last executing test programs:

35.700151416s ago: executing program 0 (id=163):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'syz_tun\x00', @random='\x00\x00\x00\r\x00'})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000030001baff982179e257d6000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063136a000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
r2 = socket$kcm(0x1e, 0x2, 0x0)
r3 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000008400000001000000030002000a000000030000000b00000000000000930d00000288b600", @ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r4=>0x0, 0x0})
close(r4)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x2, 0x0)
getpid()
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0xffffffffffffff19, 0x0}, 0x0)
recvmsg(r6, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x960, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000500), 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000940)=ANY=[], 0x0, 0x4}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x810)

34.769601754s ago: executing program 0 (id=171):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f00000028c0)=""/4047, 0xfcf}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000140)=""/113, 0x71}, {&(0x7f0000000d80)=""/113, 0x71}], 0x7}, 0x100) (async)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

34.767099164s ago: executing program 0 (id=173):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000", 0x4}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
sendmsg$inet(r4, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000440)="9e834b03ef38de46c283e165de1a10c5af2f396d9d7195f161379e1967c4178ddc4d1ba4b2a7ddb24e43f8b484b555383559c96e91b3d7c1f509e75cf61da3c27b0a93dcfaad18ff92925c9bae113ce49433ab1c42f92fb9fdaf9fc8a85bb75c3661a99a2da613233450deebd7fa2da91a4a4ed8e52f044ab6cc2479ffac9291b9afb9625bbccb88912bd7d3f50764516ac0b21b83858f166be2", 0x9a}, {&(0x7f0000000500)="6a24472e3813286823e85108b482761c812e007218a48600f7bc0a80bc4ec254b3d7f498df421277b734b301ce6141005a9dba154c0e30c1342080b8bc02657064d12483bc96ae75554b751c2fff9b5ed2d866d80646f5811d864427be5ce908c1e65b432f4bf3d872731e3333b14340c6503436779a42d57aecdfe57ca3328fd1815c74abfe9cd55440069ad32d493f7ebc1c5e304760d96472f692ccb3911d5e39422b745f943d22c5e19f86a371fc049bfb0376908ffc46e9ddae80cdad00db20988b1d3d96100c2df0892c7ca6987a438fc1f1e8325810", 0xd9}, {&(0x7f0000000280)="449dc194a7e1a7788f2de30275464a8c7db564e53ebf7b178ec553bfe69aadc0094a2232ef0098157121cbdb0e3a7b8bbc856f24a3fd8ce99c", 0x39}, {&(0x7f0000000600)="c3d680f0130a9a0215b19480018c7d40b02b545dc0ad795c7750ff226230a19292702fe9115399eb83fa6f84ac0efa7b470ab9e9a6427a5b545ec9aec14ad72dd7f101177368e3c6b62f807234106fae1b9a0dea5fb0d86206db", 0x5a}], 0x4, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd03}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x53, [@remote, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x1, [{0x2, 0x2}, {0x6, 0x6, "98e67435"}, {0x0, 0x10, "1c044d88958b2e2f8837c89f397e"}]}, @generic={0x82, 0x12, "90e6abc711a1cfc7c58ada08a6fd8f28"}, @timestamp_prespec={0x44, 0x34, 0x17, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@rand_addr=0x64010101, 0x27}, {@private=0xfffffbff, 0x7}, {@empty, 0x8}, {@local, 0x7fff}, {@loopback, 0x7}]}, @rr={0x7, 0x23, 0x76, [@empty, @empty, @loopback, @remote, @broadcast, @empty, @rand_addr=0x64010102, @multicast1]}, @timestamp={0x44, 0x24, 0xa9, 0x0, 0x0, [0x4, 0xff, 0x4, 0x3, 0xc21, 0x4, 0xfffffffd, 0xb8]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x158}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/146, 0x92}], 0x1, &(0x7f0000000140)=""/37, 0x25}, 0x12100)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000000, 0xfffffffffffffc90, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0x6, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x20)

34.426812056s ago: executing program 2 (id=178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000feffffffffffffff000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x54}, 0x24048880)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x101, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x8003, 0x6, 0x1, {0xa, 0x4e27, 0x8, @private0={0xfc, 0x0, '\x00', 0x5}}}}, 0xb5, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc11"], 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x24004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffe, 0x4}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

34.360282663s ago: executing program 1 (id=179):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)

34.359821534s ago: executing program 1 (id=180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)) (async)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000))
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@deltaction={0x24, 0x31, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044180}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@deltaction={0x24, 0x31, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044180}, 0x0)

34.269758386s ago: executing program 1 (id=181):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r3, 0x0, 0x8010)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a1150015400400142603600e120800060000001001a8001600a400044003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)

34.268611488s ago: executing program 2 (id=182):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x401, <r0=>0x0}, 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r2}, 0x18) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) (async)
recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1100)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r5, 0x1, 0x27, &(0x7f0000000100), 0x4) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="9110450000000000950088fe000000003e0a914aea3d46981a7ea4193f9d2713daa83fa0e82b1b69592ada35f23eabe02f50bbd77d74a5f3983df4bbf0e18903caca2f"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7) (async)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r9 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20008001) (async)
setsockopt$sock_attach_bpf(r9, 0x6, 0x21, 0x0, 0x20) (async)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[], 0xfdef)

34.19862009s ago: executing program 1 (id=183):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2000004}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8001, <r5=>0x0}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x2c, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r6, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0)

34.109081594s ago: executing program 2 (id=184):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82a60, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x3, 0x43fe, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x40)
r0 = socket$kcm(0x25, 0x5, 0x0)
sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000380)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x8000)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x5e, 0xca, &(0x7f0000000440)="e890843e3e6bd7c58916affae7f8a3d130d342d9d875f7e200212834719f5b1ce3ec9da920d4fea3027738b82c00550cae817d43551e6cf2db97396dbc0bab47b80cb3823b73838bb424ab1edb424082902ab0660e5abd18f520ac9afa4e", &(0x7f00000004c0)=""/202, 0x10, 0x0, 0x68, 0x76, &(0x7f0000000600)="de0e262c1b5713d00834a88ff7735073a7f27ca8a22dfa09a44210bd05d134a684fe309b9bf17763e85db7cf55200d5168682503c0416d0f99163832d52741fa9446b16d34d7d03b126116c59d1c0409a7f3b3e5b73d130670d475af6549d7d532fcd9c482098bda", &(0x7f00000006c0)="62f7e53e610d28b916f1d19327e1cb5c00289624e07fcb375a9f701cdb3a458988bfc65554259e222f2a1c727272c5d89f68af371401936d0a1f447db1b14472420ceaf76693e46a4a156396667f0265994ca04fff9617bd8a8e010a051cbbeb804886e654f81580bbb78fae98827ef804fdbc14d64d"}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r1, 0x1, 0x2}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060108000000000000000007000005050001"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x15)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300093400000000000000000000000300060000000e00020000007f000001000000000000000002000100000000000300020100000000030005000000000002000000e0000001000000000000000002000a0003000000f8ffffffffffffff12000800200400002490cf6710fdb471532b8b52fef5681c66c8335136fc6e89f451b489718f179ff9082dc4c9ff9a6982e9d522d900b32cd583a46cdbbb568ce8b536385e0b2ad555b5d702f96e2bf8d59657bdc237fc9d87be5e96cac6dfad7eee355fc19b8878bb4970a42d80435d628118d18304a7fa4a1bcadf03b125843c3ed673dbe4a31269b25136000000000e001800050362005a3983fbad079c31dc1db609d41612c6e273de07dc4601a1514029dcf81dd3296f13221ee3f8d4834c8643e87e9dbecf2b649731bd61163f4949b02623e3ccd854e21d78b3397b81957bcfa5bf6e994d0b15b5ccbfc154f6630fd8c5a91772b0c66e000000000000080012"], 0x1a0}}, 0x0)
sendmsg$key(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2, 0x5, 0x4, 0x3, 0x14, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0x7, 0x0, 0x40}, @sadb_x_sec_ctx={0x3, 0x18, 0x2, 0x80, 0xc, "fcbe4a5e39f43c36c75d5831"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e26}, @sadb_ident={0x2, 0xb, 0x8, 0x0, 0x5}, @sadb_x_nat_t_type={0x1, 0x14, 0x14}, @sadb_x_sec_ctx={0x9, 0x18, 0x8d, 0x5, 0x40, "ab9ea1f256f4f422768ed520c13ff53a50abe4f431379244436f4fab8fd8236dd0a772ed99ad3f4d6fcef12a9b7a887a8495a8e39e19732aa1f80e28ceeda661"}]}, 0xa0}}, 0x40051)
close(r0)
sendmsg$nl_generic(r5, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000ec0)={0x4d8, 0x21, 0x400, 0x70bd26, 0x25dfdbfb, {0x10}, [@nested={0x199, 0x116, 0x0, 0x1, [@generic="4e4c4f45f3149a4d8caee16902cf", @nested={0x4, 0x93}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @generic="1ead15e5ce748e5625cdf33d004218b0fd3c2c14ae2b9c6e4cf15ac02e807a0d626fad9ba44212f98d522ee8b96420097eaba24c377383e594b0569da09ab40579016e08c5", @generic="23afe2160479ba2ba67b0023a4c4db5fedf964691aeb22435efc3bba6a79e997526889aae510496b46cfea694c7aa3862c5302a4457fec8c9edf2e554e542abf457b4e994e64d6a22b39a876cda69e64d2b695f5de38d6ae4ac45af2e6157b5e49c9", @typed={0xc7, 0xc9, 0x0, 0x0, @binary="4d4ccd7d25eda555f7f86ef0f40d164fe86595a77fd4130bde752c91076a7ab8bba987b7feb65993984f8b58c372bfa109f289744c4681636160abc8f2f806b0ad5e8d85c2af333c58e104a167ccec8f40b90a1024f2da1db7cbf3afc2b40f0db2e1865044b3aca52ca00b3b280d7705b32a3e1339a83ebe9a1902cfbfbafda8b5db75b08fb3c74e2ff7b9ea11293a777f9a0600f765c0e7adad0615c420a677172038e8c516674b49926160db45a2d66d191e2bb7990c11388b9ada7dd5377414b076"}]}, @generic="7ebde5af143b56aaece0eb72baab10e5df73811b771b9323a8a10128e954854cb931f47f640edf6b0df5617efd9b1d116632c41e207d911cf3bf85f66c629b523f88dd9b44f162161471a4943ff2b9cc5348275df679ac286c7ded7ff09042eb985514aec4d7350d8927dc8bea77eff9e9c2d2f3ad73ee6aa642797600645f12182e1df4014e00e267a5aa8665c4", @generic="1489a07771df339775c72b5074d34bc38fb30eabbb0b9ef1e0259f88137ea0260c570ec7653bd5d414cd", @generic="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", @typed={0x8, 0xeb, 0x0, 0x0, @fd=r2}, @generic="5a908be38d351f0b22605e75b5", @nested={0x15d, 0x75, 0x0, 0x1, [@nested={0x4, 0x5a}, @typed={0x8, 0x13, 0x0, 0x0, @fd=r1}, @generic="94960668e4457f0d92e989fa348d6685373f8c9a4e40da36c032d49cf9c0d6c36bd70a901f14e2c8981436f52915e13ac1ed3afbc321801eb77c4dfb2d284b9620d0f30c72feff8df6ee780a8d", @generic="47a4ed5c787c2d83d8c68376b6e1f98191eb921ea8cc189b242458ccdf8747658e8131104138d1e46a8c8aab42801ec9", @nested={0x4, 0x2}, @typed={0xc5, 0xdb, 0x0, 0x0, @binary="d6a86cfe75ee8818eea5ed21301e415f7387425180dcc88fb739a2e90100b4afdf4f21fbb5c32b95a4bc7d3b2e4a29a28b05887fe65ae1a71839e980dcbd6ff394c72e6cdfa722925d0ebef09efcbb52130c706040dd5b5c7e4cd0d8cc9d13498d0ae2c014e5e05abfc801adad9742da694cda6510b4f110fe47dcb9edbaa35e76ababbae267fe5639918839563641304f0a69597434344bff3a9535e8a364026f925987ea142aa020a8d18fe86264b2da34c1ed453bdb283c1653c6b16670db8e"}, @nested={0x4, 0xce}]}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x40095}, 0x8885)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

33.990123608s ago: executing program 1 (id=185):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000340))
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100010, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r6, {0x7, 0x8}, {0xffff, 0xe}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bb17000047c843b0000100002800c00168006003600843b000000800000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r8, 0x2, 0x0, 0x80000000, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000000000a01030000000000000000010000010900010073597a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002400ce0556228000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000200000000000a"], 0xb8}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40080}, 0x8815)

33.989025486s ago: executing program 2 (id=186):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10100) (async)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) (async)
r2 = socket$kcm(0x28, 0x5, 0x0)
recvmsg$kcm(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x12101) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) (async, rerun: 32)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) (async, rerun: 32)
socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32, @ANYBLOB="000069b40cc0f91700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000c30000001001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0xa) (rerun: 32)
socketpair(0x11, 0x6, 0x1, 0x0) (async, rerun: 64)
r6 = socket$kcm(0xa, 0x1, 0x0) (rerun: 64)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x111, @mcast1, 0xe}, 0x80, 0x0, 0xfffffee0}, 0x20004040)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f00000008c0)=@deltfilter={0x498, 0x2d, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0xb}, {0x1, 0x2}}, [@f_tcindex={{0xc}, {0x468, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}, @TCA_TCINDEX_POLICE={0x444, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3ea, 0x3, 0x80000001, 0x7, 0x6, 0xfffffffe, 0x1, 0xa, 0xbe3b, 0x278, 0x6, 0xa1ba, 0xc0f8, 0x4, 0xc8e, 0x8cf, 0x7f, 0x7ff, 0x1, 0x79, 0x0, 0xffff0001, 0x40, 0x1ff, 0xfa44, 0x2, 0x6, 0x6, 0x401, 0x532f5029, 0x5, 0x4, 0x7ff, 0x5, 0xfffffff8, 0x9, 0x2, 0x1, 0x7fffffff, 0x8, 0xf, 0x1, 0x212, 0xd90e, 0x3fc00000, 0x80, 0x8, 0x7f, 0x78, 0xc, 0x7, 0x6, 0x7, 0x5, 0xb150, 0x0, 0xffffff81, 0x35638419, 0x1, 0x10001, 0x1000, 0x2, 0x100, 0x4, 0x400, 0x1, 0xfffffffc, 0x3, 0x0, 0xd6c8, 0xffff, 0x10001, 0x4, 0x2, 0x3c, 0x10001, 0x9, 0x8001, 0xffffffff, 0x912552b, 0x9, 0xff, 0x6, 0x8, 0x81, 0x6, 0x9, 0x3, 0x3, 0x3, 0x7, 0x10000, 0x3, 0x6, 0xb4a, 0x5, 0x0, 0xf67000, 0xffff, 0x9, 0x2, 0x7, 0x6, 0x0, 0x79e, 0x5, 0x7, 0x1, 0x5, 0xb5c, 0x9da4, 0x401, 0x2, 0x7fff, 0x1, 0x3, 0x5, 0x7, 0x7, 0x6d23, 0x101, 0x2, 0x7, 0x4, 0x5, 0xb, 0x4, 0x1, 0x8001, 0xd7e9, 0x7318, 0x8, 0x8, 0x7, 0x8, 0x400, 0x9, 0x2, 0x1, 0x7fffffff, 0xfffffff7, 0x3, 0x401, 0x7, 0x1, 0x9, 0xb6e6, 0x5, 0x1fc00, 0x4, 0x10, 0x8, 0x7, 0x9, 0x3, 0x1, 0xfffffff1, 0x4, 0xc5b, 0x15cf, 0x5, 0x6, 0x81, 0x0, 0x6, 0x2, 0x7, 0x6, 0x2a, 0x6, 0x80000000, 0xe, 0x200, 0x0, 0x80000001, 0x0, 0xae40000, 0x6, 0x3, 0xf5, 0xd3d67ba2, 0x9, 0x2, 0xa, 0x10001, 0xbc2a, 0xb9, 0xb7, 0x91, 0x7, 0x8000, 0xfffffffd, 0x5, 0x100, 0xc6, 0x40, 0x5, 0xffff, 0x1, 0x101, 0x2, 0x5, 0x1, 0xe05, 0x508a, 0x1, 0xf752, 0x7, 0x6, 0x1000, 0x8, 0x8, 0x8a, 0x6f9100, 0x9, 0x1, 0x9, 0x5, 0x2, 0x7, 0x7fff, 0x8, 0xd, 0x0, 0x7, 0xd1e, 0x2, 0x857, 0x8000, 0x2, 0x3ff, 0x3, 0x101, 0xd, 0x2, 0x8001, 0xef4, 0x7, 0x9a28, 0x1, 0xc9d7, 0x1, 0x334, 0x80000001, 0x9, 0x8, 0xc9e7, 0x2, 0xea4d, 0x80000000, 0x1, 0x1, 0x4, 0x4, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x8, 0x10001, 0x7b, {0x4, 0x1, 0x6ce, 0x0, 0x2, 0x2}, {0x2, 0x2, 0xff, 0x6, 0x3, 0x68bc}, 0x69bf, 0x9, 0xb37a}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x80}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x5}, 0x87) (async)
sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x1}, 0x80, 0x0}, 0x20000000) (async, rerun: 64)
recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000280)=@ax25={{0x3, @default}, [@rose, @bcast, @netrom, @bcast, @netrom, @default, @null, @null]}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/188, 0xbc}, {&(0x7f0000000840)=""/122, 0x7a}, {&(0x7f0000000e00)=""/200, 0xc8}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x7, &(0x7f0000003300)=""/4096, 0x1000}, 0x100) (rerun: 64)

33.929758386s ago: executing program 1 (id=187):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001080)=ANY=[@ANYBLOB="00017c000004004280080001800400f45b1f052dc44d601d8004000280bae5a6175f48e293867b36721a8144ec8d9466700db12cd33b605d24bf30102904e4b64cc5d7044255d741b58731c2b5d6ed4d6ec9317ba0de25932b62a9269b8e4deddbca18"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 64)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) (async)
close(0xffffffffffffffff) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ec9dafdd17be"}) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

27.845047836s ago: executing program 0 (id=188):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x29, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000200)=[0x0, 0x0], <r3=>0x0, 0x29, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x504268fee9f18c25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000400000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0)

27.82851238s ago: executing program 2 (id=189):
socket$kcm(0x2a, 0x2, 0x0) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x8, 0x200, 0x889, 0x0, 0xfffffffffffbfffc, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89ff, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) (async)
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x20) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) (rerun: 64)
socket$kcm(0x2d, 0x2, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000100000000000004100000bb7f1a00c600feff0000004000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c00"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)

27.57964972s ago: executing program 2 (id=190):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094)
r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x108108, 0x10000, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)
r2 = getpid()
r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x6, 0xe7, 0x35, 0x0, 0x79, 0x800, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xffffffff, 0x1, 0x0, 0x6, 0x5, 0x1, 0x0, 0x50000, 0x0, 0x100100000000}, r2, 0xb, r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@map=r4, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0), 0x0}, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x2}, 0x4, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffdfc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x0, 0x2f, 0x0, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r7}, 0x38)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRESHEX=r0], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x307)

21.267859521s ago: executing program 0 (id=191):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e6174001400048008000240000000000800014006"], 0xa4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xcec3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x599}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @NFCTH_STATUS={0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f0000000040)}, {&(0x7f00000007c0)=""/192, 0xc0}], 0x6, &(0x7f0000000880)=""/138, 0x8a}, 0x20)

18.24488885s ago: executing program 32 (id=187):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001080)=ANY=[@ANYBLOB="00017c000004004280080001800400f45b1f052dc44d601d8004000280bae5a6175f48e293867b36721a8144ec8d9466700db12cd33b605d24bf30102904e4b64cc5d7044255d741b58731c2b5d6ed4d6ec9317ba0de25932b62a9269b8e4deddbca18"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 64)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) (async)
close(0xffffffffffffffff) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ec9dafdd17be"}) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

15.119908414s ago: executing program 0 (id=193):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea6086416653c2fd4d00af36514001ac004000202080002000300010003000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="c8000000ed0300042cbd7000fedbdf25c40fbab0d451d4eb8befa8986504cb9a38bfbc1837aed2482620122bff57e7036d56aef7e38244293f4b83cdc4c3b5dbf3ab3c7e5a625ff185460f58e392a4e2c7f4e86bfc629c1696566e1dac63fbbad105fdb03a0498f4d50cb22d6c54a6cbd9f8b7ab5b219ce5876755cf7e75bb65cd388cc710e40822886c98212a9eaba9e63ad10e05ef297c4c0ea7deaaee01c7b62777e8612d216e79b3ad6cc8fb479c9fbb0a7f1e0ed541991f0fc6152150c7c3f73b3774000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000)
r6 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="2d4624e18a8dc16a6e119d96f1ba18", 0xf}], 0x1}, 0x200000fd)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x1e, 0x2, 0x0)
recvmsg(r8, 0x0, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000080)={r5})
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x101c0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x3}, 0x50)

11.766870668s ago: executing program 33 (id=190):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094)
r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x108108, 0x10000, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)
r2 = getpid()
r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x6, 0xe7, 0x35, 0x0, 0x79, 0x800, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xffffffff, 0x1, 0x0, 0x6, 0x5, 0x1, 0x0, 0x50000, 0x0, 0x100100000000}, r2, 0xb, r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@map=r4, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0), 0x0}, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x2}, 0x4, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffdfc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x0, 0x2f, 0x0, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r7}, 0x38)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRESHEX=r0], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x307)

0s ago: executing program 34 (id=193):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea6086416653c2fd4d00af36514001ac004000202080002000300010003000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="c8000000ed0300042cbd7000fedbdf25c40fbab0d451d4eb8befa8986504cb9a38bfbc1837aed2482620122bff57e7036d56aef7e38244293f4b83cdc4c3b5dbf3ab3c7e5a625ff185460f58e392a4e2c7f4e86bfc629c1696566e1dac63fbbad105fdb03a0498f4d50cb22d6c54a6cbd9f8b7ab5b219ce5876755cf7e75bb65cd388cc710e40822886c98212a9eaba9e63ad10e05ef297c4c0ea7deaaee01c7b62777e8612d216e79b3ad6cc8fb479c9fbb0a7f1e0ed541991f0fc6152150c7c3f73b3774000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000)
r6 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="2d4624e18a8dc16a6e119d96f1ba18", 0xf}], 0x1}, 0x200000fd)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x1e, 0x2, 0x0)
recvmsg(r8, 0x0, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000080)={r5})
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x101c0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x3}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25867' (ED25519) to the list of known hosts.
syzkaller login: [   51.549111][ T5765] cgroup: Unknown subsys name 'net'
[   51.659352][ T5765] cgroup: Unknown subsys name 'cpuset'
[   51.664821][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.556210][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.443230][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.455906][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.459013][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.462291][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.466120][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.468466][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.474107][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.485877][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.489701][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.493027][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.496363][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.499820][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.502641][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.502718][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.508809][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.747701][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   57.799583][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   57.823093][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.939591][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.943051][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.946591][ T5838] bridge_slave_0: entered allmulticast mode
[   57.950022][ T5838] bridge_slave_0: entered promiscuous mode
[   57.974126][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.977219][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.980360][ T5838] bridge_slave_1: entered allmulticast mode
[   57.984079][ T5838] bridge_slave_1: entered promiscuous mode
[   57.994660][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.997951][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.000830][ T5835] bridge_slave_0: entered allmulticast mode
[   58.004609][ T5835] bridge_slave_0: entered promiscuous mode
[   58.021388][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.024286][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.027999][ T5835] bridge_slave_1: entered allmulticast mode
[   58.030908][ T5835] bridge_slave_1: entered promiscuous mode
[   58.070135][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.074007][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.077117][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.080111][ T5831] bridge_slave_0: entered allmulticast mode
[   58.083847][ T5831] bridge_slave_0: entered promiscuous mode
[   58.095756][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.098798][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.101094][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.103287][ T5831] bridge_slave_1: entered allmulticast mode
[   58.106146][ T5831] bridge_slave_1: entered promiscuous mode
[   58.110741][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.139349][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.143528][ T5838] team0: Port device team_slave_0 added
[   58.163742][ T5838] team0: Port device team_slave_1 added
[   58.167820][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.189118][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.193315][ T5835] team0: Port device team_slave_0 added
[   58.210304][ T5835] team0: Port device team_slave_1 added
[   58.219447][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.221677][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.229972][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.242084][ T5831] team0: Port device team_slave_0 added
[   58.244227][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.247201][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.255030][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.266043][ T5831] team0: Port device team_slave_1 added
[   58.272743][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.275529][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.283546][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.300923][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.303158][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.311354][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.316026][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.318224][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.326314][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.330596][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.332725][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.340858][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.375914][ T5838] hsr_slave_0: entered promiscuous mode
[   58.378311][ T5838] hsr_slave_1: entered promiscuous mode
[   58.402448][ T5831] hsr_slave_0: entered promiscuous mode
[   58.404619][ T5831] hsr_slave_1: entered promiscuous mode
[   58.407503][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   58.409256][ T5831] Cannot create hsr debugfs directory
[   58.414280][ T5835] hsr_slave_0: entered promiscuous mode
[   58.417129][ T5835] hsr_slave_1: entered promiscuous mode
[   58.419199][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   58.420913][ T5835] Cannot create hsr debugfs directory
[   58.634914][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.642202][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.652280][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.657767][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.695329][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.700302][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.704918][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.710132][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.779579][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.789976][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.797296][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.801763][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.830965][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.857458][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   58.870250][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.872541][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.884681][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.887032][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.903737][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.929357][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.936405][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   58.951574][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   58.961754][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.964277][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.968554][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.971231][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.982217][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.984407][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.000734][ T3939] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.002987][ T3939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.067239][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.117281][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.162925][ T5838] veth0_vlan: entered promiscuous mode
[   59.168994][ T5838] veth1_vlan: entered promiscuous mode
[   59.210257][ T5838] veth0_macvtap: entered promiscuous mode
[   59.215318][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.218694][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.228231][ T5838] veth1_macvtap: entered promiscuous mode
[   59.248964][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.259564][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.273951][ T5835] veth0_vlan: entered promiscuous mode
[   59.285316][ T5835] veth1_vlan: entered promiscuous mode
[   59.287581][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.297425][ T5831] veth0_vlan: entered promiscuous mode
[   59.299238][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.301917][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.304623][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.314003][ T5831] veth1_vlan: entered promiscuous mode
[   59.331847][ T5835] veth0_macvtap: entered promiscuous mode
[   59.343399][ T5835] veth1_macvtap: entered promiscuous mode
[   59.372010][ T5831] veth0_macvtap: entered promiscuous mode
[   59.372235][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.380819][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.383418][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.383941][ T5831] veth1_macvtap: entered promiscuous mode
[   59.394760][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.406325][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.409034][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.419486][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.422176][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.435776][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.438186][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.446817][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.457732][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.481824][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.484648][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.494459][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.498476][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.506605][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.515485][ T5843] Bluetooth: hci1: command tx timeout
[   59.520095][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.522581][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.526958][ T5843] Bluetooth: hci0: command tx timeout
[   59.582232][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.584675][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.595404][ T5843] Bluetooth: hci2: command tx timeout
[   59.612718][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.624571][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.665203][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.667630][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.690072][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4'.
[   59.692806][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   59.714232][ T5906] netlink: 'syz.2.4': attribute type 10 has an invalid length.
[   59.734338][ T5906] batman_adv: batadv0: Adding interface: netdevsim0
[   59.740661][ T5906] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.763763][ T5906] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   60.434952][    C0] hrtimer: interrupt took 27145 ns
[   60.808501][ T5947] =======================================================
[   60.808501][ T5947] WARNING: The mand mount option has been deprecated and
[   60.808501][ T5947]          and is ignored by this kernel. Remove the mand
[   60.808501][ T5947]          option from the mount to silence this warning.
[   60.808501][ T5947] =======================================================
[   60.858359][ T5947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.878114][ T5947] netlink: 'syz.0.13': attribute type 2 has an invalid length.
[   60.880736][ T5947] netlink: 'syz.0.13': attribute type 8 has an invalid length.
[   60.883409][ T5947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13'.
[   61.568516][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.606315][ T5843] Bluetooth: hci0: command tx timeout
[   61.606354][ T5833] Bluetooth: hci1: command tx timeout
[   61.631097][ T5964] : port 1(vlan0) entered blocking state
[   61.633008][ T5964] : port 1(vlan0) entered disabled state
[   61.634882][ T5964] vlan0: entered allmulticast mode
[   61.639897][ T5964] veth0_vlan: entered allmulticast mode
[   61.642555][ T5964] vlan0: entered promiscuous mode
[   61.648966][ T5964] : port 1(vlan0) entered blocking state
[   61.650949][ T5964] : port 1(vlan0) entered forwarding state
[   61.675282][ T5833] Bluetooth: hci2: command tx timeout
[   61.805946][ T5971] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.21'.
[   61.808799][ T5971] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   61.957914][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'.
[   61.961403][ T5978] netlink: 708 bytes leftover after parsing attributes in process `syz.1.23'.
[   61.964495][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'.
[   61.968573][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'.
[   61.971699][ T5978] netlink: 763 bytes leftover after parsing attributes in process `syz.1.23'.
[   62.033200][ T5981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.293729][ T5997] netlink: 'syz.2.29': attribute type 23 has an invalid length.
[   62.298726][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   62.707567][ T6012] warning: `syz.2.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.069259][ T6037] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   63.677140][ T5833] Bluetooth: hci0: command tx timeout
[   63.691127][ T5833] Bluetooth: hci1: command tx timeout
[   63.756581][ T5833] Bluetooth: hci2: command tx timeout
[   64.121568][ T6020] syz.0.36 (6020) used greatest stack depth: 19264 bytes left
[   64.258456][ T6071] netlink: 'syz.2.55': attribute type 21 has an invalid length.
[   64.262874][ T6070] Illegal XDP return value 4294967274 on prog  (id 107) dev N/A, expect packet loss!
[   64.267692][ T6071] netlink: 'syz.2.55': attribute type 1 has an invalid length.
[   64.310715][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.314152][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.318629][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.321676][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.324296][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.476630][ T6072] chnl_net:caif_netlink_parms(): no params data found
[   64.591191][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.593452][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.610443][ T6072] bridge_slave_0: entered allmulticast mode
[   64.613069][ T6072] bridge_slave_0: entered promiscuous mode
[   64.637040][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.639303][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.641542][ T6072] bridge_slave_1: entered allmulticast mode
[   64.644082][ T6072] bridge_slave_1: entered promiscuous mode
[   64.680771][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.686986][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.709879][ T6072] team0: Port device team_slave_0 added
[   64.713012][ T6072] team0: Port device team_slave_1 added
[   64.732437][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.734666][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.746400][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.750643][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.752833][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.762071][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.784437][ T6072] hsr_slave_0: entered promiscuous mode
[   64.786930][ T6072] hsr_slave_1: entered promiscuous mode
[   64.789481][ T6072] debugfs: 'hsr0' already exists in 'hsr'
[   64.797820][ T6072] Cannot create hsr debugfs directory
[   64.960405][ T6072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.986661][ T6096] netlink: 'syz.2.62': attribute type 6 has an invalid length.
[   64.989066][ T6096] __nla_validate_parse: 6 callbacks suppressed
[   64.989072][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[   65.026422][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.029220][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.031750][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.034762][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.039802][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.591316][ T6072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.687425][ T6072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.775575][ T6072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.838173][ T6097] chnl_net:caif_netlink_parms(): no params data found
[   65.845880][ T5833] Bluetooth: hci2: command tx timeout
[   65.933315][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.936318][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.939202][ T6097] bridge_slave_0: entered allmulticast mode
[   65.942861][ T6097] bridge_slave_0: entered promiscuous mode
[   65.954639][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.957598][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.960508][ T6097] bridge_slave_1: entered allmulticast mode
[   65.964268][ T6097] bridge_slave_1: entered promiscuous mode
[   65.992435][ T6097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.999856][ T6097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.016041][ T6072] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.044033][ T6072] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.062250][ T6097] team0: Port device team_slave_0 added
[   66.070552][ T6072] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.078495][ T6097] team0: Port device team_slave_1 added
[   66.080314][ T6072] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.132093][ T6097] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.134559][ T6097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.145396][ T6097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.151379][ T6097] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.153957][ T6097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.163503][ T6097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.192304][ T6113] option changes via remount are deprecated (pid=6112 comm=syz.2.65)
[   66.205845][ T6097] hsr_slave_0: entered promiscuous mode
[   66.208702][ T6097] hsr_slave_1: entered promiscuous mode
[   66.211258][ T6097] debugfs: 'hsr0' already exists in 'hsr'
[   66.213453][ T6097] Cannot create hsr debugfs directory
[   66.349241][ T6097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.389935][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.396068][ T5833] Bluetooth: hci0: command tx timeout
[   66.405634][ T6097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.425672][ T6072] 8021q: adding VLAN 0 to HW filter on device team0
[   66.430699][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.432886][ T3939] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.448092][ T6097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.458506][ T3939] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.460913][ T3939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.496852][ T6097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.567720][ T6097] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.573143][ T6097] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.588527][ T6097] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.597874][ T6097] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.637815][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.690063][ T6072] veth0_vlan: entered promiscuous mode
[   66.711049][ T6072] veth1_vlan: entered promiscuous mode
[   66.716812][ T6097] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.749405][ T6097] 8021q: adding VLAN 0 to HW filter on device team0
[   66.756676][ T6072] veth0_macvtap: entered promiscuous mode
[   66.762706][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.765547][ T3985] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.771348][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.774104][ T3985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.782014][ T6072] veth1_macvtap: entered promiscuous mode
[   66.814325][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.829641][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.848856][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.867869][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.879214][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.899539][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.953203][ T6134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.67'.
[   66.969433][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.971864][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.991926][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.996841][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.089531][ T6097] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.122302][ T6097] veth0_vlan: entered promiscuous mode
[   67.127432][ T5833] Bluetooth: hci1: command tx timeout
[   67.127889][ T6097] veth1_vlan: entered promiscuous mode
[   67.146575][ T6097] veth0_macvtap: entered promiscuous mode
[   67.150446][ T6097] veth1_macvtap: entered promiscuous mode
[   67.159478][ T6097] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.168658][ T6097] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.174512][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.181563][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.250573][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.254020][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.364815][ T6149] veth0_vlan: entered allmulticast mode
[   67.424351][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.429338][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.483219][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.490146][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.583225][ T6159] netlink: 'syz.2.74': attribute type 10 has an invalid length.
[   67.722533][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.733038][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.774726][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.777233][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.780149][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.782502][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.792415][ T6159] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   67.844852][ T6162] netlink: 'syz.1.75': attribute type 2 has an invalid length.
[   67.848180][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.75'.
[   68.170545][ T6163] netlink: 'syz.1.75': attribute type 13 has an invalid length.
[   68.489026][ T5833] Bluetooth: hci0: command tx timeout
[   68.631425][ T6176] netlink: 830 bytes leftover after parsing attributes in process `syz.2.79'.
[   68.639033][ T6180] netlink: 128 bytes leftover after parsing attributes in process `syz.0.80'.
[   68.734555][ T6186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'.
[   68.744886][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   68.752251][ T6186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'.
[   69.107430][ T6192] netlink: 68 bytes leftover after parsing attributes in process `syz.2.82'.
[   69.368502][ T5833] Bluetooth: hci1: command tx timeout
[   70.294494][ T6213] netlink: 220 bytes leftover after parsing attributes in process `syz.1.88'.
[   70.508472][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'.
[   70.511164][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'.
[   70.578053][ T5833] Bluetooth: hci0: command tx timeout
[   71.441536][ T5833] Bluetooth: hci1: command tx timeout
[   71.650335][ T6233] netlink: 'syz.2.93': attribute type 1 has an invalid length.
[   71.955630][ T6237] netlink: 'syz.1.94': attribute type 10 has an invalid length.
[   71.959040][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.962248][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.046628][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.049137][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.051961][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.054474][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.065483][ T6237] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   72.643808][ T5833] Bluetooth: hci0: command tx timeout
[   72.711629][ T6244] Zero length message leads to an empty skb
[   72.740267][ T6246] netlink: 'syz.1.97': attribute type 6 has an invalid length.
[   73.517479][ T5833] Bluetooth: hci1: command tx timeout
[   73.673742][ T6253] netlink: 'syz.2.99': attribute type 32 has an invalid length.
[   73.686201][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.99'.
[   73.862530][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'.
[   73.875333][ T6260] netlink: 572 bytes leftover after parsing attributes in process `syz.1.100'.
[   74.836323][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.104'.
[   74.839508][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.104'.
[   74.843163][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.104'.
[   75.507724][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.112'.
[   75.517740][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.112'.
[   75.533545][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.112'.
[   75.681487][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'.
[   75.751878][ T6328] netlink: 180 bytes leftover after parsing attributes in process `syz.2.118'.
[   75.754677][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   75.765939][ T6328] netlink: 'syz.2.118': attribute type 10 has an invalid length.
[   75.771051][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.774143][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.784677][ T6328] bond0: (slave bridge0): Releasing backup interface
[   75.790244][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.793097][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.795981][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.798988][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.809420][ T6328] team0: Port device bridge0 added
[   76.527254][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   76.529432][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   76.730665][ T6378] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.134'.
[   76.757035][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'.
[   76.823169][ T6380] netlink: 'syz.0.132': attribute type 9 has an invalid length.
[   76.845190][ T6380] netlink: 'syz.0.132': attribute type 11 has an invalid length.
[   76.856173][ T6380] netlink: 'syz.0.132': attribute type 12 has an invalid length.
[   76.871273][ T6380] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.132'.
[   76.878995][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[   76.887430][ T6394] syz.1.137 uses obsolete (PF_INET,SOCK_PACKET)
[   76.891988][ T6394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.980892][ T6424] netlink: 'syz.1.146': attribute type 10 has an invalid length.
[   78.001256][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.006430][ T6424] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   78.348732][ T6452] openvswitch: netlink: VXLAN extension 30 out of range max 1
[   78.646345][ T6465] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   79.300031][ T6503] netlink: 'syz.0.163': attribute type 10 has an invalid length.
[   80.133344][ T6562] netlink: 'syz.2.172': attribute type 2 has an invalid length.
[   80.538604][ T6587] dvmrp1: tun_chr_ioctl cmd 2147767521
[   80.540412][ T6588] dvmrp1: tun_chr_ioctl cmd 2147767521
[   80.681970][ T6600] netlink: 'syz.1.183': attribute type 10 has an invalid length.
[   80.731717][ T6600] bond0: entered promiscuous mode
[   80.733638][ T6600] bond_slave_0: entered promiscuous mode
[   80.742533][ T6600] bond_slave_1: entered promiscuous mode
[   80.747048][ T6600] bridge0: entered promiscuous mode
[   80.749513][ T6600] batadv0: entered promiscuous mode
[   80.813715][ T6604] __nla_validate_parse: 11 callbacks suppressed
[   80.813770][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[   80.983535][ T6614] syzkaller0: entered allmulticast mode
[   86.733697][   T24] cfg80211: failed to load regulatory.db
[   90.168610][ T6640] netlink: 'syz.0.191': attribute type 6 has an invalid length.
[   95.120826][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4835733044 wd_nsec: 4835733165
[   96.755961][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.758982][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.761430][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.763894][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.766652][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   98.795088][ T5843] Bluetooth: hci3: command tx timeout
[   99.909406][ T6649] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[   99.912032][ T6649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.193'.
[  100.949985][ T5843] Bluetooth: hci3: command tx timeout
[  102.955235][ T5843] Bluetooth: hci3: command tx timeout
[  103.249720][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  103.253727][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  103.258610][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  103.262422][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  103.265946][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.035232][ T5833] Bluetooth: hci3: command tx timeout
[  105.355096][ T5833] Bluetooth: hci4: command tx timeout
[  107.435187][ T5833] Bluetooth: hci4: command tx timeout
[  109.515904][ T5833] Bluetooth: hci4: command tx timeout
[  111.595399][ T5833] Bluetooth: hci4: command tx timeout
[  114.966058][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.968952][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.975399][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.978204][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.980612][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  117.035358][ T5843] Bluetooth: hci5: command tx timeout
[  119.115336][ T5843] Bluetooth: hci5: command tx timeout
[  121.195279][ T5843] Bluetooth: hci5: command tx timeout
[  123.275139][ T5843] Bluetooth: hci5: command tx timeout
[  137.928163][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  137.930735][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  157.575643][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  157.579346][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  157.583072][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  157.587611][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  157.590903][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  159.675143][ T5833] Bluetooth: hci6: command tx timeout
[  161.755165][ T5833] Bluetooth: hci6: command tx timeout
[  163.835300][ T5833] Bluetooth: hci6: command tx timeout
[  164.172204][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  164.176506][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  164.179881][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  164.183616][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  164.187020][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  165.915146][ T5833] Bluetooth: hci6: command tx timeout
[  166.235389][ T5833] Bluetooth: hci7: command tx timeout
[  168.315148][ T5833] Bluetooth: hci7: command tx timeout
[  170.395115][ T5833] Bluetooth: hci7: command tx timeout
[  172.475183][ T5833] Bluetooth: hci7: command tx timeout
[  175.638662][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  175.642626][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  175.646889][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  175.650605][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  175.653847][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  177.675112][ T5843] Bluetooth: hci8: command tx timeout
[  179.755087][ T5843] Bluetooth: hci8: command tx timeout
[  181.038462][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  181.835104][ T5833] Bluetooth: hci8: command tx timeout
[  183.915054][ T5833] Bluetooth: hci8: command tx timeout
[  191.205366][ T5223] Bluetooth: hci1: command 0x0406 tx timeout
[  191.212965][ T5223] Bluetooth: hci0: command 0x0406 tx timeout
[  199.364001][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  199.366599][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  203.095004][    C0] sched: DL replenish lagged too much
[  218.468577][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  218.472113][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  218.475824][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  218.478794][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  218.481312][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  220.555344][ T5833] Bluetooth: hci9: command tx timeout
[  221.996583][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  222.635226][ T5843] Bluetooth: hci9: command tx timeout
[  224.504334][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  224.510165][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  224.513558][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  224.518086][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  224.521323][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  224.715306][ T5833] Bluetooth: hci9: command tx timeout
[  226.555443][ T5833] Bluetooth: hci10: command tx timeout
[  226.795269][ T5833] Bluetooth: hci9: command tx timeout
[  227.036073][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  228.635111][ T5843] Bluetooth: hci10: command tx timeout
[  230.715146][ T5843] Bluetooth: hci10: command tx timeout
[  232.795346][ T5843] Bluetooth: hci10: command tx timeout
[  236.282593][ T5837] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  236.285558][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  236.291663][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  236.294789][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  236.297557][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  237.115118][   T36] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
[  237.117417][   T36]       Not tainted syzkaller #0
[  237.119225][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  237.121838][   T36] task:kworker/1:0     state:D stack:24512 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00080000
[  237.129613][   T36] Workqueue: events request_firmware_work_func
[  237.131551][   T36] Call Trace:
[  237.132603][   T36]  <TASK>
[  237.133539][   T36]  __schedule+0x14bc/0x5000
[  237.136785][   T36]  ? __pfx___schedule+0x10/0x10
[  237.138309][   T36]  ? schedule+0x91/0x360
[  237.139638][   T36]  schedule+0x165/0x360
[  237.140933][   T36]  schedule_preempt_disabled+0x13/0x30
[  237.142619][   T36]  __mutex_lock+0x7e6/0x1350
[  237.144078][   T36]  ? kfree+0x1c0/0x660
[  237.146105][   T36]  ? __mutex_lock+0x5bb/0x1350
[  237.147608][   T36]  ? regdb_fw_cb+0x7d/0x1c0
[  237.149047][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  237.150615][   T36]  regdb_fw_cb+0x7d/0x1c0
[  237.151916][   T36]  ? __pfx_regdb_fw_cb+0x10/0x10
[  237.153411][   T36]  request_firmware_work_func+0x105/0x1c0
[  237.155666][   T36]  ? process_scheduled_works+0x9ef/0x1770
[  237.167085][   T36]  process_scheduled_works+0xad1/0x1770
[  237.168818][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  237.170660][   T36]  worker_thread+0x8a0/0xda0
[  237.172062][   T36]  kthread+0x711/0x8a0
[  237.173328][   T36]  ? __pfx_worker_thread+0x10/0x10
[  237.175320][   T36]  ? __pfx_kthread+0x10/0x10
[  237.176776][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.178339][   T36]  ? lockdep_hardirqs_on+0x98/0x140
[  237.179943][   T36]  ? __pfx_kthread+0x10/0x10
[  237.181338][   T36]  ret_from_fork+0x599/0xb30
[  237.182758][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  237.184304][   T36]  ? __switch_to_asm+0x39/0x70
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  237.196618][   T36]  ? __switch_to_asm+0x33/0x70
[  237.198070][   T36]  ? __pfx_kthread+0x10/0x10
[  237.199458][   T36]  ret_from_fork_asm+0x1a/0x30
[  237.200906][   T36]  </TASK>
[  237.201883][   T36] INFO: task kworker/u10:17:5056 blocked for more than 143 seconds.
[  237.204239][   T36]       Not tainted syzkaller #0
[  237.215583][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  237.218176][   T36] task:kworker/u10:17  state:D stack:24344 pid:5056  tgid:5056  ppid:2      task_flags:0x4208060 flags:0x00080000
[  237.234979][   T36] Workqueue: events_unbound linkwatch_event
[  237.236937][   T36] Call Trace:
[  237.237991][   T36]  <TASK>
[  237.238912][   T36]  __schedule+0x14bc/0x5000
[  237.240392][   T36]  ? perf_trace_preemptirq_template+0xa3/0x340
[  237.242795][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  237.255003][   T36]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  237.256996][   T36]  ? __pfx___schedule+0x10/0x10
[  237.258533][   T36]  ? schedule+0x91/0x360
[  237.259841][   T36]  schedule+0x165/0x360
[  237.261102][   T36]  schedule_preempt_disabled+0x13/0x30
[  237.262769][   T36]  __mutex_lock+0x7e6/0x1350
[  237.264189][   T36]  ? __mutex_lock+0x5bb/0x1350
[  237.275342][   T36]  ? linkwatch_event+0xe/0x60
[  237.276840][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  237.278505][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.280130][   T36]  ? process_scheduled_works+0x9ef/0x1770
[  237.281877][   T36]  ? process_scheduled_works+0x9ef/0x1770
[  237.283716][   T36]  linkwatch_event+0xe/0x60
[  237.285891][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  237.305925][   T36]  process_scheduled_works+0xad1/0x1770
[  237.307976][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  237.310141][   T36]  worker_thread+0x8a0/0xda0
[  237.311603][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.313885][   T36]  ? __kthread_parkme+0x7b/0x200
[  237.323610][   T36]  kthread+0x711/0x8a0
[  237.325174][   T36]  ? __pfx_worker_thread+0x10/0x10
[  237.326727][   T36]  ? __pfx_kthread+0x10/0x10
[  237.328107][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.329680][   T36]  ? lockdep_hardirqs_on+0x98/0x140
[  237.331257][   T36]  ? __pfx_kthread+0x10/0x10
[  237.332720][   T36]  ret_from_fork+0x599/0xb30
[  237.334087][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  237.356776][   T36]  ? __switch_to_asm+0x39/0x70
[  237.358671][   T36]  ? __switch_to_asm+0x33/0x70
[  237.360551][   T36]  ? __pfx_kthread+0x10/0x10
[  237.362313][   T36]  ret_from_fork_asm+0x1a/0x30
[  237.364194][   T36]  </TASK>
[  237.380866][   T36] INFO: task syz.2.190:6632 blocked for more than 143 seconds.
[  237.383784][   T36]       Not tainted syzkaller #0
[  237.386059][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  237.389311][   T36] task:syz.2.190       state:D stack:28568 pid:6632  tgid:6629  ppid:5838   task_flags:0x400040 flags:0x00080002
[  237.393935][   T36] Call Trace:
[  237.395728][   T36]  <TASK>
[  237.396893][   T36]  __schedule+0x14bc/0x5000
[  237.398669][   T36]  ? perf_trace_preemptirq_template+0xa3/0x340
[  237.401129][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  237.403428][   T36]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  237.406632][   T36]  ? __pfx___schedule+0x10/0x10
[  237.408526][   T36]  ? schedule+0x91/0x360
[  237.410107][   T36]  schedule+0x165/0x360
[  237.411687][   T36]  schedule_preempt_disabled+0x13/0x30
[  237.413711][   T36]  __mutex_lock+0x7e6/0x1350
[  237.427684][   T36]  ? __mutex_lock+0x5bb/0x1350
[  237.429531][   T36]  ? do_ip_setsockopt+0xeee/0x2d00
[  237.431525][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  237.433428][   T36]  do_ip_setsockopt+0xeee/0x2d00
[  237.445364][   T36]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  237.447396][   T36]  ? do_futex+0x395/0x420
[  237.449048][   T36]  ? aa_sk_perm+0x15f/0x920
[  237.450809][   T36]  ? aa_sk_perm+0x7ee/0x920
[  237.452519][   T36]  ? __pfx_aa_sk_perm+0x10/0x10
[  237.454371][   T36]  ? aa_sock_opt_perm+0xff/0x1a0
[  237.460847][   T36]  ip_setsockopt+0x66/0x110
[  237.462572][   T36]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  237.464843][   T36]  do_sock_setsockopt+0x17c/0x1b0
[  237.468750][   T36]  __x64_sys_setsockopt+0x13f/0x1b0
[  237.470734][   T36]  do_syscall_64+0xfa/0xf80
[  237.472487][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.474748][   T36]  ? exc_page_fault+0xab/0x100
[  237.477663][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.479891][   T36] RIP: 0033:0x7fe87b98f7c9
[  237.481620][   T36] RSP: 002b:00007fe87c7ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.484815][   T36] RAX: ffffffffffffffda RBX: 00007fe87bbe6180 RCX: 00007fe87b98f7c9
[  237.488249][   T36] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000008
[  237.491228][   T36] RBP: 00007fe87b9f297f R08: 000000000000000c R09: 0000000000000000
[  237.494249][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.497909][   T36] R13: 00007fe87bbe6218 R14: 00007fe87bbe6180 R15: 00007ffd1210d928
[  237.500881][   T36]  </TASK>
[  237.501982][   T36] INFO: task syz.2.190:6633 blocked for more than 144 seconds.
[  237.504636][   T36]       Not tainted syzkaller #0
[  237.507033][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  237.510277][   T36] task:syz.2.190       state:D stack:28568 pid:6633  tgid:6629  ppid:5838   task_flags:0x400140 flags:0x00080002
[  237.514661][   T36] Call Trace:
[  237.516344][   T36]  <TASK>
[  237.517527][   T36]  __schedule+0x14bc/0x5000
[  237.519227][   T36]  ? perf_trace_preemptirq_template+0xa3/0x340
[  237.521546][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  237.523756][   T36]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  237.528750][   T36]  ? __pfx___schedule+0x10/0x10
[  237.530574][   T36]  ? schedule+0x91/0x360
[  237.532175][   T36]  schedule+0x165/0x360
[  237.533768][   T36]  schedule_preempt_disabled+0x13/0x30
[  237.536311][   T36]  __mutex_lock+0x7e6/0x1350
[  237.538094][   T36]  ? __mutex_lock+0x5bb/0x1350
[  237.539916][   T36]  ? br_ioctl_stub+0x199/0xc80
[  237.541723][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  237.543634][   T36]  ? __pfx___mutex_trylock_common+0x10/0x10
[  237.546528][   T36]  br_ioctl_stub+0x199/0xc80
[  237.548218][   T36]  ? __mutex_lock+0x335/0x1350
[  237.550067][   T36]  ? __pfx_br_ioctl_stub+0x10/0x10
[  237.551963][   T36]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  237.553838][   T36]  ? sock_ioctl+0x4b4/0x790
[  237.555896][   T36]  ? __pfx_br_ioctl_stub+0x10/0x10
[  237.557834][   T36]  sock_ioctl+0x4d8/0x790
[  237.559437][   T36]  ? __pfx_sock_ioctl+0x10/0x10
[  237.561262][   T36]  ? __fget_files+0x3a0/0x420
[  237.563022][   T36]  ? __fget_files+0x2a/0x420
[  237.564768][   T36]  ? bpf_lsm_file_ioctl+0x9/0x20
[  237.567380][   T36]  ? __pfx_sock_ioctl+0x10/0x10
[  237.569257][   T36]  __se_sys_ioctl+0xfc/0x170
[  237.571044][   T36]  do_syscall_64+0xfa/0xf80
[  237.572763][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.576781][   T36]  ? exc_page_fault+0xab/0x100
[  237.578623][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.580825][   T36] RIP: 0033:0x7fe87b98f7c9
[  237.582497][   T36] RSP: 002b:00007fe87c78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.590121][   T36] RAX: ffffffffffffffda RBX: 00007fe87bbe6270 RCX: 00007fe87b98f7c9
[  237.593103][   T36] RDX: 0000200000000080 RSI: 00000000000089a0 RDI: 000000000000000c
[  237.596431][   T36] RBP: 00007fe87b9f297f R08: 0000000000000000 R09: 0000000000000000
[  237.599382][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.602317][   T36] R13: 00007fe87bbe6308 R14: 00007fe87bbe6270 R15: 00007ffd1210d928
[  237.605829][   T36]  </TASK>
[  237.607030][   T36] INFO: task syz.2.190:6634 blocked for more than 144 seconds.
[  237.609815][   T36]       Not tainted syzkaller #0
[  237.611688][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  237.614844][   T36] task:syz.2.190       state:D stack:28440 pid:6634  tgid:6629  ppid:5838   task_flags:0x400040 flags:0x00080002
[  237.619873][   T36] Call Trace:
[  237.621123][   T36]  <TASK>
[  237.622256][   T36]  __schedule+0x14bc/0x5000
[  237.623973][   T36]  ? perf_trace_preemptirq_template+0xa3/0x340
[  237.626861][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  237.629089][   T36]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  237.632035][   T36]  ? __pfx___schedule+0x10/0x10
[  237.633928][   T36]  ? schedule+0x91/0x360
[  237.637126][   T36]  schedule+0x165/0x360
[  237.638748][   T36]  schedule_preempt_disabled+0x13/0x30
[  237.640807][   T36]  __mutex_lock+0x7e6/0x1350
[  237.642545][   T36]  ? __mutex_lock+0x5bb/0x1350
[  237.644346][   T36]  ? sock_ioctl+0x4b4/0x790
[  237.647125][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  237.649084][   T36]  sock_ioctl+0x4b4/0x790
[  237.650721][   T36]  ? __pfx_sock_ioctl+0x10/0x10
[  237.652570][   T36]  ? __fget_files+0x3a0/0x420
[  237.654341][   T36]  ? __fget_files+0x2a/0x420
[  237.657081][   T36]  ? bpf_lsm_file_ioctl+0x9/0x20
[  237.658966][   T36]  ? __pfx_sock_ioctl+0x10/0x10
[  237.660825][   T36]  __se_sys_ioctl+0xfc/0x170
[  237.662606][   T36]  do_syscall_64+0xfa/0xf80
[  237.664326][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.667005][   T36]  ? exc_page_fault+0xab/0x100
[  237.668781][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.670971][   T36] RIP: 0033:0x7fe87b98f7c9
[  237.672640][   T36] RSP: 002b:00007fe87c769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.676968][   T36] RAX: ffffffffffffffda RBX: 00007fe87bbe6360 RCX: 00007fe87b98f7c9
[  237.679944][   T36] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000e
[  237.682885][   T36] RBP: 00007fe87b9f297f R08: 0000000000000000 R09: 0000000000000000
[  237.687973][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.690947][   T36] R13: 00007fe87bbe63f8 R14: 00007fe87bbe6360 R15: 00007ffd1210d928
[  237.693898][   T36]  </TASK>
[  237.695500][   T36] 
[  237.695500][   T36] Showing all locks held in the system:
[  237.698368][   T36] 4 locks held by kworker/u8:1/13:
[  237.700300][   T36]  #0: ffff888100ef7948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  237.704314][   T36]  #1: ffffc90000127b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  237.709065][   T36]  #2: ffffffff8f304c70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[  237.712544][   T36]  #3: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200
[  237.716337][   T36] 3 locks held by kworker/1:0/24:
[  237.718249][   T36]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  237.722359][   T36]  #1: ffffc900001e7b80 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  237.728671][   T36]  #2: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: regdb_fw_cb+0x7d/0x1c0
[  237.731883][   T36] 1 lock held by khungtaskd/36:
[  237.734624][   T36]  #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  237.738818][   T36] 3 locks held by kworker/u10:17/5056:
[  237.740839][   T36]  #0: ffff888100089948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  237.746646][   T36]  #1: ffffc9000a7cfb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  237.750664][   T36]  #2: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  237.754007][   T36] 2 locks held by getty/5662:
[  237.760355][   T36]  #0: ffff88811484e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  237.763702][   T36]  #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  237.767821][   T36] 7 locks held by kworker/u11:2/5833:
[  237.769790][   T36]  #0: ffff888114a90948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  237.773715][   T36]  #1: ffffc90004b47b80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  237.777989][   T36]  #2: ffff8881b520cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  237.781024][   T36]  #3: ffff8881b520c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  237.783915][   T36]  #4: ffffffff8f483788 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[  237.787716][   T36]  #5: ffff888114a92b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0
[  237.790629][   T36]  #6: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  237.793835][   T36] 3 locks held by kworker/u8:4/5864:
[  237.796791][   T36]  #0: ffff888172cb6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  237.800358][   T36]  #1: ffffc90004da7b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  237.804336][   T36]  #2: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  237.807430][   T36] 2 locks held by syz.1.187/6608:
[  237.808966][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  237.811642][   T36]  #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  237.815609][   T36] 5 locks held by syz.1.187/6615:
[  237.817362][   T36] 1 lock held by syz.2.190/6632:
[  237.819117][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00
[  237.822006][   T36] 2 locks held by syz.2.190/6633:
[  237.823644][   T36]  #0: ffffffff8f2f5ce8 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b4/0x790
[  237.827553][   T36]  #1: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x199/0xc80
[  237.830705][   T36] 1 lock held by syz.2.190/6634:
[  237.832530][   T36]  #0: ffffffff8f2f5ce8 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b4/0x790
[  237.837798][   T36] 1 lock held by syz-executor/6642:
[  237.839696][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.842458][   T36] 1 lock held by syz.0.193/6648:
[  237.843957][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  237.847032][   T36] 1 lock held by syz.0.193/6649:
[  237.848546][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x499/0x890
[  237.851148][   T36] 1 lock held by syz-executor/6656:
[  237.853045][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.856970][   T36] 1 lock held by syz-executor/6660:
[  237.858537][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.861256][   T36] 1 lock held by syz-executor/6665:
[  237.862806][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.866067][   T36] 1 lock held by syz-executor/6671:
[  237.868065][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.870881][   T36] 1 lock held by syz-executor/6677:
[  237.872386][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.875558][   T36] 1 lock held by syz-executor/6684:
[  237.877128][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.880061][   T36] 1 lock held by syz-executor/6690:
[  237.881649][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.884398][   T36] 1 lock held by syz-executor/6699:
[  237.886651][   T36]  #0: ffffffff8f311d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  237.889408][   T36] 
[  237.890135][   T36] =============================================
[  237.890135][   T36] 
[  237.892688][   T36] NMI backtrace for cpu 1
[  237.892699][   T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  237.892711][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.892717][   T36] Call Trace:
[  237.892723][   T36]  <TASK>
[  237.892729][   T36]  dump_stack_lvl+0x189/0x250
[  237.892749][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.892762][   T36]  ? __pfx__printk+0x10/0x10
[  237.892785][   T36]  nmi_cpu_backtrace+0x39e/0x3d0
[  237.892804][   T36]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  237.892820][   T36]  ? __pfx__printk+0x10/0x10
[  237.892839][   T36]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  237.892859][   T36]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  237.892877][   T36]  sys_info+0x135/0x170
[  237.892891][   T36]  watchdog+0xf95/0xfe0
[  237.892911][   T36]  ? watchdog+0x20a/0xfe0
[  237.892930][   T36]  kthread+0x711/0x8a0
[  237.892948][   T36]  ? __pfx_watchdog+0x10/0x10
[  237.892962][   T36]  ? __pfx_kthread+0x10/0x10
[  237.892976][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.892994][   T36]  ? lockdep_hardirqs_on+0x98/0x140
[  237.893005][   T36]  ? __pfx_kthread+0x10/0x10
[  237.893019][   T36]  ret_from_fork+0x599/0xb30
[  237.893032][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  237.893048][   T36]  ? __switch_to_asm+0x39/0x70
[  237.893062][   T36]  ? __switch_to_asm+0x33/0x70
[  237.893074][   T36]  ? __pfx_kthread+0x10/0x10
[  237.893088][   T36]  ret_from_fork_asm+0x1a/0x30
[  237.893112][   T36]  </TASK>
[  237.893117][   T36] Sending NMI from CPU 1 to CPUs 0:
[  237.939097][    C0] NMI backtrace for cpu 0
[  237.939108][    C0] CPU: 0 UID: 0 PID: 6615 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) 
[  237.939116][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.939120][    C0] RIP: 0010:rcu_is_watching+0x31/0xb0
[  237.939132][    C0] Code: 56 53 65 ff 05 c0 14 d7 10 e8 ab 42 b4 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 2d 9b 8d 4c 89 f0 <48> c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ec 7d 80 00 48 c7 c3
[  237.939137][    C0] RSP: 0018:ffffc90000006d90 EFLAGS: 00000093
[  237.939144][    C0] RAX: ffffffff8d9b2dd0 RBX: 0000000000000000 RCX: 13cc9cbfc8d35d00
[  237.939148][    C0] RDX: 000000008eba6367 RSI: ffffffff8bc082c0 RDI: ffffffff8bc08280
[  237.939152][    C0] RBP: dffffc0000000000 R08: ffffffff81743f85 R09: ffffffff8df41a20
[  237.939156][    C0] R10: ffffc90000006f30 R11: fffff52000000de8 R12: 1ffff92000000ddc
[  237.939160][    C0] R13: ffffc90000006f18 R14: ffffffff8d9b2dd0 R15: dffffc0000000000
[  237.939165][    C0] FS:  00007fe97c9d56c0(0000) GS:ffff88818e835000(0000) knlGS:0000000000000000
[  237.939170][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.939174][    C0] CR2: 00005574a248d680 CR3: 0000000112054000 CR4: 00000000000006f0
[  237.939200][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.939205][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  237.939209][    C0] Call Trace:
[  237.939211][    C0]  <IRQ>
[  237.939214][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  237.939222][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  237.939229][    C0]  unwind_next_frame+0xd4/0x23d0
[  237.939237][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  237.939243][    C0]  ? mac80211_hwsim_beacon_tx+0x3c5/0x870
[  237.939252][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  237.939258][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  237.939264][    C0]  perf_callchain_kernel+0x3ac/0x600
[  237.939272][    C0]  ? __pfx_perf_callchain_kernel+0x10/0x10
[  237.939279][    C0]  ? __phys_addr+0xd3/0x180
[  237.939287][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  237.939294][    C0]  ? get_callchain_entry+0x189/0x3c0
[  237.939303][    C0]  get_perf_callchain+0x23c/0x820
[  237.939311][    C0]  ? __pfx_get_perf_callchain+0x10/0x10
[  237.939325][    C0]  perf_callchain+0x2a7/0x350
[  237.939334][    C0]  ? __pfx_perf_callchain+0x10/0x10
[  237.939340][    C0]  ? perf_output_begin_forward+0x9bc/0xa80
[  237.939348][    C0]  ? __perf_event_header__init_id+0x3c5/0x480
[  237.939356][    C0]  perf_prepare_sample+0x31f/0x2250
[  237.939364][    C0]  ? perf_event_output_forward+0x8f/0x430
[  237.939372][    C0]  ? __pfx_perf_prepare_sample+0x10/0x10
[  237.939381][    C0]  perf_event_output_forward+0x151/0x430
[  237.939389][    C0]  ? perf_event_output_forward+0x8f/0x430
[  237.939396][    C0]  ? __pfx_perf_event_output_forward+0x10/0x10
[  237.939404][    C0]  ? ktime_get+0x45/0x200
[  237.939413][    C0]  ? __perf_event_account_interrupt+0x179/0x250
[  237.939422][    C0]  __perf_event_overflow+0x845/0xe70
[  237.939431][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  237.939439][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  237.939448][    C0]  perf_swevent_hrtimer+0x3fc/0x570
[  237.939455][    C0]  ? stack_depot_save_flags+0x163/0x850
[  237.939495][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  237.939502][    C0]  ? do_raw_spin_lock+0x121/0x290
[  237.939514][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  237.939522][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  237.939532][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.939540][    C0]  ? debug_object_deactivate+0x6d/0x360
[  237.939549][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  237.939556][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  237.939563][    C0]  __hrtimer_run_queues+0x4d0/0xc30
[  237.939570][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  237.939579][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  237.939586][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  237.939593][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  237.939605][    C0]  __sysvec_apic_timer_interrupt+0x102/0x3e0
[  237.939612][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  237.939619][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  237.939625][    C0] RIP: 0010:ieee80211_beacon_get_tim+0x1b1/0x2b0
[  237.939633][    C0] Code: 01 00 00 00 4c 89 fe 4c 21 f6 31 ff e8 98 04 e7 f6 4d 21 f7 75 5c 4d 8d bc 24 cc 06 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 ce 00 00 00 45 8b 37 31 ff 44 89 f6 e8 ca 03 e7 f6 45
[  237.939638][    C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000a07
[  237.939643][    C0] RAX: 0000000000000000 RBX: ffff888119d20300 RCX: ffff8881033dd7c0
[  237.939647][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  237.939651][    C0] RBP: ffffc90000007b58 R08: ffff88801ff10ee7 R09: 1ffff11003fe21dc
[  237.939655][    C0] R10: dffffc0000000000 R11: ffffed1003fe21dd R12: ffff88801ff10e80
[  237.939659][    C0] R13: dffffc0000000000 R14: 010040004c0b1b94 R15: ffff88801ff1154c
[  237.939667][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  237.939675][    C0]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  237.939685][    C0]  __iterate_interfaces+0x2ab/0x590
[  237.939691][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  237.939699][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  237.939705][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  237.939713][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  237.939720][    C0]  mac80211_hwsim_beacon+0xbb/0x180
[  237.939727][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  237.939733][    C0]  __hrtimer_run_queues+0x51c/0xc30
[  237.939740][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  237.939749][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  237.939758][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  237.939766][    C0]  handle_softirqs+0x27d/0x850
[  237.939773][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  237.939780][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  237.939786][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  237.939795][    C0]  __irq_exit_rcu+0xca/0x1f0
[  237.939801][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  237.939808][    C0]  irq_exit_rcu+0x9/0x30
[  237.939813][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  237.939819][    C0]  </IRQ>
[  237.939821][    C0]  <TASK>
[  237.939823][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  237.939829][    C0] RIP: 0010:__schedule+0x19d4/0x5000
[  237.939835][    C0] Code: ff ff 48 89 df 48 83 c7 18 8b b4 24 a8 01 00 00 e8 f1 f7 41 f6 48 89 df e8 b9 94 35 f6 48 89 df e8 01 75 36 f6 48 8b 5c 24 10 <e9> eb fa ff ff 90 0f 0b 90 e9 ba f2 ff ff ba 09 00 01 00 e9 72 ec
[  237.939839][    C0] RSP: 0018:ffffc90002ab74c0 EFLAGS: 00000286
[  237.939844][    C0] RAX: 13cc9cbfc8d35d00 RBX: ffff8881033dd7c0 RCX: 13cc9cbfc8d35d00
[  237.939847][    C0] RDX: 0000000000000007 RSI: ffffffff8d792409 RDI: ffffffff8bc082e0
[  237.939851][    C0] RBP: ffffc90002ab76d0 R08: ffffffff8f821f77 R09: 1ffffffff1f043ee
[  237.939855][    C0] R10: dffffc0000000000 R11: fffffbfff1f043ef R12: dffffc0000000000
[  237.939859][    C0] R13: ffff8881033dd7c0 R14: ffff88812103b470 R15: 1ffff11024207680
[  237.939866][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  237.939878][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  237.939886][    C0]  ? __pfx___schedule+0x10/0x10
[  237.939893][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  237.939899][    C0]  preempt_schedule_irq+0xb5/0x150
[  237.939905][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  237.939912][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  237.939919][    C0]  irqentry_exit+0x5d8/0x660
[  237.939926][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  237.939932][    C0] RIP: 0010:put_cpu_partial+0x234/0x2d0
[  237.939940][    C0] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 d8 14 41 09 cc 90 0f 0b 90 e9 e7 fe ff ff e8 39 2b 3e 09 41 f7 c5 00 02 00 00 74 b2 fb 4d 85 ff <75> b1 eb ba e8 23 2b 3e 09 e9 4f fe ff ff 90 0f 0b 90 e9 66 ff ff
[  237.939944][    C0] RSP: 0018:ffffc90002ab7898 EFLAGS: 00000286
[  237.939948][    C0] RAX: 13cc9cbfc8d35d00 RBX: ffff888100042140 RCX: 13cc9cbfc8d35d00
[  237.939952][    C0] RDX: 0000000000000007 RSI: ffffffff8d792409 RDI: ffffffff8bc082e0
[  237.939956][    C0] RBP: 0000000000000001 R08: ffffffff8f821f77 R09: 1ffffffff1f043ee
[  237.939960][    C0] R10: dffffc0000000000 R11: fffffbfff1f043ef R12: 0000000000000000
[  237.939963][    C0] R13: 0000000000000282 R14: ffff88812103f190 R15: ffffea0006ce0600
[  237.939971][    C0]  __slab_free+0x288/0x2a0
[  237.939979][    C0]  ? qlist_free_all+0x8c/0x100
[  237.939986][    C0]  qlist_free_all+0x97/0x100
[  237.939992][    C0]  kasan_quarantine_reduce+0x148/0x160
[  237.939998][    C0]  __kasan_slab_alloc+0x22/0x80
[  237.940005][    C0]  __kmalloc_node_track_caller_noprof+0x526/0x820
[  237.940011][    C0]  ? __kernfs_new_node+0x9c/0x880
[  237.940019][    C0]  kstrdup+0x42/0x100
[  237.940025][    C0]  __kernfs_new_node+0x9c/0x880
[  237.940033][    C0]  ? __pfx___kernfs_new_node+0x10/0x10
[  237.940039][    C0]  ? kernfs_root+0x1c/0x230
[  237.940046][    C0]  ? kernfs_root+0x1c/0x230
[  237.940051][    C0]  ? kernfs_root+0x1c/0x230
[  237.940058][    C0]  kernfs_new_node+0x102/0x210
[  237.940065][    C0]  kernfs_create_dir_ns+0x44/0x130
[  237.940072][    C0]  cgroup_mkdir+0x39f/0xf60
[  237.940078][    C0]  ? kernfs_root+0x1c/0x230
[  237.940085][    C0]  ? __pfx_cgroup_mkdir+0x10/0x10
[  237.940090][    C0]  kernfs_iop_mkdir+0x211/0x350
[  237.940098][    C0]  vfs_mkdir+0x512/0x5b0
[  237.940105][    C0]  do_mkdirat+0x276/0x4b0
[  237.940112][    C0]  ? __pfx_do_mkdirat+0x10/0x10
[  237.940118][    C0]  ? getname_flags+0x1e5/0x540
[  237.940126][    C0]  __x64_sys_mkdir+0x6c/0x80
[  237.940132][    C0]  do_syscall_64+0xfa/0xf80
[  237.940139][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.940145][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.940151][    C0] RIP: 0033:0x7fe97e78f7c9
[  237.940157][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.940161][    C0] RSP: 002b:00007fe97c9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  237.940167][    C0] RAX: ffffffffffffffda RBX: 00007fe97e9e6180 RCX: 00007fe97e78f7c9
[  237.940171][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  237.940174][    C0] RBP: 00007fe97e7f297f R08: 0000000000000000 R09: 0000000000000000
[  237.940178][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.940181][    C0] R13: 00007fe97e9e6218 R14: 00007fe97e9e6180 R15: 00007fff5aab4f48
[  237.940188][    C0]  </TASK>
[  238.263245][   T36] Kernel panic - not syncing: hung_task: blocked tasks
[  238.265332][   T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  238.268668][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.271679][   T36] Call Trace:
[  238.272699][   T36]  <TASK>
[  238.273585][   T36]  dump_stack_lvl+0x99/0x250
[  238.274983][   T36]  ? __asan_memcpy+0x40/0x70
[  238.276372][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.277927][   T36]  ? __pfx__printk+0x10/0x10
[  238.279443][   T36]  vpanic+0x237/0x6d0
[  238.280710][   T36]  ? __pfx_vpanic+0x10/0x10
[  238.282067][   T36]  ? preempt_schedule_common+0x83/0xd0
[  238.283699][   T36]  panic+0xb9/0xc0
[  238.284839][   T36]  ? __pfx_panic+0x10/0x10
[  238.286207][   T36]  ? preempt_schedule_thunk+0x16/0x30
[  238.287871][   T36]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  238.289754][   T36]  watchdog+0xfdf/0xfe0
[  238.291026][   T36]  ? watchdog+0x20a/0xfe0
[  238.292361][   T36]  kthread+0x711/0x8a0
[  238.293978][   T36]  ? __pfx_watchdog+0x10/0x10
[  238.295372][   T36]  ? __pfx_kthread+0x10/0x10
[  238.296756][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.298310][   T36]  ? lockdep_hardirqs_on+0x98/0x140
[  238.299898][   T36]  ? __pfx_kthread+0x10/0x10
[  238.301270][   T36]  ret_from_fork+0x599/0xb30
[  238.302677][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  238.304242][   T36]  ? __switch_to_asm+0x39/0x70
[  238.305829][   T36]  ? __switch_to_asm+0x33/0x70
[  238.307675][   T36]  ? __pfx_kthread+0x10/0x10
[  238.309185][   T36]  ret_from_fork_asm+0x1a/0x30
[  238.310636][   T36]  </TASK>
[  238.312222][   T36] Kernel Offset: disabled
[  238.313566][   T36] Rebooting in 86400 seconds..
