last executing test programs:

12.332482176s ago: executing program 2 (id=378):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000020000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

12.129257694s ago: executing program 2 (id=379):
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x5, 0x0, 0x8, 0x142d0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004804)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
socketpair(0x29, 0x3, 0x400800, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000140)='a\xa9\x93\xe8N\x1d\x1e\xcch\xe9_\xd4X:\x81\xf77\xe2I\xb2\x8e\x05!\xd5F\x12\xa1\x06\xf8\fI\x92\xca')
sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1cb8f54d574afb19}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000640410002dbd7000fcdbdf2526ee3620f29f0cdd0b8b78a7681bd29b8be142ab6fedcfc6a03a0b72025978cce88f713cb16994475a8df21d456db6ec4d494f7940819814ac38b48a4b27ca7683262efef544a3d94dc01c2aba98e10f20565be87cddec0ccec8c60f"], 0x6c}, 0x1, 0x0, 0x0, 0x4044090}, 0x2000c400)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)

9.184260241s ago: executing program 2 (id=386):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000d2"], 0x48)
r1 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1, 0x9, 0x2, 0x6, 0x0, 0x1, 0x20920, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x6}, 0x5008, 0x7, 0xc5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xd, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x100, 0xfffffff8, 0x44, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='%}(!\x00'}, 0x30)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x22, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000c00000000000000181100003577c5a109896c9d67ac58d4e3ad54840518cfd7066442e71113e6179b71704d44ceed19c0a1cb4b862d9314370b71e31989d82e132e3b1e2d68c17b43704e6942ac3d53a01d005a6f8ccb5b389c1e50b1abb083d49ce8ddf66f86724cc7c5025f74764c12c074def29162f88cb7da49a50d008fd7333e92db83d087d853c26c37fe607427ac37491540de7134926c563e1f5bda9c15eefb3593b4b4162e4a8da500", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b509000040020000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.10276672s ago: executing program 0 (id=387):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x140e, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x0, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0)
syz_clone(0x200000, &(0x7f0000000140), 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188", 0x8}], 0x1}, 0x4000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x1010, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x4}, 0x4204, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0xfffffffffffffff7, 0x945, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

5.40550069s ago: executing program 0 (id=390):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000400000071107f000000000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000400000071107f000000000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1)

4.982384429s ago: executing program 0 (id=391):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x100440d0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

4.928766704s ago: executing program 0 (id=392):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000002060102000034e40000000003000000050001000700000005000400000000000900020073797a3200ba00000005000500021000000c000780080006000004000014000300686173683a69702c706f72742d697001fa33bd6de1c45efac1"], 0x58}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket(0x27, 0x4, 0x8001)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000140)}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6)
close(r5)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000540), 0x0, 0x0, 0x1, 0x8, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

4.924649438s ago: executing program 1 (id=393):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
fstat(r0, &(0x7f0000000040))
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

4.813005368s ago: executing program 0 (id=394):
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2d, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x3, 0x8, 0x1}, {0x0, 0x4, 0x10004, 0x4}], 0x10, 0x1000000}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20044841)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="1b2968150001", @ANYRES16=r4, @ANYBLOB="33f38ed0"], 0xffdd)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r5, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4)
openat$cgroup_ro(r1, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20000000000000cb, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random})
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840)
socketpair(0x24, 0xa, 0x3ff, &(0x7f0000000600))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x10}, {}]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))

4.812315988s ago: executing program 1 (id=395):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x2, 0x4, 0x4, 0x1, r0}, 0x50)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@migrate={0xd4, 0x21, 0x100, 0x70bd2c, 0x25dfdbff, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 0x4e24, 0x7, 0x2, 0xa0, 0x60, 0x33, r3, r4}, 0x6e6bbf}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x0, 0x2, 0xa, 0x81, 0x10001, 0x9}, {{@in=@private=0xa010101, 0x4d5, 0x33}, 0xa, @in=@loopback, 0x0, 0x4, 0x1, 0x80, 0x0, 0xb, 0x81}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2040000}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x3, 0x0, 0x7, 0xb, 0x8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x2, 0x4, 0x4, 0x1, r0}, 0x50) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}}, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)}, 0x10) (async)
fstat(r0, &(0x7f00000003c0)) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@migrate={0xd4, 0x21, 0x100, 0x70bd2c, 0x25dfdbff, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 0x4e24, 0x7, 0x2, 0xa0, 0x60, 0x33, r3, r4}, 0x6e6bbf}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x0, 0x2, 0xa, 0x81, 0x10001, 0x9}, {{@in=@private=0xa010101, 0x4d5, 0x33}, 0xa, @in=@loopback, 0x0, 0x4, 0x1, 0x80, 0x0, 0xb, 0x81}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2040000}, 0x800) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x3, 0x0, 0x7, 0xb, 0x8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa5}, 0x94) (async)

4.685972112s ago: executing program 1 (id=396):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006108000600000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000000000060196912bf8bed129121bb22faf6c7f85805ed09fdb7048b325afa3086e6fea310568bd551407363fc977f29f449cf87d8ac8cdfcaf0c0e615e4c270629c41856a2e584c097c0878098c306a4310cca97abea2d25edf6d0bf96ffe90149cd0f20180b918efe1c88f1ed97cd9005d9f12b44c9ad0"], &(0x7f0000000100)='GPL\x00', 0x8, 0x103, &(0x7f0000000140)=""/259}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x24040010)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x8, 0x90, 0x5ab1a, r8, 0x9, '\x00', 0x0, r8, 0x4, 0x5, 0x1, 0x7, @value=r8, @void, @value=r8}, 0x50)
ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0xffffffffffffffff)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'team_slave_1\x00', 0x400})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r9, 0x5}, 0x10)
syz_clone(0x202000, &(0x7f0000000440)="a36c50ff4d17b0dde1258640f7c61f3155269a6ba597669ed942accf98bc4902b0f270bdf99a42fcc97a0f254d9d8643e19332f9a03f418b586aecfe94db794664d8cb5a3d66453329c538a2fe98f07cf05edea8e1b947fe1738e48531a3c2dba5b4c390c83b2d775c98bbdf10917d5336eb7d3fa128b59f2d6c65d387f9f8432022726a79dc126c7f047b3f26fa9f33529da00fab5ddd2040cbaaee102f21480bef52", 0xa3, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000780)="dd8244bfe0a0b06fb65b8f8670d6cb348aefc350573d2b2b9c38aa356349139f6fbdd6c733f647f0a47e03de9628c2aebfad25a4d77daf150e14bba40c2a8d484d6f3d754113b8033a98e9a4820889d1c0b67e403cc6aae69412fa586407e9c7a1a05fd5e956f2eb803a366bbbeebd47a07a8015b87144f2ad8c033c9c2e52680847dc5d8b795fddadd664230f2afeb57f74b18d40c1c64b7ab154741e104a7d367a3555452ae274")
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x100000c4}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

4.303119562s ago: executing program 0 (id=397):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@raw=[@generic={0x5, 0x8, 0x5, 0xbe0a, 0x7}, @ldst={0x3, 0x2, 0x3, 0x8, 0x2, 0x6, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x46, 0x0, 0x1, 0x1000}, 0x28)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd)
socket$kcm(0xa, 0x1, 0x106)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000240)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@map_fd={0x18, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfffffffffffffe5a, 0x0, 0x0, 0x20}, 0x94)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$kcm(0xa, 0x922000000003, 0x11)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000005c0))
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000004c0)=r4, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000940)=""/4096, 0x1000}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x1b8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x16c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x498}]}]}, @NFT_MSG_NEWSET={0x198, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3ff}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xe2, 0xd, 0x1, 0x0, "5615befff9c606c6351e8a44c2a5181d99efb528dad7d227c3863ea23ee0d2b0d6e92d374946572606aa1b62d9446ac48822f0f44ef51c70f7d9dfbf8f7917f672db9dbfdef4f88560108087a528aed81fd9785cb97e4bd5ac43acbbe2b923149cee573defc10ae1b018551e4a04570c33d0dff085bc56e5e231adcf42f331589bba4ba3899d65ef85533ce64e6d7f3ba228b1622c7568d6054eb945de5c05006382c96fc8461bd32488a1c37d12e2d041f4ad513153a6ac1fabc3bbd39793fe28968ca8ddaff956fe1414d58add082fe82609ea53d93541ed8454920e95"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x60, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff41d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13cc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb6d}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x430}, 0x1, 0x0, 0x0, 0x40}, 0x4008881)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)='%pS    \x00'}, 0x20)

3.910901073s ago: executing program 2 (id=398):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000009500000000000000ea641e0c8c1d06440e961d0d9661e57f77b9efb71f3e46f1ebd05d3052f4e7285520ee1042552c6c4728dc85186a750782bde6ccc40a34db06a82ad488d0dadf1e8f93942ad03fbf35e4a4c39c11f132fb5ab4dedfbbd6b0f3e212812a4a3fdb05bd13b6bafb79f06693c635c15f61a0f2155dc122b1b1e605fab512439b76ec9a80d30de0afe7512398692792dc98c408e36dea04187c0f75ac50f55205194845be3d17436a37356dbc7daf816fe6317c07974d3455acaa4f9ab0c831"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

3.851977325s ago: executing program 2 (id=399):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000010000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) (async)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async)
close(r4) (async)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

3.716725801s ago: executing program 1 (id=400):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000d13d54572581673f000d0000234404745000000000"], 0x18}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256300bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="a572e726c37146cbc11bc35942ca54ce0fcbdbda3b50fde524b3", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r1], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x240080c0)
r7 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112640000000000950000000000000028"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r9 = socket$kcm(0x28, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x5411, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f01006900810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4e}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e419157", 0x8a}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

3.600992592s ago: executing program 2 (id=401):
socket$kcm(0x10, 0x1, 0x0) (async)
r0 = socket$kcm(0x10, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340)}, 0x0, 0x80000002, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x169}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=<r5=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc5, 0x0, 0x0, 0x9d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x1, 0xffffffff, 0x3}, {0xfffffffe, 0x3, 0x8}, {0x2, 0x3, 0x10004, 0x8}]}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc5, 0x0, 0x0, 0x9d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x1, 0xffffffff, 0x3}, {0xfffffffe, 0x3, 0x8}, {0x2, 0x3, 0x10004, 0x8}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000000000000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000000000000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x20, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b}, 0x28)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000001b80)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYRESHEX=r5, @ANYRES32=r6], 0xc3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@remote, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x7b}, @in6=@private0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, {0x0, 0x200000, 0x3, 0x9}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0x400}, 0x0) (async)
sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@remote, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x7b}, @in6=@private0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, {0x0, 0x200000, 0x3, 0x9}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0x400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.460494558s ago: executing program 1 (id=402):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
socket$kcm(0x10, 0x2, 0x4)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x20003fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x1, 0x7ff, 0x8000000, 0x5, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x35, 0x0, 0x6}, @ra={0x94, 0x4, 0x1}]}}}], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

0s ago: executing program 1 (id=403):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000d88fe47536b547f2a8000003000000180000000300000000000000040000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x1, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100), 0x120)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080bc49b8e4344caef51a200034000000007080004400000000f08000140000000001c000580090001006d657461000000000c000280080073797a30000000000900020073797a32000000001400000011df010000000000000000000300000aa14656eae6218120c90312b08c7d49d2f0b606ef550e1d33e29ef944775fadac8fa5d9712fd84dbf1dc580564defc0db0d7b4e171199bfff4bab8c866f9556dff77d048f16250177ccee7335204ff25dd5c6934c23832ceefd6a998c4b8cb235394cbea803b4"], 0xa8}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, 0x0, &(0x7f0000000740)=r6}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r9 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x9, 0xc, 0x4, 0x49, 0x0, 0x2, 0x100000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000200)}, 0x8200, 0x1ff, 0x6, 0x6, 0x8, 0xb, 0x5, 0x0, 0x2, 0x0, 0xd2}, 0xffffffffffffffff, 0xa, r2, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff)
socket$kcm(0xa, 0x2, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x1d, 0x0, 0x1, {0x2, 0x111, 0x3}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8000' (ED25519) to the list of known hosts.
syzkaller login: [   57.094616][ T5818] cgroup: Unknown subsys name 'net'
[   57.205617][ T5818] cgroup: Unknown subsys name 'cpuset'
[   57.210982][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.193742][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.541456][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.545531][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.559339][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.562975][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.567642][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.572086][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.579044][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.584243][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.599081][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.607420][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.612712][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.617216][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.620854][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.624316][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.628380][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.905440][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   66.016233][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.020077][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.023711][ T5853] bridge_slave_0: entered allmulticast mode
[   66.028300][ T5853] bridge_slave_0: entered promiscuous mode
[   66.075403][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.079726][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.082716][ T5853] bridge_slave_1: entered allmulticast mode
[   66.086742][ T5853] bridge_slave_1: entered promiscuous mode
[   66.179628][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.191135][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   66.200237][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.266994][ T5853] team0: Port device team_slave_0 added
[   66.275969][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   66.285031][ T5853] team0: Port device team_slave_1 added
[   66.323012][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.325896][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.335255][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.358763][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.361504][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.370894][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.409284][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.412190][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.414527][ T5845] bridge_slave_0: entered allmulticast mode
[   66.418305][ T5845] bridge_slave_0: entered promiscuous mode
[   66.422459][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.424847][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.427349][ T5845] bridge_slave_1: entered allmulticast mode
[   66.431591][ T5845] bridge_slave_1: entered promiscuous mode
[   66.517448][ T5853] hsr_slave_0: entered promiscuous mode
[   66.522812][ T5853] hsr_slave_1: entered promiscuous mode
[   66.529572][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.533441][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.536412][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.542083][ T5844] bridge_slave_0: entered allmulticast mode
[   66.546131][ T5844] bridge_slave_0: entered promiscuous mode
[   66.554448][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.558735][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.561759][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.564671][ T5844] bridge_slave_1: entered allmulticast mode
[   66.569531][ T5844] bridge_slave_1: entered promiscuous mode
[   66.645676][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.672770][ T5845] team0: Port device team_slave_0 added
[   66.684536][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.691341][ T5845] team0: Port device team_slave_1 added
[   66.764352][ T5844] team0: Port device team_slave_0 added
[   66.766979][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.771301][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.780091][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.799568][ T5844] team0: Port device team_slave_1 added
[   66.802841][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.805363][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.817067][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.870962][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.873936][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.884728][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.892777][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.895688][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.905809][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.000512][ T5845] hsr_slave_0: entered promiscuous mode
[   67.003912][ T5845] hsr_slave_1: entered promiscuous mode
[   67.007016][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   67.010362][ T5845] Cannot create hsr debugfs directory
[   67.050467][ T5844] hsr_slave_0: entered promiscuous mode
[   67.053576][ T5844] hsr_slave_1: entered promiscuous mode
[   67.056587][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   67.059956][ T5844] Cannot create hsr debugfs directory
[   67.212829][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.261039][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.269909][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.304620][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.436031][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.461188][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.470825][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.478544][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.571041][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.582675][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.595253][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.608479][ T5856] Bluetooth: hci2: command tx timeout
[   67.611698][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.660795][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.688977][ T5855] Bluetooth: hci0: command tx timeout
[   67.691644][ T5856] Bluetooth: hci1: command tx timeout
[   67.715060][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   67.756357][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.760089][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.785407][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.788795][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.820282][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.869819][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   67.890155][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.906788][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.909886][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.934464][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.937431][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.981870][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   68.001375][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.004692][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.034735][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.037926][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.085908][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.177251][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.245310][ T5853] veth0_vlan: entered promiscuous mode
[   68.259237][ T5853] veth1_vlan: entered promiscuous mode
[   68.320862][ T5853] veth0_macvtap: entered promiscuous mode
[   68.353862][ T5853] veth1_macvtap: entered promiscuous mode
[   68.366267][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.377307][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.389755][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.408465][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.431591][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.435515][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.447313][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.453709][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.563789][ T5844] veth0_vlan: entered promiscuous mode
[   68.566506][ T5845] veth0_vlan: entered promiscuous mode
[   68.575668][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.583707][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.605175][ T5844] veth1_vlan: entered promiscuous mode
[   68.615025][ T5845] veth1_vlan: entered promiscuous mode
[   68.621896][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.624748][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.662401][ T5844] veth0_macvtap: entered promiscuous mode
[   68.674601][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.678447][ T5845] veth0_macvtap: entered promiscuous mode
[   68.690643][ T5844] veth1_macvtap: entered promiscuous mode
[   68.699824][ T5845] veth1_macvtap: entered promiscuous mode
[   68.721091][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.734302][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.741484][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.750608][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.763297][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.771009][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.776687][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.781605][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.793692][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.799356][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.802885][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.822401][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.881264][ T5915] syzkaller0: entered promiscuous mode
[   68.883161][ T5915] syzkaller0: entered allmulticast mode
[   68.999376][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.002492][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.028925][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.032056][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.058636][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.067866][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.093029][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.095701][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.212810][ T5923] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.220175][ T5924] netlink: 'syz.2.4': attribute type 21 has an invalid length.
[   69.223508][ T5924] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4'.
[   69.225680][ T5919] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.233007][ T5923] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.243288][ T5919] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.249757][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.403552][ T5932] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.407155][ T5932] netlink: 'syz.2.6': attribute type 10 has an invalid length.
[   69.411229][ T5932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.422860][ T5932] team0: entered promiscuous mode
[   69.424643][ T5932] team_slave_0: entered promiscuous mode
[   69.426698][ T5932] team_slave_1: entered promiscuous mode
[   69.429153][ T5932] team0: entered allmulticast mode
[   69.431223][ T5932] team_slave_0: entered allmulticast mode
[   69.433687][ T5932] team_slave_1: entered allmulticast mode
[   69.436803][ T5932] bridge0: port 3(team0) entered blocking state
[   69.440755][ T5932] bridge0: port 3(team0) entered disabled state
[   69.445130][ T5932] bridge0: port 3(team0) entered blocking state
[   69.447860][ T5932] bridge0: port 3(team0) entered forwarding state
[   69.507610][    C0] hrtimer: interrupt took 36406 ns
[   69.691754][ T5856] Bluetooth: hci2: command tx timeout
[   69.768128][ T5856] Bluetooth: hci1: command tx timeout
[   69.768689][ T5855] Bluetooth: hci0: command tx timeout
[   70.856732][ T5964] netlink: 332 bytes leftover after parsing attributes in process `syz.2.14'.
[   71.194720][ T5969] netlink: 'syz.1.17': attribute type 10 has an invalid length.
[   71.245633][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.248608][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.371631][ T5972] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   71.848579][ T5855] Bluetooth: hci1: command tx timeout
[   71.968135][ T5856] Bluetooth: hci0: command tx timeout
[   71.971100][ T5855] Bluetooth: hci2: command tx timeout
[   72.196940][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.204226][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.211978][ T5972] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   72.290386][ T5976] netlink: 80 bytes leftover after parsing attributes in process `syz.2.20'.
[   73.808217][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   73.928851][ T5855] Bluetooth: hci1: command tx timeout
[   74.008912][ T5856] Bluetooth: hci0: command tx timeout
[   74.012054][ T5855] Bluetooth: hci2: command tx timeout
[   74.037332][ T5996] syzkaller0: entered promiscuous mode
[   74.057876][ T5996] syzkaller0: entered allmulticast mode
[   74.102054][ T5999] netlink: 'syz.1.25': attribute type 2 has an invalid length.
[   74.113457][ T5999] netlink: 'syz.1.25': attribute type 2 has an invalid length.
[   74.117327][ T5999] netlink: 'syz.1.25': attribute type 2 has an invalid length.
[   74.125073][ T5999] netlink: 'syz.1.25': attribute type 2 has an invalid length.
[   74.333942][ T6008] __nla_validate_parse: 4 callbacks suppressed
[   74.333961][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'.
[   74.342750][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'.
[   74.814331][ T6017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31'.
[   74.892538][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   74.931278][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'.
[   74.936692][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   76.671655][ T6039] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   76.743225][ T6042] Zero length message leads to an empty skb
[   76.790334][ T6045] warning: `syz.0.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.827184][ T6046] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   76.829657][ T6046] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   78.399767][ T6085] netlink: 'syz.2.50': attribute type 32 has an invalid length.
[   78.641742][ T6091] netlink: 'syz.1.53': attribute type 2 has an invalid length.
[   78.655971][ T6091] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   78.669424][ T6091] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.53'.
[   78.912562][ T6093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.745257][ T5855] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[   79.799066][ T6115] netlink: 'syz.2.59': attribute type 10 has an invalid length.
[   79.951420][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   79.974013][ T6126] @0: renamed from bond_slave_1 (while UP)
[   80.699520][ T6136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'.
[   80.703425][ T6136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'.
[   81.623443][ T6148] netlink: 'syz.2.68': attribute type 10 has an invalid length.
[   81.628591][ T6148] bridge0: port 3(team0) entered disabled state
[   81.632787][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.637020][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.771754][ T6148] bridge0: port 3(team0) entered blocking state
[   81.775397][ T6148] bridge0: port 3(team0) entered forwarding state
[   81.778699][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.782152][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.785621][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.788937][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.854697][ T6148] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   82.382071][ T6165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'.
[   82.386152][ T6166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'.
[   82.650211][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'.
[   82.653272][ T6181] netlink: 130016 bytes leftover after parsing attributes in process `syz.2.80'.
[   82.659582][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'.
[   83.167953][ T6221] netlink: 72 bytes leftover after parsing attributes in process `syz.2.90'.
[   83.211194][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'.
[   83.361124][ T6235] netlink: 'syz.1.94': attribute type 21 has an invalid length.
[   83.365168][ T6235] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   84.294241][ T6246] netlink: 'syz.0.98': attribute type 1 has an invalid length.
[   85.443197][ T6282] netlink: 'syz.1.108': attribute type 10 has an invalid length.
[   85.446372][ T6282] veth1_vlan: entered allmulticast mode
[   85.456756][ T6282] team0: Device veth1_vlan failed to register rx_handler
[   85.769139][ T6287] __nla_validate_parse: 4 callbacks suppressed
[   85.769154][ T6287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.111'.
[   85.877310][ T6292] pim6reg1: entered allmulticast mode
[   85.986743][ T6303] netlink: 'syz.1.117': attribute type 10 has an invalid length.
[   85.990694][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.994043][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.006079][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.009559][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.012934][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.015956][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.023499][ T6303] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   86.109665][ T5855] Bluetooth: hci1: unexpected event 0x31 length: 82 > 6
[   86.235914][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'.
[   86.244030][ T6314] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   86.555120][ T6319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.122'.
[   86.580676][    T9] cfg80211: failed to load regulatory.db
[   86.876170][ T6325] netlink: 'syz.0.123': attribute type 64 has an invalid length.
[   87.135869][ T6332] openvswitch: netlink: IP tunnel dst address not specified
[   87.252731][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[   87.255872][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[   87.259910][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[   87.357809][ T6336] sit0: entered promiscuous mode
[   87.494709][ T6346] netlink: 104 bytes leftover after parsing attributes in process `syz.2.131'.
[   87.691993][ T6358] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   88.130850][ T6387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.144'.
[   88.779430][ T6383] delete_channel: no stack
[   89.092921][ T6405] netlink: 256 bytes leftover after parsing attributes in process `syz.0.150'.
[   89.114774][ T6409] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   89.252707][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.155'.
[   89.544338][ T6448] netlink: 'syz.1.161': attribute type 2 has an invalid length.
[   89.549384][ T6448] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   89.552202][ T6448] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   89.961563][ T6461] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   90.205920][ T6467] netlink: 'syz.0.167': attribute type 4 has an invalid length.
[   90.211412][ T6467] netlink: 'syz.0.167': attribute type 16 has an invalid length.
[   90.571897][ T6500] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[   91.245851][ T6514] netlink: 'syz.2.179': attribute type 21 has an invalid length.
[   91.295483][ T6511] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   91.305027][ T6515] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[   92.434650][ T6546] __nla_validate_parse: 4 callbacks suppressed
[   92.434715][ T6546] netlink: 830 bytes leftover after parsing attributes in process `syz.0.188'.
[   92.445802][ T6536] netlink: 'syz.1.185': attribute type 1 has an invalid length.
[   93.301525][ T6571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.194'.
[   94.391210][ T6609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.209'.
[   95.209037][ T6637] validate_nla: 3 callbacks suppressed
[   95.209071][ T6637] netlink: 'syz.2.217': attribute type 3 has an invalid length.
[   95.214398][ T6637] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.217'.
[   95.300727][ T6648] netlink: 'syz.1.220': attribute type 10 has an invalid length.
[   95.360423][ T6639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.218'.
[   95.502166][ T6654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.221'.
[   95.560334][ T6654] netlink: 220 bytes leftover after parsing attributes in process `syz.1.221'.
[   96.359428][ T6727] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[   96.362271][ T6727] netlink: 15534 bytes leftover after parsing attributes in process `syz.2.237'.
[   96.381784][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   96.384953][ T6728] openvswitch: netlink: Flow actions attr not present in new flow.
[   97.505578][ T6751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.245'.
[   97.855676][ T6775] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.251'.
[   98.009368][ T6792] netlink: 'syz.0.257': attribute type 10 has an invalid length.
[   98.012981][ T6792] netlink: 2 bytes leftover after parsing attributes in process `syz.0.257'.
[   98.016173][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.019367][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.030235][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.032593][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.035039][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.038143][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.046046][ T6792] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   98.151394][ T6797] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.255'.
[   98.257476][ T6798] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   98.262191][ T6798] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   98.625954][ T6821] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.264'.
[   99.009271][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   99.029191][ T6827] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.267'.
[   99.930616][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'.
[   99.957808][ T6856] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.277'.
[  100.213518][ T6858] netlink: 68 bytes leftover after parsing attributes in process `syz.1.279'.
[  100.226992][ T6858] openvswitch: netlink: Missing key (keys=40, expected=100)
[  100.916623][ T6871] syz.0.282 (6871) used greatest stack depth: 19688 bytes left
[  101.067562][ T6883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.076238][ T6883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.084196][ T6883] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  101.089857][ T6883] bridge0: port 3(team0) entered disabled state
[  101.092847][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.095865][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.103268][ T6883] bond0 (unregistering): Released all slaves
[  101.183939][ T6890] syzkaller0: entered promiscuous mode
[  101.186388][ T6890] syzkaller0: entered allmulticast mode
[  101.939644][ T6909] =======================================================
[  101.939644][ T6909] WARNING: The mand mount option has been deprecated and
[  101.939644][ T6909]          and is ignored by this kernel. Remove the mand
[  101.939644][ T6909]          option from the mount to silence this warning.
[  101.939644][ T6909] =======================================================
[  102.563937][ T6917] __nla_validate_parse: 4 callbacks suppressed
[  102.563952][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[  102.653417][ T6926] netlink: 'syz.1.302': attribute type 10 has an invalid length.
[  102.715116][ T6926] bridge0: port 3(netdevsim0) entered blocking state
[  102.721185][ T6926] bridge0: port 3(netdevsim0) entered disabled state
[  102.725716][ T6926] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  102.811690][ T6926] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  103.526694][ T6926] syz.1.302 (6926) used greatest stack depth: 18296 bytes left
[  104.316270][ T6946] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  104.678480][ T6971] netlink: 'syz.1.314': attribute type 10 has an invalid length.
[  104.715062][ T6974] openvswitch: netlink: IP tunnel dst address not specified
[  104.721265][ T6974] netlink: 'syz.1.315': attribute type 2 has an invalid length.
[  104.724051][ T6974] netlink: 'syz.1.315': attribute type 4 has an invalid length.
[  104.726635][ T6974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.315'.
[  104.913362][ T6978] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.317'.
[  105.010891][ T6985] netlink: 'syz.2.319': attribute type 10 has an invalid length.
[  105.014314][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.319'.
[  105.018468][ T6985] batadv0: entered promiscuous mode
[  105.020399][ T6985] batadv0: entered allmulticast mode
[  105.020405][ T6986] netlink: 'syz.2.319': attribute type 10 has an invalid length.
[  105.025854][ T6986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.319'.
[  105.026405][ T6985] bridge0: port 4(batadv0) entered blocking state
[  105.032976][ T6985] bridge0: port 4(batadv0) entered disabled state
[  105.298149][ T5864] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  105.303001][ T5864] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  105.604654][ T6993] netlink: 'syz.2.321': attribute type 10 has an invalid length.
[  106.150136][ T7015] syzkaller0: entered promiscuous mode
[  106.153013][ T7015] syzkaller0: entered allmulticast mode
[  107.002052][ T7020] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[  108.260567][ T7034] netlink: 'syz.2.333': attribute type 6 has an invalid length.
[  108.263617][ T7034] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.999369][ T7054] openvswitch: netlink: Flow key attribute not present in set flow.
[  109.023889][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'.
[  109.108531][ T7058] syzkaller0: entered promiscuous mode
[  109.110874][ T7058] syzkaller0: entered allmulticast mode
[  109.174602][ T7062] netlink: 'syz.0.342': attribute type 3 has an invalid length.
[  109.187811][ T7062] netlink: 'syz.0.342': attribute type 16 has an invalid length.
[  109.190254][ T7062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.342'.
[  109.991724][ T7067] netlink: 'syz.1.343': attribute type 21 has an invalid length.
[  114.100105][ T7104] openvswitch: netlink: Message has 8 unknown bytes.
[  114.253678][ T7106] syzkaller0: entered promiscuous mode
[  114.258089][ T7106] syzkaller0: entered allmulticast mode
[  114.377583][ T7117] syzkaller0: entered promiscuous mode
[  114.379756][ T7117] syzkaller0: entered allmulticast mode
[  115.442440][ T7129] netlink: 7 bytes leftover after parsing attributes in process `syz.2.359'.
[  115.452239][ T7129] netlink: 76 bytes leftover after parsing attributes in process `syz.2.359'.
[  115.525946][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.529152][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.535263][ T7131] bridge0: entered allmulticast mode
[  115.564349][ T7131] bridge_slave_1: left allmulticast mode
[  115.569327][ T7131] bridge_slave_1: left promiscuous mode
[  115.573724][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.604364][ T7131] bridge_slave_0: left allmulticast mode
[  115.606683][ T7131] bridge_slave_0: left promiscuous mode
[  115.616730][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.690391][ T7131] bond0: (slave bridge0): Releasing backup interface
[  115.911520][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[  115.916617][ T7148] netlink: 184 bytes leftover after parsing attributes in process `syz.1.365'.
[  115.954665][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.365'.
[  115.965142][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.365'.
[  116.294887][ T7164] netlink: 'syz.1.370': attribute type 10 has an invalid length.
[  116.440599][ T7176] netlink: 1 bytes leftover after parsing attributes in process `syz.0.373'.
[  116.561261][ T5855] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  116.935118][ T7191] netlink: 'syz.2.378': attribute type 10 has an invalid length.
[  116.982792][ T7192] netlink: 'syz.1.376': attribute type 30 has an invalid length.
[  119.867377][ T5856] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  120.644880][ T7220] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.387'.
[  121.928811][ T5855] Bluetooth: hci2: command tx timeout
[  124.389635][ T7248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'.
[  125.027814][ T7264] syzkaller0: entered promiscuous mode
[  125.029885][ T7264] syzkaller0: entered allmulticast mode
[  125.697996][ T7278] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.401'.
[  125.754496][ T7275] netlink: 164 bytes leftover after parsing attributes in process `syz.1.400'.
[  125.904486][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[  129.406816][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'.
[  129.481121][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[  234.927721][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  234.930331][    C0] rcu: 	1-...!: (0 ticks this GP) idle=ff4c/1/0x4000000000000000 softirq=20227/20227 fqs=0
[  234.936888][    C0] rcu: 	(detected by 0, t=10506 jiffies, g=15357, q=195 ncpus=2)
[  234.939645][    C0] Sending NMI from CPU 0 to CPUs 1:
[  234.939741][    C1] NMI backtrace for cpu 1
[  234.939774][    C1] CPU: 1 UID: 0 PID: 7288 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(full) 
[  234.939791][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.939800][    C1] RIP: 0010:check_preemption_disabled+0x40/0x120
[  234.939825][    C1] Code: 08 65 8b 05 c6 5e 26 07 65 8b 0d bb 5e 26 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 9b 5e 26 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d e9 81 ca 02 00 cc 48 c7 04 24 00 00
[  234.939837][    C1] RSP: 0018:ffffc900001e07e0 EFLAGS: 00000046
[  234.939851][    C1] RAX: 0000000000000001 RBX: 0000000000000087 RCX: fdf2a6e6dbc49a00
[  234.939859][    C1] RDX: 0000000000000001 RSI: ffffffff8dba98a1 RDI: ffffffff8be33e80
[  234.939868][    C1] RBP: ffff88810b068b18 R08: 0000000000000003 R09: 0000000000000004
[  234.939877][    C1] R10: dffffc0000000000 R11: fffff5200003c100 R12: 0000000000000001
[  234.939885][    C1] R13: 0000000000000001 R14: ffff888136627a98 R15: ffff88810b068000
[  234.939893][    C1] FS:  00007f57f09696c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  234.939905][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.939913][    C1] CR2: 000000110c39d985 CR3: 000000010a474000 CR4: 00000000000006f0
[  234.939945][    C1] Call Trace:
[  234.939989][    C1]  <IRQ>
[  234.940000][    C1]  lock_release+0x27a/0x3e0
[  234.940036][    C1]  ? hrtimer_try_to_cancel+0x3be/0x420
[  234.940051][    C1]  _raw_spin_unlock_irqrestore+0x70/0x110
[  234.940066][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.940078][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.940091][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.940104][    C1]  hrtimer_try_to_cancel+0x3be/0x420
[  234.940118][    C1]  hrtimer_cancel+0x3b/0x50
[  234.940130][    C1]  cpu_clock_event_stop+0xd9/0x130
[  234.940149][    C1]  __perf_event_overflow+0x580/0xe40
[  234.940165][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  234.940179][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  234.940198][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  234.940218][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  234.940234][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  234.940257][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.940269][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.940284][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  234.940300][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  234.940317][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  234.940336][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  234.940352][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  234.940372][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  234.940390][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  234.940405][    C1]  </IRQ>
[  234.940409][    C1]  <TASK>
[  234.940414][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.940434][    C1] RIP: 0010:unwind_next_frame+0x223/0x2390
[  234.940451][    C1] Code: 86 65 18 00 00 44 89 f8 4c 8d 2c 85 6c 50 e0 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 <44> 89 f8 ff c0 48 8d 2c 85 6c 50 e0 90 48 89 e8 48 c1 e8 03 0f b6
[  234.940461][    C1] RSP: 0018:ffffc9000416f9b8 EFLAGS: 00000246
[  234.940473][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: fdf2a6e6dbc49a00
[  234.940482][    C1] RDX: 00000000000a7e25 RSI: ffffffff8be33e60 RDI: ffffffff8be33e20
[  234.940490][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
[  234.940500][    C1] R10: ffffc9000416fad8 R11: ffffffff81ac4d00 R12: ffffffff8100012f
[  234.940508][    C1] R13: 0000000000000003 R14: ffffc9000416fa88 R15: 0000000000000001
[  234.940517][    C1]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7f
[  234.940530][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  234.940546][    C1]  ? unwind_next_frame+0xa5/0x2390
[  234.940562][    C1]  ? unwind_next_frame+0xd4/0x2390
[  234.940577][    C1]  ? unwind_next_frame+0xa5/0x2390
[  234.940590][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.940605][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  234.940621][    C1]  arch_stack_walk+0x11c/0x150
[  234.940638][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.940652][    C1]  stack_trace_save+0x9c/0xe0
[  234.940667][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  234.940685][    C1]  ref_tracker_free+0xef/0x7d0
[  234.940699][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  234.940708][    C1]  ? migrate_enable+0x29c/0x3c0
[  234.940722][    C1]  ? __sk_destruct+0x3c3/0x660
[  234.940738][    C1]  ? tun_chr_close+0x17b/0x1c0
[  234.940751][    C1]  ? __fput+0x44c/0xa70
[  234.940764][    C1]  ? task_work_run+0x1d4/0x260
[  234.940780][    C1]  ? exit_to_user_mode_loop+0xec/0x110
[  234.940796][    C1]  ? do_syscall_64+0x2bd/0x3b0
[  234.940809][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.940824][    C1]  ? bpf_sk_storage_free+0x21/0x230
[  234.940842][    C1]  ? bpf_sk_storage_free+0x21/0x230
[  234.940859][    C1]  ? bpf_sk_storage_free+0x21/0x230
[  234.940877][    C1]  __sk_destruct+0x3c3/0x660
[  234.940893][    C1]  ? __pfx_tun_chr_close+0x10/0x10
[  234.940907][    C1]  tun_chr_close+0x17b/0x1c0
[  234.940922][    C1]  __fput+0x44c/0xa70
[  234.940939][    C1]  task_work_run+0x1d4/0x260
[  234.940983][    C1]  ? __pfx_task_work_run+0x10/0x10
[  234.941011][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  234.941030][    C1]  exit_to_user_mode_loop+0xec/0x110
[  234.941046][    C1]  do_syscall_64+0x2bd/0x3b0
[  234.941060][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.941071][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.941082][    C1]  ? exc_page_fault+0x9f/0xf0
[  234.941095][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.941107][    C1] RIP: 0033:0x7f57efb8eba9
[  234.941121][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.941131][    C1] RSP: 002b:00007f57f0969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  234.941145][    C1] RAX: ffffffffffffffea RBX: 00007f57efdd5fa0 RCX: 00007f57efb8eba9
[  234.941153][    C1] RDX: 0000000000006040 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  234.941163][    C1] RBP: 00007f57efc11e19 R08: 0000000000000000 R09: 0000000000000000
[  234.941170][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.941177][    C1] R13: 00007f57efdd6038 R14: 00007f57efdd5fa0 R15: 00007ffd59f03648
[  234.941191][    C1]  </TASK>
[  234.941683][    C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g15357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  235.185506][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  235.189329][    C0] rcu: RCU grace-period kthread stack dump:
[  235.191643][    C0] task:rcu_preempt     state:R  running task     stack:26728 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  235.195996][    C0] Call Trace:
[  235.197370][    C0]  <TASK>
[  235.198689][    C0]  __schedule+0x1798/0x4cc0
[  235.200644][    C0]  ? __lock_acquire+0xab9/0xd20
[  235.202627][    C0]  ? __pfx___schedule+0x10/0x10
[  235.204922][    C0]  ? schedule+0x91/0x360
[  235.206638][    C0]  schedule+0x165/0x360
[  235.208307][    C0]  schedule_timeout+0x12b/0x270
[  235.210051][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  235.212236][    C0]  ? __pfx_process_timeout+0x10/0x10
[  235.214440][    C0]  ? prepare_to_swait_event+0x341/0x380
[  235.216460][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  235.218411][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  235.220195][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.221987][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  235.223759][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  235.225966][    C0]  ? finish_swait+0xcd/0x1f0
[  235.227896][    C0]  rcu_gp_kthread+0x99/0x390
[  235.229761][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  235.231990][    C0]  ? __kthread_parkme+0x7b/0x200
[  235.233959][    C0]  ? __kthread_parkme+0x1a1/0x200
[  235.235590][    C0]  kthread+0x711/0x8a0
[  235.237210][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  235.239152][    C0]  ? __pfx_kthread+0x10/0x10
[  235.240823][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.243048][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.244791][    C0]  ? __pfx_kthread+0x10/0x10
[  235.246552][    C0]  ret_from_fork+0x439/0x7d0
[  235.248531][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  235.250799][    C0]  ? __switch_to_asm+0x39/0x70
[  235.252648][    C0]  ? __switch_to_asm+0x33/0x70
[  235.254638][    C0]  ? __pfx_kthread+0x10/0x10
[  235.256621][    C0]  ret_from_fork_asm+0x1a/0x30
[  235.258623][    C0]  </TASK>
[  235.259896][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  235.262989][    C0] CPU: 0 UID: 0 PID: 7279 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT(full) 
[  235.267123][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.271366][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  235.274102][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  235.282292][    C0] RSP: 0018:ffffc9000335f340 EFLAGS: 00000293
[  235.284880][    C0] RAX: ffffffff81b4621b RBX: 1ffff11026cc7f61 RCX: ffff88803a84b980
[  235.288127][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  235.291462][    C0] RBP: ffffc9000335f4c0 R08: ffffffff8fa3a937 R09: 1ffffffff1f47526
[  235.294966][    C0] R10: dffffc0000000000 R11: fffffbfff1f47527 R12: ffff88813663fb08
[  235.298263][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  235.301894][    C0] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  235.305698][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.308616][    C0] CR2: 0000000000000004 CR3: 000000000df36000 CR4: 00000000000006f0
[  235.312100][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  235.315594][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  235.318814][    C0] Call Trace:
[  235.320259][    C0]  <TASK>
[  235.321519][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  235.323820][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  235.326681][    C0]  ? rcu_is_watching+0x15/0xb0
[  235.328677][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  235.330817][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  235.332906][    C0]  flush_tlb_mm_range+0x6b1/0x12d0
[  235.335062][    C0]  ? free_pgd_range+0x144b/0x14c0
[  235.337237][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  235.339664][    C0]  tlb_flush_mmu+0x1a7/0x680
[  235.341741][    C0]  tlb_finish_mmu+0xc3/0x1d0
[  235.344194][    C0]  ? free_pgd_range+0x144b/0x14c0
[  235.346692][    C0]  free_ldt_pgtables+0x17b/0x320
[  235.348839][    C0]  ? __pfx_free_ldt_pgtables+0x10/0x10
[  235.351267][    C0]  ? down_read+0x1ad/0x2e0
[  235.353443][    C0]  exit_mmap+0x17c/0xb50
[  235.355235][    C0]  ? uprobe_clear_state+0x20f/0x290
[  235.357417][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  235.359539][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  235.362516][    C0]  ? __pfx_exit_aio+0x10/0x10
[  235.364709][    C0]  ? uprobe_clear_state+0x274/0x290
[  235.366870][    C0]  __mmput+0x118/0x430
[  235.368533][    C0]  exit_mm+0x1da/0x2c0
[  235.370257][    C0]  ? __pfx_exit_mm+0x10/0x10
[  235.372202][    C0]  ? rcu_is_watching+0x15/0xb0
[  235.374303][    C0]  do_exit+0x648/0x2300
[  235.376197][    C0]  ? do_raw_spin_lock+0x121/0x290
[  235.378402][    C0]  ? __pfx_do_exit+0x10/0x10
[  235.379897][    C0]  do_group_exit+0x21c/0x2d0
[  235.381713][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.383472][    C0]  get_signal+0x1286/0x1340
[  235.384936][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  235.386748][    C0]  ? __pfx_task_work_add+0x10/0x10
[  235.388678][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  235.390964][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  235.392907][    C0]  ? __fget_files+0x2a/0x420
[  235.394698][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  235.396852][    C0]  exit_to_user_mode_loop+0x75/0x110
[  235.398996][    C0]  do_syscall_64+0x2bd/0x3b0
[  235.400837][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.402812][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.405070][    C0]  ? exc_page_fault+0x9f/0xf0
[  235.407303][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.409732][    C0] RIP: 0033:0x7fe3e498eba9
[  235.411624][    C0] Code: Unable to access opcode bytes at 0x7fe3e498eb7f.
[  235.414523][    C0] RSP: 002b:00007fe3e57b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  235.417566][    C0] RAX: ffffffffffffffed RBX: 00007fe3e4bd6090 RCX: 00007fe3e498eba9
[  235.420775][    C0] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000006
[  235.423695][    C0] RBP: 00007fe3e4a11e19 R08: 0000000000000000 R09: 0000000000000000
[  235.426282][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.429108][    C0] R13: 00007fe3e4bd6128 R14: 00007fe3e4bd6090 R15: 00007ffe4fc3edf8
[  235.431603][    C0]  </TASK>

VM DIAGNOSIS:
17:45:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888108588237 R9 =1ffff110210b1046 R10=dffffc0000000000 R11=ffffffff854fa300
R12=dffffc0000000000 R13=ffffffff99b028fe R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa37c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0001000880010014 8002002400000002
XMM02=8002000c010000e0 00020008010000e0 XMM03=0800000040080008 0000000000010005
XMM04=0100088005001408 0000004008000800 XMM05=0000000001000580 02000c010000e000
XMM06=020008010000e000 0100088001001480 XMM07=0200240000000200 0000000000000004
XMM08=9911174e7b0ddbc0 ef4d5680c51dbf4d XMM09=0000000000000000 00007f57efc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=fdf2a6e6dbc49a00 RDX=0000000000000000
RSI=ffffffff8dba98a1 RDI=ffffffff8be33e80 RBP=ffffffff81ada78b RSP=ffffc900001e07e0
R8 =0000000000000000 R9 =ffffffff81ada78b R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000000000 R13=ffff888136627a98 R14=0000000000000001 R15=0000000000000046
RIP=ffffffff819d708c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57f09696c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39d985 CR3=000000010a474000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f57efc12ee7 XMM09=0000000000000000 00007f57efc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
