last executing test programs:

16.937555317s ago: executing program 2 (id=64):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x80, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0x38}, 0x40000)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0)
socket$kcm(0x2, 0x3, 0x84)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)

16.185711956s ago: executing program 0 (id=71):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x2a, 0x2, 0x0) (async)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x2a, 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891a, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x4c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x40081) (async)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r6) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94)

16.057931901s ago: executing program 2 (id=75):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x10e, &(0x7f0000001a80)=""/270}, 0x94)

16.05700768s ago: executing program 0 (id=76):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000100001027bf00000005"], 0x50)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0005000400142603600e1208001e0000000401a8000f00200010400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0x1f}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

15.985608126s ago: executing program 2 (id=77):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000ec040000007f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

15.983091719s ago: executing program 1 (id=78):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000280)}, {&(0x7f0000000400)=""/127, 0x7f}], 0x6, &(0x7f0000000500)=""/200, 0xc8}, 0x60)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f00000006c0), &(0x7f0000000600)=""/7, &(0x7f00000008c0)="283d6f2bcb38d862e79d7146544ad4957010310116aa38ffd88ef133b4c37096b47ad3dff70aa3b504ae6e46dc77385df173fcbad9461244e1aebad2accf72b0b06799bc40e4d74930276b2f0c2dfb9935dd38fcbb3f694d4ec2a631bc12e7f53eda72aefb03b3d768ebc3eb1c6200280eb857fa31090e7b90c7eeb421ef58e94656240f58f8d26b3e8fdef2941acfc4af2d5d7c02cdd4c7c49384cb28d6f4705698891acfd25319d86372517ec10a63750d1c8c50ee669c31b29c8a4beeb231e2982e52cb07b8c96ce8ce123c7eae175614077390a32a91e4a9e9c675a87a71646d39560b8af0f2f1043416d9", &(0x7f00000009c0)="928d5da41db41fe76fdda290574b48d5daa05e945f73c1794c7dc7640cd233bf0d9567d98dd915a1ba86cc3d9f1f", 0x2, r5}, 0x38)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x6}, 0x28)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000340)="5c00000033006bcc9e3be35c6e17aa3107f3653c001a0108000600070002bc24eab556a705251e618294ff0051f60a84c9f4d4b68037e786a6d0001000000e4509c5bbcd72c6c953e87efc340cb002b3cb23d694af9149ade85a2892", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d0001000040000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

15.827143088s ago: executing program 2 (id=79):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$kcm(0x2, 0x3, 0x2) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x100) (async)
sendmsg$inet(r4, 0x0, 0x20000000) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x140, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10f9c6, 0x637}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000440), 0x3d) (async)
close(r5) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, 0x0, 0x24) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)

15.826147866s ago: executing program 0 (id=80):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x6, 0x2, 0x80000000, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xffffffffffffffff}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1202, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x86c, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x14)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
mkdir(&(0x7f0000002880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8902, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x8, 0x30, 0x0, 0x25, 0x46060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffff7fffffffff8, 0x6, 0x4, 0x1, 0x8, 0x10, 0x0, 0x8}, 0x0, 0x10440000000802, 0xffffffffffffffff, 0x3)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'veth1_macvtap\x00', @random="7cf1e97c9e4f"})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)

15.709167254s ago: executing program 1 (id=81):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffff5)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x14, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800000020001f309a4f000000ffffffe474f70b0c590e129ab383986136e34f598d299cad5dc7be0a12a861f78528c782dd0220329382e1945f323ce267664c5f7f53e7a036436e6cda4066261e0cdfcbf561817826d602380f59a6000088e16e43ac1bf7b586a30040dba53b864854c65ffe523b53e5158b1b927dd13c0476a306935d9d53396d834565e04d7e57cbcc05c833cb24", @ANYRES32, @ANYRES8], 0x230}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6)
socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[], 0x88}}, 0x400c800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000480)=ANY=[@ANYBLOB='p'], 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
r8 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x11b, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
socket$kcm(0x10, 0x2, 0x10)

15.705287791s ago: executing program 2 (id=82):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f0000000340)}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000af9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0xb53, 0x4, 0x800, 0x0, r0, 0x7f, '\x00', 0x0, r4, 0x1, 0x3, 0x3}, 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)

15.570539856s ago: executing program 0 (id=83):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8ca, 0x4dd7a6da}, 0x100c, 0x0, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x2, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r6}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r8, &(0x7f00000001c0), 0x0}, 0x20)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x2c, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x7}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @jmp={0x5, 0x0, 0xb, 0x1, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}], &(0x7f0000000500)='syzkaller\x00', 0x80, 0x2d, &(0x7f0000000540)=""/45, 0x41100, 0x2a, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x7, 0xfa66}, 0x10, 0x15d8b, r1, 0x4, &(0x7f0000000880)=[r8, r9, r10], &(0x7f00000008c0)=[{0x2, 0x1, 0xb, 0xa}, {0x0, 0x4, 0x6, 0x7}, {0x4, 0x5, 0x9}, {0x3, 0x2, 0xf, 0x7}], 0x10, 0x79b}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000580)=ANY=[], 0xfe33)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe33)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40000)
r12 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)

15.489311679s ago: executing program 2 (id=84):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100000002"})
socketpair(0x37, 0x3, 0x1000, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c084}, 0x41010)
fstat(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$TUNSETGROUP(r4, 0x400454ce, r7)
close(0x3)

15.488405299s ago: executing program 1 (id=85):
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) (rerun: 64)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB="0000008000200000000100000070a62bff306168", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x58, &(0x7f0000000340)=""/222}, 0x21)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000040801080000000000ff0003002f000000060002400006000080c752b651796002b1749969160b7ced8a3c2fecb3c051ec787da0b580d096a01671f2328a9a022b9b95a0d4e96132100781bc31924753f621ccfcf5c7aa864af88b0eceb1eff28182cc383b03e0c5293c61fdb9632833b82bd1f71e1b7a2c6771b7aa054dadb38978ae68e9ee35680c707c7152c982042e9db8a3436ede4f458eb57f11e0cb54029ce3511c6d199e997a2350f2bfd8d53b3043ac8b70659bedf140ce50df9916db5eae5c983e8072f349a943606c305ab6ceb6848e9cc52c08ed114f985af8eae1ef67691cf3a8c194e2b76211708dd5d6fffb3a90574ccd9990cafd732ea489bcc81c4a7af90245a848d13365a6c92de4fb72d543b2a9418bcd57ec07d688cf7130478a80baf5495962"], 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x80) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f5, &(0x7f0000000080)) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000500)}, 0xffe1) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000001d711863000000000095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 32)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) (async)
r5 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000240), 0x4) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) (rerun: 32)

15.487143041s ago: executing program 0 (id=86):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r3 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbfe, {0x20, 0x1, 0x0, r3, 0x7fff, 0x9, 0x8, 0x8, 0x0, 0x8000}, ["", "", "", "", "", "", "", ""]}, 0x3c}}, 0x20004000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

15.338253423s ago: executing program 1 (id=87):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)="a9e493bcc9478437b16323b7cf50148739fc4b904edd245f94ca0c60f8572d", 0x1f}, {&(0x7f0000000700)="1c0a10c5cc5e81be5291f24c8e71388556107112af68a31f0ba6602e4c3cbacb2cb17a1ed33e120217c99a81bed3c4fda8997ec59e0ea9afb01b26b5ee220ec1699918282c74e1720beff4aee0f9800e109a12859d9ff4c90d11ce78aac9fe0c15aea8e348c1b4dba827ed4e925d36c5463bea3481c99a9192fcd77faf125a9cc983275f74ce05581810b3f0c78fe8adff52a53ba79fd1e8c6", 0x99}, {&(0x7f00000016c0)="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", 0x1000}], 0x3}, 0x41) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$kcm(0x2, 0x3, 0x2) (async)
close(0xffffffffffffffff) (async)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})
ioctl$SIOCSIFHWADDR(r2, 0x8916, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8800) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000290fbb08551d83ce621627dad603f6fb34e39818b5b69dc68e3bc00c104794bf09866edbafad96590dc178df89cdfcdee1e34143803b8b261f47931bb2e31b5ed828ada73f7e4e945b5e0982ebb59b713b5d7a8342dee14d13da63100319b9a4d06d93a146712042892afcb9e59b518fcfb79ad1132b0d8a13eb7a4f13c19756eebb562dc2f89a3d50e1ab554948c561f9b33e0b936474c3c559c20c1c7b4575ffcb9fb460da0d8e4a"], 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000e1000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)

15.237916177s ago: executing program 0 (id=88):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004"], 0x50)
close(r3)
socket$kcm(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a010100c10e000000000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x5, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6acb, 0x0, @perf_config_ext={0x4, 0x6}, 0x10000, 0x0, 0xfffffffd, 0x3, 0x3ff, 0x7fffffff, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffd, r0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xb3, &(0x7f0000000480)=""/179, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffd7}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x4, 0x18}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffc1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4044000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4)

15.236568857s ago: executing program 1 (id=89):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4884c)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x6, 0x6, 0x0, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1404, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20044844)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf0, 0x1, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_PAYLOAD={0xc3, 0xa, "329b8203ad6fce550c2abf3b1f2e81c6f432961105434136229bdd2f3b94768f982d7c43c2f0c92556abcfef51e11ea565eaaf778a9fdcd9ecf538688824266b4a52bbbcdefbc4e8b31ac522bf71d4ed713193394897bf88c1f806309cba33ae8ef31ae2cc8043400b99c83185a48d5bc682d6596d61b2ae36018d713f475469720d41a0a7314cd322108d700c0c2cc9a86a244e8f2e8b7e84c36b49112e295b2983ba80bb79d658ebb0f5e61adf72b8dc248c640d56f765e309f3f93f90c9"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4108}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x22314515cc1e498c}, 0x20000000)
r2 = socket(0x25, 0x3, 0x5)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8021}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1aff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}}}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}]}, 0xd4}}, 0x800)
sendmsg$AUDIT_USER_TTY(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0x464, 0x300, 0x70bd2d, 0x25dfdbfb, "3b903b32ba12f3c331ce7318bfb84fc266a24cbfd6a924f0cb7684e77591a637a4e65f01374c87cf82074aa92a4934b1c978b28ced334d27b08498695e145f326d1fba9edc6354", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x408228}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc4, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x14}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd43}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x19}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2ac}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000094)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x1411, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80084}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
sendmsg$AUDIT_GET(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x3e8, 0x300, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x48044)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000d00)='devices.deny\x00', 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x18, 0x1406, 0x8b503bf69ac7bef4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x48008)
socketpair(0x26, 0x2, 0x1, &(0x7f0000000e40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x4, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001280)=[0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000001340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000001400)}}, 0x10)
sendmsg$inet(r7, &(0x7f0000001680)={&(0x7f0000000f80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000fc0)="9f30d33470059da66c5d425397c4701381bd7b248ef462e6563339927ec28890241bc104cd01d0e4b76fc4627c2ea000318bb0ebc2a703eeaa56ae8ba9b924bfbcd5e06bcd2b6db8dc0828fca28c71f62957e0ff0082fb", 0x57}, {&(0x7f0000001040)="142b5ed18fc2957e7ff4fb844644c3eb0d1e1c16568be68a1bbda3ee440c649ffd78076f99eb5cbf4c56e96f5f660fd427d16292ea10ff38a5b1e7f33c03bda9aa1d90dfa8407342b15b4ea8347a514bb9189945863bc9490298d6893d57bf694bc5d1250415ac764ce59b04d1e94202bdce4daa85ae25829e889fc3892778e2ce045779c19a1dd0a4a361d0b2c6a238a91400a8cd63a356c625afb14047edfb487d2cf3e89ed1798f235173cc548cdb54b037db812ccf27b74b018c06f02c97cde1905501059612bec1648f307679c3d9f9bb0db11b2edd82847dc468b1c3f82ed8a88465ff6a8557aad33a38bb5db335b73664", 0xf4}, {&(0x7f0000001140)="88a482cf74610f13284153fe2d4c4a8816db2e899a774bb5c92cea64c06415725dd8253c789c6da62451e4e38a0a7544470c2adff3079904cb8467306fa630002bd96bb2635e21da2ae687c2338104de06db641719c6be737d1a02e65bfa8f80c20cdd52d930aa7c217ec4c6fd70c6eb4bfddabf360ec76c88542cf3f2e65b0c1f985870c145bc61a72cc9fda2014d0292f35c20961418ca4c6e283a90e268451768af3a836afa9fbcdbb8b99b4a92d8b6f240f6f657aeb365794ff140fd934e182c413bd42be6e0bbf65d4395f3ad820a2c555955e11633272722cb3dbd7a7e9b31d569dd23bbf7ffcb", 0xea}], 0x3, &(0x7f0000001580)=[@ip_retopts={{0x98, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x17, 0xa5, [@local, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast2]}, @cipso={0x86, 0x6a, 0x3, [{0x5, 0x11, "d8176f40ce08033b6a22ec80ce7eee"}, {0x6, 0x10, "3461a6260d5d53dc6a86ce13848b"}, {0x0, 0x11, "e2b2f0b3572e20542e6305e096a796"}, {0x1, 0x10, "14332aab5cbf06dbe613031ab288"}, {0x0, 0x12, "00b60761981df395893f9ada1c895751"}, {0x7, 0x10, "6769015b9b8dde431a597682c8d0"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xd0}, 0x40004018)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x48, 0x1406, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0xc8010)
socket$kcm(0x29, 0x5, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x136, 0x136, 0x5, [@ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @const={0x1, 0x0, 0x0, 0xa, 0x1}, @enum64={0x3, 0x9, 0x0, 0x13, 0x0, 0xb, [{0x6, 0x4, 0x3}, {0x8, 0x1, 0x1}, {0xa, 0x6}, {0xe, 0x8, 0x4a}, {0x9, 0xd6b4, 0xc}, {0x3, 0x8000, 0x3}, {0xe, 0x2, 0xffffffff}, {0x9, 0x6, 0x2}, {0xc, 0x5a81, 0x6}]}, @datasec={0xb, 0x7, 0x0, 0xf, 0x2, [{0x4, 0x2, 0x8}, {0x1, 0x7ff, 0x1}, {0x3, 0xfffffff7, 0x8}, {0x3, 0xe7, 0x80000001}, {0x5, 0x7, 0x8}, {0x1, 0x5, 0x2}, {0x4, 0x80000000, 0x7}], "a93e"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x3da7}}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x7}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x5}, @fwd={0xf}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000001b40)=""/236, 0x155, 0xec, 0x0, 0x6, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001ec0)={0xffffffffffffffff, 0x20, &(0x7f0000001e80)={&(0x7f0000001d00)=""/157, 0x9d, <r10=>0x0, &(0x7f0000001dc0)=""/160, 0xa0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x0, 0x1d, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x26}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001900)='syzkaller\x00', 0x40e, 0x5c, &(0x7f0000001940)=""/92, 0x41000, 0x65, '\x00', r8, @fallback=0x4, r9, 0x8, &(0x7f0000001c80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001cc0)={0x1, 0x4, 0x7, 0x7}, 0x10, r10, 0xffffffffffffffff, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x0, 0x1, 0x0, 0xa}, {0x0, 0x1, 0x2, 0x4}, {0x0, 0x5, 0x6, 0x1}, {0x0, 0x1, 0xe}, {0x2, 0x5, 0xe, 0x3}, {0x2, 0x5, 0xa, 0x3}, {0x3, 0x1, 0x6, 0x8}], 0x10, 0x9}, 0x94)

15.113860718s ago: executing program 1 (id=90):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r5 = socket$kcm(0x2c, 0x3, 0x0) (async, rerun: 32)
r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) (async)
recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 32)
r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20) (async)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x20040080)
socket$kcm(0x10, 0x2, 0x2)

65.691815ms ago: executing program 32 (id=88):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004"], 0x50)
close(r3)
socket$kcm(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a010100c10e000000000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x5, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6acb, 0x0, @perf_config_ext={0x4, 0x6}, 0x10000, 0x0, 0xfffffffd, 0x3, 0x3ff, 0x7fffffff, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffd, r0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xb3, &(0x7f0000000480)=""/179, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffd7}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x4, 0x18}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffc1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4044000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4)

166.862µs ago: executing program 33 (id=90):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r5 = socket$kcm(0x2c, 0x3, 0x0) (async, rerun: 32)
r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) (async)
recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 32)
r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20) (async)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x20040080)
socket$kcm(0x10, 0x2, 0x2)

0s ago: executing program 34 (id=84):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100000002"})
socketpair(0x37, 0x3, 0x1000, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c084}, 0x41010)
fstat(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$TUNSETGROUP(r4, 0x400454ce, r7)
close(0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45819' (ED25519) to the list of known hosts.
syzkaller login: [   48.119448][ T5775] cgroup: Unknown subsys name 'net'
[   48.213810][ T5775] cgroup: Unknown subsys name 'cpuset'
[   48.245098][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.845630][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.122875][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.127220][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.130695][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.134806][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.139059][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.142502][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.146820][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.151158][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.179879][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.182815][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.255726][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.258560][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.261270][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.264459][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.267559][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.472147][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.531507][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.583594][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.587166][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.590405][ T5847] bridge_slave_0: entered allmulticast mode
[   54.593770][ T5847] bridge_slave_0: entered promiscuous mode
[   54.627115][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.629569][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.631949][ T5847] bridge_slave_1: entered allmulticast mode
[   54.635028][ T5847] bridge_slave_1: entered promiscuous mode
[   54.682452][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.693029][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.713668][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   54.728671][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.731396][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.734195][ T5843] bridge_slave_0: entered allmulticast mode
[   54.737611][ T5843] bridge_slave_0: entered promiscuous mode
[   54.745293][ T5847] team0: Port device team_slave_0 added
[   54.748804][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.751473][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.754205][ T5843] bridge_slave_1: entered allmulticast mode
[   54.757670][ T5843] bridge_slave_1: entered promiscuous mode
[   54.761614][ T5847] team0: Port device team_slave_1 added
[   54.803689][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.808962][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.840345][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.842984][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.851647][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.861306][ T5843] team0: Port device team_slave_0 added
[   54.864115][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.867418][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.875851][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.883691][ T5843] team0: Port device team_slave_1 added
[   54.917650][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.920137][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.929012][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.933581][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.936367][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.944872][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.959416][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.961935][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.964562][ T5853] bridge_slave_0: entered allmulticast mode
[   54.967694][ T5853] bridge_slave_0: entered promiscuous mode
[   54.994951][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.997921][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.000735][ T5853] bridge_slave_1: entered allmulticast mode
[   55.003583][ T5853] bridge_slave_1: entered promiscuous mode
[   55.011679][ T5847] hsr_slave_0: entered promiscuous mode
[   55.015489][ T5847] hsr_slave_1: entered promiscuous mode
[   55.060823][ T5843] hsr_slave_0: entered promiscuous mode
[   55.063696][ T5843] hsr_slave_1: entered promiscuous mode
[   55.066333][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   55.068291][ T5843] Cannot create hsr debugfs directory
[   55.072360][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.079413][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.139109][ T5853] team0: Port device team_slave_0 added
[   55.161477][ T5853] team0: Port device team_slave_1 added
[   55.213748][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.216350][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.225816][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.250459][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.253300][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.263201][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.343425][ T5853] hsr_slave_0: entered promiscuous mode
[   55.347296][ T5853] hsr_slave_1: entered promiscuous mode
[   55.350169][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.352476][ T5853] Cannot create hsr debugfs directory
[   55.553634][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.569710][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.587025][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.592641][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.624052][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.641543][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.651046][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.659574][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.729692][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.750979][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.758830][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.768793][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.879385][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.901684][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.919091][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   55.939866][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.943108][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.959363][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.962336][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.979066][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.993407][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.011371][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.014518][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.030395][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.033570][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.041020][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.080925][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.083975][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.120096][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.123118][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.211287][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.216692][ T5846] Bluetooth: hci1: command tx timeout
[   56.228435][ T5846] Bluetooth: hci0: command tx timeout
[   56.298579][ T5846] Bluetooth: hci2: command tx timeout
[   56.319320][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.377878][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.418163][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.430855][ T5847] veth0_vlan: entered promiscuous mode
[   56.460271][ T5843] veth0_vlan: entered promiscuous mode
[   56.473806][ T5847] veth1_vlan: entered promiscuous mode
[   56.493518][ T5843] veth1_vlan: entered promiscuous mode
[   56.503706][ T5853] veth0_vlan: entered promiscuous mode
[   56.519971][ T5853] veth1_vlan: entered promiscuous mode
[   56.537371][ T5847] veth0_macvtap: entered promiscuous mode
[   56.550340][ T5847] veth1_macvtap: entered promiscuous mode
[   56.561270][ T5843] veth0_macvtap: entered promiscuous mode
[   56.578031][ T5843] veth1_macvtap: entered promiscuous mode
[   56.585959][ T5853] veth0_macvtap: entered promiscuous mode
[   56.592391][ T5853] veth1_macvtap: entered promiscuous mode
[   56.601766][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.607090][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.624158][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.630251][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.648344][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.652225][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.668693][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.672220][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.676081][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.691997][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.697865][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.706993][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.719756][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.738784][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.746559][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.772850][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.778023][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.781686][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.826219][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.829543][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.885264][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.888702][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.907616][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.911745][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.959006][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.962254][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.990423][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.995084][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.012821][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.040375][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.043406][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.238923][    C0] hrtimer: interrupt took 47939 ns
[   57.587902][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'.
[   57.591067][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'.
[   57.625671][ T5933] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   57.628969][ T5933] netlink: 'syz.2.7': attribute type 2 has an invalid length.
[   58.151671][ T5943] netlink: 'syz.0.10': attribute type 10 has an invalid length.
[   58.167026][ T5943] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.305863][ T5846] Bluetooth: hci0: command tx timeout
[   58.308094][ T5846] Bluetooth: hci1: command tx timeout
[   58.325597][ T5954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.329954][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.333224][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.376203][ T5846] Bluetooth: hci2: command tx timeout
[   58.411587][ T5957] netlink: 'syz.1.15': attribute type 11 has an invalid length.
[   58.659765][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.672724][ T5970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19'.
[   58.676495][ T5970] openvswitch: netlink: Message has 4 unknown bytes.
[   58.705084][ T5970] netlink: 'syz.0.19': attribute type 39 has an invalid length.
[   58.708061][ T5965] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   58.711207][ T5965] netlink: 'syz.1.17': attribute type 2 has an invalid length.
[   58.714238][ T5965] netlink: 'syz.1.17': attribute type 7 has an invalid length.
[   58.718291][ T5965] netlink: 'syz.1.17': attribute type 7 has an invalid length.
[   58.721387][ T5965] netlink: 85 bytes leftover after parsing attributes in process `syz.1.17'.
[   58.725626][ T5965] netlink: 'syz.1.17': attribute type 4 has an invalid length.
[   58.728900][ T5965] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   58.732019][ T5965] netlink: 129644 bytes leftover after parsing attributes in process `syz.1.17'.
[   58.750272][ T5970] veth0_macvtap: left promiscuous mode
[   59.093762][ T5982] netlink: 180 bytes leftover after parsing attributes in process `syz.1.22'.
[   59.097740][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.100366][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.103671][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.108113][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.219188][ T5986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23'.
[   60.423183][ T5846] Bluetooth: hci1: command tx timeout
[   60.425082][ T5846] Bluetooth: hci0: command tx timeout
[   60.454624][ T5850] Bluetooth: hci2: command tx timeout
[   60.621075][ T6013] syzkaller0: entered promiscuous mode
[   60.638012][ T6013] syzkaller0: entered allmulticast mode
[   62.454697][ T5850] Bluetooth: hci0: command tx timeout
[   62.455365][ T5846] Bluetooth: hci1: command tx timeout
[   62.534540][ T5850] Bluetooth: hci2: command tx timeout
[   63.036223][ T6061] __nla_validate_parse: 7 callbacks suppressed
[   63.036239][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.201256][ T6069] Zero length message leads to an empty skb
[   63.220718][ T6066] warning: `syz.0.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.375616][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.427633][ T6076] validate_nla: 3 callbacks suppressed
[   63.427644][ T6076] netlink: 'syz.0.50': attribute type 4 has an invalid length.
[   63.431868][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'.
[   63.490768][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'.
[   63.915079][ T6184] netlink: 'syz.2.56': attribute type 10 has an invalid length.
[   64.027761][ T6084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.50'.
[   64.531470][ T6184] syz.2.56 (6184) used greatest stack depth: 18424 bytes left
[   64.749788][ T6218] netlink: 'syz.2.63': attribute type 2 has an invalid length.
[   64.752373][ T6218] netlink: 51 bytes leftover after parsing attributes in process `syz.2.63'.
[   65.067362][ T5850] Bluetooth: hci0: ISO packet for unknown connection handle 35
[   65.093655][ T6223] netlink: 'syz.1.65': attribute type 22 has an invalid length.
[   65.098650][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'.
[   65.199778][ T6225] netlink: 'syz.0.66': attribute type 9 has an invalid length.
[   65.202472][ T6225] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.66'.
[   65.250797][ T6229] netlink: 830 bytes leftover after parsing attributes in process `syz.1.68'.
[   65.257513][ T6229] bond_slave_0: entered promiscuous mode
[   65.259774][ T6229] bond_slave_1: entered promiscuous mode
[   65.313124][ T6233] netlink: 'syz.0.70': attribute type 39 has an invalid length.
[   65.598156][ T6237] tap0: tun_chr_ioctl cmd 21731
[   65.613142][ T6236] tap0: tun_chr_ioctl cmd 2147767521
[   65.649560][ T6241] netlink: 92 bytes leftover after parsing attributes in process `syz.1.72'.
[   65.722467][ T6246] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.74'.
[   65.798608][ T6251] netlink: 'syz.0.76': attribute type 5 has an invalid length.
[   65.804641][ T6251] netlink: 'syz.0.76': attribute type 15 has an invalid length.
[   82.175546][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.179389][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.182260][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.186527][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.189776][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.277220][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.281596][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.285226][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.289038][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.292590][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.315224][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.319265][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.322828][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.326698][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.329998][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.214682][ T5850] Bluetooth: hci3: command tx timeout
[   84.374751][ T5846] Bluetooth: hci4: command tx timeout
[   84.377628][ T5850] Bluetooth: hci5: command tx timeout
[   84.517494][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   84.520420][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   86.294602][ T5850] Bluetooth: hci3: command tx timeout
[   86.454705][ T5850] Bluetooth: hci5: command tx timeout
[   86.457081][ T5850] Bluetooth: hci4: command tx timeout
[   88.374502][ T5846] Bluetooth: hci3: command tx timeout
[   88.535784][ T5846] Bluetooth: hci4: command tx timeout
[   88.538156][ T5846] Bluetooth: hci5: command tx timeout
[   90.454578][ T5850] Bluetooth: hci3: command tx timeout
[   90.614713][ T5850] Bluetooth: hci5: command tx timeout
[   90.617156][ T5850] Bluetooth: hci4: command tx timeout
[   92.732221][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 26117408202 wd_nsec: 26117408831
[  110.648992][   T51] cfg80211: failed to load regulatory.db
[  110.674356][    C1] sched: DL replenish lagged too much
[  142.921722][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  142.927595][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  142.931106][ T6325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  142.934065][ T6325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  142.937612][ T6325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  142.940613][ T6325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  142.943244][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  142.946666][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  142.949512][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  142.953740][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  142.956256][ T6325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  142.959031][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  142.961926][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  142.964981][ T6325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  142.967925][ T6325] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  145.014718][ T5235] Bluetooth: hci7: command tx timeout
[  145.017587][ T5235] Bluetooth: hci6: command tx timeout
[  145.022460][ T6325] Bluetooth: hci8: command tx timeout
[  147.094722][ T5846] Bluetooth: hci6: command tx timeout
[  147.097169][ T5846] Bluetooth: hci7: command tx timeout
[  147.100984][ T6325] Bluetooth: hci8: command tx timeout
[  147.977896][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  147.980817][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  149.174666][ T5235] Bluetooth: hci7: command tx timeout
[  149.177159][ T5235] Bluetooth: hci6: command tx timeout
[  149.180955][ T6325] Bluetooth: hci8: command tx timeout
[  151.254729][ T5846] Bluetooth: hci6: command tx timeout
[  151.257069][ T5846] Bluetooth: hci7: command tx timeout
[  151.259406][ T6325] Bluetooth: hci8: command tx timeout
[  180.777303][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  182.534738][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  182.537293][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  203.938739][ T6333] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  203.946437][   T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  203.950151][ T6336] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  203.955185][   T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  203.959080][ T6336] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  203.962522][   T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  203.967519][ T6336] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  203.971287][   T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  203.975733][ T6338] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  203.979110][   T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  203.983750][ T6338] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  203.997385][ T6338] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  204.002578][ T6338] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  204.051140][ T5849] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  204.054800][ T5849] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  206.778343][ T6336] Bluetooth: hci5: command 0x0406 tx timeout
[  206.780847][ T6336] Bluetooth: hci3: command 0x0406 tx timeout
[  206.782805][ T6336] Bluetooth: hci4: command 0x0406 tx timeout
[  209.418639][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  209.421387][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  241.414674][   T34] INFO: task syz-executor:6304 blocked for more than 152 seconds.
[  241.417983][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  241.445040][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.448679][   T34] task:syz-executor    state:D stack:26920 pid:6304  tgid:6304  ppid:1      task_flags:0x400140 flags:0x00004004
[  241.452732][   T34] Call Trace:
[  241.454071][   T34]  <TASK>
[  241.487282][   T34]  __schedule+0x1798/0x4cc0
[  241.489353][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.491502][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.493630][   T34]  ? __pfx___schedule+0x10/0x10
[  241.538688][   T34]  ? schedule+0x91/0x360
[  241.540493][   T34]  schedule+0x165/0x360
[  241.542340][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.555500][   T34]  __mutex_lock+0x7e6/0x1360
[  241.557570][   T34]  ? __mutex_lock+0x5b6/0x1360
[  241.560021][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  241.562278][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.578979][   T34]  ? __nla_parse+0x40/0x60
[  241.580993][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  241.583168][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  241.588491][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  241.590856][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  241.592993][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.596807][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  241.599297][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  241.601638][   T34]  netlink_rcv_skb+0x208/0x470
[  241.603725][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.606563][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  241.608957][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.611241][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  241.613511][   T34]  netlink_unicast+0x82f/0x9e0
[  241.617346][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  241.619708][   T34]  ? netlink_sendmsg+0x642/0xb30
[  241.621884][   T34]  ? skb_put+0x11b/0x210
[  241.623759][   T34]  netlink_sendmsg+0x805/0xb30
[  241.626666][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.628999][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.631158][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.633465][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.637402][   T34]  __sock_sendmsg+0x21c/0x270
[  241.639444][   T34]  __sys_sendto+0x3bd/0x520
[  241.641436][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  241.643635][   T34]  ? count_memcg_event_mm+0x21/0x260
[  241.646405][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.649256][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.652130][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.656894][   T34]  __x64_sys_sendto+0xde/0x100
[  241.659024][   T34]  do_syscall_64+0xfa/0x3b0
[  241.661038][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.663247][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.667015][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.669132][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.671654][   T34] RIP: 0033:0x7f9552f90a3c
[  241.673614][   T34] RSP: 002b:00007ffe3238dee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  241.678840][   T34] RAX: ffffffffffffffda RBX: 00007f9553d04620 RCX: 00007f9552f90a3c
[  241.682141][   T34] RDX: 0000000000000028 RSI: 00007f9553d04670 RDI: 0000000000000003
[  241.688990][   T34] RBP: 0000000000000000 R08: 00007ffe3238df34 R09: 000000000000000c
[  241.692203][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  241.695860][   T34] R13: 0000000000000000 R14: 00007f9553d04670 R15: 0000000000000000
[  241.698897][   T34]  </TASK>
[  241.700283][   T34] INFO: task syz-executor:6305 blocked for more than 152 seconds.
[  241.703156][   T34]       Not tainted syzkaller #0
[  241.705798][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.709514][   T34] task:syz-executor    state:D stack:26920 pid:6305  tgid:6305  ppid:1      task_flags:0x400140 flags:0x00004004
[  241.716160][   T34] Call Trace:
[  241.717662][   T34]  <TASK>
[  241.718932][   T34]  __schedule+0x1798/0x4cc0
[  241.720930][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.722720][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.724917][   T34]  ? __pfx___schedule+0x10/0x10
[  241.726629][   T34]  ? schedule+0x91/0x360
[  241.728371][   T34]  schedule+0x165/0x360
[  241.729801][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.731614][   T34]  __mutex_lock+0x7e6/0x1360
[  241.733157][   T34]  ? __mutex_lock+0x5b6/0x1360
[  241.736062][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  241.737901][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.739655][   T34]  ? __nla_parse+0x40/0x60
[  241.741185][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  241.742885][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  241.745157][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  241.746983][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  241.748669][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.750404][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  241.752131][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  241.754086][   T34]  netlink_rcv_skb+0x208/0x470
[  241.757055][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.758784][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  241.760540][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.762284][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  241.764278][   T34]  netlink_unicast+0x82f/0x9e0
[  241.766954][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  241.770034][   T34]  ? netlink_sendmsg+0x642/0xb30
[  241.772796][   T34]  ? skb_put+0x11b/0x210
[  241.775636][   T34]  netlink_sendmsg+0x805/0xb30
[  241.777612][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.779816][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.781866][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.784017][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.786795][   T34]  __sock_sendmsg+0x21c/0x270
[  241.788421][   T34]  __sys_sendto+0x3bd/0x520
[  241.789943][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  241.791709][   T34]  ? count_memcg_event_mm+0x21/0x260
[  241.793678][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.799674][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.802062][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.804845][   T34]  __x64_sys_sendto+0xde/0x100
[  241.806692][   T34]  do_syscall_64+0xfa/0x3b0
[  241.808548][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.810354][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.812645][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.816433][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.818574][   T34] RIP: 0033:0x7f2371d90a3c
[  241.820138][   T34] RSP: 002b:00007ffde7c676d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  241.823019][   T34] RAX: ffffffffffffffda RBX: 00007f2372b04620 RCX: 00007f2371d90a3c
[  241.826586][   T34] RDX: 0000000000000028 RSI: 00007f2372b04670 RDI: 0000000000000003
[  241.829280][   T34] RBP: 0000000000000000 R08: 00007ffde7c67724 R09: 000000000000000c
[  241.831963][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  241.835828][   T34] R13: 0000000000000000 R14: 00007f2372b04670 R15: 0000000000000000
[  241.839151][   T34]  </TASK>
[  241.840505][   T34] INFO: task syz-executor:6307 blocked for more than 152 seconds.
[  241.843115][   T34]       Not tainted syzkaller #0
[  241.845521][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.848376][   T34] task:syz-executor    state:D stack:26920 pid:6307  tgid:6307  ppid:1      task_flags:0x400140 flags:0x00004004
[  241.852512][   T34] Call Trace:
[  241.853652][   T34]  <TASK>
[  241.856272][   T34]  __schedule+0x1798/0x4cc0
[  241.857939][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.859980][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.862047][   T34]  ? __pfx___schedule+0x10/0x10
[  241.863859][   T34]  ? schedule+0x91/0x360
[  241.865897][   T34]  schedule+0x165/0x360
[  241.867368][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.869340][   T34]  __mutex_lock+0x7e6/0x1360
[  241.871680][   T34]  ? __mutex_lock+0x5b6/0x1360
[  241.873689][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  241.877616][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.879339][   T34]  ? __nla_parse+0x40/0x60
[  241.880858][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  241.882787][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  241.885460][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  241.887536][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  241.889182][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.890816][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  241.892740][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  241.896232][   T34]  netlink_rcv_skb+0x208/0x470
[  241.898291][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.900413][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  241.902657][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.907134][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  241.909264][   T34]  netlink_unicast+0x82f/0x9e0
[  241.911021][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  241.912932][   T34]  ? netlink_sendmsg+0x642/0xb30
[  241.916078][   T34]  ? skb_put+0x11b/0x210
[  241.917804][   T34]  netlink_sendmsg+0x805/0xb30
[  241.919813][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.922012][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.924228][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.927121][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.929348][   T34]  __sock_sendmsg+0x21c/0x270
[  241.931293][   T34]  __sys_sendto+0x3bd/0x520
[  241.933146][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  241.936073][   T34]  ? count_memcg_event_mm+0x21/0x260
[  241.938178][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.940682][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.943360][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  241.946681][   T34]  __x64_sys_sendto+0xde/0x100
[  241.948686][   T34]  do_syscall_64+0xfa/0x3b0
[  241.950581][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.952758][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.955987][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.957894][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.959941][   T34] RIP: 0033:0x7fe711b90a3c
[  241.961461][   T34] RSP: 002b:00007fff4660f540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  241.964942][   T34] RAX: ffffffffffffffda RBX: 00007fe712904620 RCX: 00007fe711b90a3c
[  241.968059][   T34] RDX: 0000000000000028 RSI: 00007fe712904670 RDI: 0000000000000003
[  241.971261][   T34] RBP: 0000000000000000 R08: 00007fff4660f594 R09: 000000000000000c
[  241.976536][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  241.979659][   T34] R13: 0000000000000000 R14: 00007fe712904670 R15: 0000000000000000
[  241.983069][   T34]  </TASK>
[  241.984850][   T34] 
[  241.984850][   T34] Showing all locks held in the system:
[  241.987994][   T34] 3 locks held by kworker/u8:1/13:
[  241.989683][   T34]  #0: ffff8881087c5948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  241.993498][   T34]  #1: ffffc90000107bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  241.998938][   T34]  #2: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  242.002115][   T34] 1 lock held by khungtaskd/34:
[  242.003722][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  242.007874][   T34] 3 locks held by kworker/1:1/51:
[  242.009831][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.013879][   T34]  #1: ffffc9000079fbc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.021273][   T34]  #2: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: regdb_fw_cb+0x7d/0x1c0
[  242.025499][   T34] 4 locks held by kworker/u11:0/54:
[  242.027653][   T34]  #0: ffff88811dc5e948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.032140][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.037712][   T34]  #2: ffff8881117d00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  242.041832][   T34]  #3: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  242.046554][   T34] 3 locks held by kworker/0:2/793:
[  242.048695][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.053759][   T34]  #1: ffffc90004c6fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.060243][   T34]  #2: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  242.063472][   T34] 5 locks held by kworker/u11:1/5235:
[  242.065625][   T34]  #0: ffff888029f2b148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.069161][   T34]  #1: ffffc9000b007bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.073695][   T34]  #2: ffff88802a098dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  242.079041][   T34]  #3: ffff88802a0980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  242.082850][   T34]  #4: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  242.087490][   T34] 2 locks held by getty/5672:
[  242.089521][   T34]  #0: ffff888104ea90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  242.093589][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  242.097947][   T34] 5 locks held by kworker/u11:2/5846:
[  242.099802][   T34]  #0: ffff88811173c148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.103353][   T34]  #1: ffffc9000334fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.107696][   T34]  #2: ffff888022554dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  242.111038][   T34]  #3: ffff8880225540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  242.115393][   T34]  #4: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  242.118852][   T34] 4 locks held by kworker/u11:3/5849:
[  242.121071][   T34]  #0: ffff888111d7a148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.127646][   T34]  #1: ffffc9000336fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.131895][   T34]  #2: ffff8881103ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  242.136162][   T34]  #3: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  242.140052][   T34] 5 locks held by kworker/u11:4/5850:
[  242.141882][   T34]  #0: ffff88811dbae948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.146830][   T34]  #1: ffffc9000337fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.151817][   T34]  #2: ffff8880394f8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  242.156438][   T34]  #3: ffff8880394f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  242.160025][   T34]  #4: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  242.163897][   T34] 3 locks held by kworker/0:3/5895:
[  242.166422][   T34] 1 lock held by syz.2.84/6273:
[  242.168061][   T34]  #0: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  242.171166][   T34] 1 lock held by syz.0.88/6291:
[  242.172809][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  242.176704][   T34] 4 locks held by syz.1.90/6297:
[  242.178977][   T34] 1 lock held by syz-executor/6304:
[  242.180740][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.183789][   T34] 1 lock held by syz-executor/6305:
[  242.185850][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.188951][   T34] 1 lock held by syz-executor/6307:
[  242.190679][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.193760][   T34] 1 lock held by syz-executor/6319:
[  242.196514][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.200128][   T34] 1 lock held by syz-executor/6320:
[  242.202274][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.206472][   T34] 1 lock held by syz-executor/6323:
[  242.208639][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.212517][   T34] 7 locks held by kworker/u11:5/6325:
[  242.215707][   T34]  #0: ffff888020b2d148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.219450][   T34]  #1: ffffc90006917bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.224892][   T34]  #2: ffff888022e8cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  242.228833][   T34]  #3: ffff888022e8c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  242.232508][   T34]  #4: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  242.238876][   T34]  #5: ffff888020b2db38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  242.242018][   T34]  #6: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  242.245887][   T34] 1 lock held by syz-executor/6329:
[  242.247783][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.250864][   T34] 1 lock held by syz-executor/6331:
[  242.252665][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.256598][   T34] 5 locks held by kworker/u11:6/6333:
[  242.258413][   T34]  #0: ffff888119e66948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.262033][   T34]  #1: ffffc900069d7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.267529][   T34]  #2: ffff888039504dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  242.271469][   T34]  #3: ffff8880395040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  242.276003][   T34]  #4: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  242.280088][   T34] 1 lock held by syz-executor/6334:
[  242.282673][   T34]  #0: ffffffff8f538388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  242.286899][   T34] 5 locks held by kworker/u11:8/6337:
[  242.288696][   T34]  #0: ffff888037d7d148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.292213][   T34]  #1: ffffc90006a07bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.297176][   T34]  #2: ffff888111bf4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  242.300508][   T34]  #3: ffff888111bf40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  242.303663][   T34]  #4: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  242.307280][   T34] 4 locks held by kworker/u11:9/6338:
[  242.309110][   T34]  #0: ffff88811dadc148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  242.312776][   T34]  #1: ffffc90006a17bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  242.317774][   T34]  #2: ffff888110c540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  242.321051][   T34]  #3: ffffffff8f69d0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  242.324827][   T34] 
[  242.325677][   T34] =============================================
[  242.325677][   T34] 
[  242.328417][   T34] NMI backtrace for cpu 1
[  242.328425][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  242.328433][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.328438][   T34] Call Trace:
[  242.328442][   T34]  <TASK>
[  242.328445][   T34]  dump_stack_lvl+0x189/0x250
[  242.328459][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.328467][   T34]  ? __pfx__printk+0x10/0x10
[  242.328480][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  242.328496][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  242.328505][   T34]  ? __pfx__printk+0x10/0x10
[  242.328516][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  242.328528][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  242.328538][   T34]  watchdog+0xf93/0xfe0
[  242.328549][   T34]  ? watchdog+0x1de/0xfe0
[  242.328560][   T34]  kthread+0x711/0x8a0
[  242.328570][   T34]  ? __pfx_watchdog+0x10/0x10
[  242.328579][   T34]  ? __pfx_kthread+0x10/0x10
[  242.328588][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.328597][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.328607][   T34]  ? __pfx_kthread+0x10/0x10
[  242.328615][   T34]  ret_from_fork+0x3fc/0x770
[  242.328624][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  242.328632][   T34]  ? __switch_to_asm+0x39/0x70
[  242.328641][   T34]  ? __switch_to_asm+0x33/0x70
[  242.328649][   T34]  ? __pfx_kthread+0x10/0x10
[  242.328657][   T34]  ret_from_fork_asm+0x1a/0x30
[  242.328671][   T34]  </TASK>
[  242.328674][   T34] Sending NMI from CPU 1 to CPUs 0:
[  242.379458][    C0] NMI backtrace for cpu 0
[  242.379470][    C0] CPU: 0 UID: 0 PID: 6297 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) 
[  242.379492][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.379496][    C0] RIP: 0010:lock_is_held_type+0x31/0x190
[  242.379510][    C0] Code: 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 05 16 c5 26 07 48 89 44 24 08 bb ff ff ff ff 83 3d 55 0b 2a 04 00 0f 84 fe 00 00 00 <65> 8b 05 08 05 27 07 85 c0 0f 85 ef 00 00 00 65 4c 8b 2c 25 08 70
[  242.379516][    C0] RSP: 0018:ffffc90000007138 EFLAGS: 00000002
[  242.379524][    C0] RAX: 78c7544741362800 RBX: 00000000ffffffff RCX: 78c7544741362800
[  242.379529][    C0] RDX: ffff888023671cc0 RSI: 00000000ffffffff RDI: ffffffff8e139ea0
[  242.379533][    C0] RBP: ffffc900000072f0 R08: 0000000000000000 R09: ffffffff81f37911
[  242.379538][    C0] R10: ffffc90000007340 R11: fffff52000000e6f R12: ffffc90000007340
[  242.379542][    C0] R13: dffffc0000000000 R14: ffff888119b56a40 R15: 1ffff92000000e40
[  242.379547][    C0] FS:  00007f79597e86c0(0000) GS:ffff8880b8619000(0000) knlGS:0000000000000000
[  242.379552][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  242.379557][    C0] CR2: 0000562530eae680 CR3: 0000000111064000 CR4: 00000000000006f0
[  242.379583][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  242.379589][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  242.379593][    C0] Call Trace:
[  242.379596][    C0]  <IRQ>
[  242.379601][    C0]  perf_output_begin_forward+0x1b5/0xa80
[  242.379609][    C0]  ? __perf_event_header__init_id+0x3c5/0x480
[  242.379617][    C0]  ? perf_prepare_sample+0x19ab/0x2390
[  242.379623][    C0]  ? __pfx_perf_output_begin_forward+0x10/0x10
[  242.379629][    C0]  ? perf_event_output_forward+0x8f/0x430
[  242.379635][    C0]  ? __pfx_perf_prepare_sample+0x10/0x10
[  242.379643][    C0]  perf_event_output_forward+0x2b2/0x430
[  242.379649][    C0]  ? perf_event_output_forward+0x8f/0x430
[  242.379655][    C0]  ? __pfx_perf_event_output_forward+0x10/0x10
[  242.379662][    C0]  ? __lock_acquire+0xab9/0xd20
[  242.379673][    C0]  ? __perf_event_account_interrupt+0x179/0x250
[  242.379680][    C0]  __perf_event_overflow+0x7cf/0xe10
[  242.379689][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  242.379696][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  242.379707][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  242.379717][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  242.379726][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  242.379738][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  242.379748][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.379757][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  242.379766][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  242.379775][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  242.379786][    C0]  ? ktime_get_update_offsets_now+0x60/0x3d0
[  242.379797][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  242.379802][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  242.379812][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  242.379823][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  242.379832][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  242.379841][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  242.379848][    C0] RIP: 0010:note_gp_changes+0x25f/0x300
[  242.379857][    C0] Code: 20 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 f6 44 24 41 02 75 4f 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4a> c7 04 2b 00 00 00 00 66 42 c7 44 2b 09 00 00 42 c6 44 2b 0b 00
[  242.379862][    C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000206
[  242.379867][    C0] RAX: 78c7544741362800 RBX: 1ffff92000000f64 RCX: 78c7544741362800
[  242.379872][    C0] RDX: 0000000000000002 RSI: ffffffff8d9b78e7 RDI: ffffffff8be33b00
[  242.379876][    C0] RBP: ffffc90000007bd0 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  242.379880][    C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88804b03af94
[  242.379885][    C0] R13: dffffc0000000000 R14: 0000000000000a02 R15: ffff88804b03af80
[  242.379892][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  242.379900][    C0]  ? __pfx_note_gp_changes+0x10/0x10
[  242.379910][    C0]  rcu_core+0x2a0/0x1770
[  242.379920][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  242.379928][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  242.379937][    C0]  ? irqentry_exit+0x74/0x90
[  242.379946][    C0]  ? __pfx_rcu_core+0x10/0x10
[  242.379956][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  242.379963][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  242.379970][    C0]  ? irqentry_exit+0x74/0x90
[  242.379978][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.379990][    C0]  handle_softirqs+0x286/0x870
[  242.379997][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  242.380004][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  242.380010][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  242.380019][    C0]  __irq_exit_rcu+0xca/0x1f0
[  242.380025][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  242.380032][    C0]  irq_exit_rcu+0x9/0x30
[  242.380037][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  242.380046][    C0]  </IRQ>
[  242.380048][    C0]  <TASK>
[  242.380051][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  242.380057][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x5e0
[  242.380065][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 42 53 f9 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  242.380069][    C0] RSP: 0018:ffffc90004d67140 EFLAGS: 00000206
[  242.380074][    C0] RAX: 78c7544741362800 RBX: 1ffff920009ace30 RCX: 78c7544741362800
[  242.380079][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b78e7 RDI: ffffffff8be33b00
[  242.380083][    C0] RBP: ffffc90004d67238 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  242.380087][    C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffffffff8e13f200
[  242.380091][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  242.380098][    C0]  ? __lock_acquire+0xab9/0xd20
[  242.380108][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  242.380116][    C0]  ? unwind_next_frame+0xa5/0x2390
[  242.380126][    C0]  __rcu_read_unlock+0x84/0xe0
[  242.380134][    C0]  ? unwind_next_frame+0xa5/0x2390
[  242.380140][    C0]  unwind_next_frame+0x19ae/0x2390
[  242.380148][    C0]  ? unwind_next_frame+0xa5/0x2390
[  242.380155][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.380161][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  242.380169][    C0]  arch_stack_walk+0x11c/0x150
[  242.380179][    C0]  stack_trace_save+0x9c/0xe0
[  242.380187][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  242.380195][    C0]  save_stack+0xf5/0x1f0
[  242.380205][    C0]  ? __pfx_save_stack+0x10/0x10
[  242.380213][    C0]  ? __free_frozen_pages+0xbc4/0xd30
[  242.380220][    C0]  ? pagetable_dtor_free+0x2d2/0x3b0
[  242.380227][    C0]  ? __mmdrop+0xb5/0x580
[  242.380232][    C0]  ? finish_task_switch+0x3ee/0x950
[  242.380240][    C0]  ? __schedule+0x17a0/0x4cc0
[  242.380248][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  242.380256][    C0]  ? irqentry_exit+0x6f/0x90
[  242.380265][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  242.380271][    C0]  ? lock_release+0x96/0x3e0
[  242.380279][    C0]  ? __mutex_unlock_slowpath+0xcc/0x760
[  242.380284][    C0]  ? __se_sys_perf_event_open+0x194c/0x1d70
[  242.380292][    C0]  ? do_syscall_64+0xfa/0x3b0
[  242.380333][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.380348][    C0]  __reset_page_owner+0x71/0x1f0
[  242.380357][    C0]  __free_frozen_pages+0xbc4/0xd30
[  242.380365][    C0]  pagetable_dtor_free+0x2d2/0x3b0
[  242.380373][    C0]  ? __pfx_pagetable_dtor_free+0x10/0x10
[  242.380381][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  242.380389][    C0]  ? pgd_free+0x1af/0x1e0
[  242.380396][    C0]  __mmdrop+0xb5/0x580
[  242.380402][    C0]  finish_task_switch+0x3ee/0x950
[  242.380411][    C0]  __schedule+0x17a0/0x4cc0
[  242.380421][    C0]  ? irqentry_exit+0x74/0x90
[  242.380431][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  242.380440][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  242.380448][    C0]  ? __pfx___schedule+0x10/0x10
[  242.380456][    C0]  ? irqentry_exit+0x74/0x90
[  242.380468][    C0]  preempt_schedule_irq+0xb5/0x150
[  242.380477][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  242.380486][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  242.380494][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  242.380500][    C0]  irqentry_exit+0x6f/0x90
[  242.380509][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  242.380516][    C0] RIP: 0010:lock_release+0x96/0x3e0
[  242.380525][    C0] Code: c0 3e 03 11 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 70 a0 92 41 83 bf ec 0a 00 00 00 0f 85 1e 02 00 00 49 81 3e 20 33 64 93 <0f> 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b
[  242.380530][    C0] RSP: 0018:ffffc90004d67b78 EFLAGS: 00000206
[  242.380535][    C0] RAX: 0000000000000000 RBX: ffff88811199f800 RCX: 78c7544741362800
[  242.380540][    C0] RDX: 0000000000000006 RSI: ffffffff8be33ae0 RDI: ffffffff8be33aa0
[  242.380544][    C0] RBP: ffffc90004d67cf0 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  242.380548][    C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88811199f950
[  242.380552][    C0] R13: ffffffff81f029fc R14: ffff88811199f8a8 R15: ffff888023671cc0
[  242.380557][    C0]  ? __se_sys_perf_event_open+0x194c/0x1d70
[  242.380568][    C0]  ? lock_release+0x4b/0x3e0
[  242.380576][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.380586][    C0]  __mutex_unlock_slowpath+0xcc/0x760
[  242.380593][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  242.380598][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  242.380606][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  242.380615][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.380625][    C0]  __se_sys_perf_event_open+0x194c/0x1d70
[  242.380635][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  242.380645][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  242.380655][    C0]  ? rcu_is_watching+0x15/0xb0
[  242.380662][    C0]  ? do_syscall_64+0xbe/0x3b0
[  242.380667][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  242.380675][    C0]  do_syscall_64+0xfa/0x3b0
[  242.380681][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.380690][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.380696][    C0]  ? exc_page_fault+0x9f/0xf0
[  242.380705][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.380711][    C0] RIP: 0033:0x7f795898eba9
[  242.380718][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.380722][    C0] RSP: 002b:00007f79597e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  242.380729][    C0] RAX: ffffffffffffffda RBX: 00007f7958bd6090 RCX: 00007f795898eba9
[  242.380733][    C0] RDX: affffff7ffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  242.380737][    C0] RBP: 00007f7958a11e19 R08: 0000000000000000 R09: 0000000000000000
[  242.380741][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  242.380745][    C0] R13: 00007f7958bd6128 R14: 00007f7958bd6090 R15: 00007ffe92c29e98
[  242.380752][    C0]  </TASK>
[  242.774064][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  242.776923][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  242.780881][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.785212][   T34] Call Trace:
[  242.786708][   T34]  <TASK>
[  242.788015][   T34]  dump_stack_lvl+0x99/0x250
[  242.790031][   T34]  ? __asan_memcpy+0x40/0x70
[  242.792091][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.794384][   T34]  ? __pfx__printk+0x10/0x10
[  242.796418][   T34]  vpanic+0x281/0x750
[  242.798184][   T34]  ? __pfx_vpanic+0x10/0x10
[  242.800194][   T34]  ? preempt_schedule+0xae/0xc0
[  242.802325][   T34]  ? preempt_schedule_common+0x83/0xd0
[  242.804681][   T34]  panic+0xb9/0xc0
[  242.806356][   T34]  ? __pfx_panic+0x10/0x10
[  242.808326][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  242.810655][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  242.813331][   T34]  watchdog+0xfd2/0xfe0
[  242.815159][   T34]  ? watchdog+0x1de/0xfe0
[  242.817091][   T34]  kthread+0x711/0x8a0
[  242.818852][   T34]  ? __pfx_watchdog+0x10/0x10
[  242.820943][   T34]  ? __pfx_kthread+0x10/0x10
[  242.822973][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.825255][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.827522][   T34]  ? __pfx_kthread+0x10/0x10
[  242.829542][   T34]  ret_from_fork+0x3fc/0x770
[  242.831572][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  242.833812][   T34]  ? __switch_to_asm+0x39/0x70
[  242.835925][   T34]  ? __switch_to_asm+0x33/0x70
[  242.838003][   T34]  ? __pfx_kthread+0x10/0x10
[  242.840073][   T34]  ret_from_fork_asm+0x1a/0x30
[  242.842190][   T34]  </TASK>
[  242.844454][   T34] Kernel Offset: disabled
[  242.846360][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:11:09  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff99c84660 RBX=ffffffff99d7a7d8 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888023671cc0 RBP=ffffffff84d0752a RSP=ffffc90000006fb0
R8 =0000000000000001 R9 =0000000000000001 R10=ffffc90000007190 R11=fffff52000000e34
R12=0000000000000000 R13=ffffffff99d7a7d8 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d6427 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f79597e86c0 ffffffff 00c00000
GS =0000 ffff8880b8619000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562530eae680 CR3=0000000111064000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007680000 RBX=1ffff1102121725a RCX=00000000ffffffff RDX=0000000000010000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900001e0dc0
R8 =ffff8881090b96bf R9 =1ffff110212172d7 R10=dffffc0000000000 R11=ffffed10212172d8
R12=dffffc0000000000 R13=ffff8881090b92d0 R14=ffff8881090b8000 R15=ffff8881090b96b8
RIP=ffffffff869a0597 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c19000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5071cd0cb4 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f5073fa7d20
XMM02=ffffffff00000015 a003000800000000 XMM03=ffffffffff0410c0 0300100010b0030f
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=0008184208178003 1780043e00000017 XMM07=003e880300000000 8003001000108004
XMM08=0100000408060601 56fe000800000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
