last executing test programs:

3.07742223s ago: executing program 2 (id=36):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x25}, 0x94)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x40000000, 0x0, 0x3, 0x10401, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.005231484s ago: executing program 2 (id=38):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
close(r0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004000400"], 0x34}}, 0x84)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104825000200ff00eeab39fc1993bc24feb556a71f251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdc600000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

2.88096242s ago: executing program 0 (id=40):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000440)=0xc00, 0x12)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x2}, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="0d6def311a200dc8cd524801818704b3ea851fb35c817dfdaf3060b7775165550487ea2bae45f5be4c121a869b3bc22d2fa517abe0f7c0b9fe116e93b99e8212579a4283ef39b1959d5a2111b4bce2aa7d8f6c7e8420b4a1022792cecaafdde4e612bd182ce9508b84debe55be2a72617ca0ab62729a6d3aac21e16a7d2c1d9bc7a3b6a8d123c41b37c7b81533859132f1c3027f878a7cb2ed1ac45f14e48b765dc966fa22bfb5e82484bba570ee2dc18b4e02034df3a83229c58da581cdbd3023f974e368e3f6e398917a6d37132d087a2808b32ae4134fc4563d368d3dedd97165a4d63fc0fd07ae2b03244153704c27f319b87179c7", 0xf7}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000002e51c244107c6d64000085b8566497d38be9e7f793c9e41a603f3307b2c4b9812ecefef6261186d7a293d9f2154914886012c3dff0f91d6d364ab5176a5c0a62b04c16ff21f93c53f6f55da65f5a02ff17698dbde3a6445f3cebabf74a46c511"], 0x78}, 0xc800)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10801, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)={r0})
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000f7ff02000000000008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1804000005000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c9000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f0000000300)="5d6f00957eae432c1c778438bab09d03ce5e9ee56a789cb79fab7109d4760ef14ccf322901a1b512251866611dd119df34a44f2cf5a95864f64641cbafd310a7bd650d801a729446a1575406c416d83be8e1ecbcfaec0cca3fa37522b457f7b8e548a016176ca3b50b60cb3639f9da08653937228a7b936b3496b1", &(0x7f0000001980)=""/4096}, 0x20)

2.511375512s ago: executing program 2 (id=41):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000440)=0xc00, 0x12)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x2}, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="0d6def311a200dc8cd524801818704b3ea851fb35c817dfdaf3060b7775165550487ea2bae45f5be4c121a869b3bc22d2fa517abe0f7c0b9fe116e93b99e8212579a4283ef39b1959d5a2111b4bce2aa7d8f6c7e8420b4a1022792cecaafdde4e612bd182ce9508b84debe55be2a72617ca0ab62729a6d3aac21e16a7d2c1d9bc7a3b6a8d123c41b37c7b81533859132f1c3027f878a7cb2ed1ac45f14e48b765dc966fa22bfb5e82484bba570ee2dc18b4e02034df3a83229c58da581cdbd3023f974e368e3f6e398917a6d37132d087a2808b32ae4134fc4563d368d3dedd97165a4d63fc0fd07ae2b03244153704c27f319b87179c7", 0xf7}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000002e51c244107c6d64000085b8566497d38be9e7f793c9e41a603f3307b2c4b9812ecefef6261186d7a293d9f2154914886012c3dff0f91d6d364ab5176a5c0a62b04c16ff21f93c53f6f55da65f5a02ff17698dbde3a6445f3cebabf74a46c511"], 0x78}, 0xc800)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c"], 0x254}}, 0x40808)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000580)={0x3, 0x0, [0x0, 0x0, 0x0]})
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x56, 0x0, 0x0, 0x0, 0x4, 0x40000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1946}, 0x650, 0x0, 0x0, 0x6, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)={r0})
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000001a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1804000005000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c9000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, &(0x7f0000000300)="5d6f00957eae432c1c778438bab09d03ce5e9ee56a789cb79fab7109d4760ef14ccf322901a1b512251866611dd119df34a44f2cf5a95864f64641cbafd310a7bd650d801a729446a1575406c416d83be8e1ecbcfaec0cca3fa37522b457f7b8e548a016176ca3b50b60cb3639f9da08653937228a7b936b3496b1", &(0x7f0000001980)=""/4096}, 0x20)

2.337175246s ago: executing program 0 (id=42):
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0xb, 0xffff}, {0x4, 0xe}}, [{0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x440d0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000005000000000000020400000005000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001bca3acfa0f98d2040772d3464f2c0a627def68915d03bd171cb2bd237f1fedb3a5936a043ab843922f104a0a29905efc3bcae907865ecec2d89216586e2a3557b4bc3538a242c9fd3053e4db27defeb1d615e3ab2f7d6690392e8cc72e6972107470600000085a7e40314609485df48181430b136", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{0x0}], 0x1}, 0x40)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x8000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac02d000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300000000000000)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff001a0000013dc815ee35f033d47cd8eb1ab04136000000"], 0x20}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.336842524s ago: executing program 1 (id=43):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.22746406s ago: executing program 1 (id=44):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/92, 0x28}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'geneve1\x00', @broadcast})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.035282951s ago: executing program 2 (id=45):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x5032, 0x0, 0x0, 0x8, 0x3fe, 0x7ff7fffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002140)=ANY=[@ANYBLOB="140000001000010000000000000000feb1ed000000000a20000000000a01020000000000000000020000090900010073797a300000000014000000020a030000000000000000000000000520000000030a010800000000000000000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000030)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce831", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="b40800000000000073113f0000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850100ffe81c7eacb49fb550cfdfd1f60732393523f2ad8d6e8ff8f4fcc026966b1d30c647d1f3203357e6c17f2f350617821a209946bde91767d4425bbe000000e638fd003db483b62666806c570179547d6bcafb01990e2a28dfb8a99731582aece868e07f5f482f8fe3823ca657619ed5e98645f6e792e34c2b3b64132c56a467e531b5844fb4e36e21a2eaa413c4344c6a6123da68e201ef46b3911882e42356f09da5c9e63a4118b1714ac333ad473ef29ad61e4be511ce5112f0c1b90d438bc8e7", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184700000300000000000000000000009500001200000000"], 0x0, 0x4, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x24, '\x00', 0x0, @fallback=0x13}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e000705000000000000000c047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="080014"], 0x2c}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000001010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)}, {&(0x7f00000004c0)="e837c159667d1fc17614b8933f1f62e06ac9bd1a58d84455d64b16c8235d4bd08434af686931ca41", 0x28}], 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x811)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340000000506010100000000000000000000000a050001"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x200440c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='scsi_eh_wakeup\x00', r10, 0x0, 0x2}, 0x18)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[], 0x12)
write$cgroup_freezer_state(r11, &(0x7f0000000040)='FREEZING\x00', 0x9)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r11, r12, 0x11, 0x0, @void}, 0x10)

1.927892144s ago: executing program 1 (id=46):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x17a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_bp={0x0, 0x9}, 0x4196, 0x1, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x19, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, &(0x7f0000000680)=r3, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="aab3910700"/14, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="01000000030000000300"/28], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x37, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffee6, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x18, 0x1410, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x44)

938.052254ms ago: executing program 2 (id=47):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4088, 0xff8}, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)

937.57252ms ago: executing program 0 (id=48):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e0d, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

937.106953ms ago: executing program 1 (id=49):
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18ed175560c37d4001b7c48801")
r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000045) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x34, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x5, 0x0, 0x1, [@generic="a8"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0))

862.146541ms ago: executing program 1 (id=50):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x915f}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f00000000c0)=r0, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000000000010000000000000002"], 0x0, 0x2a, 0x0, 0x1}, 0x28)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000090a0101000000000000000003000003080006400000000008000f40000000090900010073797a31000000000c000b4000000000000000100c000b4000000000000000031400098008000140000004010800014000000001c0000000000a050000000000000000000200000908000240400000048c000600d04a80c82e3a205e8fdc4a9c317942f7cfe4d6bf383c960ff77a1677e93d92e0eb71b96664ece33e1f6752e7c50f31e97128aed426309aee476f2224641ef0d3b3d68268c3b143ceb7e0e6c21c1bdce3da400e3111fcaf901b0193b250a4716311837e73f9889c87c3fb25dbcd23e67367a81a45254502d3e2ac23aa0c6d28da27a778cce3dc8a670900010073797a31000000000900010073797a3100000000200000000e0a030000000000000000000300000a0900010073797a3100000000d4010000030a010200000000000000000a00000808000540fffffffbeb000c00a23249ff2912598fb2886362abe840158a8171a9f56671254243bdf92d2404d25146946095b3e7423d0fb3fb86a3d56a255e8e5a51627418a299694942d30c71117c97234173fae379669a7fe5e7bb2c6ddb17ca474a4ae6d74227ba4d7800543334f2dddb5a57f8388b292f3ca46b524204bc41c4f31f9dc87201637bd11f1d6d7528741d0cf2b95d3c7a55035c666a05b45ace79ec6082bd226efe642e24672695318170b520172aed52fcf8fcd1bf53670dd1cdf8d27c29df8c152300c3358f6db59354204ffb28eb72d81f38d976fd74576dffd814b59263c248cf14dd992006490d6bc76d00ad000c009c884c42769942ae65be06f25e48bc1004e03cb6bf7f097297259f14efd521a7818802b824854d4ac3d82092ef6042ac87caa1ce8fca8b6f380f9de6828b434e9e844a5fb4b3664f3381c55599763bbc394c78eb6580aa28797f0e069039ecebebcd06afde3bd2c91230c2135cfdc41bc756745f54c7a3a0e6348e289e6539648ea60f8c086d75bbd14cfdcc1315ca0436847ada87adab91ac04bae211ba21c0eb2dffdd0000000c000240000000000000000508000b400000000208000540fffffffe64010000180a01040000000000000000050000010900020073797a30000000003c01038008000240000003ff08000240fffffff91800038014000100776731000000000000000000000000000800024000000005b80003801400010068737230000000000000000000000000140001006261746164765f736c6176655f30000014000100000000000000000000000000000000001400010070696d3672656730000000000000000014000100626f6e645f736c6176655f310000000014000100766574683100000000000000000000001400010076657468315f746f5f7465616d0000001400010064766d727030000000000000000000001400010076657468315f766972745f77696669000800024000000010400003801400010063616966300000000000000000000000140001007866726d300000000000000000000000140001006e69637666300000000000000000000008000240fffffff7080007400000000158000000180a01080000000000000000060000090900010073797a30000000000900020073797a30000000000c000540000000000000000214000380080001400000000008000140000000000900020073797a31000000001b0000001100010000005e80a31d8afebbf9dd9152333fed65613ba40dc5821eb979174d"], 0x4f4}, 0x1, 0x0, 0x0, 0x4000}, 0x80008c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff000000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031200048008000240000000120800014000000000140003006e657464657673"], 0xac}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000003900)={&(0x7f00000025c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0}, 0x20000850)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="000000a9eefd4a00"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

418.121795ms ago: executing program 0 (id=51):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

156.818212ms ago: executing program 0 (id=52):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000a0000010000000000000000030006000000000002000100e00000090000000000000000020001000000000000400507000000000300050000000000020000007f0000010000000000000000"], 0x50}}, 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x408) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x64)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x40) (async)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7)
r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async, rerun: 32)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) (async, rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x60ff, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7)

155.954318ms ago: executing program 0 (id=53):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x84000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x7, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0xfffffbff, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x5)
write$cgroup_subtree(r5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000240))
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)=""/73, 0x49}, {&(0x7f00000006c0)=""/88, 0x58}], 0x2, &(0x7f0000000280)=""/13, 0xd}, 0x10040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.257444ms ago: executing program 2 (id=54):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x5032, 0x0, 0x0, 0x8, 0x3fe, 0x7ff7fffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x28}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000050)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}], 0x2}, 0x40)
write$cgroup_devices(r0, &(0x7f0000000300)={'b', ' *:* ', 'rwm\x00'}, 0xa)
sendmsg$NFT_BATCH(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000030)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce831", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20)

0s ago: executing program 1 (id=55):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00123c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="4cfb5942f7c14386fe5a776228afc505820ff564d4e1be6d61cc5db0fd6dfd2883c03d05f7ffe24fc516a95b2197d2ba26f61afeacfa4ec8ad005bd885cd70b637f096111ad2472a1a81d97d2fd4e971915c885f91c88ea61062105abb76012cffeb7ba2e332688f7cd4f010f376d4b6f39e6ec0145d4f16c1c9859c2a5f2744ee08625cbc491a7846cd40450208b020d7b2e27df3457994fd2fb9882fe8d14f11420cc633aa6ea6efe7bc", 0xab}, {&(0x7f0000000140)="3b98f62d9fb4ea268fa7ebef612005faba2c5b980af94c0273a9c94f88091e603cd80ceaf22240131e91365147248cf1f292231dc6b97335a95bc42757c102ff720a98ece7090c75e193ad99319ebd6219233129497dd30ff2d020490c31d6c8e3df7271a093c86a11e9afba7d5dd383d2990f7b65dfe05755911b11c19e824d99cce21f127c2409395745f6404775f8c01ebe92c589ba1c1d91956e772bacd21e931edbf905f8e5a1344ca320ba24a36eabbedae9c1a04a151453a93d2afa4c1190eba04f3fbd578d8c824dd086", 0xce}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0xfffff46c}}, @txtime={{0x18, 0x1, 0x3d, 0xc15}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x48}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1212' (ED25519) to the list of known hosts.
syzkaller login: [   51.458653][ T5813] cgroup: Unknown subsys name 'net'
[   51.564457][ T5813] cgroup: Unknown subsys name 'cpuset'
[   51.569270][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.359427][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.775788][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.779576][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.782403][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.785115][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.787764][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.852007][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.855543][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.858130][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.862091][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.865066][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.868892][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.874308][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.877701][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.881625][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.885009][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.033730][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   59.210943][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.213547][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.215850][ T5822] bridge_slave_0: entered allmulticast mode
[   59.218496][ T5822] bridge_slave_0: entered promiscuous mode
[   59.222430][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.225200][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.227595][ T5822] bridge_slave_1: entered allmulticast mode
[   59.230562][ T5822] bridge_slave_1: entered promiscuous mode
[   59.252584][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   59.299564][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.321192][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   59.331123][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.402889][ T5822] team0: Port device team_slave_0 added
[   59.424162][ T5822] team0: Port device team_slave_1 added
[   59.474496][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.476881][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.479375][ T5831] bridge_slave_0: entered allmulticast mode
[   59.482773][ T5831] bridge_slave_0: entered promiscuous mode
[   59.510878][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.514397][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.517673][ T5828] bridge_slave_0: entered allmulticast mode
[   59.521985][ T5828] bridge_slave_0: entered promiscuous mode
[   59.525859][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.528842][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.532310][ T5831] bridge_slave_1: entered allmulticast mode
[   59.536080][ T5831] bridge_slave_1: entered promiscuous mode
[   59.552441][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.555388][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.567518][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.573122][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.576203][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.579264][ T5828] bridge_slave_1: entered allmulticast mode
[   59.583141][ T5828] bridge_slave_1: entered promiscuous mode
[   59.595327][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.597778][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.608550][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.637526][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.674365][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.678883][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.683882][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.690620][ T5822] hsr_slave_0: entered promiscuous mode
[   59.693699][ T5822] hsr_slave_1: entered promiscuous mode
[   59.729836][ T5828] team0: Port device team_slave_0 added
[   59.733498][ T5831] team0: Port device team_slave_0 added
[   59.737476][ T5828] team0: Port device team_slave_1 added
[   59.740381][ T5831] team0: Port device team_slave_1 added
[   59.785390][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.787698][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.796411][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.824819][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.827392][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.837137][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.841815][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.844199][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.855198][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.868785][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.873114][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.883036][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.947388][ T5831] hsr_slave_0: entered promiscuous mode
[   59.950038][ T5831] hsr_slave_1: entered promiscuous mode
[   59.952990][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   59.955106][ T5831] Cannot create hsr debugfs directory
[   60.011584][ T5828] hsr_slave_0: entered promiscuous mode
[   60.014744][ T5828] hsr_slave_1: entered promiscuous mode
[   60.017563][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   60.019968][ T5828] Cannot create hsr debugfs directory
[   60.176542][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.192120][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.221306][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.240357][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.260142][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.278592][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.297780][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.313021][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.428798][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.435463][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.447371][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.454133][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.477784][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.506548][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.535784][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   60.560552][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   60.566894][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.569930][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.586055][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.589043][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.594361][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.597281][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.615810][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.618827][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.679293][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.723652][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   60.757197][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.760122][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.776023][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.779084][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.844028][ T5830] Bluetooth: hci0: command tx timeout
[   60.898789][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.922667][ T5830] Bluetooth: hci1: command tx timeout
[   60.931815][ T5830] Bluetooth: hci2: command tx timeout
[   60.962510][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.966552][ T5822] veth0_vlan: entered promiscuous mode
[   60.979065][ T5822] veth1_vlan: entered promiscuous mode
[   61.027987][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.037726][ T5831] veth0_vlan: entered promiscuous mode
[   61.056909][ T5822] veth0_macvtap: entered promiscuous mode
[   61.067570][ T5831] veth1_vlan: entered promiscuous mode
[   61.073147][ T5822] veth1_macvtap: entered promiscuous mode
[   61.113471][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.130910][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.139224][ T5831] veth0_macvtap: entered promiscuous mode
[   61.147570][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.154206][ T5828] veth0_vlan: entered promiscuous mode
[   61.156701][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.160763][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.168667][ T5831] veth1_macvtap: entered promiscuous mode
[   61.173915][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.204365][ T5828] veth1_vlan: entered promiscuous mode
[   61.236139][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.263581][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.286414][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.289903][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.297248][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.313129][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.317146][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.334175][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.341107][ T5828] veth0_macvtap: entered promiscuous mode
[   61.355193][ T5828] veth1_macvtap: entered promiscuous mode
[   61.366732][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.370133][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.422517][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.458884][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.459857][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.470441][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.475273][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.477730][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.480660][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.496856][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.515034][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.560229][ T4980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.583258][ T4980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.696807][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.700684][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.780276][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.790266][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.906169][    C0] Illegal XDP return value 16128 on prog  (id 3) dev bond_slave_0, expect packet loss!
[   62.180265][ T5902] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4'.
[   62.390560][    C1] hrtimer: interrupt took 24934 ns
[   62.715233][ T5916] =======================================================
[   62.715233][ T5916] WARNING: The mand mount option has been deprecated and
[   62.715233][ T5916]          and is ignored by this kernel. Remove the mand
[   62.715233][ T5916]          option from the mount to silence this warning.
[   62.715233][ T5916] =======================================================
[   62.921647][ T5830] Bluetooth: hci0: command tx timeout
[   63.001783][ T5830] Bluetooth: hci2: command tx timeout
[   63.004127][ T5830] Bluetooth: hci1: command tx timeout
[   64.729391][ T5927] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   64.737220][ T5927] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.8'.
[   65.013264][   T54] Bluetooth: hci0: command tx timeout
[   65.091815][   T54] Bluetooth: hci1: command tx timeout
[   65.094037][   T54] Bluetooth: hci2: command tx timeout
[   65.187277][ T5938] netlink: 'syz.0.11': attribute type 39 has an invalid length.
[   65.503827][ T5947] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12'.
[   66.353918][ T5968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17'.
[   66.657372][ T5974] netlink: 'syz.2.19': attribute type 7 has an invalid length.
[   66.667372][ T5974] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19'.
[   67.082324][ T5830] Bluetooth: hci0: command tx timeout
[   67.162193][   T54] Bluetooth: hci1: command tx timeout
[   67.164191][ T5830] Bluetooth: hci2: command tx timeout
[   67.484289][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   67.541465][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   67.594219][ T6003] netlink: 1 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.694048][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   67.804457][ T6014] netlink: 'syz.0.27': attribute type 3 has an invalid length.
[   67.814409][ T6014] netlink: 'syz.0.27': attribute type 2 has an invalid length.
[   67.831562][ T6014] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.27'.
[   67.904937][ T5988] delete_channel: no stack
[   68.042704][ T6025] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.30'.
[   68.246368][ T6034] Zero length message leads to an empty skb
[   68.935133][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[   69.130847][ T6072] netlink: 'syz.0.40': attribute type 29 has an invalid length.
[   69.134868][ T6072] netlink: 'syz.0.40': attribute type 10 has an invalid length.
[   69.166342][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.176316][ T6072] team0: Port device bond0 added
[   69.420853][ T6076] netlink: 304 bytes leftover after parsing attributes in process `syz.2.41'.
[   69.429537][ T6076] netlink: 'syz.2.41': attribute type 29 has an invalid length.
[   69.434963][ T6076] netlink: 'syz.2.41': attribute type 10 has an invalid length.
[   69.474963][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.475582][ T6072] syz.0.40 (6072) used greatest stack depth: 19144 bytes left
[   69.490273][ T6076] team0: Port device bond0 added
[   69.649366][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'.
[   69.660246][ T6079] netlink: 33 bytes leftover after parsing attributes in process `syz.0.42'.
[   69.996831][ T6095] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.165104][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.169354][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.268050][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.272077][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.326705][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.329488][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.924867][ T6133] syzkaller0: entered promiscuous mode
[   71.927428][ T6133] syzkaller0: entered allmulticast mode
[   71.980798][ T6131] netlink: 'syz.2.54': attribute type 13 has an invalid length.
[  177.121391][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  177.123855][    C1] rcu: 	0-...!: (0 ticks this GP) idle=d8d4/1/0x4000000000000000 softirq=16355/16355 fqs=0
[  177.129274][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6131
[  177.132482][    C1] rcu: 	(detected by 1, t=10505 jiffies, g=7845, q=407 ncpus=2)
[  177.135764][    C1] Sending NMI from CPU 1 to CPUs 0:
[  177.135828][    C0] NMI backtrace for cpu 0
[  177.135839][    C0] CPU: 0 UID: 0 PID: 6131 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) 
[  177.135847][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.135851][    C0] RIP: 0010:lock_release+0x20/0x3e0
[  177.135863][    C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 10 b0 ae 10 <48> 89 44 24 28 0f 1f 44 00 00 65 8b 05 13 b0 ae 10 83 f8 08 0f 83
[  177.135868][    C0] RSP: 0018:ffffc90000007818 EFLAGS: 00000086
[  177.135875][    C0] RAX: b3c3f27f3dcb4300 RBX: 0000000000000802 RCX: ffff88801ee99d00
[  177.135879][    C0] RDX: 0000000000010000 RSI: ffffffff81ac4a9e RDI: ffff88804b227ad8
[  177.135884][    C0] RBP: ffffc90000007918 R08: 0000000000000003 R09: 0000000000000004
[  177.135887][    C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: dffffc0000000000
[  177.135892][    C0] R13: ffffffff81ac4a9e R14: ffff88804b227ad8 R15: 1ffff92000000f10
[  177.135896][    C0] FS:  00007f04e46506c0(0000) GS:ffff8880b8d73000(0000) knlGS:0000000000000000
[  177.135901][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.135905][    C0] CR2: 0000000000000000 CR3: 000000002952a000 CR4: 00000000000006f0
[  177.135930][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.135936][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  177.135939][    C0] Call Trace:
[  177.135943][    C0]  <IRQ>
[  177.135948][    C0]  _raw_spin_unlock_irqrestore+0x70/0x110
[  177.135959][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.135968][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  177.135977][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.135986][    C0]  hrtimer_try_to_cancel+0x3be/0x420
[  177.135995][    C0]  hrtimer_cancel+0x3b/0x50
[  177.136001][    C0]  cpu_clock_event_stop+0xd9/0x130
[  177.136009][    C0]  __perf_event_overflow+0x580/0xe40
[  177.136020][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  177.136028][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  177.136037][    C0]  perf_swevent_hrtimer+0x3b8/0x500
[  177.136045][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  177.136052][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  177.136064][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  177.136077][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.136086][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  177.136093][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  177.136099][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  177.136109][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  177.136118][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  177.136129][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  177.136137][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  177.136147][    C0]  </IRQ>
[  177.136149][    C0]  <TASK>
[  177.136152][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.136158][    C0] RIP: 0010:fib6_walk_continue+0x207/0x910
[  177.136168][    C0] Code: e9 5f 02 00 00 e8 59 56 46 01 49 8d 5c 24 18 49 89 dd 49 c1 ed 03 43 80 7c 35 00 00 74 08 48 89 df e8 8d 05 32 f8 48 83 3b 00 <0f> 84 9c 00 00 00 e8 6e 5b cd f7 e8 29 56 46 01 43 80 7c 35 00 00
[  177.136173][    C0] RSP: 0018:ffffc900062ce388 EFLAGS: 00000246
[  177.136178][    C0] RAX: 0000000000000001 RBX: ffff888028eb9418 RCX: ffff88801ee99d00
[  177.136182][    C0] RDX: ffffffff89f11991 RSI: ffffffff8f1dd420 RDI: 0000000000000000
[  177.136186][    C0] RBP: ffff888028eb9400 R08: ffff88801ee99d00 R09: 0000000000000005
[  177.136190][    C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888028eb9400
[  177.136193][    C0] R13: 1ffff110051d7283 R14: dffffc0000000000 R15: ffffc900062ce4d8
[  177.136199][    C0]  ? fib6_walk_continue+0x131/0x910
[  177.136208][    C0]  ? fib6_walk_continue+0x1e7/0x910
[  177.136218][    C0]  fib6_walk+0x149/0x290
[  177.136227][    C0]  __fib6_clean_all+0x234/0x380
[  177.136235][    C0]  ? __fib6_clean_all+0x9b/0x380
[  177.136243][    C0]  ? __pfx___fib6_clean_all+0x10/0x10
[  177.136251][    C0]  ? __pfx_fib6_clean_node+0x10/0x10
[  177.136260][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  177.136269][    C0]  ? __ip6_del_rt+0x111/0x180
[  177.136278][    C0]  fib6_flush_trees+0x12c/0x1a0
[  177.136286][    C0]  ? __pfx_fib6_flush_trees+0x10/0x10
[  177.136295][    C0]  ? nlmsg_notify+0xf0/0x1a0
[  177.136300][    C0]  ? nlmsg_notify+0x14a/0x1a0
[  177.136305][    C0]  ? __pfx_fib6_flush_trees+0x10/0x10
[  177.136313][    C0]  __ipv6_ifa_notify+0x620/0xac0
[  177.136324][    C0]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[  177.136332][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.136339][    C0]  ? __lock_acquire+0xab9/0xd20
[  177.136345][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.136352][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.136358][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.136364][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  177.136372][    C0]  addrconf_ifdown+0xe69/0x1880
[  177.136381][    C0]  ? tls_dev_event+0x717/0xec0
[  177.136388][    C0]  ? __pfx_addrconf_ifdown+0x10/0x10
[  177.136398][    C0]  addrconf_notify+0x1bc/0x1010
[  177.136407][    C0]  notifier_call_chain+0x1b6/0x3e0
[  177.136416][    C0]  __dev_notify_flags+0x18d/0x2e0
[  177.136424][    C0]  ? __pfx___dev_notify_flags+0x10/0x10
[  177.136430][    C0]  ? __dev_change_flags+0x4cc/0x6d0
[  177.136437][    C0]  ? __pfx___dev_change_flags+0x10/0x10
[  177.136443][    C0]  ? __pfx_console_unlock+0x10/0x10
[  177.136451][    C0]  ? irq_work_queue+0xbc/0x140
[  177.136457][    C0]  netif_change_flags+0xe8/0x1a0
[  177.136464][    C0]  do_setlink+0xc55/0x41c0
[  177.136474][    C0]  ? __pfx_do_setlink+0x10/0x10
[  177.136480][    C0]  ? irqentry_exit+0x74/0x90
[  177.136487][    C0]  ? __lock_acquire+0xab9/0xd20
[  177.136494][    C0]  ? __mutex_trylock_common+0x153/0x260
[  177.136502][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  177.136509][    C0]  ? rcu_is_watching+0x15/0xb0
[  177.136517][    C0]  ? trace_contention_end+0x39/0x120
[  177.136524][    C0]  ? __mutex_lock+0x335/0x1350
[  177.136530][    C0]  ? irqentry_exit+0x74/0x90
[  177.136536][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.136541][    C0]  ? rtnl_newlink+0x8db/0x1c70
[  177.136548][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  177.136555][    C0]  ? ns_capable+0x8a/0xf0
[  177.136562][    C0]  ? rtnl_link_get_net_capable+0x16a/0x350
[  177.136569][    C0]  rtnl_newlink+0x149f/0x1c70
[  177.136574][    C0]  ? netlink_sendmsg+0x805/0xb30
[  177.136582][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  177.136588][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  177.136594][    C0]  ? kasan_quarantine_put+0x3d/0x220
[  177.136601][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.136609][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  177.136614][    C0]  ? __local_bh_enable_ip+0xce/0x1c0
[  177.136620][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.136626][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.136631][    C0]  ? nlmon_xmit+0xb0/0x100
[  177.136637][    C0]  ? kmem_cache_free+0x18f/0x400
[  177.136646][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.136652][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.136658][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.136664][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  177.136670][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.136678][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.136685][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.136692][    C0]  ? __dev_queue_xmit+0x1d79/0x3b50
[  177.136700][    C0]  ? __lock_acquire+0xab9/0xd20
[  177.136710][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  177.136715][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  177.136722][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  177.136727][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  177.136733][    C0]  ? netlink_ack_tlv_fill+0x4f1/0x510
[  177.136738][    C0]  ? netlink_rcv_skb+0xca/0x470
[  177.136743][    C0]  ? kasan_check_range+0x1d4/0x2c0
[  177.136753][    C0]  netlink_rcv_skb+0x208/0x470
[  177.136759][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  177.136765][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  177.136772][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  177.136779][    C0]  netlink_unicast+0x82f/0x9e0
[  177.136789][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  177.136798][    C0]  ? netlink_sendmsg+0x642/0xb30
[  177.136832][    C0]  ? skb_put+0x11b/0x210
[  177.136840][    C0]  netlink_sendmsg+0x805/0xb30
[  177.136848][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.136855][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  177.136864][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  177.136869][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.136875][    C0]  __sock_sendmsg+0x21c/0x270
[  177.136885][    C0]  ____sys_sendmsg+0x505/0x830
[  177.136893][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  177.136901][    C0]  ? import_iovec+0x74/0xa0
[  177.136909][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  177.136916][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.136929][    C0]  ? __fget_files+0x2a/0x420
[  177.136937][    C0]  ? __fget_files+0x3a0/0x420
[  177.136946][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  177.136953][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.136964][    C0]  do_syscall_64+0xfa/0x3b0
[  177.136971][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.136976][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.136982][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.136988][    C0] RIP: 0033:0x7f04e378ec29
[  177.136995][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.137000][    C0] RSP: 002b:00007f04e4650038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.137006][    C0] RAX: ffffffffffffffda RBX: 00007f04e39d5fa0 RCX: 00007f04e378ec29
[  177.137010][    C0] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a
[  177.137014][    C0] RBP: 00007f04e3811e41 R08: 0000000000000000 R09: 0000000000000000
[  177.137017][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.137021][    C0] R13: 00007f04e39d6038 R14: 00007f04e39d5fa0 R15: 00007ffe939f5ea8
[  177.137028][    C0]  </TASK>
[  177.137797][    C1] task:syz.2.54        state:R  running task     stack:19704 pid:6131  tgid:6130  ppid:5828   task_flags:0x400140 flags:0x00080011
[  177.556014][    C1] Call Trace:
[  177.557471][    C1]  <TASK>
[  177.558774][    C1]  ? trace_sched_exit_tp+0x36/0x110
[  177.561049][    C1]  ? __schedule+0x17ae/0x4cc0
[  177.563123][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  177.565746][    C1]  ? irqentry_enter+0x3d/0x60
[  177.567829][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.570663][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.573471][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.576184][    C1]  ? __dev_notify_flags+0x18d/0x2e0
[  177.578448][    C1]  ? rcu_is_watching+0x15/0xb0
[  177.580519][    C1]  ? sysvec_apic_timer_interrupt+0x86/0xc0
[  177.583044][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.585710][    C1]  ? fib6_walk_continue+0x131/0x910
[  177.587987][    C1]  ? fib6_walk_continue+0x207/0x910
[  177.590242][    C1]  ? fib6_walk_continue+0x1e7/0x910
[  177.592516][    C1]  ? fib6_walk+0x149/0x290
[  177.594448][    C1]  ? __fib6_clean_all+0x234/0x380
[  177.596640][    C1]  ? __fib6_clean_all+0x9b/0x380
[  177.598786][    C1]  ? __pfx___fib6_clean_all+0x10/0x10
[  177.601119][    C1]  ? __pfx_fib6_clean_node+0x10/0x10
[  177.603426][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  177.605661][    C1]  ? __ip6_del_rt+0x111/0x180
[  177.607726][    C1]  ? fib6_flush_trees+0x12c/0x1a0
[  177.609921][    C1]  ? __pfx_fib6_flush_trees+0x10/0x10
[  177.612251][    C1]  ? nlmsg_notify+0xf0/0x1a0
[  177.614277][    C1]  ? nlmsg_notify+0x14a/0x1a0
[  177.616338][    C1]  ? __pfx_fib6_flush_trees+0x10/0x10
[  177.618679][    C1]  ? __ipv6_ifa_notify+0x620/0xac0
[  177.620940][    C1]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[  177.623292][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.626134][    C1]  ? __lock_acquire+0xab9/0xd20
[  177.628245][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.630568][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.632846][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.635163][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  177.637710][    C1]  ? addrconf_ifdown+0xe69/0x1880
[  177.639935][    C1]  ? tls_dev_event+0x717/0xec0
[  177.642012][    C1]  ? __pfx_addrconf_ifdown+0x10/0x10
[  177.644313][    C1]  ? addrconf_notify+0x1bc/0x1010
[  177.646489][    C1]  ? notifier_call_chain+0x1b6/0x3e0
[  177.648791][    C1]  ? __dev_notify_flags+0x18d/0x2e0
[  177.651064][    C1]  ? __pfx___dev_notify_flags+0x10/0x10
[  177.653444][    C1]  ? __dev_change_flags+0x4cc/0x6d0
[  177.655699][    C1]  ? __pfx___dev_change_flags+0x10/0x10
[  177.658104][    C1]  ? __pfx_console_unlock+0x10/0x10
[  177.660372][    C1]  ? irq_work_queue+0xbc/0x140
[  177.662446][    C1]  ? netif_change_flags+0xe8/0x1a0
[  177.664650][    C1]  ? do_setlink+0xc55/0x41c0
[  177.666680][    C1]  ? __pfx_do_setlink+0x10/0x10
[  177.668821][    C1]  ? irqentry_exit+0x74/0x90
[  177.670855][    C1]  ? __lock_acquire+0xab9/0xd20
[  177.672983][    C1]  ? __mutex_trylock_common+0x153/0x260
[  177.675372][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  177.677940][    C1]  ? rcu_is_watching+0x15/0xb0
[  177.680032][    C1]  ? trace_contention_end+0x39/0x120
[  177.682318][    C1]  ? __mutex_lock+0x335/0x1350
[  177.684402][    C1]  ? irqentry_exit+0x74/0x90
[  177.686403][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.688653][    C1]  ? rtnl_newlink+0x8db/0x1c70
[  177.690730][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  177.692913][    C1]  ? ns_capable+0x8a/0xf0
[  177.694791][    C1]  ? rtnl_link_get_net_capable+0x16a/0x350
[  177.697350][    C1]  ? rtnl_newlink+0x149f/0x1c70
[  177.699453][    C1]  ? netlink_sendmsg+0x805/0xb30
[  177.701613][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  177.703819][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  177.706472][    C1]  ? kasan_quarantine_put+0x3d/0x220
[  177.708746][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.711648][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  177.714312][    C1]  ? __local_bh_enable_ip+0xce/0x1c0
[  177.716606][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.719441][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  177.722267][    C1]  ? nlmon_xmit+0xb0/0x100
[  177.724199][    C1]  ? kmem_cache_free+0x18f/0x400
[  177.726345][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.728663][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.730935][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  177.733248][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  177.735718][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.737947][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.740179][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.742401][    C1]  ? __dev_queue_xmit+0x1d79/0x3b50
[  177.744644][    C1]  ? __lock_acquire+0xab9/0xd20
[  177.746762][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  177.748945][    C1]  ? rtnetlink_rcv_msg+0x7cf/0xb70
[  177.751159][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  177.753356][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  177.755721][    C1]  ? netlink_ack_tlv_fill+0x4f1/0x510
[  177.758075][    C1]  ? netlink_rcv_skb+0xca/0x470
[  177.760197][    C1]  ? kasan_check_range+0x1d4/0x2c0
[  177.762403][    C1]  ? netlink_rcv_skb+0x208/0x470
[  177.764544][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  177.766895][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  177.769190][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  177.771450][    C1]  ? netlink_unicast+0x82f/0x9e0
[  177.773600][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  177.775898][    C1]  ? netlink_sendmsg+0x642/0xb30
[  177.778045][    C1]  ? skb_put+0x11b/0x210
[  177.779903][    C1]  ? netlink_sendmsg+0x805/0xb30
[  177.782063][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.784353][    C1]  ? aa_sock_msg_perm+0xf1/0x1d0
[  177.786516][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  177.788815][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.791124][    C1]  ? __sock_sendmsg+0x21c/0x270
[  177.793228][    C1]  ? ____sys_sendmsg+0x505/0x830
[  177.795376][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  177.797654][    C1]  ? import_iovec+0x74/0xa0
[  177.799624][    C1]  ? ___sys_sendmsg+0x21f/0x2a0
[  177.801747][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.804022][    C1]  ? __fget_files+0x2a/0x420
[  177.806061][    C1]  ? __fget_files+0x3a0/0x420
[  177.808117][    C1]  ? __x64_sys_sendmsg+0x19b/0x260
[  177.810325][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.812692][    C1]  ? do_syscall_64+0xfa/0x3b0
[  177.814716][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.817343][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  177.819985][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.822618][    C1]  </TASK>
[  177.823973][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g7845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  177.829118][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=3047
[  177.832439][    C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g7845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  177.837207][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  177.841441][    C1] rcu: RCU grace-period kthread stack dump:
[  177.843989][    C1] task:rcu_preempt     state:I stack:27944 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  177.849006][    C1] Call Trace:
[  177.850468][    C1]  <TASK>
[  177.851776][    C1]  __schedule+0x1798/0x4cc0
[  177.853771][    C1]  ? __lock_acquire+0xab9/0xd20
[  177.855918][    C1]  ? __pfx___schedule+0x10/0x10
[  177.858043][    C1]  ? schedule+0x91/0x360
[  177.859897][    C1]  schedule+0x165/0x360
[  177.861698][    C1]  schedule_timeout+0x12b/0x270
[  177.863812][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  177.866113][    C1]  ? __pfx_process_timeout+0x10/0x10
[  177.868381][    C1]  ? prepare_to_swait_event+0x341/0x380
[  177.870771][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  177.872904][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  177.875051][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.877291][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  177.879568][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  177.881825][    C1]  ? finish_swait+0xcd/0x1f0
[  177.883851][    C1]  rcu_gp_kthread+0x99/0x390
[  177.885855][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  177.888113][    C1]  ? __kthread_parkme+0x7b/0x200
[  177.890260][    C1]  ? __kthread_parkme+0x1a1/0x200
[  177.892452][    C1]  kthread+0x711/0x8a0
[  177.894240][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  177.896497][    C1]  ? __pfx_kthread+0x10/0x10
[  177.898504][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.900737][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.902981][    C1]  ? __pfx_kthread+0x10/0x10
[  177.905000][    C1]  ret_from_fork+0x439/0x7d0
[  177.906968][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  177.909182][    C1]  ? __switch_to_asm+0x39/0x70
[  177.911271][    C1]  ? __switch_to_asm+0x33/0x70
[  177.913343][    C1]  ? __pfx_kthread+0x10/0x10
[  177.915358][    C1]  ret_from_fork_asm+0x1a/0x30
[  177.917448][    C1]  </TASK>

VM DIAGNOSIS:
17:15:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000010202 RBX=ffff88804b227ac0 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88804b227ad8 RBP=ffffc90000007918 RSP=ffffc900000077e0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed1009644f59
R12=dffffc0000000000 R13=ffff88804b227b40 R14=0000000000000802 R15=1ffff92000000f10
RIP=ffffffff819c0ed2 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f04e46506c0 ffffffff 00c00000
GS =0000 ffff8880b8d73000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002952a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=472f8602d5d8a4b9 70c4b03ca4fa3e0c XMM03=7369c31285f3dd9d cdf1e0f4b18a58c6
XMM04=05ac0f1bf004fed1 9e1ec5fd0733a0c8 XMM05=e5b97d675a0cf95b 09b411a6e63328ca
XMM06=13cb37b9a3429334 e5f813456b9b378e XMM07=b5e6810682207640 d7eeeef175731a73
XMM08=57710d05ac0f1bf0 04fed19e1ec5fd07 XMM09=0000000000000000 00007f04e3812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e02b0
R8 =ffff88801f7f8237 R9 =1ffff11003eff046 R10=dffffc0000000000 R11=ffffffff850cc110
R12=dffffc0000000000 R13=ffffffff995a1918 R14=ffffffff99894000 R15=0000000000000000
RIP=ffffffff850cc18c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b223500 ffffffff 00c00000
GS =0000 ffff8881a4173000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010e18a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000008000003b7 fffffff800000207 XMM03=0000005900000085 00000000000004b7
XMM04=9500000059000000 8500000000000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=0000000000000000 00007fa05f412f0f XMM09=0000000000000000 00007fa05f412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
