last executing test programs:

17.228146944s ago: executing program 1 (id=81):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x8}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)="62afbcf72be129300800000000fbffff04cc886371faffffff6196ef1844a5a6f885ff24465925e8", 0x5cc}], 0x1}, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000680)={r4})
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x10088010}, 0x4000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x4000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x4040005)

16.883340742s ago: executing program 2 (id=82):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x1224, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004030000000000000000000000000000f3ab004f6db660c9abc8e8295084bd718cb52855bb0b5c8451"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004030000000000000000000000000000f3ab004f6db660c9abc8e8295084bd718cb52855bb0b5c8451"], 0xfc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x10, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x663, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xbc, &(0x7f000000cf3d)=""/188, 0x40f00}, 0x94)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000)
perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x48, 0x1, 0x1, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0xffffffffffffffff}, 0x8a80, 0x0, 0x81, 0x4, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote}) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014200d00091209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x20000041) (async)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014200d00091209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x20000041)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904000000000000000002000000340004802e0001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30000000000900020073797a3200000000140000007c7bdc440976e650000000000000000a"], 0x88}}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400c041}, 0x8082)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, 0x0, 0x4) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, 0x0, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x41) (async)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x41)
socket$kcm(0xa, 0x2, 0x73) (async)
r8 = socket$kcm(0xa, 0x2, 0x73)
close(r8)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x59, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08050000130004002cbd7000fedbdf2506050c014e214e240300000009000000060000000300000002000000020000000133000009000000", @ANYRES32=r10, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x4000800}, 0x815)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$kcm(0xa, 0x5, 0x0) (async)
r12 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r12, 0x29, 0x1b, &(0x7f00000001c0)=r11, 0xa1)
close(r12)

16.760893349s ago: executing program 2 (id=83):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x2, 0x0, 0x6, 0x4040, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x8, 0x2, 0x4, 0x160, 0x7, 0x4, 0x0, 0x1, 0x0, 0x4fb}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x105d09, 0x30f7, 0x0, 0x2, 0xffffffffbffffffc, 0x0, 0x3}, 0x0, 0x200000000001, r0, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2085, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x7fe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015001f0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000000408010200000000000000000d000004060002408035000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f8482a0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0xb6, 0x8, 0x46, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x401}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001f80)=@newqdisc={0x150, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xfffffff7, 0x5, 0x10, 0x18, 0x15, 0x1f, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x97}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x28004041}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e0000000400000008000000634f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000965dbd34dccc5b4331f0c236c83446131540e378749a80f979f0c414a926f68848ac537f805a77932472d229af57a63b8c271d18ec3cae4d990dba7274cd5140c29ca3ba1e1a60e63d8afc9dd57c5ee7a157"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r12, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x1, 0x7fff, 0x8, 0x800, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000001c0)=@raw=[@generic={0x3, 0x6, 0xd, 0x1ff, 0x2}, @call={0x85, 0x0, 0x0, 0xd4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2c00}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000240)='GPL\x00', 0xff, 0x80, &(0x7f0000000300)=""/128, 0x40f00, 0x20, '\x00', r11, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r12, r13, r8, r4], 0x0, 0x10, 0x4}, 0x94)

16.617909966s ago: executing program 0 (id=84):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40852)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={0x14, 0x40, 0x107, 0xfffffffc, 0x10000, {0x21, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8090)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791004000000000095", @ANYRES8=0x0, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.542928379s ago: executing program 0 (id=85):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8}, 0xc02, 0x1, 0x0, 0x9, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$inet(0x2, 0x3, 0x1)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8601, 0x2000000, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000007b02000000000000", @ANYRES32=r5, @ANYBLOB="f100"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000030000000200001000000000000000"], 0x50)
r7 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000", @ANYRES32, @ANYBLOB='L\x00'/13, @ANYRES32=0x0], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x10)
close(r7)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x102600, 0x2, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)

16.481867489s ago: executing program 2 (id=86):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x2, 0xfd, 0x0, 0x0, 0xfff, 0xa0105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x8828, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xd8e, 0x6, 0x5, 0x4}, 0x1}}]}, {0x5, 0x6, "91"}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040814}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5}, 0x38)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0x100010, 0x5}, {0x3, 0x0, 0x0, 0x7}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/46, 0x2e}], 0x3}, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.333463808s ago: executing program 1 (id=87):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000756c6c2500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009500000020000000c281efc3f024451b101e7c94fdc01104937aabfba348d029cf003dbdc2207af416eaa88d849ed505bc591bb0a32176275e1819a88a79e1a61537a51f"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

16.329807415s ago: executing program 2 (id=88):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1802000000004100000000000000000018010000756c6c2500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000080000009500000000000000c281efc3f024451b101e7c94fdc01104937aabfba348d029cf003dbdc2207af416eaa88d849ed505bc591bb0a32176275e1819a88a79e1a61537a51f"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

16.32917542s ago: executing program 1 (id=89):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7013e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x40, 0x7}, 0x1118, 0x5c, 0x4000000, 0x3, 0x3fc, 0x400001, 0x13, 0x0, 0x0, 0x0, 0xdffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000500000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

16.263787283s ago: executing program 0 (id=90):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003300000000000000fc0100000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000030000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000fc020000000000000000000000000001040000000000000000000000000000000000000020010000000000000000000000000002000000006cf9ffff0100000064010101000000000000000000000000000000000400fd00000000000200000008000000ac1414bb000000000000000000000000000000002b0000000000000000000000000000000000ffffffffffff0635000005000000000000000900000000000000"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

16.262679588s ago: executing program 2 (id=91):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1700000056000528707b528e9a93a54a07"], 0xfe33)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x80)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)

16.257798611s ago: executing program 1 (id=92):
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x6}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=""/9, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16.19208953s ago: executing program 0 (id=93):
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xc19}, 0x120, 0x0, 0xfffffffd, 0x8, 0x7fff, 0x7fffffff, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xc19}, 0x120, 0x0, 0xfffffffd, 0x8, 0x7fff, 0x7fffffff, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365bb884260dd402b5f2bcd6b53868bd8a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x2}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x7}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r4, 0x7, 0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
getpid() (async)
r6 = getpid()
perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xf7, 0x2, 0x2, 0x4, 0x0, 0x7ff, 0x380, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x4}, 0x420, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x0, 0x5, 0x0, 0x1}, r6, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000206608000000000000180000000000010000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100000aa8ffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

16.092423596s ago: executing program 1 (id=94):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="61215100000000009500000000000000eaf690586732c7bdc1c1cbcfd2aaa4718e6bc71a115de46676a34a75f14ec7bb49b733036910f8839fb80a5a21c1e3026fbaa9cb50df766fe38e56da672f25d2b3f5a206efe5483e6449eb2500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x2, 0x1, 0x1800000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback=r0, r0, 0x2e, 0x203c, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r1}, 0x20)

16.02788599s ago: executing program 2 (id=95):
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0xdd86, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x5, 0x8, 0x3, 0x0, 0xffffffffffffff52, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1005b0, 0xc8, 0x0, 0x0, 0x6, 0x3ff, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x2519e6b7bde17953)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b909000000932c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x68}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, 0x0}, 0x0)
recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890c, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffd}, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x838, 0x2, 0xfffffffa, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x1, 0xf8, 0x34, 0x0, 0x2, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x4, 0x8, 0x3, 0x0, 0x8, 0x4, 0x7, 0x0, 0x4, 0x0, 0xed0}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="b40800000000000073119c00ffffffff9500001200000000e5ad0dd966b90a50c674bf84b17093733f4c662025fec6e91f5160ad446946a5b486a9185d112f67e46494efcd2837a36adb5ce25a6bacf9db749b4ebedf491c39a67b83845761d60f63742235c74c4198284c912381342012361d936d8905e37cabba67c1a240e7e01f7c1c7c2d203e1b77ee707167dc1bbca75e0564be9452bf4f3338b82849e3d4a318749575275ff2fc637c08e658f24d0c192d249f61b4e7f4dc652bb7ec2ba7dcded9f255748082d1154e7ef2"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
socketpair(0x26, 0x5, 0x0, &(0x7f0000000000))
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

15.952464829s ago: executing program 1 (id=96):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8) (async)
r1 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0xfffffffe, 0x8, 0x8000000010000, 0x800003, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x1, r1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0x9)
close(r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22572, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xa41, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x25, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$kcm(0x2, 0x922000000001, 0x106)
socket(0x2b, 0x800, 0x80000000) (async)
socket(0x2b, 0x800, 0x80000000)
setsockopt$sock_attach_bpf(r6, 0x6, 0xd, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20008000)
recvmsg(r3, 0x0, 0xc0) (async)
recvmsg(r3, 0x0, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x122}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="08001a"], 0x18c0}}, 0x200000c4) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="08001a"], 0x18c0}}, 0x200000c4)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_clone(0x1003000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x1003000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6e}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

15.951272677s ago: executing program 0 (id=97):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000756c6c2500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009500000030000000c281efc3f024451b101e7c94fdc01104937aabfba348d029cf003dbdc2207af416eaa88d849ed505bc591bb0a32176275e1819a88a79e1a61537a51f"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

15.801263804s ago: executing program 0 (id=98):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="003d511b56715a00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="a4fff49ad2f2473bda851860d7e7f9b81f28112e51daab6dd8328a5ba434e8300d427f0e45fbc25bee8c5a64ba3e7a0d693a44379fb7c65f51de59cde9dc1660c816df08bd87f2ffb3c2677c3845e67b481bc5d92a2853667892698d0a59b1ea737036636acce8cbb92426c8ca6bf08c4f00d28421a7cb73b5bd5e59cee9380085084b16a0e36a484c", @ANYRES64=0x0], 0x20)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x0, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000015c0), 0x9}, 0x140, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x50, &(0x7f0000001d80)=ANY=[], 0x128}, 0x10)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x10140)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000001540)="0d970f4b278ae454810b4a75a4accb4ad474c0e579619a39ae91e7413c441881210ee040885241a372be805ec271d94d99872abf6e7f5c127fbc55bd7d171d82896778b48bb3d33b1abbe7e52cd634966efdc5f00f56eddd7c93b3d7e970a338416dac4335eacb4dfc2690", 0x6b}], 0x2f}, 0x3e8)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x10)
r7 = socket$kcm(0x23, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r8, &(0x7f0000000780)}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0, r8, 0x4000, r7}, 0x18)

141.60173ms ago: executing program 32 (id=98):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="003d511b56715a00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="a4fff49ad2f2473bda851860d7e7f9b81f28112e51daab6dd8328a5ba434e8300d427f0e45fbc25bee8c5a64ba3e7a0d693a44379fb7c65f51de59cde9dc1660c816df08bd87f2ffb3c2677c3845e67b481bc5d92a2853667892698d0a59b1ea737036636acce8cbb92426c8ca6bf08c4f00d28421a7cb73b5bd5e59cee9380085084b16a0e36a484c", @ANYRES64=0x0], 0x20)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x0, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000015c0), 0x9}, 0x140, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x50, &(0x7f0000001d80)=ANY=[], 0x128}, 0x10)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x10140)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000001540)="0d970f4b278ae454810b4a75a4accb4ad474c0e579619a39ae91e7413c441881210ee040885241a372be805ec271d94d99872abf6e7f5c127fbc55bd7d171d82896778b48bb3d33b1abbe7e52cd634966efdc5f00f56eddd7c93b3d7e970a338416dac4335eacb4dfc2690", 0x6b}], 0x2f}, 0x3e8)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x10)
r7 = socket$kcm(0x23, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r8, &(0x7f0000000780)}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0, r8, 0x4000, r7}, 0x18)

69.40017ms ago: executing program 33 (id=96):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8) (async)
r1 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0xfffffffe, 0x8, 0x8000000010000, 0x800003, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x1, r1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0x9)
close(r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22572, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xa41, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x25, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$kcm(0x2, 0x922000000001, 0x106)
socket(0x2b, 0x800, 0x80000000) (async)
socket(0x2b, 0x800, 0x80000000)
setsockopt$sock_attach_bpf(r6, 0x6, 0xd, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20008000)
recvmsg(r3, 0x0, 0xc0) (async)
recvmsg(r3, 0x0, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x122}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="08001a"], 0x18c0}}, 0x200000c4) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="08001a"], 0x18c0}}, 0x200000c4)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_clone(0x1003000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x1003000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6e}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

0s ago: executing program 34 (id=95):
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0xdd86, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x5, 0x8, 0x3, 0x0, 0xffffffffffffff52, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1005b0, 0xc8, 0x0, 0x0, 0x6, 0x3ff, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x2519e6b7bde17953)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b909000000932c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x68}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, 0x0}, 0x0)
recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890c, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffd}, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x838, 0x2, 0xfffffffa, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x1, 0xf8, 0x34, 0x0, 0x2, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x4, 0x8, 0x3, 0x0, 0x8, 0x4, 0x7, 0x0, 0x4, 0x0, 0xed0}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="b40800000000000073119c00ffffffff9500001200000000e5ad0dd966b90a50c674bf84b17093733f4c662025fec6e91f5160ad446946a5b486a9185d112f67e46494efcd2837a36adb5ce25a6bacf9db749b4ebedf491c39a67b83845761d60f63742235c74c4198284c912381342012361d936d8905e37cabba67c1a240e7e01f7c1c7c2d203e1b77ee707167dc1bbca75e0564be9452bf4f3338b82849e3d4a318749575275ff2fc637c08e658f24d0c192d249f61b4e7f4dc652bb7ec2ba7dcded9f255748082d1154e7ef2"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
socketpair(0x26, 0x5, 0x0, &(0x7f0000000000))
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61194' (ED25519) to the list of known hosts.
syzkaller login: [   57.237101][ T5595] cgroup: Unknown subsys name 'net'
[   57.353681][ T5595] cgroup: Unknown subsys name 'cpuset'
[   57.359131][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.269886][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.980466][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.985687][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.001086][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.003754][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.006576][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.045296][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.060269][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.064339][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.067408][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.071200][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.072334][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.076949][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.080248][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.082730][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.087106][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.442312][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.445729][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.448481][ T5611] bridge_slave_0: entered allmulticast mode
[   64.452483][ T5611] bridge_slave_0: entered promiscuous mode
[   64.466976][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.469143][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.471657][ T5611] bridge_slave_1: entered allmulticast mode
[   64.474351][ T5611] bridge_slave_1: entered promiscuous mode
[   64.516984][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.523789][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.549605][ T5611] team0: Port device team_slave_0 added
[   64.558744][ T5611] team0: Port device team_slave_1 added
[   64.595523][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.597993][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.605997][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.611054][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.613178][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.620735][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.700884][ T5611] hsr_slave_0: entered promiscuous mode
[   64.703302][ T5611] hsr_slave_1: entered promiscuous mode
[   64.863605][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.865845][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.868050][ T5616] bridge_slave_0: entered allmulticast mode
[   64.871029][ T5616] bridge_slave_0: entered promiscuous mode
[   64.892867][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.895137][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.897294][ T5616] bridge_slave_1: entered allmulticast mode
[   64.900200][ T5616] bridge_slave_1: entered promiscuous mode
[   64.907155][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.909348][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.911729][ T5617] bridge_slave_0: entered allmulticast mode
[   64.914377][ T5617] bridge_slave_0: entered promiscuous mode
[   64.936371][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.941416][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.949815][ T5617] bridge_slave_1: entered allmulticast mode
[   64.953661][ T5617] bridge_slave_1: entered promiscuous mode
[   64.966970][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.974148][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.995050][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.013780][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.025625][ T5616] team0: Port device team_slave_0 added
[   65.041345][ T5616] team0: Port device team_slave_1 added
[   65.044229][ T5617] team0: Port device team_slave_0 added
[   65.053549][ T5617] team0: Port device team_slave_1 added
[   65.093231][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.101705][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.104806][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.106835][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.115120][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.118774][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.121128][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.128693][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.132648][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.139251][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.142593][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.146955][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.149758][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.153298][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.161172][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.165253][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.167404][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.175506][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.184792][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.189050][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.245086][ T5617] hsr_slave_0: entered promiscuous mode
[   65.247691][ T5617] hsr_slave_1: entered promiscuous mode
[   65.250467][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   65.252284][ T5617] Cannot create hsr debugfs directory
[   65.263308][ T5616] hsr_slave_0: entered promiscuous mode
[   65.265525][ T5616] hsr_slave_1: entered promiscuous mode
[   65.267647][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   65.269878][ T5616] Cannot create hsr debugfs directory
[   65.318370][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.321012][ T5611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.323941][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.326041][ T5611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.394888][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.398102][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.497319][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.521180][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.529989][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.536404][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   65.540985][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.545765][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.548444][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.554448][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.557070][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.561708][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.577187][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.580225][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.607872][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.610394][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.645786][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.650302][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.654947][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.661796][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.664378][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.668382][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.672101][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.675847][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.775311][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.800856][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   65.806730][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.822336][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.824510][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.827965][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.830259][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.847561][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   65.856487][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.858779][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.873882][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.876198][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.003952][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.030330][ T4999] Bluetooth: hci0: command tx timeout
[   66.072329][ T5611] veth0_vlan: entered promiscuous mode
[   66.091695][ T5611] veth1_vlan: entered promiscuous mode
[   66.099668][ T5622] Bluetooth: hci2: command tx timeout
[   66.102168][ T4999] Bluetooth: hci1: command tx timeout
[   66.128420][ T5611] veth0_macvtap: entered promiscuous mode
[   66.132995][ T5611] veth1_macvtap: entered promiscuous mode
[   66.148296][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.156334][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.176613][ T5675] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.180892][ T5675] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.188242][ T5675] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.202233][ T5675] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.315072][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.318720][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.325600][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.358426][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.361618][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.384173][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.435918][ T5617] veth0_vlan: entered promiscuous mode
[   66.438462][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.443066][ T5617] veth1_vlan: entered promiscuous mode
[   66.482173][ T5616] veth0_vlan: entered promiscuous mode
[   66.493773][ T5617] veth0_macvtap: entered promiscuous mode
[   66.504095][ T5617] veth1_macvtap: entered promiscuous mode
[   66.522229][ T5616] veth1_vlan: entered promiscuous mode
[   66.534980][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.546754][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.557873][ T5675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.564029][ T5675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.569790][ T5675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.580196][ T5675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.621453][ T5616] veth0_macvtap: entered promiscuous mode
[   66.637262][ T5616] veth1_macvtap: entered promiscuous mode
[   66.667359][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.676013][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.685937][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.727894][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.746879][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.751135][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.753046][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.754608][ T5727] netlink: 'syz.1.5': attribute type 13 has an invalid length.
[   66.758620][ T5727] netlink: 'syz.1.5': attribute type 12 has an invalid length.
[   66.764700][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.767692][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.779871][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.924426][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.929795][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.961666][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.964642][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.337636][ T5737] xt_l2tp: v2 tid > 0xffff: 327812
[   67.427461][ T5737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.448587][ T5745] netlink: 484 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.485920][ T5747] netlink: 'syz.1.10': attribute type 1 has an invalid length.
[   67.492626][ T5747] netlink: 'syz.1.10': attribute type 1 has an invalid length.
[   67.651547][ T5758] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   67.654655][ T5758] netlink: 'syz.1.14': attribute type 2 has an invalid length.
[   67.794597][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.065301][ T5760] bridge_slave_0 (unregistering): left allmulticast mode
[   68.100043][ T4999] Bluetooth: hci0: command tx timeout
[   68.131207][ T5760] bridge_slave_0 (unregistering): left promiscuous mode
[   68.136750][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.194146][ T4999] Bluetooth: hci1: command tx timeout
[   68.195964][ T5622] Bluetooth: hci2: command tx timeout
[   68.773043][ T5765] netlink: 6 bytes leftover after parsing attributes in process `syz.2.16'.
[   68.791065][ T5765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.105001][ T5783] syzkaller0: entered promiscuous mode
[   69.108503][ T5783] syzkaller0: entered allmulticast mode
[   69.133261][ T5783] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   69.144144][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'.
[   69.200348][ T5791] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.532318][ T5809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.988421][ T5818] netlink: 'syz.0.34': attribute type 10 has an invalid length.
[   69.994338][ T5818] netlink: 2 bytes leftover after parsing attributes in process `syz.0.34'.
[   70.182647][ T4999] Bluetooth: hci0: command tx timeout
[   70.261343][ T4999] Bluetooth: hci1: command tx timeout
[   70.263528][ T5622] Bluetooth: hci2: command tx timeout
[   70.537170][ T5818] veth1_virt_wifi: entered promiscuous mode
[   70.540031][ T5818] bridge0: port 3(veth1_virt_wifi) entered blocking state
[   70.542652][ T5818] bridge0: port 3(veth1_virt_wifi) entered disabled state
[   70.545120][ T5818] veth1_virt_wifi: entered allmulticast mode
[   70.548178][ T5818] veth1_virt_wifi: left allmulticast mode
[   70.698623][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'.
[   70.807575][ T5842] Can't find ip_set type hash:net,rort
[   71.032518][ T5849] =======================================================
[   71.032518][ T5849] WARNING: The mand mount option has been deprecated and
[   71.032518][ T5849]          and is ignored by this kernel. Remove the mand
[   71.032518][ T5849]          option from the mount to silence this warning.
[   71.032518][ T5849] =======================================================
[   71.253915][ T5622] Bluetooth: hci0: unexpected event 0x2c length: 15 < 17
[   71.336251][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   71.674134][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   71.680729][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.259496][ T5622] Bluetooth: hci0: command tx timeout
[   72.339545][ T5622] Bluetooth: hci2: command tx timeout
[   72.341427][ T4999] Bluetooth: hci1: command tx timeout
[   72.525690][ T5909] netlink: 'syz.0.65': attribute type 21 has an invalid length.
[   72.537614][ T5910] netlink: 256 bytes leftover after parsing attributes in process `syz.0.65'.
[   72.545878][ T5910] Zero length message leads to an empty skb
[   73.430083][ T5920] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.69'.
[   73.504965][ T5926] netlink: 996 bytes leftover after parsing attributes in process `syz.1.72'.
[   73.532080][ T5928] netlink: 10 bytes leftover after parsing attributes in process `syz.0.73'.
[   73.555723][ T5928] netlink: 23 bytes leftover after parsing attributes in process `syz.0.73'.
[   73.573427][ T5929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.577904][ T5929] IPv6: NLM_F_CREATE should be set when creating new route
[   73.582193][ T5929] IPv6: NLM_F_CREATE should be set when creating new route
[   73.584749][ T5926] netlink: 'syz.1.72': attribute type 10 has an invalid length.
[   73.585306][ T5926] netlink: 'syz.1.72': attribute type 19 has an invalid length.
[   73.585372][ T5926] netlink: 156 bytes leftover after parsing attributes in process `syz.1.72'.
[   73.595151][ T5929] IPv6: NLM_F_CREATE should be set when creating new route
[   73.857287][ T5946] netlink: 'syz.1.77': attribute type 12 has an invalid length.
[   73.998903][ T4999] Bluetooth: hci0: ISO packet for unknown connection handle 3
[   74.374636][ T5959] netlink: 26 bytes leftover after parsing attributes in process `syz.2.82'.
[   74.380863][ T5959] netlink: 26 bytes leftover after parsing attributes in process `syz.2.82'.
[   74.548520][ T5963] netlink: 'syz.2.83': attribute type 10 has an invalid length.
[   74.551859][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.553773][ T5962] Illegal XDP return value 4294967274 on prog  (id 38) dev N/A, expect packet loss!
[   74.560912][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.573156][ T5963] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link
[   75.081147][ T5984] netlink: 'syz.0.93': attribute type 1 has an invalid length.
[   75.083780][ T5984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.93'.
[   75.086735][ T5984] netlink: 'syz.0.93': attribute type 1 has an invalid length.
[   75.088889][ T5984] netlink: 'syz.0.93': attribute type 8 has an invalid length.
[   75.092875][ T5984] netlink: 582 bytes leftover after parsing attributes in process `syz.0.93'.
[   76.796208][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.798587][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   91.414595][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.422289][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.425136][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.427988][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.430829][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.577584][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.583665][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.589218][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.598366][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.604015][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.747601][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   91.752447][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.755084][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.758183][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.760842][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.353418][   T31] cfg80211: failed to load regulatory.db
[   92.712168][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.719112][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.721686][ T6006] bridge_slave_0: entered allmulticast mode
[   92.724538][ T6006] bridge_slave_0: entered promiscuous mode
[   92.736145][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.740760][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.746333][ T6006] bridge_slave_1: entered allmulticast mode
[   92.752553][ T6006] bridge_slave_1: entered promiscuous mode
[   92.803667][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.829255][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.832352][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.834695][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.836842][ T6012] bridge_slave_0: entered allmulticast mode
[   92.839781][ T6012] bridge_slave_0: entered promiscuous mode
[   92.863808][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.866702][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.868833][ T6012] bridge_slave_1: entered allmulticast mode
[   92.871965][ T6012] bridge_slave_1: entered promiscuous mode
[   92.880680][ T6006] team0: Port device team_slave_0 added
[   92.897909][ T6006] team0: Port device team_slave_1 added
[   92.922854][ T6012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.926032][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.928670][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.935153][ T6018] bridge_slave_0: entered allmulticast mode
[   92.937908][ T6018] bridge_slave_0: entered promiscuous mode
[   92.951265][ T6012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.954627][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.956938][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.959151][ T6018] bridge_slave_1: entered allmulticast mode
[   92.962857][ T6018] bridge_slave_1: entered promiscuous mode
[   92.965955][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.968303][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.976065][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.995670][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.997932][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.005839][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.032179][ T6012] team0: Port device team_slave_0 added
[   93.049359][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.054611][ T6012] team0: Port device team_slave_1 added
[   93.065184][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.080367][ T6006] hsr_slave_0: entered promiscuous mode
[   93.082635][ T6006] hsr_slave_1: entered promiscuous mode
[   93.084868][ T6006] debugfs: 'hsr0' already exists in 'hsr'
[   93.086559][ T6006] Cannot create hsr debugfs directory
[   93.120766][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.123238][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.130958][ T6012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.135396][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.137642][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.146976][ T6012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.156921][ T6018] team0: Port device team_slave_0 added
[   93.171030][ T6018] team0: Port device team_slave_1 added
[   93.281823][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.283986][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.302550][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.311004][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.313170][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.322453][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.365333][ T6018] hsr_slave_0: entered promiscuous mode
[   93.367627][ T6018] hsr_slave_1: entered promiscuous mode
[   93.370052][ T6018] debugfs: 'hsr0' already exists in 'hsr'
[   93.372086][ T6018] Cannot create hsr debugfs directory
[   93.459727][ T5622] Bluetooth: hci3: command tx timeout
[   93.506891][ T6018] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.620979][ T5622] Bluetooth: hci4: command tx timeout
[   93.779924][ T5622] Bluetooth: hci5: command tx timeout
[   95.539664][ T5622] Bluetooth: hci3: command tx timeout
[   95.699615][ T5622] Bluetooth: hci4: command tx timeout
[   95.864026][ T5622] Bluetooth: hci5: command tx timeout
[   95.874531][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.888020][ T6012] hsr_slave_0: entered promiscuous mode
[   95.890583][ T6012] hsr_slave_1: entered promiscuous mode
[   95.892613][ T6012] debugfs: 'hsr0' already exists in 'hsr'
[   95.894337][ T6012] Cannot create hsr debugfs directory
[   98.139564][ T5622] Bluetooth: hci3: command tx timeout
[   99.417009][ T5622] Bluetooth: hci4: command tx timeout
[   99.418668][ T5622] Bluetooth: hci5: command tx timeout
[  100.180850][ T4999] Bluetooth: hci3: command tx timeout
[  101.419928][    C0] clocksource: Marking clocksource tsc unstable due to frequency skew
[  101.423005][    C0] clocksource: Watchdog               kvm-clock interval:            11806ns
[  101.425655][    C0] clocksource: Clocksource                  tsc interval:            11390ns
[  101.428371][    C0] tsc: Marking TSC unstable due to clocksource watchdog
[  101.459615][ T5622] Bluetooth: hci4: command tx timeout
[  101.461400][ T4999] Bluetooth: hci5: command tx timeout
[  102.149300][ T6018] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  102.180663][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.184546][ T6018] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  102.212255][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.286979][ T6018] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  102.353585][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.405851][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.478123][ T6018] 8021q: adding VLAN 0 to HW filter on device team0
[  102.507456][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.509796][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.527982][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.530473][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.575544][ T6012] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.337107][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.339977][ T6012] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.363897][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.041649][ T6012] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.061874][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.064569][ T6012] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.068902][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.084554][ T6018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.087913][ T6018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.479514][ T5505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.683632][ T6006] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.783537][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  113.786631][ T6006] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  114.473781][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  114.502323][ T6006] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  138.427336][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  138.431073][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  140.328306][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  142.643325][ T5505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.285784][ T6006] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  143.537645][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  143.882090][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.892895][ T6012] 8021q: adding VLAN 0 to HW filter on device team0
[  143.926627][ T6012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.930695][ T6012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.958565][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.961479][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.999153][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.002052][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.123137][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.289911][ T6018] veth0_vlan: entered promiscuous mode
[  144.298736][ T6018] veth1_vlan: entered promiscuous mode
[  144.331466][ T6018] veth0_macvtap: entered promiscuous mode
[  144.339049][ T6018] veth1_macvtap: entered promiscuous mode
[  144.355646][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.363468][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.435715][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.440707][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.445890][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.453316][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.457128][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.718131][ T4999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  152.724725][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  152.728653][   T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  152.732579][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  152.734925][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  152.738902][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  152.745275][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  152.748178][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  152.752974][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  152.755653][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  154.499759][ T5622] Bluetooth: hci1: command tx timeout
[  154.820262][   T53] Bluetooth: hci6: command tx timeout
[  154.824222][ T5622] Bluetooth: hci7: command tx timeout
[  156.579776][ T5622] Bluetooth: hci1: command tx timeout
[  156.906368][ T5622] Bluetooth: hci7: command tx timeout
[  156.909589][   T53] Bluetooth: hci6: command tx timeout
[  158.659636][ T5622] Bluetooth: hci1: command tx timeout
[  158.979945][   T53] Bluetooth: hci6: command tx timeout
[  158.983808][ T5622] Bluetooth: hci7: command tx timeout
[  160.739553][ T5622] Bluetooth: hci1: command tx timeout
[  161.059952][   T53] Bluetooth: hci6: command tx timeout
[  161.062374][ T5622] Bluetooth: hci7: command tx timeout
[  173.405878][ T6006] kthread_run failed with err -4
[  173.455085][ T5675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.457835][ T5675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.463454][ T5675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.466905][ T5675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.469819][ T5505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.264982][ T5619] Bluetooth: hci0: command 0x0406 tx timeout
[  186.269775][ T4999] Bluetooth: hci2: command 0x0406 tx timeout
[  200.309543][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  200.312045][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  214.027540][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  214.035826][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  214.042890][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  214.051570][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  214.054863][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.674124][ T6149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  214.678117][ T6149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  214.684323][ T6149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  214.689882][ T6149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  214.693905][ T6149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  214.697628][ T6149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  214.703849][ T6149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  214.708118][ T6149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  214.711484][ T6149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.714053][ T6149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.500436][ T5619] Bluetooth: hci4: command tx timeout
[  240.504591][ T5612] Bluetooth: hci5: command tx timeout
[  240.514323][   T53] Bluetooth: hci3: command tx timeout
[  242.579730][ T5612] Bluetooth: hci5: command tx timeout
[  242.582310][ T5619] Bluetooth: hci4: command tx timeout
[  242.585668][   T53] Bluetooth: hci3: command tx timeout
[  243.060294][   T34] INFO: task syz.0.98:5998 blocked for more than 143 seconds.
[  243.063567][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  243.102406][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  243.131671][   T34] task:syz.0.98        state:D stack:25592 pid:5998  tgid:5998  ppid:5617   task_flags:0x400040 flags:0x00080002
[  243.159716][   T34] Call Trace:
[  243.164909][   T34]  <TASK>
[  243.166192][   T34]  __schedule+0x1821/0x5740
[  243.177335][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  243.181746][   T34]  ? __pfx___schedule+0x10/0x10
[  243.189481][   T34]  ? schedule+0x90/0x360
[  243.191818][   T34]  schedule+0x164/0x360
[  243.195141][   T34]  schedule_preempt_disabled+0x13/0x30
[  243.198870][   T34]  __mutex_lock+0x7f7/0x1550
[  243.203171][   T34]  ? __mutex_lock+0x608/0x1550
[  243.208340][   T34]  ? perf_trace_destroy+0x2e/0x150
[  243.215556][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  243.217722][   T34]  ? rcu_is_watching+0x15/0xb0
[  243.223209][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  243.225815][   T34]  perf_trace_destroy+0x2e/0x150
[  243.228292][   T34]  ? __pfx_tp_perf_event_destroy+0x10/0x10
[  243.231249][   T34]  __free_event+0x31e/0x7a0
[  243.233436][   T34]  ? __pfx_perf_release+0x10/0x10
[  243.235515][   T34]  perf_event_release_kernel+0x45b/0x510
[  243.237872][   T34]  ? __pfx_perf_release+0x10/0x10
[  243.240837][   T34]  perf_release+0x38/0x50
[  243.242701][   T34]  __fput+0x44f/0xa60
[  243.244330][   T34]  task_work_run+0x1d9/0x270
[  243.246237][   T34]  ? __pfx_task_work_run+0x10/0x10
[  243.248313][   T34]  exit_to_user_mode_loop+0xf3/0x4d0
[  243.252143][   T34]  ? rcu_is_watching+0x15/0xb0
[  243.254653][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.257156][   T34]  do_syscall_64+0x33e/0xf80
[  243.259027][   T34]  ? trace_irq_disable+0x3b/0x140
[  243.261853][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.264337][   T34] RIP: 0033:0x7f1d2999cdd9
[  243.266171][   T34] RSP: 002b:00007ffc68c63988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  243.270204][   T34] RAX: 0000000000000000 RBX: 00007ffc68c63a70 RCX: 00007f1d2999cdd9
[  243.274383][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  243.277621][   T34] RBP: 0000000000012641 R08: 0000000000000001 R09: 0000000000000000
[  243.281604][   T34] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffc68c63ab0
[  243.284841][   T34] R13: 00007f1d29c15fac R14: 0000000000012695 R15: 00007f1d29c15fa0
[  243.287921][   T34]  </TASK>
[  243.289153][   T34] 
[  243.289153][   T34] Showing all locks held in the system:
[  243.292491][   T34] 1 lock held by khungtaskd/34:
[  243.295117][   T34]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  243.299102][   T34] 4 locks held by kworker/u10:3/62:
[  243.305892][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  243.310971][   T34]  #1: ffffc9000174fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  243.316076][   T34]  #2: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20
[  243.323514][   T34]  #3: ffffffff8ea2f280 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240
[  243.327818][   T34] 3 locks held by kworker/u9:3/1110:
[  243.332510][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  243.337682][   T34]  #1: ffffc90007387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  243.342341][   T34]  #2: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  243.346078][   T34] 2 locks held by getty/5436:
[  243.347952][   T34]  #0: ffff8881780b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  243.352459][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  243.356515][   T34] 6 locks held by kworker/u8:2/5505:
[  243.358635][   T34]  #0: ffff8881012b5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  243.365469][   T34]  #1: ffffc900041efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  243.370124][   T34]  #2: ffffffff8fdc1ee8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  243.373910][   T34]  #3: ffff8881ba064128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  243.378976][   T34]  #4: ffff8881ba06b258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  243.384947][   T34]  #5: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  243.388816][   T34] 3 locks held by kworker/u8:4/5675:
[  243.392004][   T34]  #0: ffff88810d131140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  243.396735][   T34]  #1: ffffc90004c5fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  243.402463][   T34]  #2: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  243.406339][   T34] 3 locks held by kworker/0:5/5716:
[  243.408419][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  243.413109][   T34]  #1: ffffc90004defc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  243.417672][   T34]  #2: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0
[  243.423767][   T34] 3 locks held by kworker/1:6/5732:
[  243.425929][   T34]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  243.434526][   T34]  #1: ffffc90004eafc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  243.438890][   T34]  #2: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090
[  243.444463][   T34] 10 locks held by syz.1.96/5994:
[  243.446631][   T34] 1 lock held by syz.0.98/5998:
[  243.448537][   T34]  #0: ffffffff8e9ce6e0 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  243.454457][   T34] 1 lock held by syz-executor/6006:
[  243.456771][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  243.461121][   T34] 1 lock held by syz-executor/6012:
[  243.463372][   T34]  #0: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  243.467332][   T34] 2 locks held by syz-executor/6018:
[  243.471866][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  243.476077][   T34]  #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  243.481805][   T34] 2 locks held by syz-executor/6103:
[  243.484007][   T34]  #0: ffffffff8fdc1ee8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  243.487715][   T34]  #1: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840
[  243.492050][   T34] 1 lock held by syz-executor/6109:
[  243.494292][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  243.498079][   T34] 1 lock held by syz-executor/6112:
[  243.501003][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  243.504848][   T34] 1 lock held by syz-executor/6139:
[  243.506925][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  243.511385][   T34] 1 lock held by syz-executor/6143:
[  243.513575][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  243.517183][   T34] 1 lock held by syz-executor/6144:
[  243.519258][   T34]  #0: ffffffff8fdd0bc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  243.523904][   T34] 
[  243.524987][   T34] =============================================
[  243.524987][   T34] 
[  243.528803][   T34] NMI backtrace for cpu 0
[  243.528845][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  243.528860][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.528868][   T34] Call Trace:
[  243.528875][   T34]  <TASK>
[  243.528881][   T34]  dump_stack_lvl+0xe8/0x150
[  243.528903][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  243.528924][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  243.528942][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  243.528965][   T34]  sys_info+0x135/0x170
[  243.528983][   T34]  watchdog+0xfd3/0x1030
[  243.529010][   T34]  ? watchdog+0x1c9/0x1030
[  243.529040][   T34]  kthread+0x388/0x470
[  243.529060][   T34]  ? __pfx_watchdog+0x10/0x10
[  243.529077][   T34]  ? __pfx_kthread+0x10/0x10
[  243.529095][   T34]  ret_from_fork+0x514/0xb70
[  243.529114][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  243.529128][   T34]  ? __switch_to+0xc79/0x1410
[  243.529150][   T34]  ? __pfx_kthread+0x10/0x10
[  243.529168][   T34]  ret_from_fork_asm+0x1a/0x30
[  243.529194][   T34]  </TASK>
[  243.529202][   T34] Sending NMI from CPU 0 to CPUs 1:
[  243.573967][    C1] NMI backtrace for cpu 1
[  243.573983][    C1] CPU: 1 UID: 0 PID: 5994 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) 
[  243.573997][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.574006][    C1] RIP: 0010:lock_acquire+0x221/0x350
[  243.574027][    C1] Code: ff ff ff e8 d1 36 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 bb 01 98 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 48 61 92
[  243.574036][    C1] RSP: 0018:ffffc90000a085b8 EFLAGS: 00000286
[  243.574049][    C1] RAX: df91a5815769c700 RBX: 0000000000000000 RCX: 0000000000000102
[  243.574057][    C1] RDX: 00000000a42637f2 RSI: ffffffff8e21f066 RDI: ffffffff8c28bae0
[  243.574065][    C1] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cd60
[  243.574073][    C1] R10: ffffc90000a08718 R11: ffffffff81b0f6a0 R12: 0000000000000002
[  243.574081][    C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246
[  243.574088][    C1] FS:  00007f963d5b26c0(0000) GS:ffff8882a9284000(0000) knlGS:0000000000000000
[  243.574097][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.574105][    C1] CR2: 00007f93c23d3b90 CR3: 000000016c7de000 CR4: 00000000000006f0
[  243.574136][    C1] Call Trace:
[  243.574144][    C1]  <IRQ>
[  243.574148][    C1]  ? mac80211_hwsim_beacon_tx+0x3c5/0x870
[  243.574170][    C1]  ? unwind_next_frame+0xa6/0x2550
[  243.574184][    C1]  unwind_next_frame+0xc3/0x2550
[  243.574196][    C1]  ? unwind_next_frame+0xa6/0x2550
[  243.574212][    C1]  ? mac80211_hwsim_beacon_tx+0x3c5/0x870
[  243.574227][    C1]  ? mac80211_hwsim_beacon_tx+0x3c5/0x870
[  243.574242][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  243.574260][    C1]  arch_stack_walk+0x11b/0x150
[  243.574277][    C1]  ? mac80211_hwsim_beacon_tx+0x3c5/0x870
[  243.574294][    C1]  stack_trace_save+0xa9/0x100
[  243.574309][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  243.574324][    C1]  ? ktime_get+0x45/0x220
[  243.574342][    C1]  ? kvm_clock_get_cycles+0x47/0x60
[  243.574359][    C1]  kasan_save_track+0x3e/0x80
[  243.574372][    C1]  ? kasan_save_track+0x3e/0x80
[  243.574383][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  243.574395][    C1]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  243.574408][    C1]  ? __alloc_skb+0x1d0/0x7d0
[  243.574420][    C1]  ? __netdev_alloc_skb+0xc1/0x810
[  243.574430][    C1]  ? __ieee80211_beacon_get+0xc06/0x1880
[  243.574447][    C1]  ? ieee80211_beacon_get_tim+0xbd/0x2c0
[  243.574460][    C1]  ? mac80211_hwsim_beacon_tx+0x3c5/0x870
[  243.574491][    C1]  ? lock_release+0x2d7/0x3c0
[  243.574503][    C1]  __kasan_slab_alloc+0x6c/0x80
[  243.574516][    C1]  kmem_cache_alloc_node_noprof+0x384/0x690
[  243.574529][    C1]  ? __alloc_skb+0x1d0/0x7d0
[  243.574575][    C1]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  243.574589][    C1]  __alloc_skb+0x1d0/0x7d0
[  243.574600][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  243.574615][    C1]  __netdev_alloc_skb+0xc1/0x810
[  243.574629][    C1]  __ieee80211_beacon_get+0xc06/0x1880
[  243.574644][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  243.574661][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  243.574678][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  243.574696][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  243.574715][    C1]  __iterate_interfaces+0x2ab/0x590
[  243.574729][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  243.574744][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  243.574758][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  243.574778][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  243.574794][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  243.574807][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  243.574818][    C1]  __hrtimer_run_queues+0x3c0/0xa20
[  243.574839][    C1]  hrtimer_run_softirq+0x17a/0x240
[  243.574855][    C1]  handle_softirqs+0x22a/0x840
[  243.574869][    C1]  ? __irq_exit_rcu+0xca/0x220
[  243.574883][    C1]  __irq_exit_rcu+0xca/0x220
[  243.574895][    C1]  irq_exit_rcu+0x9/0x30
[  243.574905][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  243.574920][    C1]  </IRQ>
[  243.574924][    C1]  <TASK>
[  243.574928][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  243.574942][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  243.574956][    C1] Code: f7 e8 4d c2 f5 f5 f7 c3 00 02 00 00 74 05 e8 00 58 21 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 24 43 e7 f5 65 8b 05 0d 20 8d 07 85 c0 74 18 5b 41 5e c3 cc cc
[  243.574965][    C1] RSP: 0018:ffffc900070270d8 EFLAGS: 00000206
[  243.574975][    C1] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 0000000000000002
[  243.574982][    C1] RDX: 0000000000000006 RSI: ffffffff8dfabd2a RDI: 0000000000000001
[  243.574989][    C1] RBP: ffff88810009b838 R08: ffffffff9030c1f7 R09: 1ffffffff206183e
[  243.574997][    C1] R10: dffffc0000000000 R11: fffffbfff206183f R12: 1ffff11020013640
[  243.575005][    C1] R13: dffffc0000000000 R14: ffffffff8ea5fce0 R15: ffff88810009b200
[  243.575020][    C1]  __mmdrop+0x420/0x750
[  243.575032][    C1]  finish_task_switch+0x624/0xbe0
[  243.575047][    C1]  __schedule+0x1829/0x5740
[  243.575060][    C1]  ? lapic_next_event+0x11/0x20
[  243.575080][    C1]  ? irqentry_exit+0x218/0x760
[  243.575094][    C1]  ? irqentry_exit+0x218/0x760
[  243.575106][    C1]  ? trace_irq_disable+0x3b/0x140
[  243.575123][    C1]  ? __pfx___schedule+0x10/0x10
[  243.575141][    C1]  preempt_schedule_irq+0x4d/0xa0
[  243.575153][    C1]  irqentry_exit+0x14f/0x760
[  243.575166][    C1]  ? trace_irq_disable+0x3b/0x140
[  243.575183][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  243.575194][    C1] RIP: 0010:insn_get_prefixes+0x4/0x1ca0
[  243.575206][    C1] Code: 89 d9 80 e1 07 38 c1 7c c4 48 89 df e8 15 2f 89 f6 eb ba 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <55> 41 57 41 56 41 55 41 54 53 48 81 ec a0 00 00 00 49 89 fd 49 bc
[  243.575215][    C1] RSP: 0018:ffffc900070274f0 EFLAGS: 00000246
[  243.575224][    C1] RAX: ffffffff8ba91627 RBX: dffffc0000000000 RCX: 0000000000000000
[  243.575231][    C1] RDX: ffff88816c130000 RSI: 0000000000000000 RDI: ffffc90007027780
[  243.575238][    C1] RBP: 0000000000000000 R08: ffffc900070277ef R09: 0000000000000000
[  243.575245][    C1] R10: ffffc90007027780 R11: fffff52000e04efe R12: ffffc9000702779c
[  243.575253][    C1] R13: ffffc900070277a4 R14: ffffc90007027780 R15: 0000000000000000
[  243.575263][    C1]  ? insn_get_opcode+0x57/0x11b0
[  243.575277][    C1]  insn_get_opcode+0x6e/0x11b0
[  243.575289][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  243.575301][    C1]  ? irqentry_exit+0x218/0x760
[  243.575313][    C1]  ? trace_irq_disable+0x3b/0x140
[  243.575332][    C1]  insn_get_modrm+0x64/0x7d0
[  243.575344][    C1]  ? insn_get_displacement+0x93/0x9f0
[  243.575358][    C1]  insn_get_displacement+0x155/0x9f0
[  243.575370][    C1]  ? preempt_schedule_common+0x82/0xd0
[  243.575384][    C1]  insn_get_immediate+0x64/0x1280
[  243.575399][    C1]  ? trace_irq_enable+0x16/0x140
[  243.575413][    C1]  insn_decode+0x30e/0x4f0
[  243.575426][    C1]  ? trace_irq_enable+0x7/0x140
[  243.575440][    C1]  __jump_label_patch+0x114/0x4a0
[  243.575459][    C1]  ? __pfx___jump_label_patch+0x10/0x10
[  243.575477][    C1]  ? trace_irq_enable+0x7/0x140
[  243.575491][    C1]  ? trace_irq_enable+0x16/0x140
[  243.575505][    C1]  ? trace_irq_enable+0x7/0x140
[  243.575524][    C1]  arch_jump_label_transform_queue+0x69/0x110
[  243.575564][    C1]  __jump_label_update+0x185/0x380
[  243.575579][    C1]  static_key_enable_cpuslocked+0x128/0x240
[  243.575597][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  243.575629][    C1]  static_key_enable+0x1a/0x20
[  243.575645][    C1]  tracepoint_add_func+0x8c8/0xa60
[  243.575665][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  243.575680][    C1]  tracepoint_probe_register+0x5d/0x90
[  243.575695][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  243.575712][    C1]  perf_trace_event_init+0x4e1/0x9d0
[  243.575728][    C1]  perf_trace_init+0x23d/0x2d0
[  243.575742][    C1]  perf_tp_event_init+0x8d/0x120
[  243.575754][    C1]  perf_try_init_event+0x17f/0x870
[  243.575774][    C1]  perf_event_alloc+0x13a0/0x2d50
[  243.575789][    C1]  ? perf_event_alloc+0xffa/0x2d50
[  243.575807][    C1]  ? __pfx_perf_event_alloc+0x10/0x10
[  243.575822][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  243.575833][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  243.575844][    C1]  ? find_lively_task_by_vpid+0x19/0x290
[  243.575857][    C1]  __se_sys_perf_event_open+0x7a9/0x1d40
[  243.575871][    C1]  ? __pfx_clockevents_program_event+0x10/0x10
[  243.575890][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  243.575909][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.575922][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  243.575934][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.575945][    C1]  do_syscall_64+0x15f/0xf80
[  243.575960][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.575971][    C1] RIP: 0033:0x7f963c79cdd9
[  243.575984][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.575992][    C1] RSP: 002b:00007f963d5b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  243.576003][    C1] RAX: ffffffffffffffda RBX: 00007f963ca15fa0 RCX: 00007f963c79cdd9
[  243.576011][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  243.576018][    C1] RBP: 00007f963c832d69 R08: 000000000000000a R09: 0000000000000000
[  243.576025][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  243.576032][    C1] R13: 00007f963ca16038 R14: 00007f963ca15fa0 R15: 00007ffe9f9fc848
[  243.576046][    C1]  </TASK>
[  243.944443][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  243.946563][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  243.949623][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.953333][   T34] Call Trace:
[  243.954351][   T34]  <TASK>
[  243.955226][   T34]  vpanic+0x56c/0xa60
[  243.956753][   T34]  ? __pfx___schedule+0x10/0x10
[  243.958625][   T34]  ? __pfx_vpanic+0x10/0x10
[  243.960365][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  243.962953][   T34]  panic+0xc5/0xd0
[  243.964561][   T34]  ? __pfx_panic+0x10/0x10
[  243.966559][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  243.968668][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  243.970970][   T34]  watchdog+0x102c/0x1030
[  243.972290][   T34]  ? watchdog+0x1c9/0x1030
[  243.973652][   T34]  kthread+0x388/0x470
[  243.974887][   T34]  ? __pfx_watchdog+0x10/0x10
[  243.976302][   T34]  ? __pfx_kthread+0x10/0x10
[  243.977684][   T34]  ret_from_fork+0x514/0xb70
[  243.979058][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  243.980588][   T34]  ? __switch_to+0xc79/0x1410
[  243.981988][   T34]  ? __pfx_kthread+0x10/0x10
[  243.983369][   T34]  ret_from_fork_asm+0x1a/0x30
[  243.984816][   T34]  </TASK>
[  243.986319][   T34] Kernel Offset: disabled
[  243.987598][   T34] Rebooting in 86400 seconds..
