': attribute type 3 has an invalid length.
[  363.161391][ T6987] netlink: 'syz.0.263': attribute type 4 has an invalid length.
[  363.723791][ T7030] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.271'.
[  364.097287][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[  364.147916][ T7055] lo speed is unknown, defaulting to 1000
[  364.932040][ T7078] netlink: 'syz.1.283': attribute type 10 has an invalid length.
[  364.935201][ T7078] netlink: 55 bytes leftover after parsing attributes in process `syz.1.283'.
[  365.603633][ T7085] netlink: 'syz.0.285': attribute type 10 has an invalid length.
[  365.846715][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[  365.846759][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[  366.060178][ T7102] lo speed is unknown, defaulting to 1000
[  366.087085][ T7103] netlink: 76 bytes leftover after parsing attributes in process `syz.1.289'.
[  366.643132][ T7122] lo speed is unknown, defaulting to 1000
[  366.880865][ T7131] netlink: 'syz.0.294': attribute type 10 has an invalid length.
[  366.888238][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.902994][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.917399][ T7131] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  367.420011][ T7133] openvswitch: netlink: Message has 8 unknown bytes.
[  367.643689][ T7140] netlink: 'syz.1.297': attribute type 2 has an invalid length.
[  367.709272][ T7139] lo speed is unknown, defaulting to 1000
[  367.822363][ T7144] syzkaller1: tun_chr_ioctl cmd 1074025677
[  367.825687][ T7144] syzkaller1: linktype set to 780
[  367.849065][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.299'.
[  368.112313][ T7147] Unknown options in mask b7f2
[  368.176384][ T7152] lo speed is unknown, defaulting to 1000
[  368.270527][ T7155] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.303'.
[  368.542530][ T7178] netlink: 2168 bytes leftover after parsing attributes in process `syz.0.309'.
[  368.682275][ T7172] netlink: 'syz.2.308': attribute type 3 has an invalid length.
[  368.738693][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'.
[  368.742258][ T7179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.308'.
[  369.233522][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[  369.257062][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[  369.293355][ T7193] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[  369.446408][ T7203] netlink: 'syz.1.315': attribute type 40 has an invalid length.
[  369.728489][ T7219] lo speed is unknown, defaulting to 1000
[  369.891061][ T7214] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  372.731194][ T7234] netlink: 'syz.0.325': attribute type 6 has an invalid length.
[  372.734369][ T7234] __nla_validate_parse: 2 callbacks suppressed
[  372.734381][ T7234] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.325'.
[  373.171747][ T7250] netlink: 'syz.2.329': attribute type 3 has an invalid length.
[  373.553663][ T7271] lo speed is unknown, defaulting to 1000
[  373.652451][ T7279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.339'.
[  373.875526][ T7293] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[  373.877826][ T7293] netlink: 124 bytes leftover after parsing attributes in process `syz.2.343'.
[  373.881509][ T7293] netlink: 125920 bytes leftover after parsing attributes in process `syz.2.343'.
[  373.885068][ T7293] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[  373.887913][ T7293] netlink: 124 bytes leftover after parsing attributes in process `syz.2.343'.
[  373.908012][   T54] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  374.000631][ T7295] nftables ruleset with unbound chain
[  374.262401][ T7300] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'.
[  374.267705][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'.
[  374.275000][ T7301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'.
[  374.520721][ T7307] delete_channel: no stack
[  374.533126][ T7313] netlink: 168 bytes leftover after parsing attributes in process `syz.2.348'.
[  375.101887][ T7322] xt_limit: Overflow, try lower: 324382443/4200216956
[  375.157483][ T7320] siw: device registration error -23
[  375.560721][ T7337] netlink: 10 bytes leftover after parsing attributes in process `syz.2.358'.
[  376.309762][ T7347] syzkaller0: tun_chr_ioctl cmd 1074025677
[  376.315371][ T7347] syzkaller0: Linktype set failed because interface is up
[  376.330282][   T13] syzkaller0: tun_net_xmit 76
[  376.337587][   T13] syzkaller0: tun_net_xmit 48
[  376.374716][    T9] syzkaller0: tun_net_xmit 76
[  378.639518][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.642160][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.884465][ T7385] __nla_validate_parse: 1 callbacks suppressed
[  378.884485][ T7385] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.371'.
[  378.905125][ T7384] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.371'.
[  378.917343][ T7385] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.371'.
[  379.294115][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'.
[  379.903858][ T7400] syzkaller0: entered promiscuous mode
[  379.906345][ T7400] syzkaller0: entered allmulticast mode
[  381.445285][ T7404] lo speed is unknown, defaulting to 1000
[  486.648097][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  486.650519][    C0] rcu: 	1-...!: (0 ticks this GP) idle=2e7c/1/0x4000000000000000 softirq=21513/21513 fqs=1
[  486.656153][    C0] rcu: 	(detected by 0, t=10506 jiffies, g=16913, q=278 ncpus=2)
[  486.658609][    C0] Sending NMI from CPU 0 to CPUs 1:
[  486.658694][    C1] NMI backtrace for cpu 1
[  486.658723][    C1] CPU: 1 UID: 0 PID: 7407 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(full) 
[  486.658746][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.658754][    C1] RIP: 0010:hrtimer_try_to_cancel+0x0/0x420
[  486.658802][    C1] Code: ef e8 34 3f 76 00 e9 c4 fe ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 fb 49
[  486.658812][    C1] RSP: 0018:ffffc900001e0988 EFLAGS: 00000006
[  486.658825][    C1] RAX: ffffffff81adb021 RBX: ffff8881120420a8 RCX: ffff888109c9d640
[  486.658834][    C1] RDX: 0000000000010000 RSI: 0000000000000004 RDI: ffff8881120420a8
[  486.658841][    C1] RBP: 00000000ffffffff R08: ffff888136627a83 R09: 1ffff11026cc4f50
[  486.658849][    C1] R10: dffffc0000000000 R11: ffffed1026cc4f51 R12: ffff888112042150
[  486.658858][    C1] R13: dffffc0000000000 R14: ffff8881120420a8 R15: ffffffffffff760c
[  486.658866][    C1] FS:  00007fe5fadf66c0(0000) GS:ffff8881a3c0f000(0000) knlGS:0000000000000000
[  486.658875][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.658883][    C1] CR2: 00007fe5fadd4fc8 CR3: 0000000041606000 CR4: 00000000000006f0
[  486.658913][    C1] Call Trace:
[  486.658920][    C1]  <IRQ>
[  486.658926][    C1]  hrtimer_cancel+0x3b/0x50
[  486.658939][    C1]  cpu_clock_event_stop+0xd9/0x130
[  486.658953][    C1]  __perf_event_overflow+0x580/0xe40
[  486.658972][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  486.658985][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  486.659000][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  486.659013][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  486.659023][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  486.659047][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  486.659062][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  486.659077][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  486.659088][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  486.659098][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  486.659117][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  486.659132][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  486.659154][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  486.659169][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  486.659185][    C1]  </IRQ>
[  486.659189][    C1]  <TASK>
[  486.659193][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.659206][    C1] RIP: 0010:kernel_text_address+0x56/0xe0
[  486.659223][    C1] Code: ff 85 c0 74 0c 89 e8 5b 41 5e 5d e9 04 76 f1 09 cc 48 c7 c0 80 80 a3 8f 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 5d 83 3d 3f ea 16 0e 01 77 18 48 81 fb 00 80 0a 91 0f 93
[  486.659232][    C1] RSP: 0018:ffffc900066cf1b8 EFLAGS: 00000a02
[  486.659243][    C1] RAX: 0000000000000000 RBX: 00007fe5fcb8ec29 RCX: dffffc0000000000
[  486.659256][    C1] RDX: 0000000000000000 RSI: 00007fe5fcb8e000 RDI: ffffffffff600000
[  486.659264][    C1] RBP: 0000000000000001 R08: 0000000000000022 R09: ffffffff8172d195
[  486.659271][    C1] R10: ffffc900066cf258 R11: ffffffff81ac5140 R12: ffff888109c9d640
[  486.659279][    C1] R13: ffff888112fa6c00 R14: dffffc0000000000 R15: 1ffff92000cd9e4a
[  486.659289][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  486.659304][    C1]  ? unwind_next_frame+0xa5/0x2390
[  486.659318][    C1]  ? 0xffffffffff600000
[  486.659330][    C1]  ? kernel_text_address+0x2d/0xe0
[  486.659345][    C1]  __kernel_text_address+0xd/0x40
[  486.659360][    C1]  unwind_get_return_address+0x4d/0x90
[  486.659373][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  486.659386][    C1]  arch_stack_walk+0xfc/0x150
[  486.659405][    C1]  stack_trace_save+0x9c/0xe0
[  486.659418][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  486.659430][    C1]  ? kasan_save_track+0x4f/0x80
[  486.659448][    C1]  ? kmalloc_reserve+0xbd/0x290
[  486.659463][    C1]  ? __alloc_skb+0x142/0x2d0
[  486.659476][    C1]  ? mptcp_sendmsg_frag+0x6a2/0x2d80
[  486.659491][    C1]  ? __subflow_push_pending+0x283/0xb40
[  486.659502][    C1]  ? __mptcp_push_pending+0x330/0x860
[  486.659512][    C1]  ? mptcp_sendmsg+0x1051/0x1970
[  486.659526][    C1]  ? __sock_sendmsg+0x19c/0x270
[  486.659537][    C1]  ? sock_write_iter+0x258/0x330
[  486.659549][    C1]  ? ksys_write+0x145/0x250
[  486.659558][    C1]  ? do_syscall_64+0xfa/0x3b0
[  486.659574][    C1]  kasan_save_track+0x3e/0x80
[  486.659589][    C1]  ? kasan_save_track+0x3e/0x80
[  486.659604][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  486.659613][    C1]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  486.659630][    C1]  ? __skb_ext_alloc+0x1a/0x90
[  486.659645][    C1]  ? mptcp_sendmsg_frag+0x6b5/0x2d80
[  486.659657][    C1]  ? __subflow_push_pending+0x283/0xb40
[  486.659668][    C1]  ? __mptcp_push_pending+0x330/0x860
[  486.659678][    C1]  ? mptcp_sendmsg+0x1051/0x1970
[  486.659691][    C1]  ? __sock_sendmsg+0x19c/0x270
[  486.659701][    C1]  ? sock_write_iter+0x258/0x330
[  486.659711][    C1]  ? vfs_write+0x5c9/0xb30
[  486.659720][    C1]  ? ksys_write+0x145/0x250
[  486.659728][    C1]  ? do_syscall_64+0xfa/0x3b0
[  486.659742][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.659812][    C1]  __kasan_slab_alloc+0x6c/0x80
[  486.659826][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  486.659842][    C1]  ? __skb_ext_alloc+0x1a/0x90
[  486.659859][    C1]  __skb_ext_alloc+0x1a/0x90
[  486.659874][    C1]  mptcp_sendmsg_frag+0x6b5/0x2d80
[  486.659895][    C1]  __subflow_push_pending+0x283/0xb40
[  486.659917][    C1]  __mptcp_push_pending+0x330/0x860
[  486.659930][    C1]  ? __mptcp_push_pending+0x2d1/0x860
[  486.659942][    C1]  ? __pfx___mptcp_push_pending+0x10/0x10
[  486.659952][    C1]  ? set_page_refcounted+0xa0/0x1e0
[  486.659969][    C1]  mptcp_sendmsg+0x1051/0x1970
[  486.659997][    C1]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  486.660011][    C1]  ? __pfx___futex_wait+0x10/0x10
[  486.660029][    C1]  ? sock_rps_record_flow+0x19/0x410
[  486.660043][    C1]  ? inet_sendmsg+0x2f4/0x370
[  486.660054][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  486.660071][    C1]  __sock_sendmsg+0x19c/0x270
[  486.660085][    C1]  sock_write_iter+0x258/0x330
[  486.660098][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  486.660113][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  486.660129][    C1]  ? security_file_permission+0x75/0x290
[  486.660144][    C1]  vfs_write+0x5c9/0xb30
[  486.660156][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  486.660168][    C1]  ? __pfx_vfs_write+0x10/0x10
[  486.660182][    C1]  ? __fget_files+0x2a/0x420
[  486.660198][    C1]  ksys_write+0x145/0x250
[  486.660209][    C1]  ? __pfx_ksys_write+0x10/0x10
[  486.660221][    C1]  ? do_syscall_64+0xbe/0x3b0
[  486.660237][    C1]  do_syscall_64+0xfa/0x3b0
[  486.660258][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.660269][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.660282][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.660293][    C1] RIP: 0033:0x7fe5fcb8ec29
[  486.660305][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.660314][    C1] RSP: 002b:00007fe5fadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  486.660326][    C1] RAX: ffffffffffffffda RBX: 00007fe5fcdd5fa0 RCX: 00007fe5fcb8ec29
[  486.660335][    C1] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000004
[  486.660342][    C1] RBP: 00007fe5fcc11e41 R08: 0000000000000000 R09: 0000000000000000
[  486.660349][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  486.660355][    C1] R13: 00007fe5fcdd6038 R14: 00007fe5fcdd5fa0 R15: 00007ffdd79426b8
[  486.660370][    C1]  </TASK>
[  486.660637][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g16913 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  486.911009][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  486.914262][    C0] rcu: RCU grace-period kthread stack dump:
[  486.916189][    C0] task:rcu_preempt     state:R  running task     stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  486.921093][    C0] Call Trace:
[  486.922423][    C0]  <TASK>
[  486.923608][    C0]  __schedule+0x1798/0x4cc0
[  486.925436][    C0]  ? __lock_acquire+0xab9/0xd20
[  486.927364][    C0]  ? __pfx___schedule+0x10/0x10
[  486.929332][    C0]  ? schedule+0x91/0x360
[  486.930769][    C0]  schedule+0x165/0x360
[  486.932185][    C0]  schedule_timeout+0x12b/0x270
[  486.933768][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  486.935792][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  486.938102][    C0]  ? __pfx_process_timeout+0x10/0x10
[  486.940260][    C0]  ? prepare_to_swait_event+0x341/0x380
[  486.942522][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  486.944507][    C0]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  486.946919][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  486.949093][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  486.951224][    C0]  ? finish_swait+0xcd/0x1f0
[  486.953118][    C0]  rcu_gp_kthread+0x99/0x390
[  486.955021][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  486.957149][    C0]  ? __kthread_parkme+0x7b/0x200
[  486.959112][    C0]  ? __kthread_parkme+0x1a1/0x200
[  486.961117][    C0]  kthread+0x711/0x8a0
[  486.962785][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  486.964900][    C0]  ? __pfx_kthread+0x10/0x10
[  486.966806][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.968869][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.970925][    C0]  ? __pfx_kthread+0x10/0x10
[  486.972813][    C0]  ret_from_fork+0x439/0x7d0
[  486.974684][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  486.976790][    C0]  ? __switch_to_asm+0x39/0x70
[  486.978718][    C0]  ? __switch_to_asm+0x33/0x70
[  486.980621][    C0]  ? __pfx_kthread+0x10/0x10
[  486.982394][    C0]  ret_from_fork_asm+0x1a/0x30
[  486.984284][    C0]  </TASK>
[  486.985550][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  486.988123][    C0] CPU: 0 UID: 0 PID: 7414 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(full) 
[  486.991785][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.995823][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  486.998524][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  487.006227][    C0] RSP: 0018:ffffc9000659f420 EFLAGS: 00000293
[  487.008720][    C0] RAX: ffffffff81b4665b RBX: 1ffff11026cc7f61 RCX: ffff888022800000
[  487.011949][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  487.015141][    C0] RBP: ffffc9000659f5a0 R08: ffffffff8fa3c237 R09: 1ffffffff1f47846
[  487.018342][    C0] R10: dffffc0000000000 R11: fffffbfff1f47847 R12: ffff88813663fb08
[  487.021536][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  487.024779][    C0] FS:  00007fe5fadb46c0(0000) GS:ffff8880b860f000(0000) knlGS:0000000000000000
[  487.028379][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  487.031071][    C0] CR2: 00007fe5fadb3fc8 CR3: 0000000041606000 CR4: 00000000000006f0
[  487.034280][    C0] DR0: 0000000000000000 DR1: 0000000000000082 DR2: 0000000000000000
[  487.037520][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  487.040638][    C0] Call Trace:
[  487.041991][    C0]  <TASK>
[  487.043221][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  487.045285][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  487.047851][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  487.050060][    C0]  ? __SCT__tp_func_sched_waking+0x8/0x8
[  487.052359][    C0]  ? __pfx___text_poke+0x10/0x10
[  487.054399][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  487.056491][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  487.058594][    C0]  smp_text_poke_batch_finish+0x5f9/0x1130
[  487.060975][    C0]  ? __pfx_smp_text_poke_batch_add+0x10/0x10
[  487.063336][    C0]  ? trace_contention_end+0x39/0x120
[  487.065528][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  487.068107][    C0]  ? arch_static_call_transform+0x2d/0xc0
[  487.070453][    C0]  ? __SCT__tp_func_sched_waking+0x8/0x8
[  487.072750][    C0]  __static_call_transform+0x4eb/0x750
[  487.074949][    C0]  ? __SCT__tp_func_sched_waking+0x8/0x8
[  487.077194][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  487.079643][    C0]  ? __SCT__tp_func_sched_waking+0x8/0x8
[  487.081946][    C0]  ? __static_call_validate+0x148/0x240
[  487.084189][    C0]  ? __pfx___traceiter_sched_wakeup+0x10/0x10
[  487.086664][    C0]  ? __SCT__tp_func_sched_waking+0x8/0x8
[  487.088947][    C0]  arch_static_call_transform+0x98/0xc0
[  487.091170][    C0]  __static_call_update+0xe4/0x5d0
[  487.093268][    C0]  ? __pfx___traceiter_sched_wakeup+0x10/0x10
[  487.095745][    C0]  ? __SCT__tp_func_sched_waking+0x8/0x8
[  487.098043][    C0]  ? __pfx___static_call_update+0x10/0x10
[  487.100371][    C0]  ? rcu_is_watching+0x15/0xb0
[  487.102334][    C0]  ? trace_kmalloc+0x1f/0xd0
[  487.104222][    C0]  ? tracepoint_add_func+0x568/0xa10
[  487.106355][    C0]  ? __pfx___traceiter_sched_wakeup+0x10/0x10
[  487.108828][    C0]  tracepoint_add_func+0x6f7/0xa10
[  487.110947][    C0]  ? __pfx_perf_trace_sched_wakeup_template+0x10/0x10
[  487.113707][    C0]  tracepoint_probe_register+0x5d/0x90
[  487.115969][    C0]  ? __pfx_perf_trace_sched_wakeup_template+0x10/0x10
[  487.118699][    C0]  perf_trace_event_init+0x4e1/0x9d0
[  487.120853][    C0]  perf_trace_init+0x23d/0x2d0
[  487.122817][    C0]  perf_tp_event_init+0x8d/0x120
[  487.124850][    C0]  perf_try_init_event+0x17f/0x870
[  487.126959][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  487.129072][    C0]  perf_event_alloc+0x133e/0x2be0
[  487.131125][    C0]  ? __lock_acquire+0xab9/0xd20
[  487.133124][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  487.135197][    C0]  ? __pfx_perf_event_alloc+0x10/0x10
[  487.137332][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  487.139605][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  487.141902][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  487.144172][    C0]  __se_sys_perf_event_open+0x772/0x1d70
[  487.146441][    C0]  ? count_memcg_event_mm+0x21/0x260
[  487.148559][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  487.151016][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  487.153163][    C0]  ? do_syscall_64+0xbe/0x3b0
[  487.155105][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  487.157369][    C0]  do_syscall_64+0xfa/0x3b0
[  487.159093][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  487.161154][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.163586][    C0]  ? exc_page_fault+0x9f/0xf0
[  487.165536][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.167952][    C0] RIP: 0033:0x7fe5fcb8ec29
[  487.169814][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  487.177575][    C0] RSP: 002b:00007fe5fadb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  487.180882][    C0] RAX: ffffffffffffffda RBX: 00007fe5fcdd6180 RCX: 00007fe5fcb8ec29
[  487.184091][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000540
[  487.187262][    C0] RBP: 00007fe5fcc11e41 R08: 0000000000000000 R09: 0000000000000000
[  487.190362][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  487.193561][    C0] R13: 00007fe5fcdd6218 R14: 00007fe5fcdd6180 R15: 00007ffdd79426b8
[  487.196694][    C0]  </TASK>

VM DIAGNOSIS:
10:01:26  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003d RBX=000000000000003d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888021450237 R9 =1ffff1100428a046 R10=dffffc0000000000 R11=ffffffff85504980
R12=dffffc0000000000 R13=ffffffff99b068fc R14=ffffffff99dfb420 R15=0000000000000000
RIP=ffffffff855049fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5fadb46c0 ffffffff 00c00000
GS =0000 ffff8880b860f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5fadb3fc8 CR3=0000000041606000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000082 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe5fcda7498 00007fe5fcda7470 XMM03=00007fe5fcda74a8 00007fe5fcda74a0
XMM04=00007fe5fd90d100 00007fe5fcda7460 XMM05=00007fe5fcda7478 00007fe5fcda74c0
XMM06=00007fe5fcda74b8 00007fe5fcda74b0 XMM07=00007fe5fcda74a8 00007fe5fcda74a0
XMM08=0000000000000000 00007fe5fcc12f0f XMM09=0000000000000000 00007fe5fcc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136627a80 RCX=1ffff9200003c0fc RDX=0000000000000000
RSI=ffffffff8dbaacc4 RDI=ffff888136627a80 RBP=ffffc900001e0870 RSP=ffffc900001e07c0
R8 =0000000000000000 R9 =ffffffff81adabcb R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=dffffc0000000000 R13=ffff888136627b00 R14=ffff888136627a84 R15=dffffc0000000000
RIP=ffffffff819e184d RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5fadf66c0 ffffffff 00c00000
GS =0000 ffff8881a3c0f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5fadd4fc8 CR3=0000000041606000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe5fcda7498 00007fe5fcda7470 XMM03=00007fe5fcda74a8 00007fe5fcda74a0
XMM04=00007fe5fd90d100 00007fe5fcda7460 XMM05=00007fe5fcda7478 00007fe5fcda74c0
XMM06=00007fe5fcda74b8 00007fe5fcda74b0 XMM07=00007fe5fcda74a8 00007fe5fcda74a0
XMM08=0000000000000000 00007fe5fcc12f0f XMM09=0000000000000000 00007fe5fcc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
