last executing test programs:

1.030383929s ago: executing program 2 (id=444):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000f40)={0x3, 0x80, 0xfc, 0xe7, 0xfa, 0x9, 0x0, 0x4, 0x301e4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x114b05, 0x200000000000007, 0x6, 0x0, 0x80a, 0x0, 0x4, 0x0, 0x8fc, 0x0, 0x7})
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

940.112244ms ago: executing program 2 (id=446):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180))
r4 = socket$kcm(0x2, 0x1, 0x84)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
sendmsg(r4, &(0x7f0000000340)={&(0x7f00000001c0)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="9fe0ca75e292aea08ed22463328d0e7c72d91036ec44bb5ecab1e49daa8a4a8fc10aa65a9383e03949f72d7b188a13c7458ab2117aa3e2aae789d07b549b7c18c70a8f4ca9753ea3ed20828ba90375db", 0x50}], 0x1, &(0x7f0000001b80)=[{0x18, 0x101, 0x8, "e0adfa5ec1ebee39"}, {0x40, 0x10c, 0x2, "37ce5d282099be054109f4ad57e8776b036136cb8bd97f674cd19b5c9b6c741f09f692379effaf8c802f8b3a2637aabc"}, {0x1010, 0x115, 0x0, "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"}], 0x1068}, 0x20000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x406600, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="b8b2821400000081000000008100", 0x12}], 0x1}, 0x0)

939.536736ms ago: executing program 1 (id=447):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x5a, &(0x7f0000000180)}, 0x14) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
close(r0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e08906", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r3) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x2a) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
socket$kcm(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32)

809.946755ms ago: executing program 1 (id=450):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bc113680ddc4e48aa31086b8703300000001f00030000000000050014000d0029000d0003009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r1, &(0x7f0000000a40)={&(0x7f0000000840), 0x6e, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/89, 0x59}, {&(0x7f0000000940)=""/46, 0x2e}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6649}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x75c9, 0x93, &(0x7f0000000180)=""/147, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x5, 0x5, 0x1}, {0x1, 0x2, 0x1, 0x7}, {0x2, 0x2, 0x0, 0x5}, {0x2, 0x1, 0xa, 0x3}, {0x2, 0x3, 0x9, 0x2}, {0x4, 0x2, 0x0, 0x5}, {0x4, 0x2, 0x6, 0xc}, {0x1, 0x3, 0x1, 0x6}, {0x1, 0x2, 0x1, 0x7}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x2e, 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], <r5=>0x0}, 0x40)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff, 0x31, 0x0, @val=@kprobe_multi=@syms={0x0, 0x6, &(0x7f00000007c0)=[&(0x7f0000000640)='&!\x00', &(0x7f0000000680)='^\xc5[\x00', &(0x7f00000006c0)='\\}]*\x00', &(0x7f0000000700)='?\xa8]\'\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='\\}\xc1^%,}&^\x00']}}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r6, r3, 0x14, 0x201d, r4, @value=r7, @void, @void, @void, r5}, 0x20)

739.073331ms ago: executing program 0 (id=451):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20000800)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r2, 0x0, 0x2, 0x0)
close(r2)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xbb8, 0x0, 0x5, 0x2841f5f15301d32d, 0x0, 0x0, {0x7}, [{{0x254, 0x1, {{0x3, 0x80}, 0x8, 0x2, 0x2, 0x9, 0x1b, 'syz0\x00', "3dd8ba611990851797f6d58dbf162e234e709c96595d002fcf57ac6d1ff88bcb", "6377beecc31adb9fa061f7a46081eb1504ae26abe19ac27bca1700ee1b558cfc", [{0x2, 0xc72, {0x0, 0x9}}, {0x7, 0x9, {0x2, 0x7}}, {0x6, 0x8, {0x0, 0x6}}, {0x6, 0xe, {0x0, 0x2}}, {0x3, 0x2, {0x1, 0x8}}, {0x6, 0x824, {0x1, 0x5}}, {0x60f4, 0x10, {0x1, 0x400}}, {0x4, 0x6, {0x2, 0x1}}, {0x7, 0x5, {0x3, 0x3}}, {0x7, 0x8, {0x2, 0x43}}, {0x1, 0x5aec, {0x1, 0x112d}}, {0x1, 0xf, {0x0, 0x3}}, {0x6, 0xfff7, {0x0, 0xfffffffd}}, {0x2, 0x3, {0x0, 0x5}}, {0x8, 0xf4e, {0x2, 0x1}}, {0x9, 0x240, {0x3, 0x2}}, {0x9, 0x7, {0x2, 0x3}}, {0x4, 0x6db, {0x0, 0x2b79}}, {0x9, 0x1, {0x2}}, {0x6, 0x8, {0x0, 0x3}}, {0x1, 0x8, {0x3}}, {0x8, 0x2, {0x1, 0xa}}, {0x6, 0x9, {0x1, 0x4}}, {0x4, 0x6, {0x3, 0x9}}, {0x2, 0x6, {0x3, 0x80}}, {0x9, 0x4, {0x1, 0x80}}, {0xfffb, 0xd4e, {0x3, 0xdae}}, {0xf, 0x40, {0x2, 0x7}}, {0x7, 0x0, {0x1, 0xfffffff8}}, {0x2, 0x8f, {0x1, 0x3}}, {0x4a, 0x5, {0x2, 0xf}}, {0x5, 0xf}, {0x8, 0x3, {0x0, 0x3ff}}, {0xd, 0x8, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0x100}}, {0x4, 0x3d, {0x3, 0xcfbf}}, {0x400, 0x1, {0x2}}, {0x0, 0x9, {0x0, 0x8}}, {0x3, 0x7, {0x3, 0x4}}, {0x10, 0x7, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x80}, 0x5, 0xfa, 0x1200, 0x5, 0x1c, 'syz1\x00', "ac049edd1b2d7d310d9a338776c9c3068583c1d02375ab4133703fdb22211deb", "010d843cd617b96e31a86d50345ccc2d2206bb0edd46f2c736004d07bcc4ce34", [{0x8, 0x7ff, {0x0, 0x1df7faf9}}, {0x6, 0x1, {0x1, 0x7f}}, {0x1, 0x60, {0x3, 0x7}}, {0xef9, 0x6, {0x1, 0x9}}, {0x8, 0x1c, {0x3, 0x8}}, {0x4, 0xfff9, {0x0, 0x8}}, {0xc5, 0x2, {0x3, 0x81}}, {0x1, 0x101, {0x1, 0x5}}, {0x7, 0x5, {0x1}}, {0x8, 0x6, {0x0, 0x3}}, {0x9, 0xd, {0x0, 0x2}}, {0x8, 0x1, {0x1, 0x5}}, {0xffff, 0xfff7, {0x3, 0x80000}}, {0xc5, 0x4, {0x1, 0x634f}}, {0xd477, 0x2}, {0xb, 0x5, {0x0, 0x80000000}}, {0x0, 0x6, {0x0, 0x3}}, {0xfff, 0x0, {0x1, 0xa}}, {0x4, 0x1e4, {0x2, 0x10}}, {0x8, 0xf, {0x1, 0x1}}, {0x8, 0x8001, {0x3, 0xcbf}}, {0x8, 0x3aa1, {0x1, 0x8}}, {0x0, 0x7, {0x1, 0xffffff99}}, {0x4, 0x4f3, {0x0, 0x7}}, {0x27, 0x4142, {0x1, 0xa1}}, {0x8, 0x0, {0x3, 0x23c}}, {0x7, 0x2, {0x3, 0x3c}}, {0x5, 0x3, {0x0, 0x4}}, {0xfff, 0x2, {0x1, 0x7}}, {0x4, 0x2, {0x1, 0x1}}, {0x4, 0x4000, {0x2, 0x6}}, {0x0, 0x6226, {0x3, 0x65a}}, {0xfffb, 0x3, {0x2, 0x5e}}, {0x2, 0x8, {0x0, 0x10001}}, {0x101, 0xff, {0x3, 0xf9}}, {0x7, 0xfffb, {0x8b4e947cbbe5899c, 0x2}}, {0x40, 0x4, {0x2, 0x1000}}, {0x7, 0x3, {0x2, 0xfffffffe}}, {0x5, 0x3f, {0x1, 0x3}}, {0x0, 0x80, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffff5}, 0x5, 0x6, 0x8001, 0xb39, 0x9, 'syz1\x00', "c606e2d9a383bd13db048dbfdc6a91ccd5c37a2163149a320893e65d0ea29c26", "469cb87499e1d52d884af14cc7168f4259efb30fdeb2626073c90e84fa436315", [{0x32, 0x1000, {0x2, 0x3ff}}, {0x8001, 0x4f, {0x2, 0x4}}, {0x2, 0x3, {0x1, 0x4}}, {0xe1ab, 0x7f, {0x0, 0x8c7}}, {0x5, 0x8001, {0x2, 0x1}}, {0x6b4, 0x7, {0x1, 0xb57c}}, {0x3a, 0x9, {0x2, 0x2}}, {0x0, 0x3, {0x3, 0x5}}, {0x7, 0x4, {0x2, 0x5}}, {0x0, 0xa, {0x0, 0x9}}, {0x6, 0x6, {0x2, 0x5}}, {0x1, 0x0, {0x2, 0x5}}, {0x80, 0x8, {0x3, 0x2}}, {0x42, 0x2, {0x1}}, {0x1, 0x4, {0x0, 0x3}}, {0x9, 0x1000, {0x1, 0x2f}}, {0xfff0, 0x8001, {0x0, 0x9}}, {0x0, 0x3, {0x0, 0x5}}, {0x0, 0x2, {0x2, 0x3}}, {0x3ff, 0x1, {0x3, 0x10001}}, {0x4, 0x5, {0x0, 0xa}}, {0x1, 0x3, {0x3, 0x5}}, {0x8, 0x8, {0x1, 0x3}}, {0x5, 0x80, {0x1, 0xd48f}}, {0x476a, 0x4, {0x1, 0x4}}, {0x8, 0xdb9, {0x0, 0x2}}, {0xf, 0x4, {0x2, 0x2}}, {0x1, 0xdcf, {0x3, 0x8}}, {0x5, 0xf001, {0x0, 0x6}}, {0x200, 0x1, {0x3, 0x1}}, {0x4, 0x3, {0x0, 0x7}}, {0x1, 0x0, {0x0, 0x31}}, {0x5, 0x1000, {0x3, 0xd}}, {0x3, 0x7}, {0x5, 0x9, {0x3, 0x3}}, {0xd559, 0x4d, {0x1}}, {0x1, 0x0, {0x1, 0x3}}, {0x6, 0x101, {0x3, 0x5a4}}, {0x81, 0x6, {0x1, 0x7a4}}, {0x5, 0x8, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0xfb, 0x0, 0x1ff, 0xa, 0xb, 'syz1\x00', "8c27e54e6f9cd7c317645db9f675168e4c966863780e6fbd81a4253ba686c4ea", "bdd8e93892addd27d8a67cb586a80ea4aadea113d88ad8663344111731815c6e", [{0x7, 0x9, {0x2, 0x6}}, {0xf2, 0x3, {0x0, 0x9}}, {0x100, 0x3, {0x3, 0x8}}, {0xbd84, 0x0, {0x1, 0x25fb}}, {0x93c9, 0x0, {0x2, 0x1}}, {0x0, 0x0, {0x3, 0x221}}, {0xe, 0x80b, {0x0, 0x800}}, {0x9, 0x0, {0x2}}, {0x2, 0x2, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x6, 0xfffffff8}}, {0xff, 0x16, {0x1}}, {0x6, 0x0, {0x1, 0x7}}, {0xfc00, 0x3800, {0x3, 0x79ca}}, {0x2, 0x3, {0x0, 0x7}}, {0x5, 0x1, {0x0, 0x10}}, {0x8, 0xfffe, {0x1, 0x5b31}}, {0x0, 0x1, {0x2, 0x3}}, {0xea, 0x9c77, {0x1, 0x8000}}, {0xf, 0x154, {0x1, 0x6}}, {0x2, 0x1000, {0x2, 0x2}}, {0x4ff, 0x9, {0x3, 0xfffeffff}}, {0x2, 0xf, {0x0, 0x47}}, {0xff, 0x3, {0x0, 0x2}}, {0x6, 0xff, {0x0, 0x2}}, {0x1, 0x9, {0x1, 0x3}}, {0x4, 0x5e, {0x1, 0xfffffff8}}, {0xff29, 0x4, {0x2, 0x3}}, {0x9, 0x6, {0x0, 0x8}}, {0x1, 0x1c, {0x1, 0x6}}, {0x2, 0xfff, {0x1}}, {0x3, 0x4, {0x1, 0x41}}, {0x7f, 0x0, {0x3, 0x4}}, {0x3ff, 0x4, {0x0, 0x3}}, {0x2, 0x8, {0x0, 0x3}}, {0x2, 0xfffc, {0x2, 0x4}}, {0xb, 0x1f, {0x3, 0x2}}, {0xba8, 0x80, {0x3, 0x59}}, {0x0, 0x8, {0x3, 0x7ff}}, {0x7f, 0x7, {0x1, 0x40}}, {0xff, 0x2, {0x1, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x2d}, 0x9, 0x9c, 0x8, 0xfc00, 0xd, 'syz0\x00', "4a589bbcf65633d40a76bf64977185dde093b783353bb4810a8d4b6e20474005", "2436d3cdd68ee2f236fadb9ed4f329f099fd81d13cced681afba1a06d821dd01", [{0x8, 0x5, {0x1, 0x7f0}}, {0x0, 0xc, {0x2, 0x3ff}}, {0x2, 0x8001, {0x3, 0x2df}}, {0x1, 0x8, {0x1, 0x80000001}}, {0x9, 0x7ff, {0x1, 0x8}}, {0x28bd, 0x9, {0x3, 0x200}}, {0x5, 0x3, {0x2, 0x5}}, {0x8, 0x8, {0x2, 0x5}}, {0xfe01, 0x9, {0x2, 0xedea}}, {0x400, 0x2374, {0x2, 0xbeb}}, {0x2, 0xc1, {0x3, 0x1}}, {0x6, 0xbbb, {0x2, 0xd}}, {0x4, 0xe0a, {0x2, 0x6}}, {0x6, 0x5, {0x2, 0xc}}, {0x2, 0x7, {0x3, 0x9}}, {0x9, 0x5, {0x1, 0x3}}, {0xe3f8, 0x5, {0x3, 0x2}}, {0x0, 0x1, {0x1, 0x4}}, {0x0, 0x2, {0x2, 0x3}}, {0x3, 0x2, {0x1, 0x60}}, {0xfff9, 0x676, {0x3, 0x200}}, {0x10, 0x5, {0x2, 0x1}}, {0x4, 0x8, {0x1, 0x8}}, {0x81, 0x8001, {0x2, 0x7}}, {0xc, 0x6, {0x2, 0x80}}, {0x7fff, 0x4, {0x1, 0x9}}, {0x4, 0xff, {0x3, 0x8}}, {0x7, 0x4, {0x2, 0x3}}, {0x9, 0xa08, {0x0, 0x7f}}, {0x5, 0x3, {0x1, 0x7}}, {0x0, 0xff, {0x1, 0x1}}, {0x0, 0x1, {0x0, 0x2}}, {0x75, 0xfffd, {0x2, 0x8}}, {0x6, 0x5, {0x3, 0xf}}, {0x9, 0x4, {0x1, 0xad}}, {0x7, 0x6, {0x3, 0xd}}, {0x5, 0x2, {0x2, 0x3}}, {0x800, 0x785, {0x0, 0x758}}, {0x3, 0x3, {0x3, 0x6ed7}}, {0x8000, 0x6, {0x1, 0x9}}]}}}]}, 0xbb8}}, 0x8008)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x4, 0x0, "", [@nested={0x4, 0x1}]}, 0x14}], 0x1}, 0x8000)

737.713312ms ago: executing program 1 (id=452):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r3 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x80, 0x0}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000bab95000000020600f90324fc000000cda0", 0x69}], 0x1}, 0x40)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000008000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random})
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r7, &(0x7f0000000400)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/102, 0x66}, {&(0x7f0000000940)=""/4082, 0x1000}], 0x2, &(0x7f0000000340)=""/150, 0xfffffffffffffeea}, 0x2)
sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/207, 0xcf}], 0x1}, 0x40002002)
recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8], 0x12)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x800, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="5acdea15929d7417c0002ccee61513bd41ba812008e517082f267b81fe6d1115724b5053170a174c6f0b3a39dfd546d990565924fc8230f8628e2d0000000065775bde94dc44e2d88a12c8a76e298210399ce6e37a9e8c7f4fa4bdd329b43a6e9bdb82b98a7fedf00f6d265559a5c7aa814733be5e90557b9638b3419a050d65b1f13bcfbc30305786b660792481cb594f85dcb6e0f415e12e810221909f7bc77372c78ae863d0777406d81a3b1a02bedbd44bc60d2276e600ea30ec76f915cefa08ac38a5e1c9a611458e499e4990dbdadb319f27d3d3f37ff6e826a84af4e634bd9cd4", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20)

662.862535ms ago: executing program 2 (id=453):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[], 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x8850, 0x2, 0xfffffffe, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x8000)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640))
sendmsg$nl_generic(r5, 0x0, 0x44000)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x10, &(0x7f00000005c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r7, 0x0, 0x4000}, 0x18)

661.758318ms ago: executing program 0 (id=454):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x100, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)={'a', ' *:* ', 'rm\x00'}, 0x9)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x1128, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1114, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}, @m_simple={0x88, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x59, 0x6, "f1dbfd5bc1a2553a477b9691f8c19c8567a60009302c0430ede66f0f4b6c17d64c55b629babe4c8c8accfaaad7692ce1d2148298c2a91b65c9e38ac572710f51264b6248b7efdbe93b17aa33f97ff10105f51bd068"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x1058, 0x1f, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0xf}]}, {0x1004, 0x6, "e7f89cfe30e29fcc5cb48a94dda9d125071b58dfd64e768fdcdc2494efee97ecf9af690555cbcfd65b0e3c29685e9173c328911cce0aa1dabeb050574d99f5c72504cafaa0100ca1bc5700c3b66531d4906fe53e0d033864c727a665240606aa59cf102cd200b4cb2101a3654a57f9d4585e15e4462705614ef8d49fefe061a09db24c84ebfb804ac8db66dbc7b6a84e60edfcb9093c1b490d0839c720a8921886fafaba11829e8553ee75107dabd9ebd8d09c21b6d357b0c97a8b20b3fd1338fee3f3522c31d21d9bb411c545d7e529d209b8cc80b729ffe6d121d35e2127e7e90ff1f45bd92e6815b0d276567114631ca44cecb56f8ac3a435f0e6c6123159d705ad89dcb8ab5d7f1c8ae96a2332aed2b47e1c4318a2cb1cd8b47598236448079d7a4bdfc82eaccad18d500cd7c0a8896ca9693f792e7782c4e27f99e2d96ed1126b00656a0c033af6e02cf4d0eecf47ce54a8670cc0cd0c07948a6940eb3f22e4cb56c90362f6065800c210127b226e95b022ac442cc464e2f6f8eb35534fc6335c70a5e87c40a8ca8f6698b17de60844b355b518ffb138af4a762634347f9ab6a42673c888a8d3d902e49e8ad474eb9b7d937cba9e034e37793b82efba2b112433e5d8a5af40ece025bf1932ee153ef4fec4ba4f835d86968a19fbcc211ef1af4d99c592aa93f26a841ca62e2a3d2b66558c31b3f7ece1d3e0bc4f0531ead7450156fa91ae209c0f3851040d0b457a71662050a36e61aa13bd3c8ceaca891fd07f4fa341335502d9a2a474ba089ff328e1595428df843dde1c176a79588ed9cecfefda8401dbc09c950108880f87dc93cddedbe6bc565645f1a4b22aefd5c7e3cd858b07d91c81979c71333b65f35a7bc4a2a43f923ed32becefb0a7ff74d2d89a06ee7b1b88d2a00b5e577ca9177757502a7b46c33af1f921dcff8d79a3ebd23e5465c2b9bc09397201dc5808c4ee7ff4b229ac2c50d07a3e27eaa5342e44fcc74f933186bf05f19cc4937cc312892608790cde07fe39c18014a07ad38cc88a79eabf3b9a4c38ed7252d0a31b820bed6856d5e1dcb79c2c31a5c53846b0382620660ecf384adb57e45d6729f10abb7466b72a5142779b282feb4e18460a296dc3925122c00a16bbd9021472149d93d79d0007cd40192623ac00c69ba2f2aee51d3c338391f434105573887fdc743325bb845e6548a510b1825b133ae1e68d891daa9687443b72e12e5cc7e5d9c28a4500109d2ed2f6f5360c349597846d90d4c6a36bd2ec5c10617cf8c6714f89e17c41da801cf39d4db41fa44131ea7a29e257b595874afe30d22516aced5cc072407ba661268fc6c39dc3dc41c7972aa9bad6beb58ca333a8d03c4e3a65c8a3c4f41f7494c0f5eaa1fbea87fae7cb8946e597ae62881fafc9c82718c51d61dbd07be02e02beedd2fb836399860523b638b013dc1e5e89af919f10d02f9aad324cb5b99d21acd387825492674d2254022eee593f5dd9922e58c0e7481e3c2d84fe27327ee2d57f47a1a0d5d4cf3590054ce0716293b2603383ab40532ff0d9cd5803714ff02a6f72c815cca478ba69b3ba357bb5160c86e4b4490286691f7f5b57f3a96d4d05e8ee4f301ebb46926ef8930a95a351d183d4cf97db80ee9d377795722e1bcc4a572a3b2c78e7721f002958b06b1c5e81f7b339e2b5282d50b9c60ef7c0339b51dea0442276d7419cc324a43fc507ad3b42115d5f0ef718a6baf1a56e5c7afe48ca765f95c0edf63ada9a7c5ffb0defaf48c88aad5a4203a3fe43e0960f12f425c311a8eba527a63fc14cae0ed046f1bc7af60b6e853ff18eca12352d623d884bae5a29cfc6fb7564c8f12e14054dcfa76cd8781e1825e41035dd293767651e64d8ccf0d8d587c3f1c9f50f7812f2b97c22b83413f3a578eab79cf3b53746436f69fd5fb551058b75a111f3796a801e29754acaac7334ce6ac4242720eca5075984210de434509faf29a9c91b86fb900e0ffeaa2832322d5b2f01d0300a9c7192eaaaf87c98a21c918fe65db3ae619f5d3e8b3a909f01674e93344f1335ca82a6270864bb3dc9630e3746502ba157bae08d5082737e3ebd1a5e4d69a44f6335803137486a94a38e9c134bc66c11c74deba4dad7db8d865f46c3bc17be397b29e24c967daa529b73ee1e2826384ca4993e23f4e3ce02521403ff338c2ab4326c80823e93cf4bc60788b973cc0beb18c92b7f572b661e00613e078ce54d88990dc5910ed363a5130daf997bc3c0e5c9ee3d14a29417f19ba525cd9971efa715b0a64e1e3c98ac79ab9ba0f04c079156a5cd1efb9c6f86809f39a8edc6ad178b2df1b0f79f5c13c056226cf313815f4a7f9a88dce2f42d528dcc3428d0fb9968d10f55b09f7ffd0268bd617be241939d4fd2c56e5638cfc793f55ee8eacf029f8b0ed006a1073518bbd1024d69cac94cd6088bdc526742a6e8e36a8f39fa99ee5ca2cedd80a02ec5d12b13f158ff48a134b95501cf23ea8341c614a9bdf588de12a415df0750c300a6606f1b6d83da98fc2196867832d37fec2cb42c1fe76be8f677df68165aa643eed827a4725231626dae91e09ea2c6636dc27a5ee12986e96094a2deeceb53153a3cd984ece05b7849568d1cbb2da5a9b60bf37a12d3d3daefb24ebd8d3a3e97da67717ca7423598d22b9d5a8cc1d79d0875aed61daf451aa1532848cb626afce5672ad602ccfbe63399c92915b882f7d08c00952a7ae77daf586678b5b77cf04456c243a0e3ed53e4f3c88ac4922576ed205954301988d60cb9cf2424a73d5b3d34065261544f21c901599ab3143b038280f62a6e5670d1a55b2a98c086b7e156128c33aac0f529fc6ba17806b3d35c20002de422629cb9331f644d7d67c60714d1ac715d6c56273b51305070a6512a4e3994be2fa34d5c3e232afa42b5fc368e23720558c03e25c884c862db9599635e4c269148c2b567e29fe6da4a324655ff810d41cbf3f1d4d5046f79ba7a72b35cfef8f042255c855a95ec0ac70ec91897d43319b35e786c1813a6328b8f8c539bda9afea75c75a218556a3029d888df26c1e87ae208c70e4621ab53aeea63cc3aedf410248a6509abc5a79d8cbbcb8fa76a08c3560f44d6bbc3fafb8fa652221512ef343347f89efa33120422700bd0128e10a65cc26f2da42bb46b94aa28dc94e522cd0079e07c127af9f8f7c7d49225ef7309abcda0f06b2d370c8dedd945ae8a3a5d2f4428c739521c40f803b53b19817c0f26b500eb8bf88eba864d2f59fc73b99640600ce2360c57d157a5bf0dfb5187fe89f9ef2465ca007d61845ce51af8b3acfff2af9ac897614902095a6a8f723e7e909163ea2038a1b5fd35b6871b142bca3653d10379eae476ca7d7a1813cb1a66741cbe58a7f11c653d9b8db5444c0152001e466ee4f87bbd8c32d37a2bc27e0d51d8bee351aa3508d2f03bf5a1a020caa469f227a3e800973e01ff9e081371e0f17f02ae6038e263cb3165819b9ae51a9629e934880a818735ce3e2d89878f977769dfcaca978e9fc5fa0e1345c0642e55a1dc1181cc737fceffa70d44bebc2599fc5f1316dca30fb07abfa41e26859e84934b5048d1a5ecc409de1e9b71ceda401d980dbb01dce0d31d7aa25c73d6ad29ae8c0ca45b1cb361c3a86c8d03c61bea9081d5e48fa60be693a8418ef17bf554faca947f9062c0031966b3f7a62b5e6cf51cab06691067fdd5657b6bbd5660e12d4b960a84851e1dc33cca59c78589378c7b0d54a93b541c1ba7c952a88a4a09c279fc7cd2ec5e1b39d21bd9b7515a133e440ff3ad5a5652259531c75254c7cf0740a1823784803b19453b77aee1ebbe953dc82c1262ba11b0b45b9d0004b3064d045d444d43a971944afc56cfb498790e9602472e3c0d17c221d907238636f4ec0bf81f34c8b7774dd935d52e3b47361cb022322c20216932cbe1fa39cfe0affe050ad9bd7930ca7b0a670f26e9dbadc869071342cc3593172bf3318ba6022138bb9341cd05ff51dfee8c316c1a327098dc303758c6b05e89a03c52b0d0c794cb0c934fdd889ed2ba26ce3001fa27c3f5ea35c2b79defaedd5e153d31035aa395bc55fe22aa086bb2117ffce7cd7c15e118d78e993f0c6b4c1c393e125dc6e9436fb119ac7b93fadb29a31ad9a61443f8e7dfc77c4f4de3771eec138c63514cc2d90da654f65d60ad9025a305d0e55832f161d923ed82b5f1a1604fa379183f8f99b6b210882c388cc8c827b76678d0c4a6ab4e60b28044ff4a8f495821b5b7c07d7bfbc3ebc83fea3c4d9c8631d70fb3cf5ca3553d9ba8b2437ad5f5f9dfb02943530b33c35e2269d0d3f56c1ac060b1ad6543bb21446130fda502f441800597fdf11195ca0203d144b47bc0231d6b0003862acf6dcbf95ff2334c959a6fd44caa5dfdaad895af0597e5fb0ed569c3f3df236ff3ec3919925f45f4b59f7fba0f45320768a461f98cfbfa870c0b44773ba37756db027d25e5556df3d395f62ba1eebd32ab4ca0d014b9aa3c042d48566a195341c0b86127a21db79495cffb0e0e8d6770293d52674a2a15923febd046696edf77b6bcf433c628fbe3fa65b212a3c9fce65f420a46f2bcfa28d52cb1a4ba9dee60ee65a548df551a70b201703a4ac1237d3abfcdba161a23469bb234f3fccf702856193eeed51b039ff04d00de4f54529428d579b4edeebb29b7e1b775eef16f656dedd50ed7c56dd4f91f200d650ff2b2876492d9ab2d5474b68dbb8f9c9a441f4da2e1c425aa4bd801f6170a77f923baf287e419d394c86287ddd18c846fdd8a1dcc41c77be7921fcaef8568c8feb8e1e923b7b523f96e6cdd914d4823165975d39d3779247f2c862e0e2d7d33cee4455cda535c137286da0d06058f07d22516f95caa2970500b5b0ccbc21363fe6930ca5e8b1c4d704eb98fbd93f1f9434f1e0d19eb30c6606847969a8e6602be6c0121bf28a6444524e2b0767a932b7a5895256bae57632bfa0c859b15f4136cb69bdc815f8171836ff416c74568212988a0cd88a245d8032eb0aaecfff7cd0976c51fb37aeb7efbbf0870d5a633d0b02d7682aa8b6a554e3d5ea2cf20470ea5a480ed9a2661d79fec253a71f0e5b3105d526408a991233a76ac966b447b0d1795070b16e2cb017246d209d805cbd9d49c78f88d2f975c4d6abd5c678efbcfd77b104d7cefab984edcfe398b4f37162d4273022e85e7b2c8fb63ad5e97e5451428ef3fd6a108bdd9fbeda94c7a2e80b9f9b3b227d3b34f47bf1c757dda523965cfd0ee8e0cb0c1564c1a31758fb6f2866e5c1c03771d7b936403590e77a2372c4ab7c26f12772cc1e87553da12c9097a1547049fe50dfcb139f878a7a21c81e8ad03e2c53bc2100e67ff3acef2800e67ad77533ea8029e291705c412d553f68899b2dd20f0ed70ee956e9b7b326865ad802d8213e6401379deb96d22e74afccd968db88df17d274f76138a5374dbe4fd0692e693e206b7f20f9f27aaac3aa7d78e981231c2c0ac4681125fcb5f414b7e40ec214a05b8e70412371f09b7551f2b68c44d71421c851776229e13dc7ced3f3ce8fe238bc6700622d51e5a98b44608e0cad894073015063db1f068ed337f8a347591209ac6b309b1fce3c156f127a374eb3b9740a64817aa46fa46095ec117efed9d3056879753751709b6de57b4ab675780d4b89b16eaff4295a6569ab990a11e55fae837f75847168380574598eec0712158fbf980838c46fe7d36aaeea7fea65f8cefac131c6a74cbfce2557e779777d6de5af673ece2a7c25703"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1128}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x100000001}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000900000000000000020000008500000097a9fca223d07355b58857af0000008500000005"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe0b)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x83, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000800))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x0)

549.338455ms ago: executing program 1 (id=455):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c880) (async)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
socket$kcm(0x1e, 0x4, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x10000)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x15) (async)
sendmsg$key(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="020fcf0e340000002bbd7000fedbdf25020013007f00000026bd700000000000040004001100000005000000000000000900000000000000020000000000000005001a00fe880000000000000000000000000101ac1414aa00000000000000000000000011001c0405001a00ff020000000000000000000000000001ac1e01010000000000000000000000001800101805001a0000000000000000000000ffff64010100fe8000000000000000000000000000aa1e00040418000900a8050000c307c64aaf3e05cf80640b27ad36eaf2934992afcfa3828c1f99515279462d25ae31f9a612dd9531b97b129c4d65e8c872cd6e82f9f25349ac8681a52ab1b1d58af32d4479e10ed0983b3cde4286c2ff9e05d6c4471ca3139f6e168541504d6c56ffad05f78c943078c09d801d81402d509b966f99d1f002e44b708837c204c71b884341d1f4323bb2c623fbcbd043d1b94ae725be161eb98a24631c4689119813974d4479f5df178931bdd601fa24134504c77e4000000005001a00ff0100000000000000000000000000010a0101000000000000000000000000001a0000"], 0x1a0}}, 0xc4)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) (async)
r5 = socket$kcm(0x2b, 0x1, 0x0) (async)
socket(0x1, 0x80000, 0x5e)
setsockopt$sock_attach_bpf(r5, 0x0, 0x480, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x4, @perf_config_ext={0xebe3, 0x830d}, 0x1448, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0xc, 0x1, 0xd1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
sendmsg$inet(r0, 0x0, 0x52cc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x502, 0x0, 0x0, 0x7, 0x3, 0x0, 0x99, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

440.050924ms ago: executing program 2 (id=456):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6f}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf7}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=r3, 0x4) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0xc000804)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff}) (rerun: 64)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$OSF_MSG_REMOVE(r5, 0x0, 0x40004) (async)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="21631ed20dfcd3b330de5ce68ad127e0e813d7484cf7184a8d2aa521b9f9d6814cd96437d36ae7b84a26c6d6a8410ce18834f9d912e48c8c061f80cb34b26ebe6aaada87c33482c98762e576a5aacecbc7238278", 0x54}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}, 0x40001) (async)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000011) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0], 0x27)

307.830091ms ago: executing program 0 (id=457):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f80)=@newtaction={0x1688, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1674, 0x1, [@m_police={0x1670, 0x1, 0x0, 0x0, {{0xb}, {0x1644, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0xffffffffffffffff, 0x3, 0x7f, 0x9, {0x6, 0x0, 0x200, 0x3, 0x3, 0x5}, {0x4, 0x1, 0x6, 0x1, 0x9, 0x4}, 0x80, 0x2, 0x1e7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0xffffffffffffffff, 0xfffffffc, 0x8, 0x6, {0x8, 0x1, 0x1ff, 0x795d, 0x1, 0x1}, {0xb, 0x0, 0x5, 0x1, 0x1, 0xffffff81}, 0x200, 0x2, 0x269f}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd76}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x101, 0x2, 0x6, 0x8, 0x9, 0xab92, 0x1, 0x8e80, 0x9, 0xfffffff2, 0x7f, 0x6ff8fb1e, 0x4, 0x6, 0x0, 0x4, 0x1, 0x1, 0x7, 0x7fff, 0x3, 0xf, 0xffffffff, 0xd, 0x1000, 0x8, 0x7, 0x6, 0xe65e, 0x4eb0, 0x5, 0x7, 0x3, 0x81, 0x2, 0x5, 0x9, 0x8, 0x8, 0x5, 0x8, 0x9, 0x8001, 0x6, 0xc8, 0xffffff81, 0x8, 0x200, 0x95e, 0x81, 0x8, 0x10001, 0x1, 0x80000001, 0x10, 0x2878bc5e, 0x5, 0x0, 0xd, 0x8000, 0xfd, 0x8c0, 0x6, 0x5, 0x7, 0xa, 0x5, 0x3, 0x7, 0x1ff, 0x9, 0x9e, 0xad5e572, 0x2, 0xc074, 0x8, 0x1, 0x8, 0x2, 0x1, 0x9, 0x8, 0x9, 0xfffff001, 0x7f5, 0x4, 0x200, 0xb9d, 0x1, 0x5, 0x10, 0xd, 0x5, 0xe, 0x80000001, 0x5, 0x3, 0xfffffffc, 0x8, 0x7, 0x4, 0xfffffff8, 0x1a6e40, 0x5, 0x2, 0x10000, 0x0, 0x6, 0x2, 0x0, 0x6, 0x7, 0x5, 0x4, 0x1, 0x7c, 0xcd, 0xa8a, 0x2, 0x1, 0x8, 0x6, 0x5, 0x2, 0x4, 0x0, 0xfb8f, 0x4, 0x8, 0x39068fab, 0x9, 0x9, 0x5, 0x400, 0x7fffffff, 0x5, 0x971d, 0x0, 0x400, 0x9, 0x2, 0xfff, 0x1, 0x5, 0x8000, 0x200, 0x2, 0x2, 0x8, 0x5, 0x8, 0x7, 0x2, 0x0, 0x0, 0x5, 0xfffffff7, 0x1, 0x2, 0x80, 0x8000, 0x4, 0x3, 0x4, 0x6, 0x8, 0xa, 0x10000, 0x1, 0x2, 0x1, 0x6, 0xf97, 0x4, 0xe, 0xbb, 0x9, 0xe77, 0xfffffff9, 0x6, 0x9, 0x6, 0x4, 0x98, 0x8, 0x400, 0x1, 0x0, 0x8, 0x3, 0x9, 0x4, 0x0, 0x0, 0x5, 0x7, 0x2, 0x0, 0x3, 0xfcd, 0x6, 0xfffffffc, 0x1, 0xaa, 0x80, 0x0, 0xe72b, 0x4, 0x2, 0x734, 0x4, 0xe66a, 0x7, 0x0, 0x9, 0x13, 0x6, 0x20, 0xfffffff2, 0x8, 0x8, 0xc, 0xf185, 0x112, 0x3ff, 0x4, 0x1, 0x8, 0x1, 0x3, 0xe0000000, 0xff, 0x5, 0x9, 0x5, 0xdb0, 0x1, 0x4, 0x7, 0x7, 0x8, 0x1, 0x10001, 0xce, 0x148555e9, 0x493a, 0x9, 0xc, 0x5, 0x191, 0x5, 0x7, 0x7, 0x3, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x8000, 0x4, 0xfbb8, {0x6, 0x2, 0x0, 0x7e3, 0x3ff, 0x1}, {0xe6, 0x0, 0x8, 0x4, 0xe0fa, 0x4}, 0x10000, 0xfff, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x581, 0x10000000, 0x6, 0x7, 0x6, {0x3, 0x1, 0x69b2, 0x4, 0x45b}, {0x45, 0x0, 0x0, 0x2, 0x1, 0x6}, 0x8, 0xffffff7f, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x10, 0xfffffffc, 0x7, 0x2, 0xc, 0x6, 0x3, 0x0, 0x5, 0xf72, 0x2, 0x9, 0x0, 0x0, 0x3, 0x5, 0xffff, 0xa8, 0x9, 0x3, 0x5, 0x7f, 0x84, 0xffffffff, 0x5, 0xe, 0xba19, 0x3, 0xd, 0x10000, 0x4, 0x8001, 0x6, 0x6, 0x4, 0x401, 0x5, 0x8, 0x6, 0x2, 0x3aabe200, 0x9, 0x101, 0x0, 0x3, 0x6, 0x7, 0xed48, 0x9, 0x1, 0x2, 0x8b, 0x1f, 0x24c, 0x4, 0x4eb000, 0xf, 0x0, 0x3, 0x7, 0x0, 0x1, 0x1, 0x3, 0x7f, 0xb, 0x10001, 0xe5, 0xcd, 0x3, 0x4, 0x6, 0x9, 0x2, 0x4, 0xfff, 0x80000001, 0x6, 0x80, 0xe92, 0x4, 0xd, 0x9, 0x3, 0x3, 0x4, 0x7963, 0x7, 0x6, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0x0, 0x4, 0xe2, 0x1, 0x60, 0x9, 0x7f, 0x6, 0xc, 0x66a8944a, 0x81, 0x65, 0xb, 0x8001, 0xd, 0x40, 0x8, 0x975c, 0x3, 0xfc5, 0x0, 0x6, 0x9, 0x7, 0x1, 0x9, 0x4, 0x5, 0x8001, 0x480000, 0x1000, 0xd, 0x5, 0x5, 0xf93, 0x80, 0x80000001, 0x80000001, 0x7, 0x6, 0xfffffffa, 0x40, 0x5826, 0xffffffff, 0x0, 0x5, 0x6, 0x2, 0xe4a, 0xcdd, 0x1, 0x4, 0x9, 0x3, 0x2, 0x4, 0x0, 0x1, 0x8, 0x7, 0x3, 0xf888, 0x942d, 0x1, 0x5, 0x0, 0x7f, 0xa32c, 0x9, 0x23, 0xfffffff2, 0x1, 0x8001, 0xe9, 0x5, 0xfffffff0, 0x8, 0x8, 0xffffffff, 0x9, 0x9, 0x1, 0x3, 0x1ff, 0xc, 0x100, 0xffff, 0x4, 0x2, 0xe07f, 0x571998a7, 0x0, 0xd22c, 0xb948, 0x4, 0x10001, 0xffffffff, 0x7, 0xe135, 0xffff, 0x93, 0x609, 0x3, 0x3, 0x80, 0xf, 0x6, 0x9, 0x3, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x9, 0x0, 0x5, 0xf9, 0x2, 0x54, 0x5, 0x2, 0x9, 0x100020, 0xa, 0x4, 0x9, 0xa84, 0x1, 0x7, 0x9, 0x9, 0x2, 0xa, 0x41, 0x9, 0x5b8e, 0x2, 0x0, 0x0, 0x0, 0xe42, 0x3, 0x5, 0x2, 0x4, 0x4, 0xfffffffb, 0x8, 0x0, 0x401, 0x9, 0x8, 0x3, 0x126, 0x101, 0x6, 0x4, 0x800, 0x3, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2020, 0x9, 0x3, 0x6, 0x40, 0x3, 0x9, 0x80000001, 0x4f, 0xfffff172, 0x401, 0x1ff, 0x73cd, 0xffff, 0xfffffff2, 0x1, 0xf, 0x5, 0x6, 0x10000, 0x4, 0x32b4dcca, 0x5, 0x7, 0x2d74, 0x754, 0x7, 0x0, 0x6, 0x401, 0x10001, 0x1ff, 0x3, 0xd, 0x1, 0xcddf, 0x0, 0x9, 0x3d, 0x3, 0x6a, 0x7, 0xc, 0xf3, 0x1, 0x7, 0x6, 0x7, 0x7, 0x9e87, 0xd7e, 0x2, 0x4, 0xb, 0x9, 0x4, 0x5, 0x387c, 0x43, 0x136a, 0x4, 0x60, 0xb, 0x0, 0x0, 0x7572, 0x3, 0x6, 0x0, 0x7, 0xe2c7, 0x9, 0x5, 0x3cd, 0x4, 0x1, 0x0, 0x1, 0x5de, 0x8, 0x6, 0xe8, 0x8, 0x8, 0x9, 0x5, 0x0, 0x400, 0x8001, 0x1, 0x9586, 0x0, 0x8, 0x1, 0x7, 0x5, 0x6, 0x2, 0x4, 0x7, 0x7fff, 0x80000000, 0x0, 0xc, 0x0, 0x4, 0x6, 0x556, 0xffffffff, 0x9, 0x5, 0xffffffff, 0x9, 0x3, 0x1c, 0x9, 0x7f, 0x80000000, 0x10000, 0x6, 0x2, 0x5, 0x1, 0x0, 0xe, 0x80000001, 0x5, 0x2, 0xb, 0x6, 0xc00, 0xff, 0x3, 0x4, 0x4, 0x8000, 0x1, 0x1, 0x4, 0x80000000, 0x532, 0xfffff7d3, 0x7f, 0xfffffffc, 0x5, 0x3, 0x63d, 0x5, 0x1, 0x8, 0x8000000, 0x1, 0x800, 0xfffffffc, 0xfffffff7, 0x4, 0x8, 0x3, 0x10, 0x9, 0x66a, 0xfffffff4, 0xffffffff, 0x6, 0x44424e6f, 0x1, 0x7, 0x9, 0x7, 0x3, 0x0, 0xf6d2, 0x6, 0xe5c, 0xfff, 0x8, 0x1, 0xd80, 0x1, 0x3ff, 0x7, 0x7d78, 0x3, 0x5, 0x0, 0x0, 0x694, 0x3, 0x5, 0x7, 0x400, 0xfff, 0x3ff, 0x9, 0x6, 0xaf, 0x9, 0x0, 0x2, 0x5, 0xd, 0x6, 0x121b, 0x2d, 0xffff, 0x7, 0x8, 0x5, 0x1, 0x1ff, 0x9, 0xfffffffa, 0x38a, 0xc8, 0xead, 0x80000000, 0x4, 0x3, 0x9, 0x6, 0x3, 0x4, 0x1, 0x100, 0x1, 0x6, 0x7, 0x927, 0x7fffffff, 0x3, 0x9729faa, 0xf, 0x2, 0x3, 0x2, 0x7, 0xfffffffd, 0x6, 0x100, 0x302, 0xfffffffb, 0xfffffffb, 0x2, 0x0, 0x90, 0x1, 0x1, 0x6, 0xfffff800, 0x4, 0xc, 0xffffffff, 0xd, 0x9, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x21, 0x7c, 0x7, {0x7, 0x1, 0x2, 0x200, 0x9, 0x5}, {0x1c, 0x2, 0x8, 0x1fb2, 0x48f, 0xa51b}, 0x38, 0x10000, 0x9}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x4, 0x4, 0x2, 0xb, 0xe3d9, 0x1, 0xffffff80, 0xffff, 0x800, 0x8, 0x4bb3, 0xffffff01, 0x5, 0x0, 0xe8c5, 0x1, 0x9, 0x7, 0xdad, 0xe57, 0x5, 0xffff, 0x0, 0x141, 0x7, 0x6, 0x7, 0x4, 0x9, 0x4, 0xff, 0x2da1, 0xb75, 0x0, 0x40, 0x8, 0x8, 0xb0000000, 0x0, 0xffffffff, 0x7, 0x0, 0x1, 0x40, 0x1, 0x7, 0xa, 0xa1, 0x81, 0x81, 0x9, 0x1ff, 0x1, 0x4, 0x1, 0xe, 0x101, 0x0, 0xfffffff8, 0x7ff, 0x2, 0x5, 0x800, 0x2010, 0x6, 0x52a, 0x101, 0x9, 0xa, 0x4, 0x5, 0x9, 0x3, 0xff, 0x10001, 0x97, 0x3, 0x5, 0x4, 0x5, 0x8, 0x8, 0x129, 0x8, 0x51, 0x3, 0x31e, 0x2, 0x8, 0xe, 0x10, 0x7fffffff, 0x0, 0x0, 0x5, 0x2, 0xff, 0x4, 0x8, 0x80, 0x200, 0x0, 0x6, 0x0, 0x4, 0x10001, 0x5, 0x2, 0x3, 0x3, 0x223, 0x1, 0x7, 0x46f4, 0x5, 0x7, 0x9, 0x3, 0x100, 0xc3, 0x7, 0xd, 0xf, 0x2, 0x0, 0x100000, 0x4, 0xd1f, 0x7, 0xff, 0x80, 0x7, 0x3, 0x9, 0x8, 0x6, 0x4, 0x9c, 0x0, 0x887, 0xc123, 0x2, 0xfffff10d, 0xff, 0x10000, 0x7fff, 0x6, 0x80000000, 0x7, 0x2, 0x9, 0x301, 0xe4c8, 0x5, 0x7, 0x0, 0x6, 0x2, 0x6f, 0x40, 0x9, 0x9, 0x9, 0xc, 0x4, 0x3, 0x4, 0x548, 0x6, 0x20bd, 0x2, 0x4, 0x4, 0x67, 0x80000000, 0x1, 0x4, 0x0, 0x0, 0x8, 0xfffffffe, 0x7fffffff, 0x8000, 0x1, 0x3ff, 0x967, 0x4b2b9a04, 0xe, 0x7390, 0x3, 0xbd0, 0x3, 0x2, 0x80, 0x1ff, 0x7, 0x8, 0x7, 0x8, 0x5, 0x9, 0x7, 0x8, 0x9, 0x4, 0x5, 0x4, 0x5, 0x400, 0x5, 0x1, 0x9, 0x1, 0x8, 0xa, 0x3, 0x5, 0x9, 0x2, 0x3ff8000, 0x8, 0xfffffffe, 0x9, 0x10000, 0x2, 0x1, 0x1, 0x6, 0x6, 0xffc00, 0x200, 0x6, 0x5, 0xc1, 0x6, 0xfffffff9, 0x0, 0x3, 0x80000000, 0xdd, 0x80, 0xfff, 0x70414d93, 0xffff, 0x3, 0x80000001, 0x6, 0x81, 0xffffffff, 0x7, 0x5, 0x0, 0x9, 0x9, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0xff, 0xfffffff3, 0xffff, {0xe, 0x1, 0x6, 0x0, 0x1ff, 0x7}, {0x5, 0xfbab40d4842feffc, 0x3, 0x5, 0x8, 0x1}, 0x8, 0x80000001, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6a}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0xfffff6d4, 0xadf7, 0xffff, 0x10, 0x8, 0x4, 0x3, 0x8000, 0x32e6400, 0x10001, 0x1, 0xfffffeff, 0x6, 0x7, 0xcf0, 0x9, 0x8, 0xffff, 0x6, 0x1, 0x1, 0x7a34, 0x5, 0x9, 0xa91, 0x4, 0xe89, 0xe3, 0x1, 0x1000, 0x6, 0x5, 0x81, 0x7, 0xff0, 0x200, 0x1, 0xc9, 0xb2aa, 0x4, 0x11, 0xffff, 0x3, 0xfffffffb, 0x3, 0x2, 0x4, 0x9, 0x8001, 0x2, 0x4, 0x1, 0x400, 0x2, 0x24, 0x9, 0x59, 0x4, 0x5b0, 0xfffffb18, 0x0, 0x0, 0x2f1, 0x5, 0x1, 0x80000000, 0x80000000, 0x6, 0x9, 0x1, 0x0, 0x61e, 0x3, 0x1a, 0x1, 0xffffff7f, 0x1, 0x8, 0x1, 0x7, 0x8, 0x6, 0x80, 0x4d8f, 0x6, 0x4, 0x5, 0x18, 0x6, 0x4, 0x3, 0x5, 0x1, 0x0, 0x4, 0x579c, 0x81, 0x55, 0x2, 0x40, 0x1, 0x9645, 0x4, 0x93a, 0x456, 0x6, 0x6, 0x7, 0x8, 0x5, 0x9, 0x3ff, 0x2, 0xb8, 0x5, 0x6, 0x9, 0x1, 0xd, 0x857, 0x0, 0x1000, 0x5, 0xbf4, 0x2, 0xffff, 0x0, 0x5, 0x0, 0x6, 0xfffffff7, 0x8, 0x2, 0xffff48ba, 0xd, 0x5, 0x7fffffff, 0x4, 0x2, 0x12f, 0x7f, 0x593d, 0x6, 0x800, 0x8, 0x4, 0x9, 0x0, 0xd89e, 0x4, 0x7, 0xe, 0xe44, 0x6, 0x6348, 0x8, 0x0, 0x5, 0x8, 0x7, 0x7, 0x400, 0x7, 0xc28b, 0x7ff, 0x9, 0x2f, 0x3, 0x445, 0x5, 0xc388, 0x6, 0x2, 0x7, 0x33, 0xa, 0xfffffff9, 0x5, 0x0, 0x8, 0x1ff, 0x5df, 0xb22, 0xd, 0x0, 0x8, 0x5, 0x40, 0xff, 0x1, 0x4, 0x6, 0x8, 0xe78, 0xc, 0x3, 0x36, 0x200, 0x8000, 0x3, 0x800, 0x6, 0x8, 0x401, 0x100, 0xf, 0x4, 0x80, 0x1, 0x1, 0x8001, 0xfff, 0x1000, 0x1, 0x40, 0x3, 0x3, 0x2, 0x8, 0x0, 0x1, 0x32, 0xf, 0x1, 0x0, 0x8, 0x5, 0x3f, 0xb4c, 0x9585, 0x8, 0x0, 0x400, 0x9, 0xb, 0x2, 0xf, 0x94b5, 0x7, 0xffff, 0xfff, 0x6, 0x5, 0x4, 0x2, 0x1, 0x100, 0x6, 0x1, 0x47c, 0x401, 0x569, 0x1e8, 0x6, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0xab, 0x9, 0x3, {0x80, 0x1, 0x4, 0x3, 0xc580, 0x7}, {0x81, 0x1, 0x0, 0xf3, 0x6, 0xff}, 0x1, 0x7ff, 0xfff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x9, 0x4, 0x3, {0x81, 0x0, 0xe70, 0x40, 0x3, 0x6}, {0x9, 0x2, 0x5, 0x8000, 0x26a6, 0x10001}, 0x44e89182, 0x4, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x1688}, 0x1, 0x0, 0x0, 0x4048824}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x2, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, @in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}, 0x1, 0x60, 0x0, 0x4004}, 0x0)

307.424217ms ago: executing program 1 (id=458):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000012c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x12, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="188000000000ba2361b437dff25e00e0ff010b000400000095", @ANYRESOCT], &(0x7f0000001280)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x6, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000300)=0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x10000}}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x6c, 0x5f, 0x0, 0x2e]}}, &(0x7f0000001340)=""/81, 0x3a, 0x51, 0x0, 0x3}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x17, 0xcf72, 0x7, 0xe, 0x1000, r4, 0xef9b, '\x00', r2, r5, 0x5, 0x5, 0x2}, 0x50)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x6, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000040)="383724a2", &(0x7f0000000200)=""/4096}, 0x20)
socket$kcm(0x11, 0x200000000000002, 0x300)
r8 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a01ff02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

189.885868ms ago: executing program 2 (id=459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff23, &(0x7f00000002c0), 0x1, 0x0, 0xfffffffffffffea2, 0x1f00c00e}, 0xc0800)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000004f0001000000000095000000000000003a10c6134ec4deee8334e447345baf670f649c7691433c044cf5841bd7ec66284d6f0e020f60114ff2"], 0x0, 0x9}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r2})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x5, [{0x3, 0x0, 0x7fffffff}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30]}}, 0x0, 0x36, 0x0, 0x1, 0x519}, 0x28)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x3, 0x5, 0x3}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x2004c004)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8947, &(0x7f0000000080))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff23, &(0x7f00000002c0), 0x1, 0x0, 0xfffffffffffffea2, 0x1f00c00e}, 0xc0800) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000004f0001000000000095000000000000003a10c6134ec4deee8334e447345baf670f649c7691433c044cf5841bd7ec66284d6f0e020f60114ff2"], 0x0, 0x9}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r2}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x5, [{0x3, 0x0, 0x7fffffff}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30]}}, 0x0, 0x36, 0x0, 0x1, 0x519}, 0x28) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x3, 0x5, 0x3}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x2004c004) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8947, &(0x7f0000000080)) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) (async)

189.14587ms ago: executing program 2 (id=460):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000000), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000000780)=@raw=[@exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @generic={0x80, 0x7, 0x8, 0x81, 0xfffffffc}, @alu={0x4, 0x1, 0x4, 0x3, 0x3, 0x100, 0xfffffffffffffff0}], 0x0, 0xb, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="42f19403886092b200000000000000000000faff0000000000000000"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ecffffffffffffff000000000098a7888f712b2a02b94eb33003a2d823d077167672be79459a48a849e314307715443fdf92d8828bf46b565acb12fc3e5b1fc95f4b70d576ce853a68bac97d51965d221913ba033283b68f63b31bfb593486dc2ac22fd51fe08e06577db53c6cd11cff"], 0x50)
close(r2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x12, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x99}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000000440)=""/232, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r2], &(0x7f0000000540)=[{0x80003, 0x1, 0x2, 0x5}, {0x0, 0x2, 0xe, 0xb}, {0x1, 0x2, 0x6, 0x4}, {0x0, 0x4, 0x9, 0x7}, {0x2, 0x1, 0x0, 0xd}, {0x3, 0x3, 0xa}], 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='virtio_transport_alloc_pkt\x00', r4, 0x0, 0xfffffffffffff801}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r9, 0x1, 0x2b, 0x0, 0x0)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r11)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)='%ps    \x00'}, 0x20)
write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)

130.087436ms ago: executing program 0 (id=461):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
socket$key(0xf, 0x3, 0x2)

75.758002ms ago: executing program 1 (id=462):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x8000000000000000, 0x8001}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$kcm(0x1e, 0x4, 0x0) (rerun: 32)
socket$kcm(0x1e, 0x4, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3)
r1 = socket$nl_audit(0x10, 0x3, 0x9) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000000000001000084ffff0000000000000100000002"], 0x0, 0x3e, 0x0, 0x0, 0x20000000}, 0x28) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
sendmsg$AUDIT_USER(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x40000) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (rerun: 32)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4) (async, rerun: 64)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0}) (rerun: 64)
close(r5) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7) (async, rerun: 64)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000010000000024047035199506b67ad412201600"/33, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000010"], 0x0}, 0x94) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

75.278825ms ago: executing program 0 (id=463):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a06030000002300fec0ffff00000000000000ac1414aa3a2008", @ANYRES16=r0, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES32], 0xfdef)

0s ago: executing program 0 (id=464):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3", 0x12}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000006400000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32100' (ED25519) to the list of known hosts.
syzkaller login: [   56.291256][ T5829] cgroup: Unknown subsys name 'net'
[   56.458933][ T5829] cgroup: Unknown subsys name 'cpuset'
[   56.465144][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.444636][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.420719][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.424027][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.427076][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.431303][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.434419][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.446421][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.449149][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.451641][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.454658][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.457618][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.465554][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.487797][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.491612][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.495552][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.499652][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.777846][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.918107][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.986473][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.989613][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.992681][ T5853] bridge_slave_0: entered allmulticast mode
[   64.996831][ T5853] bridge_slave_0: entered promiscuous mode
[   65.022439][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.025575][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.028487][ T5853] bridge_slave_1: entered allmulticast mode
[   65.032289][ T5853] bridge_slave_1: entered promiscuous mode
[   65.074789][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.085240][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.103425][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.182565][ T5853] team0: Port device team_slave_0 added
[   65.188726][ T5853] team0: Port device team_slave_1 added
[   65.203928][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.207458][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.210481][ T5848] bridge_slave_0: entered allmulticast mode
[   65.215121][ T5848] bridge_slave_0: entered promiscuous mode
[   65.246274][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.249075][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.259657][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.264894][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.267737][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.270540][ T5848] bridge_slave_1: entered allmulticast mode
[   65.274737][ T5848] bridge_slave_1: entered promiscuous mode
[   65.299359][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.302122][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.312333][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.361965][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.392647][ T5853] hsr_slave_0: entered promiscuous mode
[   65.395783][ T5853] hsr_slave_1: entered promiscuous mode
[   65.399806][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.403567][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.407551][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.410503][ T5852] bridge_slave_0: entered allmulticast mode
[   65.414646][ T5852] bridge_slave_0: entered promiscuous mode
[   65.436133][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.439028][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.441267][ T5852] bridge_slave_1: entered allmulticast mode
[   65.443953][ T5852] bridge_slave_1: entered promiscuous mode
[   65.458344][ T5848] team0: Port device team_slave_0 added
[   65.480678][ T5848] team0: Port device team_slave_1 added
[   65.486901][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.518320][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.550919][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.553733][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.563813][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.589525][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.592332][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.602434][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.614575][ T5852] team0: Port device team_slave_0 added
[   65.632469][ T5852] team0: Port device team_slave_1 added
[   65.679627][ T5848] hsr_slave_0: entered promiscuous mode
[   65.682137][ T5848] hsr_slave_1: entered promiscuous mode
[   65.684754][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   65.686904][ T5848] Cannot create hsr debugfs directory
[   65.697757][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.700065][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.709441][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.723209][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.726629][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.737066][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.854590][ T5852] hsr_slave_0: entered promiscuous mode
[   65.857629][ T5852] hsr_slave_1: entered promiscuous mode
[   65.860414][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.862686][ T5852] Cannot create hsr debugfs directory
[   65.989342][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.010638][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.021961][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.037465][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.142188][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.153468][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.167239][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.178151][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.252753][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.266317][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.273754][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.292360][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.364015][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.419125][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.426517][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.439617][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.442126][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.458707][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.461311][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.469316][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.487701][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.490238][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.506197][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.509582][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.512386][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.515848][ T5240] Bluetooth: hci2: command tx timeout
[   66.527509][ T5240] Bluetooth: hci0: command tx timeout
[   66.567468][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.582060][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.584701][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.593101][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.595729][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.604782][ T5240] Bluetooth: hci1: command tx timeout
[   66.642282][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.665432][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.710536][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.743975][ T5853] veth0_vlan: entered promiscuous mode
[   66.750685][ T5853] veth1_vlan: entered promiscuous mode
[   66.785426][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.802214][ T5853] veth0_macvtap: entered promiscuous mode
[   66.810383][ T5853] veth1_macvtap: entered promiscuous mode
[   66.851953][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.862050][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.867549][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.871033][ T5848] veth0_vlan: entered promiscuous mode
[   66.887020][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.891342][ T5848] veth1_vlan: entered promiscuous mode
[   66.903583][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.912430][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.916620][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.972477][ T5848] veth0_macvtap: entered promiscuous mode
[   66.982523][ T5848] veth1_macvtap: entered promiscuous mode
[   67.037619][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.040863][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.053605][ T5852] veth0_vlan: entered promiscuous mode
[   67.076143][ T5852] veth1_vlan: entered promiscuous mode
[   67.085629][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.087091][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.088743][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.106057][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.119642][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.130921][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.134066][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.147194][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.160863][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.193239][ T5852] veth0_macvtap: entered promiscuous mode
[   67.216371][ T5852] veth1_macvtap: entered promiscuous mode
[   67.250083][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.252763][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.262360][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.276959][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.313512][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.320024][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.323695][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.333643][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.335807][ T5923] netlink: 'syz.0.5': attribute type 2 has an invalid length.
[   67.342212][ T5924] netlink: 'syz.0.5': attribute type 2 has an invalid length.
[   67.343102][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.348268][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.414400][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.416892][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.443648][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.447326][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.646654][ T5938] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.650009][ T5938] netlink: 62227 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.660339][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.664560][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.669578][ T5936] bridge0: entered allmulticast mode
[   67.683944][ T5936] bridge_slave_1: left allmulticast mode
[   67.687664][ T5936] bridge_slave_1: left promiscuous mode
[   67.689767][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.695983][ T5936] bridge_slave_0: left allmulticast mode
[   67.697969][ T5936] bridge_slave_0: left promiscuous mode
[   67.700258][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.859683][ T5941] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.901613][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'.
[   68.206052][ T5946] Zero length message leads to an empty skb
[   68.306841][    C1] hrtimer: interrupt took 26539 ns
[   68.636931][ T5240] Bluetooth: hci0: command tx timeout
[   68.638712][ T5240] Bluetooth: hci2: command tx timeout
[   68.771154][ T5856] Bluetooth: hci1: command tx timeout
[   69.555118][ T5968] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18'.
[   69.976794][ T5983] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.23'.
[   69.983657][ T5983] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.23'.
[   70.106201][ T5986] netlink: 'syz.2.24': attribute type 4 has an invalid length.
[   70.111644][ T5986] netlink: 180 bytes leftover after parsing attributes in process `syz.2.24'.
[   70.675033][ T5856] Bluetooth: hci2: command tx timeout
[   70.675115][ T5240] Bluetooth: hci0: command tx timeout
[   70.834659][ T5240] Bluetooth: hci1: command tx timeout
[   71.045306][ T5998] IPv6: NLM_F_CREATE should be specified when creating new route
[   71.106958][ T6002] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.240222][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.243806][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.250608][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'.
[   71.324073][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   71.739588][ T6023] =======================================================
[   71.739588][ T6023] WARNING: The mand mount option has been deprecated and
[   71.739588][ T6023]          and is ignored by this kernel. Remove the mand
[   71.739588][ T6023]          option from the mount to silence this warning.
[   71.739588][ T6023] =======================================================
[   73.650266][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1476088221 wd_nsec: 1476088238
[   73.707604][ T5240] Bluetooth: hci2: command tx timeout
[   73.709702][ T5240] Bluetooth: hci0: command tx timeout
[   73.711792][ T5240] Bluetooth: hci1: command tx timeout
[   74.266950][ T6054] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET)
[   74.412938][ T6059] __nla_validate_parse: 3 callbacks suppressed
[   74.412995][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'.
[   74.488852][ T6061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.50'.
[   74.609785][ T6067] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[   74.620125][ T6066] netlink: 92 bytes leftover after parsing attributes in process `syz.2.53'.
[   74.620157][ T6068] netlink: 92 bytes leftover after parsing attributes in process `syz.2.53'.
[   74.644537][ T6067] netlink: 'syz.1.52': attribute type 46 has an invalid length.
[   74.669476][ T6070] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.712757][ T6073] netlink: 'syz.1.55': attribute type 10 has an invalid length.
[   74.726532][ T6073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.55'.
[   74.732173][ T6073] team0: entered promiscuous mode
[   74.735296][ T6073] team_slave_0: entered promiscuous mode
[   74.737429][ T6073] team_slave_1: entered promiscuous mode
[   74.739769][ T6073] team0: entered allmulticast mode
[   74.741460][ T6073] team_slave_0: entered allmulticast mode
[   74.743232][ T6073] team_slave_1: entered allmulticast mode
[   74.746799][ T6073] bridge0: port 3(team0) entered blocking state
[   74.748887][ T6073] bridge0: port 3(team0) entered disabled state
[   74.752529][ T6073] bridge0: port 3(team0) entered blocking state
[   74.754753][ T6073] bridge0: port 3(team0) entered forwarding state
[   74.785546][ T6070] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.54'.
[   75.111965][ T6085] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   75.197128][ T6090] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   75.722528][ T6108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.65'.
[   75.854058][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   75.986536][ T6131] Illegal XDP return value 967160400 on prog  (id 45) dev N/A, expect packet loss!
[   75.991995][ T6133] netlink: 168 bytes leftover after parsing attributes in process `syz.2.73'.
[   76.008042][ T6127] syz.1.71 (6127) used greatest stack depth: 18680 bytes left
[   76.047471][ T6133] netlink: 200 bytes leftover after parsing attributes in process `syz.2.73'.
[   76.391776][ T6155] sit0: entered allmulticast mode
[   76.407221][ T6155] sit0: entered promiscuous mode
[   84.751749][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 5587261693 wd_nsec: 5587261510
[   87.579043][  T794] cfg80211: failed to load regulatory.db
[   87.990469][ T6186] __nla_validate_parse: 1 callbacks suppressed
[   87.990484][ T6186] netlink: 64 bytes leftover after parsing attributes in process `syz.2.87'.
[   88.040132][ T6191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.89'.
[   88.082763][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.150130][ T6193] netlink: 360 bytes leftover after parsing attributes in process `syz.0.90'.
[   88.167347][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'.
[   88.577065][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'.
[   90.108437][ T6207] netlink: 'syz.0.94': attribute type 12 has an invalid length.
[   90.111512][ T6207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.94'.
[   90.334638][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'.
[   90.347305][ T6220] openvswitch: netlink: Message has 8 unknown bytes.
[   90.813910][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'.
[   90.857348][ T6250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.118137][ T6260] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   91.128409][ T6260] netlink: 'syz.1.109': attribute type 10 has an invalid length.
[   91.143510][ T6260] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.479771][ T6268] netlink: 'syz.1.112': attribute type 6 has an invalid length.
[   91.482392][ T6268] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   91.485058][ T6268] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.112'.
[   91.970774][ T6276] openvswitch: netlink: Message has 8 unknown bytes.
[   93.379669][ T5879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.508406][ T5879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.592908][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.597942][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.617985][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.622581][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.628337][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.647422][ T5879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.716353][ T3544] wlan1: Trigger new scan to find an IBSS to join
[   93.793552][ T5879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.263340][ T6369] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.136'.
[   94.353738][ T6346] chnl_net:caif_netlink_parms(): no params data found
[   94.473107][ T5879] bridge_slave_1: left allmulticast mode
[   94.489113][ T5879] bridge_slave_1: left promiscuous mode
[   94.492292][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.718924][ T5879] bridge_slave_0: left allmulticast mode
[   94.734068][ T5879] bridge_slave_0: left promiscuous mode
[   94.742868][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.506229][ T6396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.528512][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.141'.
[   95.714441][ T5240] Bluetooth: hci2: command tx timeout
[   95.720232][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.743058][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.752868][ T5879] bond0 (unregistering): Released all slaves
[   95.873356][ T6407] wg2: entered allmulticast mode
[   95.895346][ T6409] wg2: entered promiscuous mode
[   95.902552][ T6407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.145'.
[   96.067901][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'.
[   96.090089][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.093070][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.114821][ T6346] bridge_slave_0: entered allmulticast mode
[   96.119122][ T6346] bridge_slave_0: entered promiscuous mode
[   96.247816][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.250875][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.267019][ T6346] bridge_slave_1: entered allmulticast mode
[   96.268188][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.148'.
[   96.275920][ T6346] bridge_slave_1: entered promiscuous mode
[   96.303097][ T6427] netlink: 'syz.1.149': attribute type 5 has an invalid length.
[   96.341752][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   96.411797][ T6427] : entered promiscuous mode
[   96.431867][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.437868][ T6430] netlink: 'syz.2.148': attribute type 21 has an invalid length.
[   96.440945][ T6430] netlink: 'syz.2.148': attribute type 4 has an invalid length.
[   96.443998][ T6430] netlink: 14453 bytes leftover after parsing attributes in process `syz.2.148'.
[   96.462551][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.567157][ T5879] hsr_slave_0: left promiscuous mode
[   96.571365][ T5879] hsr_slave_1: left promiscuous mode
[   96.574804][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.577819][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.582676][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.586317][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.617146][ T5879] veth1_macvtap: left promiscuous mode
[   96.619744][ T5879] veth0_macvtap: left promiscuous mode
[   96.622154][ T5879] veth1_vlan: left promiscuous mode
[   96.628486][ T5879] veth0_vlan: left promiscuous mode
[   97.064499][ T5879] team0 (unregistering): Port device team_slave_1 removed
[   97.097463][ T5879] team0 (unregistering): Port device team_slave_0 removed
[   97.431591][ T6346] team0: Port device team_slave_0 added
[   97.458363][ T6443] veth0_macvtap: entered allmulticast mode
[   97.468095][ T6346] team0: Port device team_slave_1 added
[   97.546086][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.548512][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.559745][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.573195][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.584520][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.602722][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.633899][ T6451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.691308][ T6346] hsr_slave_0: entered promiscuous mode
[   97.701303][ T6346] hsr_slave_1: entered promiscuous mode
[   97.769871][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'.
[   97.805311][ T5240] Bluetooth: hci2: command tx timeout
[   98.121958][ T6479] netlink: 'syz.1.161': attribute type 21 has an invalid length.
[   98.130440][ T6479] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   98.133499][ T6479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.161'.
[   98.292032][ T6490] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.164'.
[   98.488275][ T6346] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.493325][ T6346] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.501714][ T6346] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.525343][ T6346] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.620333][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.633991][ T6346] 8021q: adding VLAN 0 to HW filter on device team0
[   98.642047][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.644648][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.676107][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.678827][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.690427][ T6516] _Z`Ԁ@S: entered promiscuous mode
[   99.140048][ T6533] netlink: 'syz.2.170': attribute type 21 has an invalid length.
[   99.218572][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.299644][ T6346] veth0_vlan: entered promiscuous mode
[   99.326434][ T6346] veth1_vlan: entered promiscuous mode
[   99.363452][ T6346] veth0_macvtap: entered promiscuous mode
[   99.374035][ T6346] veth1_macvtap: entered promiscuous mode
[   99.386802][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.437548][ T6539] syzkaller0: entered promiscuous mode
[   99.439693][ T6539] syzkaller0: entered allmulticast mode
[   99.457883][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.517461][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.521281][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.884235][ T5240] Bluetooth: hci2: command tx timeout
[  100.436108][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.441689][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.480606][ T6548] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[  100.630349][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.642773][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.767560][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.770847][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.964293][ T5240] Bluetooth: hci2: command tx timeout
[  102.375842][ T6593] __nla_validate_parse: 2 callbacks suppressed
[  102.375856][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[  102.381777][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[  102.391639][ T6593] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  102.395552][ T6597] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  102.404533][ T6598] netlink: 'syz.0.184': attribute type 39 has an invalid length.
[  103.478757][ T6613] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.189'.
[  103.485653][ T6609] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  104.283948][ T6636] pim6reg1: entered allmulticast mode
[  104.291272][ T6636] pim6reg1: left allmulticast mode
[  104.363643][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  104.557987][ T6642] netlink: 'syz.2.199': attribute type 29 has an invalid length.
[  104.709328][ T6650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'.
[  104.713426][ T6650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'.
[  104.717881][ T6650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'.
[  104.740969][ T6652] openvswitch: netlink: EtherType 50a is less than min 600
[  104.837134][ T6654] netlink: 'syz.1.205': attribute type 21 has an invalid length.
[  104.930293][ T6659] netlink: 'syz.0.207': attribute type 3 has an invalid length.
[  104.934350][ T6658] netlink: 'syz.0.207': attribute type 3 has an invalid length.
[  104.936723][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.207'.
[  104.938528][ T6658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.207'.
[  105.103770][ T6668] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.211'.
[  105.109558][ T6668] netlink: 1140 bytes leftover after parsing attributes in process `syz.0.211'.
[  105.208320][ T6670] openvswitch: netlink: EtherType 50a is less than min 600
[  105.279704][ T6676] netlink: 'syz.1.214': attribute type 11 has an invalid length.
[  105.469163][ T6689] openvswitch: netlink: EtherType 50a is less than min 600
[  105.611423][ T6694] erspan0 speed is unknown, defaulting to 1000
[  105.618069][ T6694] erspan0 speed is unknown, defaulting to 1000
[  105.621536][ T6694] erspan0 speed is unknown, defaulting to 1000
[  105.626822][ T6696] netlink: 'syz.1.223': attribute type 21 has an invalid length.
[  105.647193][ T6698] netlink: 'syz.0.224': attribute type 10 has an invalid length.
[  105.789508][ T6698] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.884920][ T6694] infiniband syz2: set active
[  105.887164][ T6694] infiniband syz2: added erspan0
[  105.896888][ T5901] erspan0 speed is unknown, defaulting to 1000
[  105.912560][ T6700] C: renamed from team_slave_0 (while UP)
[  105.924883][ T6694] RDS/IB: syz2: added
[  105.926997][ T6694] smc: adding ib device syz2 with port count 1
[  105.929733][ T6694] smc:    ib device syz2 port 1 has pnetid 
[  105.937588][ T6700] netlink: 'syz.1.223': attribute type 4 has an invalid length.
[  105.941048][ T6700] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  105.949608][ T6694] erspan0 speed is unknown, defaulting to 1000
[  108.091637][ T5901] erspan0 speed is unknown, defaulting to 1000
[  108.110125][ T6694] erspan0 speed is unknown, defaulting to 1000
[  108.161365][ T6721] __nla_validate_parse: 7 callbacks suppressed
[  108.161375][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.229'.
[  108.426564][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'.
[  108.435859][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'.
[  108.485558][ T6694] erspan0 speed is unknown, defaulting to 1000
[  108.778356][ T6752] netlink: 7 bytes leftover after parsing attributes in process `syz.1.238'.
[  108.803291][ T6752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'.
[  109.307155][ T6766] netlink: 428 bytes leftover after parsing attributes in process `syz.1.242'.
[  109.451311][ T6769] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[  109.458353][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[  109.496116][ T6773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.244'.
[  109.499612][ T6775] netlink: 104 bytes leftover after parsing attributes in process `syz.1.244'.
[  110.048050][ T6785] netlink: 'syz.1.248': attribute type 4 has an invalid length.
[  110.051877][ T6785] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.248'.
[  110.679695][ T6800] delete_channel: no stack
[  112.056399][ T6824] nft_compat: unsupported protocol 0
[  112.201156][ T6830] netlink: 'syz.2.260': attribute type 29 has an invalid length.
[  112.253925][ T6836] netlink: 'syz.2.260': attribute type 29 has an invalid length.
[  112.262123][ T6830] netlink: 'syz.2.260': attribute type 29 has an invalid length.
[  112.283509][ T6830] netlink: 'syz.2.260': attribute type 29 has an invalid length.
[  112.392946][ T6838] netlink: 'syz.1.263': attribute type 237 has an invalid length.
[  112.542276][ T6842] xt_l2tp: wrong L2TP version: 0
[  112.776207][ T6856] xt_l2tp: missing protocol rule (udp|l2tpip)
[  112.808749][ T6862] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  113.430872][ T6892] __nla_validate_parse: 14 callbacks suppressed
[  113.430883][ T6892] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.274'.
[  113.608263][ T6895] netlink: 'syz.2.275': attribute type 3 has an invalid length.
[  113.611868][ T6895] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.275'.
[  113.732251][ T6903] netlink: 'syz.1.277': attribute type 4 has an invalid length.
[  113.782802][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'.
[  114.111919][ T6919] bridge_slave_0: entered promiscuous mode
[  114.130665][ T6919] bridge_slave_0: entered allmulticast mode
[  115.482946][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[  115.618428][ T7014] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[  116.259664][ T7034] openvswitch: netlink: EtherType 50a is less than min 600
[  116.347812][ T7039] netlink: 'syz.0.302': attribute type 29 has an invalid length.
[  116.532087][ T7052] netlink: 'syz.2.307': attribute type 10 has an invalid length.
[  116.544363][ T7052] netlink: 55 bytes leftover after parsing attributes in process `syz.2.307'.
[  116.608411][ T7058] netlink: 'syz.1.309': attribute type 3 has an invalid length.
[  116.611047][ T7058] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[  116.613398][ T7058] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.309'.
[  116.678184][ T7062] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[  116.935206][ T7056] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.307'.
[  116.943157][ T7062] veth0_vlan: entered allmulticast mode
[  117.018071][ T7062] veth0_vlan: left promiscuous mode
[  117.031797][ T7062] veth0_vlan: entered promiscuous mode
[  117.065169][ T7062] team0: Device veth0_vlan failed to register rx_handler
[  117.141590][ T7071] netlink: 'syz.2.311': attribute type 33 has an invalid length.
[  117.144061][ T7071] netlink: 152 bytes leftover after parsing attributes in process `syz.2.311'.
[  117.180459][ T7068] erspan0 speed is unknown, defaulting to 1000
[  117.228555][ T7071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.311'.
[  117.234734][ T7071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.311'.
[  117.332460][ T7062] syz.0.304 (7062) used greatest stack depth: 18608 bytes left
[  117.593997][ T7086] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  118.070543][ T7116] raw_sendmsg: syz.0.324 forgot to set AF_INET. Fix it!
[  118.079671][ T7107] netlink: 'syz.2.323': attribute type 28 has an invalid length.
[  118.204889][ T7120] netlink: 'syz.2.325': attribute type 16 has an invalid length.
[  119.648983][ T7130] erspan0 speed is unknown, defaulting to 1000
[  119.876392][ T7147] __nla_validate_parse: 6 callbacks suppressed
[  119.876445][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'.
[  119.922866][ T7148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.240523][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'.
[  120.428600][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[  120.734782][ T7168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.340'.
[  121.513162][ T7185] netlink: 80 bytes leftover after parsing attributes in process `syz.1.344'.
[  122.204368][ T7195] bridge0: port 4(macvlan0) entered blocking state
[  122.210136][ T7195] bridge0: port 4(macvlan0) entered disabled state
[  122.213788][ T7195] macvlan0: entered allmulticast mode
[  122.222524][ T7195] veth1_vlan: entered allmulticast mode
[  122.231758][ T7195] macvlan0: entered promiscuous mode
[  122.241579][ T7195] bridge0: port 4(macvlan0) entered blocking state
[  122.243688][ T7195] bridge0: port 4(macvlan0) entered forwarding state
[  122.283561][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'.
[  122.290583][ T7201] D`: renamed from hsr_slave_1 (while UP)
[  122.328201][ T7201] netlink: 124 bytes leftover after parsing attributes in process `syz.1.349'.
[  122.334039][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'.
[  122.474747][ T7205] netlink: 103 bytes leftover after parsing attributes in process `syz.1.351'.
[  122.655458][ T7223] netlink: 'syz.0.356': attribute type 4 has an invalid length.
[  122.657780][ T7223] netlink: 152 bytes leftover after parsing attributes in process `syz.0.356'.
[  122.671964][ T7223] wlan1: mtu less than device minimum
[  122.803214][ T7231] netlink: 'syz.1.359': attribute type 10 has an invalid length.
[  123.129744][ T7239] netlink: 'syz.1.362': attribute type 21 has an invalid length.
[  123.508327][ T7241] netlink: 'syz.0.363': attribute type 10 has an invalid length.
[  123.511267][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.520815][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.530417][ T7241] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  123.547360][ T7241] netlink: 'syz.0.363': attribute type 21 has an invalid length.
[  123.646153][ T7251] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  123.831310][ T7264] wlan1 speed is unknown, defaulting to 1000
[  123.833751][ T7264] wlan1 speed is unknown, defaulting to 1000
[  123.848402][ T7264] wlan1 speed is unknown, defaulting to 1000
[  123.860471][ T7264] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  123.882883][ T7264] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  123.925461][ T7264] wlan1 speed is unknown, defaulting to 1000
[  123.946322][ T7264] wlan1 speed is unknown, defaulting to 1000
[  123.956094][ T7264] wlan1 speed is unknown, defaulting to 1000
[  124.496812][ T7287] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  124.689728][ T5240] Bluetooth: hci0: ISO packet for unknown connection handle 1854
[  125.911761][ T7306] __nla_validate_parse: 9 callbacks suppressed
[  125.911777][ T7306] netlink: 164 bytes leftover after parsing attributes in process `syz.0.385'.
[  126.171847][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.175192][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.177809][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.182028][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.185572][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.219198][ T7309] erspan0 speed is unknown, defaulting to 1000
[  126.356116][ T7309] wlan1 speed is unknown, defaulting to 1000
[  126.609265][ T7331] veth1_macvtap: entered allmulticast mode
[  126.620527][ T7309] chnl_net:caif_netlink_parms(): no params data found
[  126.688183][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.690456][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.692627][ T7309] bridge_slave_0: entered allmulticast mode
[  126.695798][ T7309] bridge_slave_0: entered promiscuous mode
[  126.699163][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.701438][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.703685][ T7309] bridge_slave_1: entered allmulticast mode
[  126.706620][ T7309] bridge_slave_1: entered promiscuous mode
[  126.735837][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.741281][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.792983][ T7309] team0: Port device team_slave_0 added
[  126.798216][ T7309] team0: Port device team_slave_1 added
[  126.822752][ T7338] netlink: 'syz.2.391': attribute type 29 has an invalid length.
[  126.826116][ T7338] netlink: 'syz.2.391': attribute type 29 has an invalid length.
[  126.829374][ T7339] netlink: 'syz.2.391': attribute type 29 has an invalid length.
[  126.836565][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.839006][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.855367][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.861733][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.865321][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.875009][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.933272][ T7309] hsr_slave_0: entered promiscuous mode
[  126.940419][ T7309] hsr_slave_1: entered promiscuous mode
[  126.943385][ T7309] debugfs: 'hsr0' already exists in 'hsr'
[  126.949716][ T7309] Cannot create hsr debugfs directory
[  127.161859][ T7309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.276601][ T7309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.366292][ T7353] netlink: 160 bytes leftover after parsing attributes in process `syz.0.397'.
[  127.381764][ T7309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.466654][ T7309] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.477165][ T7353] netlink: 'syz.0.397': attribute type 10 has an invalid length.
[  127.503613][ T7353] batman_adv: batadv0: Adding interface: netdevsim0
[  127.506393][ T7353] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.517623][ T7353] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  127.647903][ T7309] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.661180][ T7360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.399'.
[  127.663427][ T7309] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  127.675721][ T7309] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  127.690674][ T7309] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  127.805454][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.820122][ T7309] 8021q: adding VLAN 0 to HW filter on device team0
[  127.828016][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.830409][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.833611][ T7374] netlink: 'syz.0.401': attribute type 2 has an invalid length.
[  127.836913][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[  127.837956][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.842272][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.878045][ T7377] netlink: 'syz.2.402': attribute type 39 has an invalid length.
[  127.880581][ T7309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.102081][ T7385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.148345][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.179989][ T7309] veth0_vlan: entered promiscuous mode
[  128.187060][ T7309] veth1_vlan: entered promiscuous mode
[  128.195646][ T5856] Bluetooth: hci0: command tx timeout
[  128.215181][ T7309] veth0_macvtap: entered promiscuous mode
[  128.221166][ T7309] veth1_macvtap: entered promiscuous mode
[  128.231178][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.241850][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.248655][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.253342][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.259622][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.262342][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.321677][ T7003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.322807][ T7390] netlink: 'syz.0.405': attribute type 2 has an invalid length.
[  128.330409][ T7390] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[  128.330618][ T7003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.335232][ T7390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.405'.
[  128.341261][ T7391] netlink: 156 bytes leftover after parsing attributes in process `syz.0.405'.
[  128.353653][ T7005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.356800][ T7005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.387281][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.406'.
[  128.455265][ T7395] pim6reg1: entered allmulticast mode
[  128.797309][ T7410] netlink: 211432 bytes leftover after parsing attributes in process `syz.1.410'.
[  129.121150][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'.
[  129.172892][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'.
[  129.271730][ T7422] netlink: 'syz.0.413': attribute type 21 has an invalid length.
[  129.577965][ T7441] netlink: 'syz.1.419': attribute type 10 has an invalid length.
[  129.580895][ T7441] team0: entered promiscuous mode
[  129.582865][ T7441] team_slave_0: entered promiscuous mode
[  129.585912][ T7441] team_slave_1: entered promiscuous mode
[  129.590833][ T7441] team0: entered allmulticast mode
[  129.592701][ T7441] team_slave_0: entered allmulticast mode
[  129.594935][ T7441] team_slave_1: entered allmulticast mode
[  129.597699][ T7441] bridge0: port 3(team0) entered blocking state
[  129.600420][ T7441] bridge0: port 3(team0) entered disabled state
[  129.612808][ T7441] bridge0: port 3(team0) entered blocking state
[  129.616351][ T7441] bridge0: port 3(team0) entered forwarding state
[  129.690047][ T7449] netlink: 'syz.0.421': attribute type 27 has an invalid length.
[  129.692675][ T7449] netlink: 'syz.0.421': attribute type 4 has an invalid length.
[  129.928820][ T7468] netlink: 'syz.0.427': attribute type 29 has an invalid length.
[  129.938866][ T7468] netlink: 'syz.0.427': attribute type 29 has an invalid length.
[  129.990609][ T7470] siw: device registration error -23
[  130.190817][ T7487] hsr0: entered promiscuous mode
[  130.192681][ T7487] hsr0: entered allmulticast mode
[  130.196457][ T7487] hsr_slave_0: entered allmulticast mode
[  130.198213][ T7487] hsr_slave_1: entered allmulticast mode
[  130.274571][ T5856] Bluetooth: hci0: command tx timeout
[  132.051506][ T7521] __nla_validate_parse: 10 callbacks suppressed
[  132.051525][ T7521] netlink: 130500 bytes leftover after parsing attributes in process `syz.2.444'.
[  132.102511][ T7524] netlink: 14 bytes leftover after parsing attributes in process `syz.1.445'.
[  132.185443][ T7528] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  132.188224][ T7528] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  132.242521][ T7537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.449'.
[  132.258255][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'.
[  132.261715][ T7539] D`: renamed from hsr_slave_1 (while UP)
[  132.349102][ T7543] IPv6: NLM_F_CREATE should be specified when creating new route
[  132.354311][ T5240] Bluetooth: hci0: command tx timeout
[  132.689975][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.692607][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.769654][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.457'.
[  240.204491][    C1] ------------[ cut here ]------------
[  240.207121][    C1] WARNING: CPU: 1 PID: 7578 at kernel/rcu/tree_stall.h:1050 rcu_check_gp_start_stall+0x2e4/0x470
[  240.210369][    C1] Modules linked in:
[  240.212354][    C1] CPU: 1 UID: 0 PID: 7578 Comm: syz.1.462 Not tainted syzkaller #0 PREEMPT(full) 
[  240.216646][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.220468][    C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470
[  240.222909][    C1] Code: ff ff 48 c7 c7 20 74 b0 99 be 04 00 00 00 e8 f3 df 7c 00 4c 89 f7 b8 01 00 00 00 87 05 15 67 09 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 f4 13 8e 74 47 48 c7 c0 60 e6 a3 8f 48 c1 e8
[  240.229443][    C1] RSP: 0018:ffffc900001e0bb8 EFLAGS: 00010046
[  240.231567][    C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a70cfd
[  240.234655][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e13f480
[  240.237649][    C1] RBP: ffffc900001e0e30 R08: 0000000000000003 R09: 0000000000000004
[  240.240748][    C1] R10: dffffc0000000000 R11: fffffbfff3360e84 R12: 0000000000002904
[  240.243629][    C1] R13: 1ffff11026cc75f2 R14: ffffffff8e13f480 R15: dffffc0000000000
[  240.246079][    C1] FS:  00007f39f67756c0(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  240.249163][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.251597][    C1] CR2: 00007f39f6733d58 CR3: 000000003b33c000 CR4: 00000000000006f0
[  240.254145][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  240.256594][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  240.259052][    C1] Call Trace:
[  240.260103][    C1]  <IRQ>
[  240.261017][    C1]  rcu_core+0x5fa/0x1770
[  240.262354][    C1]  ? __pfx_rcu_core+0x10/0x10
[  240.263898][    C1]  handle_softirqs+0x286/0x870
[  240.265393][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  240.267090][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  240.269133][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  240.270905][    C1]  __irq_exit_rcu+0xca/0x1f0
[  240.272727][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  240.274502][    C1]  irq_exit_rcu+0x9/0x30
[  240.276153][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  240.278227][    C1]  </IRQ>
[  240.279318][    C1]  <TASK>
[  240.280367][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  240.282221][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  240.284324][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  240.290700][    C1] RSP: 0018:ffffc90002c2f420 EFLAGS: 00000293
[  240.292579][    C1] RAX: ffffffff81b4665b RBX: 1ffff11009608341 RCX: ffff888107290000
[  240.295273][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  240.297992][    C1] RBP: ffffc90002c2f5a0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  240.300604][    C1] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffff88804b041a08
[  240.303407][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  240.305844][    C1]  ? smp_call_function_many_cond+0xd4b/0x12d0
[  240.307715][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  240.309296][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  240.311250][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  240.312941][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.314491][    C1]  ? __pfx___text_poke+0x10/0x10
[  240.316064][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  240.317608][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  240.319198][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  240.321014][    C1]  ? __pfx_smp_text_poke_batch_add+0x10/0x10
[  240.322854][    C1]  ? trace_contention_end+0x39/0x120
[  240.324490][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  240.326419][    C1]  ? arch_static_call_transform+0x2d/0xc0
[  240.328182][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.329731][    C1]  __static_call_transform+0x4eb/0x750
[  240.331421][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.333003][    C1]  ? __pfx___static_call_transform+0x10/0x10
[  240.335113][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.337121][    C1]  ? __static_call_validate+0x148/0x240
[  240.338873][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.340619][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.342388][    C1]  arch_static_call_transform+0x98/0xc0
[  240.344131][    C1]  __static_call_update+0xe4/0x5d0
[  240.345753][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.347665][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.349157][    C1]  ? __pfx___static_call_update+0x10/0x10
[  240.351124][    C1]  ? rcu_is_watching+0x15/0xb0
[  240.352993][    C1]  ? trace_kmalloc+0x1f/0xd0
[  240.354568][    C1]  ? tracepoint_add_func+0x515/0xa10
[  240.356154][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.357912][    C1]  tracepoint_add_func+0x91e/0xa10
[  240.359407][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.361181][    C1]  tracepoint_probe_register+0x5d/0x90
[  240.362776][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.364670][    C1]  perf_trace_event_init+0x4e1/0x9d0
[  240.366326][    C1]  perf_trace_init+0x23d/0x2d0
[  240.367763][    C1]  perf_tp_event_init+0x8d/0x120
[  240.369442][    C1]  perf_try_init_event+0x17f/0x870
[  240.371113][    C1]  ? perf_event_alloc+0xf61/0x2be0
[  240.372772][    C1]  perf_event_alloc+0x133e/0x2be0
[  240.374366][    C1]  ? __lock_acquire+0xab9/0xd20
[  240.375914][    C1]  ? perf_event_alloc+0xf61/0x2be0
[  240.377523][    C1]  ? __pfx_perf_event_alloc+0x10/0x10
[  240.379195][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  240.380950][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  240.382688][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  240.384433][    C1]  __se_sys_perf_event_open+0x772/0x1d70
[  240.386182][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.387825][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  240.389712][    C1]  ? rcu_is_watching+0x15/0xb0
[  240.391346][    C1]  ? do_syscall_64+0xbe/0x3b0
[  240.393112][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  240.395083][    C1]  do_syscall_64+0xfa/0x3b0
[  240.396678][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.398671][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.401099][    C1]  ? exc_page_fault+0x9f/0xf0
[  240.402856][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.404622][    C1] RIP: 0033:0x7f39f598ec29
[  240.406158][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.412256][    C1] RSP: 002b:00007f39f6775038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  240.414950][    C1] RAX: ffffffffffffffda RBX: 00007f39f5bd6090 RCX: 00007f39f598ec29
[  240.417544][    C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000040
[  240.419944][    C1] RBP: 00007f39f5a11e41 R08: 0000000000000000 R09: 0000000000000000
[  240.422369][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  240.424901][    C1] R13: 00007f39f5bd6128 R14: 00007f39f5bd6090 R15: 00007ffea0354e28
[  240.427371][    C1]  </TASK>
[  240.428355][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  240.430595][    C1] CPU: 1 UID: 0 PID: 7578 Comm: syz.1.462 Not tainted syzkaller #0 PREEMPT(full) 
[  240.433435][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.436559][    C1] Call Trace:
[  240.437617][    C1]  <IRQ>
[  240.438531][    C1]  dump_stack_lvl+0x99/0x250
[  240.439939][    C1]  ? __asan_memcpy+0x40/0x70
[  240.441377][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.443043][    C1]  ? __pfx__printk+0x10/0x10
[  240.444446][    C1]  vpanic+0x281/0x750
[  240.445680][    C1]  ? __pfx__printk+0x10/0x10
[  240.447154][    C1]  ? __pfx_vpanic+0x10/0x10
[  240.448573][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  240.450239][    C1]  panic+0xb9/0xc0
[  240.451429][    C1]  ? __pfx_panic+0x10/0x10
[  240.452846][    C1]  __warn+0x31b/0x4b0
[  240.454091][    C1]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  240.455879][    C1]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  240.457672][    C1]  report_bug+0x2be/0x4f0
[  240.459088][    C1]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  240.460862][    C1]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  240.462683][    C1]  ? rcu_check_gp_start_stall+0x2e6/0x470
[  240.464593][    C1]  handle_bug+0x84/0x160
[  240.466344][    C1]  exc_invalid_op+0x1a/0x50
[  240.468091][    C1]  asm_exc_invalid_op+0x1a/0x20
[  240.469979][    C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470
[  240.472420][    C1] Code: ff ff 48 c7 c7 20 74 b0 99 be 04 00 00 00 e8 f3 df 7c 00 4c 89 f7 b8 01 00 00 00 87 05 15 67 09 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 f4 13 8e 74 47 48 c7 c0 60 e6 a3 8f 48 c1 e8
[  240.479717][    C1] RSP: 0018:ffffc900001e0bb8 EFLAGS: 00010046
[  240.481927][    C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a70cfd
[  240.484826][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e13f480
[  240.487844][    C1] RBP: ffffc900001e0e30 R08: 0000000000000003 R09: 0000000000000004
[  240.490879][    C1] R10: dffffc0000000000 R11: fffffbfff3360e84 R12: 0000000000002904
[  240.493832][    C1] R13: 1ffff11026cc75f2 R14: ffffffff8e13f480 R15: dffffc0000000000
[  240.496585][    C1]  ? rcu_check_gp_start_stall+0x2cd/0x470
[  240.498359][    C1]  ? rcu_check_gp_start_stall+0x2cd/0x470
[  240.500145][    C1]  rcu_core+0x5fa/0x1770
[  240.501476][    C1]  ? __pfx_rcu_core+0x10/0x10
[  240.503041][    C1]  handle_softirqs+0x286/0x870
[  240.504509][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  240.506013][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  240.507643][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  240.509325][    C1]  __irq_exit_rcu+0xca/0x1f0
[  240.510939][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  240.512622][    C1]  irq_exit_rcu+0x9/0x30
[  240.514032][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  240.515833][    C1]  </IRQ>
[  240.516873][    C1]  <TASK>
[  240.517829][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  240.519773][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  240.521817][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  240.528179][    C1] RSP: 0018:ffffc90002c2f420 EFLAGS: 00000293
[  240.530240][    C1] RAX: ffffffff81b4665b RBX: 1ffff11009608341 RCX: ffff888107290000
[  240.533161][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  240.535659][    C1] RBP: ffffc90002c2f5a0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  240.538623][    C1] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffff88804b041a08
[  240.541609][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  240.544324][    C1]  ? smp_call_function_many_cond+0xd4b/0x12d0
[  240.546237][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  240.547816][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  240.549760][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  240.551342][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.552946][    C1]  ? __pfx___text_poke+0x10/0x10
[  240.554485][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  240.556058][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  240.557663][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  240.559538][    C1]  ? __pfx_smp_text_poke_batch_add+0x10/0x10
[  240.561251][    C1]  ? trace_contention_end+0x39/0x120
[  240.562884][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  240.564803][    C1]  ? arch_static_call_transform+0x2d/0xc0
[  240.566592][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.568172][    C1]  __static_call_transform+0x4eb/0x750
[  240.569855][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.571390][    C1]  ? __pfx___static_call_transform+0x10/0x10
[  240.573238][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.575088][    C1]  ? __static_call_validate+0x148/0x240
[  240.577090][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.579181][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.580984][    C1]  arch_static_call_transform+0x98/0xc0
[  240.582864][    C1]  __static_call_update+0xe4/0x5d0
[  240.584514][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.586563][    C1]  ? __SCT__might_resched+0x8/0x8
[  240.588384][    C1]  ? __pfx___static_call_update+0x10/0x10
[  240.590083][    C1]  ? rcu_is_watching+0x15/0xb0
[  240.591435][    C1]  ? trace_kmalloc+0x1f/0xd0
[  240.592736][    C1]  ? tracepoint_add_func+0x515/0xa10
[  240.594565][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.596554][    C1]  tracepoint_add_func+0x91e/0xa10
[  240.598459][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.600795][    C1]  tracepoint_probe_register+0x5d/0x90
[  240.602802][    C1]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  240.604765][    C1]  perf_trace_event_init+0x4e1/0x9d0
[  240.606633][    C1]  perf_trace_init+0x23d/0x2d0
[  240.608426][    C1]  perf_tp_event_init+0x8d/0x120
[  240.610047][    C1]  perf_try_init_event+0x17f/0x870
[  240.611814][    C1]  ? perf_event_alloc+0xf61/0x2be0
[  240.613586][    C1]  perf_event_alloc+0x133e/0x2be0
[  240.615476][    C1]  ? __lock_acquire+0xab9/0xd20
[  240.617368][    C1]  ? perf_event_alloc+0xf61/0x2be0
[  240.619046][    C1]  ? __pfx_perf_event_alloc+0x10/0x10
[  240.620744][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  240.622481][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  240.624644][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  240.626873][    C1]  __se_sys_perf_event_open+0x772/0x1d70
[  240.629034][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.631176][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  240.633600][    C1]  ? rcu_is_watching+0x15/0xb0
[  240.635539][    C1]  ? do_syscall_64+0xbe/0x3b0
[  240.637481][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  240.639702][    C1]  do_syscall_64+0xfa/0x3b0
[  240.641491][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.643243][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.645180][    C1]  ? exc_page_fault+0x9f/0xf0
[  240.646625][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.648444][    C1] RIP: 0033:0x7f39f598ec29
[  240.649832][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.655918][    C1] RSP: 002b:00007f39f6775038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  240.658451][    C1] RAX: ffffffffffffffda RBX: 00007f39f5bd6090 RCX: 00007f39f598ec29
[  240.660869][    C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000040
[  240.663360][    C1] RBP: 00007f39f5a11e41 R08: 0000000000000000 R09: 0000000000000000
[  240.665807][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  240.668192][    C1] R13: 00007f39f5bd6128 R14: 00007f39f5bd6090 R15: 00007ffea0354e28
[  240.670593][    C1]  </TASK>
[  241.811411][    C1] Shutting down cpus with NMI
[  241.814023][    C1] Kernel Offset: disabled
[  241.815768][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:03:49  Registers:
info registers vcpu 0

CPU#0
RAX=fc64ff18a7dba100 RBX=0000000000000802 RCX=ffff8881078f3980 RDX=0000000000010000
RSI=0000000000000802 RDI=ffff88804b027a80 RBP=ffffc90000007918 RSP=ffffc90000007880
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f00
R12=ffff888029404658 R13=ffff88804b027b00 R14=ffff88804b027a80 R15=0000000000000802
RIP=ffffffff8b7dae3a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f39f67966c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000010000 CR3=000000003b33c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f39f5ba7478 00007f39f5ba74c0
XMM06=00007f39f5ba74b8 00007f39f5ba74b0 XMM07=00007f39f5ba74a8 00007f39f5ba74a0
XMM08=0000000000000000 00007f39f5a12f0f XMM09=0000000000000000 00007f39f5a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0350
R8 =ffff8881078e0237 R9 =1ffff11020f1c046 R10=dffffc0000000000 R11=ffffffff85504a80
R12=dffffc0000000000 R13=ffffffff99b048ee R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504afc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f39f67756c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f39f6733d58 CR3=000000003b33c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f39f5ba7498 00007f39f5ba7470 XMM03=00007f39f5ba74a8 00007f39f5ba74a0
XMM04=00007f39f670d100 00007f39f5ba7460 XMM05=00007f39f5ba7478 00007f39f5ba74c0
XMM06=00007f39f5ba74b8 00007f39f5ba74b0 XMM07=00007f39f5ba74a8 00007f39f5ba74a0
XMM08=0000000000000000 00007f39f5a12f0f XMM09=0000000000000000 00007f39f5a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
