last executing test programs:

3.61559769s ago: executing program 1 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.544687893s ago: executing program 1 (id=420):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x1, 0x0, 0x2, 0x4, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0)
syz_clone(0x40c8600, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x3}, 0x114905, 0x4, 0x0, 0x4, 0x0, 0x0, 0x21}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002400070126bd7020fcdbdf2507c741000c00018008000200ac"], 0x20}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x4, 0x1, 0x3}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1ff}}, @func_proto]}, {0x0, [0x2e, 0x61, 0x5f, 0x61]}}, 0x0, 0x72, 0x0, 0x1}, 0x28)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
getpid()
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001a0081024e81f782db4cb904021d0800fe0055a1150015000200142603600e12080009007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed80000000b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0)

3.405178068s ago: executing program 3 (id=422):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x81, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xa}, 0x2a10, 0x3, 0x3, 0x0, 0x400da4f, 0x82000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0x3, 0xffffffffffffffff, 0xb) (async)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async)
close(0xffffffffffffffff) (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5098}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0xc, 0x1, 0xb, 0xffffffffffffffff, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x4d, &(0x7f0000000400)=""/77, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xa, 0xac3, 0x2}, 0x10, 0x22d86, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000500)=[{0x5, 0x4, 0x7, 0xb}, {0x1, 0x5, 0x3, 0xb}, {0x3, 0x1, 0x4}, {0x5, 0x2, 0xf}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xd2}, [@alu={0x7, 0x1, 0x2, 0x5, 0x5, 0x18}]}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000700)=""/187, 0x41100, 0x9, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0xf, 0x4, 0x7}, 0x10, 0x9f79, r2, 0x3, 0x0, &(0x7f0000000600)=[{0x3, 0x4, 0x2, 0x8}, {0x3, 0x5, 0x7, 0xb}, {0x80000005, 0x5, 0xc, 0x1}], 0x10, 0x1}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff}) (rerun: 32)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'wg2\x00', 0x4000})

2.992226801s ago: executing program 1 (id=428):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) (async)
write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x12) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delqdisc={0x7c, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0x1}, {0x7, 0x8}, {0xfff1, 0x4}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40044}, 0x80)

2.45624395s ago: executing program 3 (id=432):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r3 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x62, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x9, 0x1, 0x8, 0x2, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0, r0, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032900fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x5, 0x49, 0x6, 0x0, 0x100, 0x40009, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x600, 0x4, 0x0, 0x2, 0x8000, 0x401, 0x5ee5, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

2.17319957s ago: executing program 1 (id=435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0)
perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x804)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x43451)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x83508, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xec1, 0x200, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x800, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]})
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0xffffffffffffffff}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4002080}, 0x8000)
socket$l2tp6(0xa, 0x2, 0x73)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8941, &(0x7f0000000080))

1.857760825s ago: executing program 3 (id=438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x24028040)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1400}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x7c, &(0x7f0000000000)=r7, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x19, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x5, 0x0, 0xb, 0xffffffffffffffc0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x5, 0x0, 0xc}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x63aa}, @jmp={0x5, 0x0, 0xb, 0x5, 0x2, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xb, 0x6, 0x5, 0x6, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f00000000c0)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x6, 0x1, 0x2, 0xc}, 0x10, 0x81b7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r1, r1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1.857313019s ago: executing program 4 (id=439):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000015000103000000000000e7ff0b"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\f '], 0xa)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=@get={0xe0, 0x13, 0x1, 0x70bd28, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, '\x00', '\x00', 0x1400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x4004084)

1.593019849s ago: executing program 0 (id=442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfe1b) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfe1b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x18)
fstat(r1, &(0x7f00000022c0))
close(r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fbffffff00040000b2f9000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000184000000200000000000000000000009500000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185100000000000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x40, 0x3e, &(0x7f0000000300)=""/62, 0x41000, 0x14, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000900)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x8, 0xee, 0x7fff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r1, r1, r1, r1], &(0x7f00000009c0)=[{0x0, 0x5, 0xd, 0xb}, {0x2, 0x2, 0x4, 0x6}, {0x1, 0x4, 0xf, 0x1}, {0x1, 0x4, 0x2, 0x1}, {0x2, 0x1, 0x8, 0x5}, {0x5, 0x4, 0xa, 0xa}, {0x4, 0x4, 0x7, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc6ec63270a701040000000000000000070000031c00138006000140810000000600024000bc000006080000000300002c000a00cbf62a12ea611a6cc04f69cc7fb435d5905a7ead823dcecb76e273c7f46a093e19bde685fc3661ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) (async)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc6ec63270a701040000000000000000070000031c00138006000140810000000600024000bc000006080000000300002c000a00cbf62a12ea611a6cc04f69cc7fb435d5905a7ead823dcecb76e273c7f46a093e19bde685fc3661ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r8, r6, 0x25, 0x8, @void}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r8, r6, 0x25, 0x0, @void}, 0x10)
r9 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r9, 0x84, 0x4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000006c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)

1.581891897s ago: executing program 4 (id=443):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
write$cgroup_type(r6, &(0x7f0000000180), 0x40001)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x2, 0x18088, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r6, @void, @value=r6}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r9, &(0x7f0000000a80), 0x0}, 0x20)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50000000060603"], 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x44084)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002700010004000000010000000a010101000000000000000000000000fe8000000000000000000000000000bb000000040000000000000000a5000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b41bfc851300000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.49339576s ago: executing program 2 (id=444):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x4, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="450a0000000000006111740000000000180000000000000000000000000000009500000000000000429d09e8697c68c1a32dc057c22fd95e1d3cce6b0c601c5c3880333f9b7505c75e7b89566ec292bf57c15650431e9eddc150b78055001a90ca6ea3120dfd56b7c583c3ec950291ba3726d5936c7f650775532afe4f9db886c95afeb5689345899e0e7de27a1d7e38b205490b6af5159f86ecac185abaeec2a6e60168e8fcf6de62c0ac186a28967f5b48cab0a8679ffc963ab0ba35487bdbd8cb7f2ed40015817bc28e37fa8e837bc1acbf3de583361cc1ebee1e72c454f5a6598dbb52a96a5a9ab4e6b34e6b368e3d"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r2, 0x6, 0x6, &(0x7f0000000740)=r1, 0x4)
close(r0)
socket$kcm(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000000c0)={'veth0_vlan\x00', @random="2b0100004ec6"})

1.434581719s ago: executing program 1 (id=445):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63e8ffffffffffffff80002000000000101000007f06000800000000000000"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x400000000000, 0x8018a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x5}, 0x1014, 0x0, 0x0, 0x3, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000039c0), 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x800, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x10)
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x80000000, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$kcm(0x10, 0x2, 0x0)

1.422388448s ago: executing program 0 (id=446):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11", 0x14}], 0x1}, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r0], 0x8)

1.15363935s ago: executing program 2 (id=447):
socketpair(0x3a, 0xa, 0x100, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x80000009}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
fstat(r2, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa2269, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000080000000000000000008085100000010000009500000000000000180000000001000000000000022020207b1af8ff000000001f0200000000000007010000f8ffffffb71c000008000000b703000000000028850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94)
r3 = socket$kcm(0x29, 0x2, 0x0)
close(r3) (async)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r5 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async)
r7 = getpid()
write$cgroup_pid(r6, &(0x7f0000000140)=r7, 0x12)
socket$kcm(0x2, 0x1, 0x84) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\xcf\x8d}\xc2\x04\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x00\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x00\x00\x00\x00\x00\x00\x00\x7f\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x98\x00\x00\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{')

1.093792557s ago: executing program 0 (id=448):
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3eb}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

1.093267601s ago: executing program 4 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0xff97, 0x42804}, 0x0)

1.030616967s ago: executing program 0 (id=450):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x300, 0x70bd2b, 0x0, {{@in6=@local, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {@in6=@mcast2, @in=@broadcast, 0x4e21, 0x0, 0x4e25, 0x2, 0xa, 0x0, 0x56befe125658cb64, 0x4}, {{@in6=@empty, @in6=@private1, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x200}, 0x0, 0xf7ffffff, 0x2, 0x1, 0x0, 0x1}, 0xfffffff9, 0x38, 0x9, 0x1}}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007)
close(r2)

1.013695763s ago: executing program 4 (id=451):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000000000f6ff000000000000001800000000000000100100000d000000f800000000000000"], 0x28}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x9a, &(0x7f0000000280)=""/154, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7, 0xd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x4, 0x1, 0x6}, {0x5, 0x2, 0xd, 0x8}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='ib_mad_send_done_handler\x00', r1, 0x0, 0x7}, 0x18)
r2 = syz_clone(0x24080080, 0x0, 0x0, 0x0, &(0x7f0000001680), &(0x7f00000016c0))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, r2, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x1001)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43", 0x15}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000180)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x5, 0xf6, 0x4, 0x0, 0x315ff43f, 0x40000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x7fff, 0x8}, 0x8080, 0x8, 0x9, 0x6, 0x5, 0x3, 0x400, 0x0, 0xfffffffa, 0x0, 0xd}, r2, 0x2, r3, 0x9)

946.303977ms ago: executing program 2 (id=452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

888.443458ms ago: executing program 3 (id=453):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000015000103000000000000e7ff0b"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\f '], 0xa)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=@get={0xe0, 0x13, 0x1, 0x70bd28, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, '\x00', '\x00', 0x1400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x4004084)

874.309103ms ago: executing program 2 (id=454):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8", 0x31}], 0x1}, 0x20000004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0x9}, 0x11, 0x0, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x2ca, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0002008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000040)=r3, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000700000000000000000600fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="01"], 0x50)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000100)="b15fbe5d60fe94771aa112a89ffb00c2008ce5745bc563703a4f02314dd856038cc68b32fb1ec6d84d92072eefcb9e504499bcfb068fe829d39d686b2a197db2897c421421f0b1141b8b588e0312fe4a39aed2b2584b5eb5bccadd94723237c90452ff02c4a6bd13005e6293e6ee6b7e19e08cb31d11b531ca726bcb34ef8465f71ebbb7da8f0b7f3779e178874e1bcc2d3799f53e90a6a0ca2e6c645186c6e18cf58b9f70403101d65a60f1f84157093623fdb5b0d1574de3a401b5f9", &(0x7f0000000240)=""/97, &(0x7f0000000300)="11f051316f09300915bc4612042e772d27a0b5c0296b6dd82fc583eb692e08f89f8bf188248fcc28b33fe8e463f61808714ebac5474b1dce3d5bf6b1b5b4e049b8a4f151a494e787311e57eff4872c6baf28f97a79f736acc86e1b8cd82bb8", &(0x7f0000000040)="b3017c8db7052674ff123c20e9bd9ad49ed43472f2c2a083008b23b63e65149d7ecf3f14", 0x6, r6}, 0x38)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))

633.148937ms ago: executing program 0 (id=455):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008"], 0x70}}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x7, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xa353}, 0x320, 0x7, 0x0, 0x2, 0xe1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x11b, 0x6, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x2f, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000001000000009d00080002000100000000000000851000000400000e00ba110000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018320000050000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xe6, 0xa5, &(0x7f00000005c0)=""/165, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x3, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r0, r0], &(0x7f0000000a40)=[{0x4, 0x4, 0x6, 0x8}, {0x5, 0x1, 0x10, 0x4}, {0x3, 0x2, 0x2, 0x5}, {0x3, 0x2, 0x9, 0xa}], 0x10, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000440)='svcrdma_small_wrch_err\x00', r5, 0x0, 0x10c7bdcd}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000e80)={0x0, r2}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000611164000000950000000000bf9cd8b9"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r6 = socket$kcm(0x15, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r3, @ANYBLOB="548d451c92bfa6196b452f2cbc14bf977dafad5891b2d2fb3999cb14dd5f9ecf1c5b1201618bf7480e887f4564e0d1e8bbe3f55c7b17a10942b47179d1e5fd9678f70b4e866d7ca5c50bc4aa4338f56d4686a752fe39fb9910ed291709dd24e4"], 0x9)
recvmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40)
r8 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="cb", 0x1}], 0x1}, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r9, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/156, 0x9c}, {&(0x7f0000000840)=""/70, 0x46}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000200)=""/27, 0x1b}], 0x5}, 0x2000800)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000290000000500000000020201000000000000000000000000bb"], 0x28}, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r7, 0x89a3, &(0x7f0000000080)={'bond0\x00', @remote})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="6c01000000007700000000000000004e2200004e230003020000003a00020000000000000008000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="01000000"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

631.368903ms ago: executing program 1 (id=456):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000000b80)={&(0x7f0000000700)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000bc0)="5d937e04f4008cf8c644ffcd9c1105cc2c04256ba1b805f9e4a83d18992acbb3391d4dad3456a308fbcd5dc5400103828a03d32d78cc0f69af856cbd1496e5edb154ea930afdd8b68d2e", 0x4a}, {&(0x7f00000007c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000d80), 0x0, 0x8080}, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb709}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$key(0xffffffffffffffff, 0x0, 0x24040800)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20000044)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

595.679292ms ago: executing program 2 (id=457):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,', @ANYRESHEX, @ANYBLOB=','])
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00'}, 0x10)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000001980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="11"], 0x11)
close(0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a36", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0xc}]}, {0x0, [0x30]}}, &(0x7f0000000640)=""/204, 0x27, 0xcc, 0x0, 0xffffdbe6}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80f, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0xd}, @map_fd={0x18, 0x8}, @call={0x85, 0x0, 0x0, 0x30}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2890, 0x8, &(0x7f00000002c0)=""/8, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x8, 0xa, 0xd3b6}, 0x10, 0x25ea9, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=[{0x3, 0x3, 0x1, 0x1}], 0x10, 0x81}, 0x94)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
fstat(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001540)=ANY=[@ANYBLOB="180200001300e9990100000000000000fe880000000000000000000002000101ac1e000100000000000000000000000000000000000000000200300000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x10000880}, 0x4800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x27, 0x4, 0x70bd26, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x126, 0x0, 0x0, @uid}, @typed={0x8, 0xc7, 0x0, 0x0, @uid=r9}, @generic="597147e9a2966b8c164b7af3ad963c8270213c8ef6e4e2fad29fdf95df11bd9fe09ee8a6b1c3c47c1f3b5b1c6be9c1596af3aa8422ce30fbd66d5f9ef51c63494b9670eed9561fcfc230849db79c28ab3ae7c90186a670a292b168643f4b9f8e2a3602a71a3af59204462471fdb4f83b402e7620fd84216b2c"]}, 0xa0}, 0x1, 0x0, 0x0, 0x4001}, 0x2000a000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d01"], 0xfc}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x16fb, 0x33, &(0x7f0000000500)=""/51, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, r4, 0x8, &(0x7f0000000780)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x3, 0x3ff, 0x4953}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000840)=[r2, r5, r6, r2, r2], 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000005c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

513.645973ms ago: executing program 4 (id=458):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000015006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f00000002c0)=[{0x25, 0x0, 0x4, 0xfffffffe}, {0x20, 0x0, 0x0, 0x4}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x38, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}, {0x4, 0x2, 0x4, 0x3}]})

441.88752ms ago: executing program 3 (id=459):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r0], 0x8)

146.074596ms ago: executing program 3 (id=460):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) (async)
r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x401c5820, &(0x7f0000000040)=0xc8) (async)
r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r12, r11, 0x28, 0x25, r14}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@ifindex=r6, r9, 0x32, 0x3, r4, @void, @value=r3}, 0x20)

143.85774ms ago: executing program 2 (id=461):
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9b"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x2, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000009500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xffffffffffffff8c, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb"], 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb"], 0xfe33)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x0, 0xfffffffd, 0x3, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x0, 0xfffffffd, 0x3, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000200)=@task={0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000200)=@task={0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x10c0)

99.338085ms ago: executing program 0 (id=462):
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x3, {{{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x33}, @in6=@remote, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0xffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x1986, 0xfc, 0x4, 0x0, 0x81, 0x109, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=463):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0xffffffffffffff0c}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (fail_nth: 2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts.
[   68.395560][ T5820] cgroup: Unknown subsys name 'net'
[   68.530358][ T5820] cgroup: Unknown subsys name 'cpuset'
[   68.539512][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.889540][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.391261][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[   71.397741][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[   74.128074][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.157785][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.165757][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.173813][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.181499][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.251599][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.259828][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.267587][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.275932][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.295443][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.306503][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.351964][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.359958][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.369476][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.378317][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.422580][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.430945][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.439667][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.448616][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.456215][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.505034][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.513492][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.522307][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.530694][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.538365][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.826231][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   75.087274][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   75.125368][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   75.206238][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.214386][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.222264][ T5830] bridge_slave_0: entered allmulticast mode
[   75.229702][ T5830] bridge_slave_0: entered promiscuous mode
[   75.244000][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   75.279267][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.286417][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.293963][ T5830] bridge_slave_1: entered allmulticast mode
[   75.300987][ T5830] bridge_slave_1: entered promiscuous mode
[   75.388269][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.395463][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.403098][ T5836] bridge_slave_0: entered allmulticast mode
[   75.410132][ T5836] bridge_slave_0: entered promiscuous mode
[   75.433260][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.460085][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.467719][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.474856][ T5836] bridge_slave_1: entered allmulticast mode
[   75.482075][ T5836] bridge_slave_1: entered promiscuous mode
[   75.496065][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.599069][ T5830] team0: Port device team_slave_0 added
[   75.609816][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.617259][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.624400][ T5839] bridge_slave_0: entered allmulticast mode
[   75.631647][ T5839] bridge_slave_0: entered promiscuous mode
[   75.641487][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.652457][ T5830] team0: Port device team_slave_1 added
[   75.658361][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   75.680172][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.687536][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.694956][ T5839] bridge_slave_1: entered allmulticast mode
[   75.702218][ T5839] bridge_slave_1: entered promiscuous mode
[   75.710822][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.783007][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.790601][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.797852][ T5843] bridge_slave_0: entered allmulticast mode
[   75.804890][ T5843] bridge_slave_0: entered promiscuous mode
[   75.834777][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.841779][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.868645][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.894976][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.902159][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.909476][ T5843] bridge_slave_1: entered allmulticast mode
[   75.916414][ T5843] bridge_slave_1: entered promiscuous mode
[   75.925402][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.936530][ T5836] team0: Port device team_slave_0 added
[   75.942787][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.949958][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.976016][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.003079][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.013660][ T5836] team0: Port device team_slave_1 added
[   76.098262][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.120417][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.127524][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.153568][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.165867][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.172905][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.198953][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.222087][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.232711][ T5839] team0: Port device team_slave_0 added
[   76.267598][ T5834] Bluetooth: hci0: command tx timeout
[   76.278638][ T5839] team0: Port device team_slave_1 added
[   76.295852][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.303815][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.311089][ T5845] bridge_slave_0: entered allmulticast mode
[   76.319121][ T5845] bridge_slave_0: entered promiscuous mode
[   76.353874][ T5830] hsr_slave_0: entered promiscuous mode
[   76.360273][ T5830] hsr_slave_1: entered promiscuous mode
[   76.368209][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.375326][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.383061][ T5845] bridge_slave_1: entered allmulticast mode
[   76.390309][ T5845] bridge_slave_1: entered promiscuous mode
[   76.399897][ T5843] team0: Port device team_slave_0 added
[   76.416636][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.423816][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.427708][ T5834] Bluetooth: hci2: command tx timeout
[   76.455896][   T52] Bluetooth: hci1: command tx timeout
[   76.457768][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.495369][ T5843] team0: Port device team_slave_1 added
[   76.507189][   T52] Bluetooth: hci3: command tx timeout
[   76.514870][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.522105][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.548282][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.587217][   T52] Bluetooth: hci4: command tx timeout
[   76.616376][ T5836] hsr_slave_0: entered promiscuous mode
[   76.623208][ T5836] hsr_slave_1: entered promiscuous mode
[   76.629561][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   76.635350][ T5836] Cannot create hsr debugfs directory
[   76.643363][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.684441][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.694952][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.702107][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.729192][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.756899][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.763932][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.790001][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.867776][ T5845] team0: Port device team_slave_0 added
[   76.875567][ T5845] team0: Port device team_slave_1 added
[   76.886501][ T5839] hsr_slave_0: entered promiscuous mode
[   76.893197][ T5839] hsr_slave_1: entered promiscuous mode
[   76.899366][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   76.905180][ T5839] Cannot create hsr debugfs directory
[   76.998254][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.005213][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.032750][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.079312][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.086255][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.112373][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.128734][ T5843] hsr_slave_0: entered promiscuous mode
[   77.135086][ T5843] hsr_slave_1: entered promiscuous mode
[   77.141316][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   77.147127][ T5843] Cannot create hsr debugfs directory
[   77.294920][ T5845] hsr_slave_0: entered promiscuous mode
[   77.301330][ T5845] hsr_slave_1: entered promiscuous mode
[   77.307929][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   77.313676][ T5845] Cannot create hsr debugfs directory
[   77.528588][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.562665][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.596117][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.606420][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.710359][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.721682][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.734248][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.745524][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.831011][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.846575][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.858960][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.883310][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.959107][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.983615][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.012903][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.049669][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.104356][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.125064][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.149939][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.161329][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.171706][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.214250][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   78.241888][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.249187][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.280954][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.288108][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.331685][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.347566][   T52] Bluetooth: hci0: command tx timeout
[   78.393595][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.410703][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   78.443314][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.450518][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.469409][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   78.493028][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.500159][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.507751][   T52] Bluetooth: hci2: command tx timeout
[   78.517269][   T52] Bluetooth: hci1: command tx timeout
[   78.533255][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.540461][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.581537][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.589538][   T52] Bluetooth: hci3: command tx timeout
[   78.615877][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.623096][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.667301][   T52] Bluetooth: hci4: command tx timeout
[   78.675239][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   78.728983][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.736145][ T2134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.773815][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.781200][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.805492][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.828328][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.881647][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   78.915373][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.993365][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.005822][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.025767][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.032980][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.109960][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.117177][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.279705][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.299951][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.454178][ T5836] veth0_vlan: entered promiscuous mode
[   79.492770][ T5836] veth1_vlan: entered promiscuous mode
[   79.506063][ T5845] veth0_vlan: entered promiscuous mode
[   79.555407][ T5845] veth1_vlan: entered promiscuous mode
[   79.590973][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.636334][ T5830] veth0_vlan: entered promiscuous mode
[   79.649289][ T5836] veth0_macvtap: entered promiscuous mode
[   79.674297][ T5836] veth1_macvtap: entered promiscuous mode
[   79.690291][ T5830] veth1_vlan: entered promiscuous mode
[   79.715179][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.724158][ T5845] veth0_macvtap: entered promiscuous mode
[   79.747998][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.760615][ T5845] veth1_macvtap: entered promiscuous mode
[   79.783401][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.806886][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.816848][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.832984][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.842320][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.876028][ T5843] veth0_vlan: entered promiscuous mode
[   79.893788][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.912311][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.920945][ T5830] veth0_macvtap: entered promiscuous mode
[   79.943346][ T5830] veth1_macvtap: entered promiscuous mode
[   79.963992][ T5843] veth1_vlan: entered promiscuous mode
[   79.971124][ T1931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.981211][ T1931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.012355][ T1931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.022071][ T1931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.081109][ T5839] veth0_vlan: entered promiscuous mode
[   80.100359][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.120050][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.128993][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.148191][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.180843][ T5839] veth1_vlan: entered promiscuous mode
[   80.208459][ T5843] veth0_macvtap: entered promiscuous mode
[   80.226746][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.236940][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.246158][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.248446][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.263757][ T5843] veth1_macvtap: entered promiscuous mode
[   80.296121][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.307840][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.335410][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.343278][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.366108][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.427926][   T52] Bluetooth: hci0: command tx timeout
[   80.444572][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.474647][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.485571][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.513254][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.588114][   T52] Bluetooth: hci1: command tx timeout
[   80.590525][ T5834] Bluetooth: hci2: command tx timeout
[   80.610119][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.634512][ T5839] veth0_macvtap: entered promiscuous mode
[   80.647780][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.664562][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.673205][ T5834] Bluetooth: hci3: command tx timeout
[   80.681406][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.691868][ T5839] veth1_macvtap: entered promiscuous mode
[   80.700790][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.716607][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.757340][ T5834] Bluetooth: hci4: command tx timeout
[   80.817307][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.829336][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.851986][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.866334][ T5952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   80.870308][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.977730][ T4763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.045562][ T4763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.116705][ T4763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.137261][ T4763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.164818][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.199783][    C0] hrtimer: interrupt took 138619 ns
[   81.242537][ T5962] netlink: 'syz.1.7': attribute type 3 has an invalid length.
[   81.293321][ T5962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'.
[   81.370524][ T5955] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7'.
[   81.402013][ T5961] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'.
[   81.431170][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.450882][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.023905][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.042519][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.219561][ T5970] netlink: 'syz.2.10': attribute type 10 has an invalid length.
[   82.448639][ T5977] Zero length message leads to an empty skb
[   82.508054][ T5834] Bluetooth: hci0: command tx timeout
[   82.532183][ T5979] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11'.
[   82.547631][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.555469][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.628002][ T5975] warning: `syz.4.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.677745][ T5834] Bluetooth: hci2: command tx timeout
[   82.677832][   T52] Bluetooth: hci1: command tx timeout
[   82.747809][   T52] Bluetooth: hci3: command tx timeout
[   82.909911][   T52] Bluetooth: hci4: command tx timeout
[   82.921348][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.076986][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.571344][ T5998] netlink: 'syz.1.16': attribute type 3 has an invalid length.
[   83.694252][ T5998] netlink: 148 bytes leftover after parsing attributes in process `syz.1.16'.
[   83.832950][ T6003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17'.
[   84.066669][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   84.135681][ T6013] netlink: 'syz.2.20': attribute type 10 has an invalid length.
[   84.175376][ T6014] netlink: 'syz.2.20': attribute type 10 has an invalid length.
[   84.185337][ T6024] =======================================================
[   84.185337][ T6024] WARNING: The mand mount option has been deprecated and
[   84.185337][ T6024]          and is ignored by this kernel. Remove the mand
[   84.185337][ T6024]          option from the mount to silence this warning.
[   84.185337][ T6024] =======================================================
[   84.229142][ T6014] netlink: 156 bytes leftover after parsing attributes in process `syz.2.20'.
[   84.239526][ T6013] netlink: 156 bytes leftover after parsing attributes in process `syz.2.20'.
[   86.430686][ T6132] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[   86.756302][  T916] cfg80211: failed to load regulatory.db
[   87.861248][ T6140] netlink: 'syz.2.39': attribute type 21 has an invalid length.
[   88.204216][ T6159] bridge0: port 3(bond0) entered blocking state
[   88.230714][ T6159] bridge0: port 3(bond0) entered disabled state
[   88.242012][ T6159] bond0: entered allmulticast mode
[   88.248137][ T6159] bond_slave_0: entered allmulticast mode
[   88.254585][ T6159] bond_slave_1: entered allmulticast mode
[   88.275754][ T6159] bond0: entered promiscuous mode
[   88.284687][ T6159] bond_slave_0: entered promiscuous mode
[   88.291200][ T6159] bond_slave_1: entered promiscuous mode
[   88.297698][ T6159] bridge0: port 3(bond0) entered blocking state
[   88.304227][ T6159] bridge0: port 3(bond0) entered forwarding state
[   88.349211][ T6155] __nla_validate_parse: 3 callbacks suppressed
[   88.349224][ T6155] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.44'.
[   88.558880][ T6172] IPv6: Can't replace route, no match found
[   88.787533][ T6176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.841827][ T6170] syzkaller0: entered promiscuous mode
[   88.851384][ T6179] netlink: 160 bytes leftover after parsing attributes in process `syz.4.49'.
[   88.866317][ T6170] syzkaller0: entered allmulticast mode
[   88.943558][ T6184] tmpfs: Unknown parameter 'ÔS\'
[   90.120407][ T6190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.136103][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'.
[   90.352106][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'.
[   91.054793][ T6234] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   92.542521][ T6244] syz.4.70 uses obsolete (PF_INET,SOCK_PACKET)
[   93.726253][ T6092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.893412][ T6287] netlink: 'syz.1.89': attribute type 4 has an invalid length.
[   93.921053][ T6287] netlink: 112 bytes leftover after parsing attributes in process `syz.1.89'.
[   94.472959][ T6092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.709025][ T6092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.904579][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.914393][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.916481][ T6092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.944242][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.954759][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.963123][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.983176][ T6092] bridge_slave_1: left allmulticast mode
[   95.994856][ T6092] bridge_slave_1: left promiscuous mode
[   96.018437][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.124169][ T6092] bridge_slave_0: left allmulticast mode
[   96.139359][ T6344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.149085][ T6092] bridge_slave_0: left promiscuous mode
[   96.156101][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.395489][ T6366] netlink: 'syz.3.106': attribute type 10 has an invalid length.
[   96.889477][ T6092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.904161][ T6092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.915953][ T6092] bond0 (unregistering): Released all slaves
[   97.067703][ T5834] Bluetooth: hci2: command tx timeout
[   97.531981][ T6402] netlink: 'syz.4.116': attribute type 21 has an invalid length.
[   97.569404][ T6402] netlink: 160 bytes leftover after parsing attributes in process `syz.4.116'.
[   97.605572][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'.
[   98.082927][ T6314] chnl_net:caif_netlink_parms(): no params data found
[   98.146176][ T6428] xt_socket: unknown flags 0x40
[   98.248294][ T6413] syz.3.117 (6413) used greatest stack depth: 15168 bytes left
[   98.523053][ T6092] hsr_slave_0: left promiscuous mode
[   98.534351][ T6092] hsr_slave_1: left promiscuous mode
[   98.544862][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.567966][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.672831][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.721006][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.882148][ T6092] veth1_macvtap: left promiscuous mode
[   98.908177][ T6092] veth0_macvtap: left promiscuous mode
[   98.927438][ T6092] veth1_vlan: left promiscuous mode
[   98.934707][ T6092] veth0_vlan: left promiscuous mode
[   98.972846][ T6459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.124'.
[   99.147504][ T5834] Bluetooth: hci2: command tx timeout
[   99.269240][ T6474] netlink: 'syz.3.127': attribute type 10 has an invalid length.
[  100.033840][ T6092] team0 (unregistering): Port device team_slave_1 removed
[  100.064799][ T6092] team0 (unregistering): Port device team_slave_0 removed
[  100.347955][ T6458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.125'.
[  100.360709][ T6466] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.127'.
[  100.374730][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.395697][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.434850][ T6314] bridge_slave_0: entered allmulticast mode
[  100.467864][ T6314] bridge_slave_0: entered promiscuous mode
[  100.495050][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.525308][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.534102][ T6314] bridge_slave_1: entered allmulticast mode
[  100.546386][ T6314] bridge_slave_1: entered promiscuous mode
[  100.695828][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.733441][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.896937][ T6314] team0: Port device team_slave_0 added
[  100.954002][ T6314] team0: Port device team_slave_1 added
[  100.971649][ T6495] erspan0 speed is unknown, defaulting to 1000
[  101.227274][ T5834] Bluetooth: hci2: command tx timeout
[  101.589131][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'.
[  103.284695][ T6495] erspan0 speed is unknown, defaulting to 1000
[  103.312559][ T5834] Bluetooth: hci2: command tx timeout
[  103.392599][ T6495] erspan0 speed is unknown, defaulting to 1000
[  103.412442][ T6495] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  103.428634][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.435624][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.478229][ T6495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  103.491499][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.516084][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'.
[  103.556240][ T6521] netlink: 'syz.4.136': attribute type 5 has an invalid length.
[  103.583176][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.617192][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.654311][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'.
[  103.665002][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.678746][ T6495] erspan0 speed is unknown, defaulting to 1000
[  103.692363][ T6529] netlink: 'syz.4.136': attribute type 23 has an invalid length.
[  103.738665][ T6495] erspan0 speed is unknown, defaulting to 1000
[  103.769134][ T6495] erspan0 speed is unknown, defaulting to 1000
[  103.841222][ T6495] erspan0 speed is unknown, defaulting to 1000
[  103.847928][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  103.925985][ T6314] hsr_slave_0: entered promiscuous mode
[  103.958689][ T6314] hsr_slave_1: entered promiscuous mode
[  103.965169][ T6314] debugfs: 'hsr0' already exists in 'hsr'
[  103.978739][ T6314] Cannot create hsr debugfs directory
[  103.984387][ T6495] erspan0 speed is unknown, defaulting to 1000
[  104.670299][ T6558] netlink: 'syz.3.144': attribute type 5 has an invalid length.
[  104.708648][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'.
[  105.511488][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'.
[  105.584235][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.672855][ T6314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.721503][ T6314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.741338][ T6314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.763645][ T6314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.995983][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.041963][ T6314] 8021q: adding VLAN 0 to HW filter on device team0
[  106.093045][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.100240][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.105550][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'.
[  106.130014][ T6635] pim6reg1: tun_chr_ioctl cmd 1074025677
[  106.136462][ T6635] pim6reg1: linktype set to 774
[  106.182297][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.189427][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.536355][ T6651] netlink: 'syz.2.166': attribute type 16 has an invalid length.
[  106.544555][ T6651] netlink: 'syz.2.166': attribute type 17 has an invalid length.
[  106.741249][ T6651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.778820][ T5915] erspan0 speed is unknown, defaulting to 1000
[  106.865474][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.060431][ T6676] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[  107.073326][ T6314] veth0_vlan: entered promiscuous mode
[  107.133084][ T6314] veth1_vlan: entered promiscuous mode
[  107.241828][ T6676] netlink: 830 bytes leftover after parsing attributes in process `syz.2.170'.
[  107.295585][ T6676] bond_slave_0: entered promiscuous mode
[  107.301755][ T6676] bond_slave_1: entered promiscuous mode
[  107.618418][ T6314] veth0_macvtap: entered promiscuous mode
[  107.654210][ T6314] veth1_macvtap: entered promiscuous mode
[  107.724385][   T30] audit: type=1107 audit(1764927596.121:2): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  107.765033][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.809607][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.863867][ T6114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.893501][ T6695] netlink: 104 bytes leftover after parsing attributes in process `syz.3.174'.
[  107.905690][ T6114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.974978][ T6114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.992384][ T6114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.018999][ T6700] IPv6: Can't replace route, no match found
[  108.034219][ T6700] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  108.105851][ T6714] netlink: 'syz.1.178': attribute type 3 has an invalid length.
[  108.121054][ T6705] netlink: 'syz.4.177': attribute type 7 has an invalid length.
[  108.153801][ T6705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.177'.
[  108.325420][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.357285][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.606461][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.622991][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.691318][ T6730] sit0: entered allmulticast mode
[  112.701688][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.188'.
[  112.933944][ T6787] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[  112.980413][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'.
[  113.105809][ T6790] bridge_slave_1: left allmulticast mode
[  113.111708][ T6790] bridge_slave_1: left promiscuous mode
[  113.117781][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.273756][ T6790] bridge_slave_0: left allmulticast mode
[  113.321922][ T6790] bridge_slave_0: left promiscuous mode
[  113.350037][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.498932][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'.
[  113.530167][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'.
[  113.549139][ T6800] netlink: 80 bytes leftover after parsing attributes in process `syz.2.187'.
[  114.103262][ T6839] netlink: 'syz.1.202': attribute type 2 has an invalid length.
[  114.167647][ T6831] delete_channel: no stack
[  114.279731][ T6848] option changes via remount are deprecated (pid=6840 comm=syz.2.201)
[  114.719387][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'.
[  114.730436][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'.
[  114.742903][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'.
[  115.871895][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'.
[  115.901654][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'.
[  116.581674][ T6903] tmpfs: Bad value for 'mode'
[  122.451046][ T6922] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[  122.867611][ T6922] __nla_validate_parse: 2 callbacks suppressed
[  122.867630][ T6922] netlink: 9 bytes leftover after parsing attributes in process `syz.0.220'.
[  128.398087][ T6961] netlink: 'syz.3.230': attribute type 2 has an invalid length.
[  128.428488][ T6961] netlink: 164 bytes leftover after parsing attributes in process `syz.3.230'.
[  128.457657][ T6965] netlink: 'syz.3.230': attribute type 2 has an invalid length.
[  128.483633][ T6965] netlink: 164 bytes leftover after parsing attributes in process `syz.3.230'.
[  128.556475][ T6978] xt_l2tp: v2 tid > 0xffff: 16462212
[  128.584713][ T6976] netlink: 'syz.4.233': attribute type 2 has an invalid length.
[  129.124176][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.230'.
[  129.345453][ T6984] netlink: 'syz.4.236': attribute type 39 has an invalid length.
[  129.764436][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'.
[  129.824980][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[  129.858407][ T7000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.240'.
[  129.984601][ T7006] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.241'.
[  130.178643][ T7009] netlink: 14 bytes leftover after parsing attributes in process `syz.3.243'.
[  130.528705][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'.
[  130.751312][ T7019] : entered promiscuous mode
[  131.092709][ T7030] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.248'.
[  131.308265][ T7031] openvswitch: netlink: IP tunnel dst address not specified
[  132.833316][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.839709][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.270257][ T7116] netlink: 'syz.2.273': attribute type 5 has an invalid length.
[  133.320065][ T7116] netlink: 'syz.2.273': attribute type 6 has an invalid length.
[  133.592204][ T7122] team0: Port device team_slave_0 removed
[  133.613596][ T7122] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  133.788418][ T7139] netlink: 'syz.3.282': attribute type 5 has an invalid length.
[  133.945308][ T7147] netlink: 'syz.3.284': attribute type 13 has an invalid length.
[  133.989183][ T7148] netlink: 'syz.3.284': attribute type 13 has an invalid length.
[  134.407558][ T7173] netlink: 'syz.0.290': attribute type 21 has an invalid length.
[  134.427646][ T7173] netlink: 'syz.0.290': attribute type 4 has an invalid length.
[  134.452262][ T7173] __nla_validate_parse: 10 callbacks suppressed
[  134.452285][ T7173] netlink: 14497 bytes leftover after parsing attributes in process `syz.0.290'.
[  134.528281][ T7164] IPv6: Can't replace route, no match found
[  135.931987][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.295'.
[  135.955297][ T7201] netlink: 96 bytes leftover after parsing attributes in process `syz.4.295'.
[  135.968104][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.295'.
[  135.978028][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.295'.
[  136.004225][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'.
[  136.055859][ T7207] netlink: 156 bytes leftover after parsing attributes in process `syz.0.299'.
[  136.419340][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.304'.
[  136.465856][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.304'.
[  136.643404][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'.
[  136.687677][ T7221] erspan0 speed is unknown, defaulting to 1000
[  138.149211][ T7270] netlink: 'syz.2.316': attribute type 21 has an invalid length.
[  139.508963][ T7297] netlink: 'syz.3.328': attribute type 25 has an invalid length.
[  139.530594][ T7297] netlink: 'syz.3.328': attribute type 7 has an invalid length.
[  139.872405][ T7322] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  140.656876][ T7373] netlink: 'syz.4.351': attribute type 23 has an invalid length.
[  140.981232][ T7381] __nla_validate_parse: 6 callbacks suppressed
[  140.981251][ T7381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.354'.
[  141.004921][ T7381] netlink: 43 bytes leftover after parsing attributes in process `syz.4.354'.
[  141.117498][ T7381] netlink: 'syz.4.354': attribute type 5 has an invalid length.
[  141.145152][ T7381] netlink: 43 bytes leftover after parsing attributes in process `syz.4.354'.
[  141.242689][ T7386] tmpfs: Unknown parameter ',3'
[  141.451754][ T7388] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.355'.
[  141.496740][ T7392] netlink: 7 bytes leftover after parsing attributes in process `syz.2.358'.
[  141.537169][ T7392] netlink: 'syz.2.358': attribute type 2 has an invalid length.
[  141.565093][ T7392] netlink: 'syz.2.358': attribute type 1 has an invalid length.
[  142.034690][ T7398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.271399][ T7416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.367'.
[  142.286201][ T7416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.367'.
[  144.293232][ T7481] syz.4.383: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  144.327687][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.4.383 Not tainted syzkaller #0 PREEMPT(full) 
[  144.327714][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.327731][ T7481] Call Trace:
[  144.327747][ T7481]  <TASK>
[  144.327759][ T7481]  dump_stack_lvl+0x189/0x250
[  144.327820][ T7481]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.327853][ T7481]  ? __pfx__printk+0x10/0x10
[  144.327891][ T7481]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.327924][ T7481]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.327971][ T7481]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  144.328022][ T7481]  warn_alloc+0x214/0x310
[  144.328054][ T7481]  ? stack_depot_save_flags+0x422/0x850
[  144.328106][ T7481]  ? __pfx_warn_alloc+0x10/0x10
[  144.328148][ T7481]  ? kasan_save_track+0x3e/0x80
[  144.328178][ T7481]  ? __kasan_kmalloc+0x93/0xb0
[  144.328213][ T7481]  ? xsk_setsockopt+0x57b/0x8d0
[  144.328230][ T7481]  ? do_sock_setsockopt+0x17c/0x1b0
[  144.328253][ T7481]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  144.328274][ T7481]  ? do_syscall_64+0xfa/0xf80
[  144.328294][ T7481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.328370][ T7481]  __vmalloc_node_range_noprof+0x125/0x12d0
[  144.328568][ T7481]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.328621][ T7481]  ? __kasan_kmalloc+0x93/0xb0
[  144.328682][ T7481]  vmalloc_user_noprof+0xad/0xf0
[  144.328712][ T7481]  ? xskq_create+0xbf/0x170
[  144.328745][ T7481]  xskq_create+0xbf/0x170
[  144.328789][ T7481]  xsk_init_queue+0xb0/0x110
[  144.328834][ T7481]  xsk_setsockopt+0x57b/0x8d0
[  144.328880][ T7481]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.328927][ T7481]  ? __pfx_aa_sk_perm+0x10/0x10
[  144.328978][ T7481]  ? aa_sock_opt_perm+0xff/0x1a0
[  144.329026][ T7481]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  144.329049][ T7481]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.329088][ T7481]  do_sock_setsockopt+0x17c/0x1b0
[  144.329151][ T7481]  __x64_sys_setsockopt+0x13f/0x1b0
[  144.329226][ T7481]  do_syscall_64+0xfa/0xf80
[  144.329263][ T7481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.329285][ T7481]  ? clear_bhb_loop+0x60/0xb0
[  144.329329][ T7481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.329348][ T7481] RIP: 0033:0x7fa814b8f749
[  144.329381][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.329396][ T7481] RSP: 002b:00007fa8159ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.329415][ T7481] RAX: ffffffffffffffda RBX: 00007fa814de5fa0 RCX: 00007fa814b8f749
[  144.329428][ T7481] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  144.329439][ T7481] RBP: 00007fa814c13f91 R08: 0000000000000004 R09: 0000000000000000
[  144.329450][ T7481] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  144.329462][ T7481] R13: 00007fa814de6038 R14: 00007fa814de5fa0 R15: 00007ffea4d217b8
[  144.329584][ T7481]  </TASK>
[  144.329598][ T7481] Mem-Info:
[  144.736887][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.383'.
[  144.788613][ T7481] active_anon:26822 inactive_anon:0 isolated_anon:0
[  144.788613][ T7481]  active_file:12614 inactive_file:39910 isolated_file:0
[  144.788613][ T7481]  unevictable:768 dirty:103 writeback:0
[  144.788613][ T7481]  slab_reclaimable:10731 slab_unreclaimable:95575
[  144.788613][ T7481]  mapped:39198 shmem:22616 pagetables:1260
[  144.788613][ T7481]  sec_pagetables:0 bounce:0
[  144.788613][ T7481]  kernel_misc_reclaimable:0
[  144.788613][ T7481]  free:1298681 free_pcp:19782 free_cma:0
[  144.934500][ T7481] Node 0 active_anon:108080kB inactive_anon:0kB active_file:50456kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156860kB dirty:412kB writeback:0kB shmem:89496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  145.037152][ T7481] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  145.092844][ T7486] netlink: 'syz.1.384': attribute type 39 has an invalid length.
[  145.207235][ T7481] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.264664][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[  145.346407][ T7481] lowmem_reserve[]: 0 2504 2504 2504 2504
[  145.420390][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[  145.438278][ T7481] Node 0 DMA32 free:1281436kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110012kB inactive_anon:0kB active_file:50456kB inactive_file:159436kB unevictable:1536kB writepending:412kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:61156kB local_pcp:37744kB free_cma:0kB
[  145.497239][ T7481] lowmem_reserve[]: 0 0 0 0 0
[  145.497929][ T7489] netlink: 'syz.3.385': attribute type 3 has an invalid length.
[  145.502013][ T7481] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.609144][ T7481] lowmem_reserve[]: 0 0 0 0 0
[  145.641089][ T7497] netlink: 'syz.2.386': attribute type 39 has an invalid length.
[  145.649590][ T7481] Node 1 Normal free:3895184kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18248kB local_pcp:6408kB free_cma:0kB
[  145.774016][ T7481] lowmem_reserve[]: 0 0 0 0 0
[  145.794531][ T7481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  145.807923][ T7481] Node 0 DMA32: 1117*4kB (U) 498*8kB (UME) 306*16kB (UE) 1*32kB (U) 3*64kB (UME) 4*128kB (UME) 3*256kB (UME) 0*512kB 3*1024kB (UE) 0*2048kB 305*4096kB (M) = 1267204kB
[  145.869698][ T7481] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  145.897184][ T7481] Node 1 Normal: 180*4kB (UE) 48*8kB (UME) 46*16kB (UME) 65*32kB (UME) 23*64kB (UME) 5*128kB (UME) 4*256kB (ME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3895184kB
[  145.961638][ T7481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  145.972678][ T7481] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.018246][ T7481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  146.060626][ T7481] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.091038][ T7481] 79877 total pagecache pages
[  146.095774][ T7481] 0 pages in swap cache
[  146.119464][ T7481] Free swap  = 124996kB
[  146.130815][ T7481] Total swap = 124996kB
[  146.154067][ T7481] 2097051 pages RAM
[  146.161521][ T7481] 0 pages HighMem/MovableOnly
[  146.166239][ T7481] 424280 pages reserved
[  146.181839][ T7481] 0 pages cma reserved
[  146.210076][ T7505] __nla_validate_parse: 1 callbacks suppressed
[  146.210095][ T7505] netlink: 822 bytes leftover after parsing attributes in process `syz.3.389'.
[  146.318563][ T7507] IPv6: GPL: Disabled Multicast RS
[  146.440375][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'.
[  146.493430][ T7517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.753135][ T7524] netlink: 'syz.2.396': attribute type 4 has an invalid length.
[  146.765012][ T7524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.396'.
[  146.809003][ T7527] netlink: 'syz.0.397': attribute type 2 has an invalid length.
[  146.829162][ T7527] netlink: 'syz.0.397': attribute type 8 has an invalid length.
[  146.843294][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.398'.
[  146.877766][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.397'.
[  146.886896][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.398'.
[  147.360388][ T7548] openvswitch: netlink: Flow key attr not present in new flow.
[  147.677120][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[  147.703176][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.406'.
[  147.732858][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'.
[  147.854058][ T7558] netlink: 'syz.0.405': attribute type 33 has an invalid length.
[  147.854088][ T7558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.405'.
[  148.390110][ T7560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.008821][ T7574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.172552][ T7589] netlink: 'syz.0.417': attribute type 10 has an invalid length.
[  149.219028][ T7589] batman_adv: batadv0: Adding interface: team0
[  149.228823][ T7589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.279187][ T7589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  149.576303][ T7599] netlink: 'syz.1.420': attribute type 2 has an invalid length.
[  149.613978][ T7605] bridge_slave_0: entered allmulticast mode
[  149.649950][ T7599] netlink: 'syz.1.420': attribute type 2 has an invalid length.
[  149.936736][ T7616] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  150.103910][ T7622] netlink: 'syz.1.428': attribute type 21 has an invalid length.
[  150.213519][ T7622] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.854770][ T7635] netlink: 'syz.2.433': attribute type 40 has an invalid length.
[  150.891360][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.458008][ T7664] __nla_validate_parse: 7 callbacks suppressed
[  151.458030][ T7664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.443'.
[  151.485025][ T7664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.443'.
[  151.535331][ T7664] unsupported nlmsg_type 40
[  151.764009][   T30] audit: type=1107 audit(1764927640.161:3): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  152.056316][ T7693] netlink: 'syz.2.454': attribute type 21 has an invalid length.
[  152.094948][ T7693] netlink: 'syz.2.454': attribute type 13 has an invalid length.
[  152.115153][ T7689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.451'.
[  152.171863][ T7689] netlink: 35 bytes leftover after parsing attributes in process `syz.4.451'.
[  152.181859][ T7693] netlink: 216 bytes leftover after parsing attributes in process `syz.2.454'.
[  152.197551][ T7696] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.451'.
[  152.220988][ T7689] netlink: 'syz.4.451': attribute type 6 has an invalid length.
[  152.267914][ T7689] netlink: 'syz.4.451': attribute type 5 has an invalid length.
[  152.296224][ T7689] netlink: 35 bytes leftover after parsing attributes in process `syz.4.451'.
[  152.346960][ T7702] tmpfs: Bad value for 'mode'
[  153.157181][ T7723] FAULT_INJECTION: forcing a failure.
[  153.157181][ T7723] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  153.158178][ T7723] 
[  153.158184][ T7723] ======================================================
[  153.158188][ T7723] WARNING: possible circular locking dependency detected
[  153.158196][ T7723] syzkaller #0 Not tainted
[  153.158200][ T7723] ------------------------------------------------------
[  153.158204][ T7723] syz.4.463/7723 is trying to acquire lock:
[  153.158209][ T7723] ffffffff8df35b20 (console_owner){-...}-{0:0}, at: console_flush_all+0x131/0xb60
[  153.158238][ T7723] 
[  153.158238][ T7723] but task is already holding lock:
[  153.158241][ T7723] ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  153.158260][ T7723] 
[  153.158260][ T7723] which lock already depends on the new lock.
[  153.158260][ T7723] 
[  153.158263][ T7723] 
[  153.158263][ T7723] the existing dependency chain (in reverse order) is:
[  153.158267][ T7723] 
[  153.158267][ T7723] -> #5 (&rq->__lock){-.-.}-{2:2}:
[  153.158278][ T7723]        _raw_spin_lock_nested+0x32/0x50
[  153.158291][ T7723]        raw_spin_rq_lock_nested+0x2a/0x140
[  153.158299][ T7723]        task_rq_lock+0xbc/0x470
[  153.158306][ T7723]        cgroup_move_task+0x92/0x2a0
[  153.158315][ T7723]        css_set_move_task+0x658/0x9e0
[  153.158329][ T7723]        cgroup_post_fork+0x1ef/0x7a0
[  153.158341][ T7723]        copy_process+0x3614/0x3950
[  153.158349][ T7723]        kernel_clone+0x21e/0x820
[  153.158357][ T7723]        user_mode_thread+0xdd/0x140
[  153.158365][ T7723]        rest_init+0x23/0x300
[  153.158372][ T7723]        start_kernel+0x3ae/0x410
[  153.158380][ T7723]        x86_64_start_reservations+0x24/0x30
[  153.158391][ T7723]        x86_64_start_kernel+0x143/0x1c0
[  153.158400][ T7723]        common_startup_64+0x13e/0x147
[  153.158410][ T7723] 
[  153.158410][ T7723] -> #4 (&p->pi_lock){-.-.}-{2:2}:
[  153.158422][ T7723]        _raw_spin_lock_irqsave+0xa7/0xf0
[  153.158431][ T7723]        try_to_wake_up+0x67/0x12b0
[  153.158441][ T7723]        create_worker+0x503/0x720
[  153.158452][ T7723]        workqueue_init+0x3ea/0x690
[  153.158464][ T7723]        kernel_init_freeable+0x302/0x4b0
[  153.158471][ T7723]        kernel_init+0x1d/0x1d0
[  153.158478][ T7723]        ret_from_fork+0x599/0xb30
[  153.158490][ T7723]        ret_from_fork_asm+0x1a/0x30
[  153.158501][ T7723] 
[  153.158501][ T7723] -> #3 (&pool->lock){-.-.}-{2:2}:
[  153.158512][ T7723]        _raw_spin_lock+0x2e/0x40
[  153.158520][ T7723]        __queue_work+0x7eb/0xf90
[  153.158527][ T7723]        queue_work_on+0x181/0x270
[  153.158535][ T7723]        rpm_suspend+0xe44/0x1700
[  153.158546][ T7723]        __pm_runtime_idle+0x12f/0x1a0
[  153.158557][ T7723]        __device_attach+0x342/0x400
[  153.158570][ T7723]        bus_probe_device+0x185/0x260
[  153.158579][ T7723]        device_add+0x7b6/0xb50
[  153.158590][ T7723]        serial_base_port_add+0x2e3/0x410
[  153.158600][ T7723]        serial_core_register_port+0x369/0x2800
[  153.158608][ T7723]        serial8250_register_8250_port+0x16db/0x2080
[  153.158620][ T7723]        serial_pnp_probe+0x527/0x790
[  153.158627][ T7723]        pnp_device_probe+0x30b/0x4c0
[  153.158639][ T7723]        really_probe+0x26d/0x9e0
[  153.158646][ T7723]        __driver_probe_device+0x18c/0x2f0
[  153.158658][ T7723]        driver_probe_device+0x4f/0x430
[  153.158665][ T7723]        __driver_attach+0x452/0x700
[  153.158677][ T7723]        bus_for_each_dev+0x233/0x2b0
[  153.158686][ T7723]        bus_add_driver+0x345/0x640
[  153.158695][ T7723]        driver_register+0x23a/0x320
[  153.158702][ T7723]        serial8250_init+0x8f/0x160
[  153.158715][ T7723]        do_one_initcall+0x1fb/0x7f0
[  153.158724][ T7723]        do_initcall_level+0x104/0x190
[  153.158732][ T7723]        do_initcalls+0x59/0xa0
[  153.158739][ T7723]        kernel_init_freeable+0x334/0x4b0
[  153.158746][ T7723]        kernel_init+0x1d/0x1d0
[  153.158753][ T7723]        ret_from_fork+0x599/0xb30
[  153.158764][ T7723]        ret_from_fork_asm+0x1a/0x30
[  153.158773][ T7723] 
[  153.158773][ T7723] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[  153.158785][ T7723]        _raw_spin_lock_irqsave+0xa7/0xf0
[  153.158794][ T7723]        __pm_runtime_resume+0x10f/0x180
[  153.158805][ T7723]        __uart_start+0x171/0x460
[  153.158812][ T7723]        uart_write+0xdc/0x130
[  153.158819][ T7723]        n_tty_write+0xd27/0x1200
[  153.158830][ T7723]        file_tty_write+0x559/0xa20
[  153.158837][ T7723]        vfs_write+0x5c9/0xb30
[  153.158847][ T7723]        ksys_write+0x145/0x250
[  153.158857][ T7723]        do_syscall_64+0xfa/0xf80
[  153.158867][ T7723]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.158875][ T7723] 
[  153.158875][ T7723] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  153.158886][ T7723]        _raw_spin_lock_irqsave+0xa7/0xf0
[  153.158895][ T7723]        serial8250_console_write+0x17e/0x1ba0
[  153.158904][ T7723]        console_flush_all+0x745/0xb60
[  153.158921][ T7723]        console_unlock+0xbb/0x190
[  153.158930][ T7723]        vprintk_emit+0x4f8/0x5f0
[  153.158938][ T7723]        _printk+0xcf/0x120
[  153.158949][ T7723]        register_console+0xa8b/0xf90
[  153.158964][ T7723]        univ8250_console_init+0x3a/0x70
[  153.158974][ T7723]        console_init+0xfc/0x3f0
[  153.158984][ T7723]        start_kernel+0x254/0x410
[  153.158990][ T7723]        x86_64_start_reservations+0x24/0x30
[  153.159000][ T7723]        x86_64_start_kernel+0x143/0x1c0
[  153.159010][ T7723]        common_startup_64+0x13e/0x147
[  153.159019][ T7723] 
[  153.159019][ T7723] -> #0 (console_owner){-...}-{0:0}:
[  153.159035][ T7723]        __lock_acquire+0x15a6/0x2cf0
[  153.159042][ T7723]        lock_acquire+0x117/0x340
[  153.159049][ T7723]        console_flush_all+0x6ee/0xb60
[  153.159059][ T7723]        console_unlock+0xbb/0x190
[  153.159067][ T7723]        vprintk_emit+0x4f8/0x5f0
[  153.159076][ T7723]        _printk+0xcf/0x120
[  153.159086][ T7723]        should_fail_ex+0x3f5/0x560
[  153.159095][ T7723]        strncpy_from_user+0x36/0x2c0
[  153.159103][ T7723]        strncpy_from_user_nofault+0x72/0x150
[  153.159116][ T7723]        bpf_bprintf_prepare+0xbbc/0x13d0
[  153.159126][ T7723]        bpf_trace_printk+0xdb/0x190
[  153.159139][ T7723]        bpf_prog_930ede9872f2967c+0x3e/0x44
[  153.159148][ T7723]        bpf_trace_run2+0x284/0x4c0
[  153.159157][ T7723]        __bpf_trace_contention_begin+0xdc/0x130
[  153.159167][ T7723]        trace_contention_begin+0xfe/0x120
[  153.159177][ T7723]        __pv_queued_spin_lock_slowpath+0xf0/0xb60
[  153.159188][ T7723]        queued_spin_lock_slowpath+0x43/0x50
[  153.159199][ T7723]        do_raw_spin_lock+0x21f/0x290
[  153.159209][ T7723]        raw_spin_rq_lock_nested+0x2a/0x140
[  153.159216][ T7723]        __schedule+0x3e5/0x5000
[  153.159225][ T7723]        preempt_schedule_common+0x83/0xd0
[  153.159234][ T7723]        preempt_schedule+0xae/0xc0
[  153.159243][ T7723]        preempt_schedule_thunk+0x16/0x30
[  153.159254][ T7723]        __local_bh_enable_ip+0x13e/0x1c0
[  153.159262][ T7723]        __alloc_skb+0x224/0x430
[  153.159273][ T7723]        netlink_sendmsg+0x5c6/0xb30
[  153.159283][ T7723]        __sock_sendmsg+0x21c/0x270
[  153.159293][ T7723]        ____sys_sendmsg+0x505/0x820
[  153.159307][ T7723]        ___sys_sendmsg+0x21f/0x2a0
[  153.159323][ T7723]        __x64_sys_sendmsg+0x19b/0x260
[  153.159341][ T7723]        do_syscall_64+0xfa/0xf80
[  153.159356][ T7723]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.159368][ T7723] 
[  153.159368][ T7723] other info that might help us debug this:
[  153.159368][ T7723] 
[  153.159373][ T7723] Chain exists of:
[  153.159373][ T7723]   console_owner --> &p->pi_lock --> &rq->__lock
[  153.159373][ T7723] 
[  153.159394][ T7723]  Possible unsafe locking scenario:
[  153.159394][ T7723] 
[  153.159399][ T7723]        CPU0                    CPU1
[  153.159403][ T7723]        ----                    ----
[  153.159408][ T7723]   lock(&rq->__lock);
[  153.159421][ T7723]                                lock(&p->pi_lock);
[  153.159432][ T7723]                                lock(&rq->__lock);
[  153.159443][ T7723]   lock(console_owner);
[  153.159453][ T7723] 
[  153.159453][ T7723]  *** DEADLOCK ***
[  153.159453][ T7723] 
[  153.159462][ T7723] 4 locks held by syz.4.463/7723:
[  153.159471][ T7723]  #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  153.159505][ T7723]  #1: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4c0
[  153.159538][ T7723]  #2: ffffffff8df35b80 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[  153.159561][ T7723]  #3: ffffffff8de1d438 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60
[  153.159583][ T7723] 
[  153.159583][ T7723] stack backtrace:
[  153.159588][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.4.463 Not tainted syzkaller #0 PREEMPT(full) 
[  153.159599][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  153.159605][ T7723] Call Trace:
[  153.159610][ T7723]  <TASK>
[  153.159616][ T7723]  dump_stack_lvl+0x189/0x250
[  153.159632][ T7723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.159645][ T7723]  ? __pfx__printk+0x10/0x10
[  153.159664][ T7723]  ? print_lock_name+0xde/0x100
[  153.159687][ T7723]  print_circular_bug+0x2e2/0x300
[  153.159706][ T7723]  check_noncircular+0x12e/0x150
[  153.159731][ T7723]  __lock_acquire+0x15a6/0x2cf0
[  153.159777][ T7723]  ? console_flush_all+0x131/0xb60
[  153.159787][ T7723]  lock_acquire+0x117/0x340
[  153.159796][ T7723]  ? console_flush_all+0x131/0xb60
[  153.159822][ T7723]  ? do_raw_spin_unlock+0x122/0x240
[  153.159837][ T7723]  ? console_flush_all+0x131/0xb60
[  153.159850][ T7723]  console_flush_all+0x6ee/0xb60
[  153.159861][ T7723]  ? console_flush_all+0x131/0xb60
[  153.159880][ T7723]  ? console_flush_all+0x131/0xb60
[  153.159919][ T7723]  ? __pfx_console_flush_all+0x10/0x10
[  153.159966][ T7723]  ? is_printk_cpu_sync_owner+0x32/0x40
[  153.159999][ T7723]  console_unlock+0xbb/0x190
[  153.160021][ T7723]  ? __pfx___down_trylock_console_sem+0x10/0x10
[  153.160048][ T7723]  ? __pfx_console_unlock+0x10/0x10
[  153.160074][ T7723]  vprintk_emit+0x4f8/0x5f0
[  153.160086][ T7723]  ? perf_swevent_get_recursion_context+0xa6/0x100
[  153.160102][ T7723]  ? __pfx_vprintk_emit+0x10/0x10
[  153.160115][ T7723]  ? __lock_acquire+0x6b6/0x2cf0
[  153.160148][ T7723]  _printk+0xcf/0x120
[  153.160161][ T7723]  ? __pfx____ratelimit+0x10/0x10
[  153.160179][ T7723]  ? __pfx__printk+0x10/0x10
[  153.160206][ T7723]  ? trace_call_bpf+0xc7/0xb60
[  153.160224][ T7723]  should_fail_ex+0x3f5/0x560
[  153.160243][ T7723]  strncpy_from_user+0x36/0x2c0
[  153.160260][ T7723]  strncpy_from_user_nofault+0x72/0x150
[  153.160283][ T7723]  bpf_bprintf_prepare+0xbbc/0x13d0
[  153.160313][ T7723]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  153.160334][ T7723]  ? bpf_trace_printk+0xc1/0x190
[  153.160346][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  153.160359][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  153.160371][ T7723]  bpf_trace_printk+0xdb/0x190
[  153.160386][ T7723]  ? __lock_acquire+0x6b6/0x2cf0
[  153.160397][ T7723]  ? __pfx_bpf_trace_printk+0x10/0x10
[  153.160412][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  153.160423][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  153.160456][ T7723]  bpf_prog_930ede9872f2967c+0x3e/0x44
[  153.160468][ T7723]  bpf_trace_run2+0x284/0x4c0
[  153.160481][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  153.160496][ T7723]  ? __pfx_bpf_trace_run2+0x10/0x10
[  153.160509][ T7723]  ? trace_call_bpf+0xc7/0xb60
[  153.160527][ T7723]  ? __bpf_trace_contention_begin+0xcd/0x130
[  153.160547][ T7723]  __bpf_trace_contention_begin+0xdc/0x130
[  153.160559][ T7723]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  153.160573][ T7723]  ? trace_call_bpf+0xc7/0xb60
[  153.160587][ T7723]  ? __pfx_trace_call_bpf+0x10/0x10
[  153.160615][ T7723]  trace_contention_begin+0xfe/0x120
[  153.160630][ T7723]  __pv_queued_spin_lock_slowpath+0xf0/0xb60
[  153.160661][ T7723]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  153.160676][ T7723]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  153.160685][ T7723]  ? trace_rcu_utilization+0x47/0x1c0
[  153.160699][ T7723]  ? rcu_note_context_switch+0xdb8/0x1120
[  153.160725][ T7723]  queued_spin_lock_slowpath+0x43/0x50
[  153.160739][ T7723]  do_raw_spin_lock+0x21f/0x290
[  153.160757][ T7723]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  153.160784][ T7723]  raw_spin_rq_lock_nested+0x2a/0x140
[  153.160800][ T7723]  __schedule+0x3e5/0x5000
[  153.160822][ T7723]  ? stack_trace_save+0x9c/0xe0
[  153.160843][ T7723]  ? stack_depot_save_flags+0x40/0x850
[  153.160855][ T7723]  ? trace_call_bpf+0x10/0xb60
[  153.160876][ T7723]  ? kasan_save_track+0x4f/0x80
[  153.160887][ T7723]  ? kasan_save_track+0x3e/0x80
[  153.160897][ T7723]  ? __kasan_mempool_unpoison_object+0x9f/0x130
[  153.160911][ T7723]  ? __pfx___schedule+0x10/0x10
[  153.160921][ T7723]  ? __sock_sendmsg+0x21c/0x270
[  153.160933][ T7723]  ? do_syscall_64+0xfa/0xf80
[  153.160944][ T7723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.160970][ T7723]  ? preempt_schedule+0xae/0xc0
[  153.160998][ T7723]  ? __alloc_skb+0x200/0x430
[  153.161009][ T7723]  ? __alloc_skb+0x200/0x430
[  153.161023][ T7723]  preempt_schedule_common+0x83/0xd0
[  153.161045][ T7723]  preempt_schedule+0xae/0xc0
[  153.161058][ T7723]  ? __pfx_preempt_schedule+0x10/0x10
[  153.161077][ T7723]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  153.161097][ T7723]  preempt_schedule_thunk+0x16/0x30
[  153.161120][ T7723]  __local_bh_enable_ip+0x13e/0x1c0
[  153.161136][ T7723]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  153.161147][ T7723]  ? __kasan_mempool_unpoison_object+0x9f/0x130
[  153.161159][ T7723]  ? napi_skb_cache_get+0x151/0x780
[  153.161174][ T7723]  ? napi_skb_cache_get+0x3c9/0x780
[  153.161185][ T7723]  ? napi_skb_cache_get+0x151/0x780
[  153.161204][ T7723]  __alloc_skb+0x224/0x430
[  153.161222][ T7723]  ? __pfx___alloc_skb+0x10/0x10
[  153.161240][ T7723]  ? netlink_autobind+0xdb/0x300
[  153.161248][ T7723]  ? netlink_autobind+0x2c2/0x300
[  153.161266][ T7723]  netlink_sendmsg+0x5c6/0xb30
[  153.161291][ T7723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.161306][ T7723]  ? irqentry_exit+0x5dd/0x660
[  153.161317][ T7723]  ? aa_sock_msg_perm+0xf1/0x1b0
[  153.161331][ T7723]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.161344][ T7723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.161360][ T7723]  __sock_sendmsg+0x21c/0x270
[  153.161377][ T7723]  ____sys_sendmsg+0x505/0x820
[  153.161401][ T7723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.161430][ T7723]  ? import_iovec+0x74/0xa0
[  153.161450][ T7723]  ___sys_sendmsg+0x21f/0x2a0
[  153.161474][ T7723]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.161500][ T7723]  ? rcu_read_lock_any_held+0xb3/0x120
[  153.161549][ T7723]  ? __fget_files+0x2a/0x420
[  153.161558][ T7723]  ? __fget_files+0x3a0/0x420
[  153.161586][ T7723]  __x64_sys_sendmsg+0x19b/0x260
[  153.161606][ T7723]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.161619][ T7723]  ? perf_trace_preemptirq_template+0xa3/0x340
[  153.161645][ T7723]  ? __pfx_ksys_write+0x10/0x10
[  153.161667][ T7723]  ? do_syscall_64+0xbe/0xf80
[  153.161686][ T7723]  do_syscall_64+0xfa/0xf80
[  153.161700][ T7723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.161710][ T7723]  ? clear_bhb_loop+0x60/0xb0
[  153.161726][ T7723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.161735][ T7723] RIP: 0033:0x7fa814b8f749
[  153.161746][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.161753][ T7723] RSP: 002b:00007fa8159ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.161763][ T7723] RAX: ffffffffffffffda RBX: 00007fa814de5fa0 RCX: 00007fa814b8f749
[  153.161770][ T7723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  153.161776][ T7723] RBP: 00007fa8159ef090 R08: 0000000000000000 R09: 0000000000000000
[  153.161781][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.161787][ T7723] R13: 00007fa814de6038 R14: 00007fa814de5fa0 R15: 00007ffea4d217b8
[  153.161817][ T7723]  </TASK>
[  154.674301][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.4.463 Not tainted syzkaller #0 PREEMPT(full) 
[  154.674318][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.674327][ T7723] Call Trace:
[  154.674335][ T7723]  <TASK>
[  154.674343][ T7723]  dump_stack_lvl+0x189/0x250
[  154.674365][ T7723]  ? __pfx____ratelimit+0x10/0x10
[  154.674384][ T7723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.674401][ T7723]  ? __pfx__printk+0x10/0x10
[  154.674438][ T7723]  ? trace_call_bpf+0xc7/0xb60
[  154.674463][ T7723]  should_fail_ex+0x414/0x560
[  154.674491][ T7723]  strncpy_from_user+0x36/0x2c0
[  154.674516][ T7723]  strncpy_from_user_nofault+0x72/0x150
[  154.674544][ T7723]  bpf_bprintf_prepare+0xbbc/0x13d0
[  154.674588][ T7723]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  154.674617][ T7723]  ? bpf_trace_printk+0xc1/0x190
[  154.674632][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  154.674651][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  154.674667][ T7723]  bpf_trace_printk+0xdb/0x190
[  154.674687][ T7723]  ? __lock_acquire+0x6b6/0x2cf0
[  154.674703][ T7723]  ? __pfx_bpf_trace_printk+0x10/0x10
[  154.674724][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  154.674738][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  154.674786][ T7723]  bpf_prog_930ede9872f2967c+0x3e/0x44
[  154.674804][ T7723]  bpf_trace_run2+0x284/0x4c0
[  154.674821][ T7723]  ? bpf_trace_run2+0x186/0x4c0
[  154.674842][ T7723]  ? __pfx_bpf_trace_run2+0x10/0x10
[  154.674859][ T7723]  ? trace_call_bpf+0xc7/0xb60
[  154.674884][ T7723]  ? __bpf_trace_contention_begin+0xcd/0x130
[  154.674912][ T7723]  __bpf_trace_contention_begin+0xdc/0x130
[  154.674929][ T7723]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  154.674948][ T7723]  ? trace_call_bpf+0xc7/0xb60
[  154.674966][ T7723]  ? __pfx_trace_call_bpf+0x10/0x10
[  154.675006][ T7723]  trace_contention_begin+0xfe/0x120
[  154.675025][ T7723]  __pv_queued_spin_lock_slowpath+0xf0/0xb60
[  154.675064][ T7723]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  154.675083][ T7723]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  154.675096][ T7723]  ? trace_rcu_utilization+0x47/0x1c0
[  154.675114][ T7723]  ? rcu_note_context_switch+0xdb8/0x1120
[  154.675155][ T7723]  queued_spin_lock_slowpath+0x43/0x50
[  154.675174][ T7723]  do_raw_spin_lock+0x21f/0x290
[  154.675198][ T7723]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  154.675236][ T7723]  raw_spin_rq_lock_nested+0x2a/0x140
[  154.675260][ T7723]  __schedule+0x3e5/0x5000
[  154.675291][ T7723]  ? stack_trace_save+0x9c/0xe0
[  154.675319][ T7723]  ? stack_depot_save_flags+0x40/0x850
[  154.675335][ T7723]  ? trace_call_bpf+0x10/0xb60
[  154.675363][ T7723]  ? kasan_save_track+0x4f/0x80
[  154.675378][ T7723]  ? kasan_save_track+0x3e/0x80
[  154.675391][ T7723]  ? __kasan_mempool_unpoison_object+0x9f/0x130
[  154.675410][ T7723]  ? __pfx___schedule+0x10/0x10
[  154.675423][ T7723]  ? __sock_sendmsg+0x21c/0x270
[  154.675441][ T7723]  ? do_syscall_64+0xfa/0xf80
[  154.675456][ T7723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.675492][ T7723]  ? preempt_schedule+0xae/0xc0
[  154.675505][ T7723]  ? __alloc_skb+0x200/0x430
[  154.675520][ T7723]  ? __alloc_skb+0x200/0x430
[  154.675538][ T7723]  preempt_schedule_common+0x83/0xd0
[  154.675558][ T7723]  preempt_schedule+0xae/0xc0
[  154.675574][ T7723]  ? __pfx_preempt_schedule+0x10/0x10
[  154.675595][ T7723]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  154.675622][ T7723]  preempt_schedule_thunk+0x16/0x30
[  154.675654][ T7723]  __local_bh_enable_ip+0x13e/0x1c0
[  154.675669][ T7723]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  154.675683][ T7723]  ? __kasan_mempool_unpoison_object+0x9f/0x130
[  154.675699][ T7723]  ? napi_skb_cache_get+0x151/0x780
[  154.675719][ T7723]  ? napi_skb_cache_get+0x3c9/0x780
[  154.675733][ T7723]  ? napi_skb_cache_get+0x151/0x780
[  154.675759][ T7723]  __alloc_skb+0x224/0x430
[  154.675783][ T7723]  ? __pfx___alloc_skb+0x10/0x10
[  154.675807][ T7723]  ? netlink_autobind+0xdb/0x300
[  154.675820][ T7723]  ? netlink_autobind+0x2c2/0x300
[  154.675843][ T7723]  netlink_sendmsg+0x5c6/0xb30
[  154.675878][ T7723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.675899][ T7723]  ? irqentry_exit+0x5dd/0x660
[  154.675912][ T7723]  ? aa_sock_msg_perm+0xf1/0x1b0
[  154.675932][ T7723]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.675949][ T7723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.675966][ T7723]  __sock_sendmsg+0x21c/0x270
[  154.675990][ T7723]  ____sys_sendmsg+0x505/0x820
[  154.676023][ T7723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.676062][ T7723]  ? import_iovec+0x74/0xa0
[  154.676093][ T7723]  ___sys_sendmsg+0x21f/0x2a0
[  154.676123][ T7723]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.676157][ T7723]  ? rcu_read_lock_any_held+0xb3/0x120
[  154.676227][ T7723]  ? __fget_files+0x2a/0x420
[  154.676239][ T7723]  ? __fget_files+0x3a0/0x420
[  154.676274][ T7723]  __x64_sys_sendmsg+0x19b/0x260
[  154.676300][ T7723]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.676316][ T7723]  ? perf_trace_preemptirq_template+0xa3/0x340
[  154.676353][ T7723]  ? __pfx_ksys_write+0x10/0x10
[  154.676379][ T7723]  ? do_syscall_64+0xbe/0xf80
[  154.676404][ T7723]  do_syscall_64+0xfa/0xf80
[  154.676424][ T7723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.676437][ T7723]  ? clear_bhb_loop+0x60/0xb0
[  154.676458][ T7723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.676471][ T7723] RIP: 0033:0x7fa814b8f749
[  154.676486][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.676497][ T7723] RSP: 002b:00007fa8159ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.676511][ T7723] RAX: ffffffffffffffda RBX: 00007fa814de5fa0 RCX: 00007fa814b8f749
[  154.676520][ T7723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  154.676528][ T7723] RBP: 00007fa8159ef090 R08: 0000000000000000 R09: 0000000000000000
[  154.676535][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.676542][ T7723] R13: 00007fa814de6038 R14: 00007fa814de5fa0 R15: 00007ffea4d217b8
[  154.676587][ T7723]  </TASK>
[  154.727203][ T7723] netlink: 'syz.4.463': attribute type 3 has an invalid length.
[  155.267434][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.463'.